$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer File: 2EC42055AFC59A104B87FD6706375331B8F6BF55.cer (raw, json) Hash identifier: IXsrBepJW68rpdTlr6fsFA9tTcSFwaNdmRLLXEVNmWo= Subject key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E28C0614A46CFF7FE9846AF0E47CE54126113BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft caRepository: rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:33 +0000 Certificate not after: Wed 04 Mar 2026 18:40:33 +0000 Subordinate resources: AS: 268070 IP: 45.167.122.0/23 IP: 2804:5788::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 18:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:28:c0:61:4a:46:cf:f7:fe:98:46:af:0e:47:ce:54:12:61:13:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:33 2025 GMT Not After : Mar 4 18:40:33 2026 GMT Subject: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:44:c2:03:09:5f:8e:2d:28:d8:1e:d4:79: e2:08:5e:00:31:8b:dd:5b:13:64:7e:fb:01:b8:9c: 6e:b3:81:45:4f:b8:91:76:b7:f4:c2:3d:93:34:fc: 76:fc:04:84:0d:6d:aa:3b:9c:c5:05:92:0b:d5:85: 8a:db:e3:b6:47:22:be:47:43:ae:64:d1:c0:3d:48: fc:5f:53:a9:d2:da:71:8f:bc:b2:1c:4c:c1:d3:17: 19:c2:44:b1:dd:78:2c:6c:04:91:d8:aa:7a:49:a4: 7a:dd:ce:1f:0f:83:e5:90:50:69:52:e4:1c:f3:0f: e7:37:9f:e0:31:b8:53:33:b9:be:46:3f:6b:cb:f0: 04:da:af:71:73:79:f1:bf:35:6c:17:70:03:a8:00: 8b:b3:cb:42:dd:bd:87:e7:85:9d:2a:f1:a3:9b:5e: 2c:af:c1:13:13:3c:4e:98:71:6d:89:4b:71:94:07: 06:19:0c:78:1e:bb:d3:4c:69:9b:29:9f:db:f0:e1: cf:ee:5f:62:b6:cd:41:45:97:56:5e:09:9d:d4:2a: cd:02:36:b9:65:b9:7d:20:fc:e7:0d:16:09:8e:e4: d2:9e:89:46:a2:ed:c1:5b:22:1e:2c:63:d4:36:4a: b9:b7:26:82:0d:45:cf:1c:e5:5d:2a:04:76:54:e2: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.122.0/23 IPv6: 2804:5788::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268070 Signature Algorithm: sha256WithRSAEncryption 14:6e:a4:a7:e5:a9:e1:dc:c4:83:02:34:41:81:2b:50:d6:04: 5e:26:6f:ce:c5:f2:c8:2b:a4:1c:1d:6d:0b:a5:b2:9f:be:38: 8b:7f:ef:3c:8d:d8:87:8e:95:49:72:dd:c3:b8:9d:4e:53:93: 03:02:dd:ce:30:ba:78:0a:b8:6e:72:8b:20:35:e1:c1:86:7a: f7:2e:6e:31:d0:54:3a:12:60:4b:5a:b3:69:c4:11:48:28:c1: b3:90:6c:af:64:71:a7:eb:7a:38:45:ed:39:05:67:a5:e4:c1: f9:4f:90:f9:ff:2c:9d:61:96:8f:cc:07:88:35:1b:19:38:8c: a3:38:ec:95:1b:f4:1e:46:86:b7:60:70:59:ea:54:41:88:1f: 69:8c:e6:3d:7e:dc:1f:e2:32:84:f4:9d:51:d8:4c:ab:3d:59: 59:49:71:48:d1:52:d7:ad:1f:fa:25:31:0c:6c:c0:93:9b:4a: 82:2b:17:ba:d3:5a:f4:dd:03:2d:23:83:b0:51:b4:7e:e0:c8: d4:26:5f:a7:ce:cc:a3:c7:c9:91:ce:6b:5f:d4:5b:3f:75:42: 6d:6d:64:29:95:9a:13:5b:32:2d:1c:ba:13:e7:ad:5d:23:84: 36:86:91:e5:ad:12:86:85:25:f1:40:30:a6:73:0a:24:d5:ed: 56:4d:7c:34 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUTijAYUpGz/f+mEavDkfOVBJhE70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzNaFw0yNjAzMDQxODQwMzNaMDMxMTAvBgNV BAMTKDJFQzQyMDU1QUZDNTlBMTA0Qjg3RkQ2NzA2Mzc1MzMxQjhGNkJGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsUTCAwlfji0o2B7UeeIIXgAx i91bE2R++wG4nG6zgUVPuJF2t/TCPZM0/Hb8BIQNbao7nMUFkgvVhYrb47ZHIr5H Q65k0cA9SPxfU6nS2nGPvLIcTMHTFxnCRLHdeCxsBJHYqnpJpHrdzh8Pg+WQUGlS 5BzzD+c3n+AxuFMzub5GP2vL8ATar3FzefG/NWwXcAOoAIuzy0LdvYfnhZ0q8aOb XiyvwRMTPE6YcW2JS3GUBwYZDHgeu9NMaZspn9vw4c/uX2K2zUFFl1ZeCZ3UKs0C NrlluX0g/OcNFgmO5NKeiUai7cFbIh4sY9Q2Srm3JoINRc8c5V0qBHZU4uBXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQuxCBVr8WaEEuH /WcGN1MxuPa/VTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRllF RlZMS1RXUmRHN29vRXg5UXpQZ1pqOGVXOE5lOGo3WndYRFJEUDlpYUQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRllF RlZMS1RXUmRHN29vRXg5UXpQZ1pqOGVXOE5lOGo3WndYRFJEUDlpYUQvMS8yRUM0 MjA1NUFGQzU5QTEwNEI4N0ZENjcwNjM3NTMzMUI4RjZCRjU1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAEtp3owDQQCAAIwBwMFACgEV4gwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBcmMA0GCSqGSIb3DQEBCwUAA4IBAQAUbqSn5anh3MSDAjRB gStQ1gReJm/OxfLIK6QcHW0LpbKfvjiLf+88jdiHjpVJct3DuJ1OU5MDAt3OMLp4 CrhucosgNeHBhnr3Lm4x0FQ6EmBLWrNpxBFIKMGzkGyvZHGn63o4Re05BWel5MH5 T5D5/yydYZaPzAeINRsZOIyjOOyVG/QeRoa3YHBZ6lRBiB9pjOY9ftwf4jKE9J1R 2EyrPVlZSXFI0VLXrR/6JTEMbMCTm0qCKxe601r03QMtI4OwUbR+4MjUJl+nzsyj x8mRzmtf1Fs/dUJtbWQplZoTWzItHLoT561dI4Q2hpHlrRKGhSXxQDCmcwok1e1W TXw0 -----END CERTIFICATE-----Generated at Tue Apr 8 18:15:09 2025 by rpki-client