$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer File: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer (raw, json) Hash identifier: qN0j7wH9/MLqdERgMDenBiuRAeyBxwxGPkEJPzO0pDo= Subject key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7654EE725F340B065CBCCCECE4B2AE2689F6AD65 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft caRepository: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 00:20:21 +0000 Certificate not after: Thu 05 Mar 2026 00:25:21 +0000 Subordinate resources: AS: 265355 IP: 168.205.76.0/22 IP: 2804:2e9c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:54:ee:72:5f:34:0b:06:5c:bc:cc:ec:e4:b2:ae:26:89:f6:ad:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 00:20:21 2025 GMT Not After : Mar 5 00:25:21 2026 GMT Subject: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:5b:27:e3:25:df:ab:d3:ae:e4:55:26:2a: 0d:e1:aa:06:bb:91:97:00:a1:24:34:3b:12:ec:c1: 97:bb:48:d2:61:3f:a3:46:c9:f8:a4:c1:26:40:96: bf:a2:6c:fa:d8:8a:46:fa:bb:43:f4:0e:f7:93:cb: 78:e8:5b:ef:55:64:30:83:60:f0:5a:36:ce:c4:ce: b1:78:e0:c3:a8:78:d5:1b:32:bf:43:01:9f:d3:5b: bd:b5:c6:86:c2:8a:69:1e:d7:ec:0d:e9:f4:63:84: fa:bc:1c:91:a7:59:6f:05:dc:9b:39:f9:01:0d:e8: a1:ae:a3:76:29:2e:33:ac:5c:81:74:bf:3f:ac:06: 2c:52:2b:ed:07:86:f8:48:a9:53:75:e9:bd:2c:c9: bf:5d:f8:b5:36:ab:2e:81:06:ce:06:bf:5a:7c:47: af:36:d7:0c:de:d6:47:26:50:42:65:d0:05:77:c9: 6e:24:51:ce:b6:12:1f:c5:93:91:92:d4:5d:90:79: 70:d9:3b:dd:2a:da:ba:15:1d:88:78:e8:86:19:38: fb:f0:a3:d2:ff:8e:40:e8:5d:33:e4:cb:1a:d0:c8: 21:8d:04:1f:48:cd:ba:bb:4c:13:00:e1:5f:20:66: c6:3b:da:93:18:b9:bf:66:58:ae:42:71:ce:21:96: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.76.0/22 IPv6: 2804:2e9c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265355 Signature Algorithm: sha256WithRSAEncryption 71:3d:00:95:fd:a8:74:95:78:e0:6e:71:af:2b:eb:16:7c:4b: 8f:88:05:cc:6d:65:be:64:fc:51:ee:71:80:5d:e6:f6:47:ab: c4:18:6a:8e:02:4b:c2:df:f4:0b:fb:6e:8f:bc:29:aa:8e:e5: 6b:9b:4e:bc:06:ba:bd:55:83:1f:0f:26:fa:e6:e5:e8:2e:4d: 78:9f:c9:6d:78:79:ca:49:01:8c:a8:0c:c2:54:f1:e9:74:67: 32:f1:f5:6d:5c:80:9e:e9:5a:18:ea:52:a2:c9:a5:57:c2:c1: f3:82:db:b3:9b:f5:28:c0:b2:64:de:1f:d2:00:cb:e4:49:06: 52:fc:17:c8:d3:fd:28:91:78:b6:8a:c9:e9:8a:b4:29:a6:06: c2:4f:27:c2:56:5b:c0:e3:68:b5:da:56:a0:22:d0:c7:f0:24: 03:a5:44:a2:00:9c:fa:08:19:9b:46:2b:4a:e6:6a:a6:fe:46: 09:41:66:bc:cb:b4:77:b0:9f:a8:1b:24:90:91:79:ff:f7:93: 9d:bb:06:3c:2d:35:9d:20:1d:01:20:19:29:68:20:29:96:58: c3:7f:aa:17:4c:11:e5:f4:eb:9b:ff:2c:9d:cc:a8:a7:f4:e6: 77:b2:e0:9a:11:7e:d8:1d:bf:8d:da:2a:39:8c:40:c8:04:2b: 4e:6d:55:dd -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUdlTucl80CwZcvMzs5LKuJon2rWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwMDIwMjFaFw0yNjAzMDUwMDI1MjFaMDMxMTAvBgNV BAMTKDMwODdDMzcxMEZCMUM1RUQyQTM4MTIyNEYxRTgxQkFDMzlEQTdGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oVsn4yXfq9Ou5FUmKg3hqga7 kZcAoSQ0OxLswZe7SNJhP6NGyfikwSZAlr+ibPrYikb6u0P0DveTy3joW+9VZDCD YPBaNs7EzrF44MOoeNUbMr9DAZ/TW721xobCimke1+wN6fRjhPq8HJGnWW8F3Js5 +QEN6KGuo3YpLjOsXIF0vz+sBixSK+0HhvhIqVN16b0syb9d+LU2qy6BBs4Gv1p8 R6821wze1kcmUEJl0AV3yW4kUc62Eh/Fk5GS1F2QeXDZO90q2roVHYh46IYZOPvw o9L/jkDoXTPkyxrQyCGNBB9Izbq7TBMA4V8gZsY72pMYub9mWK5Ccc4hltYZAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwh8NxD7HF7So4 EiTx6BusOdp/zjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkJ2 Z1ZMc2YxcVZSeWVxZ1NZZWtpYWNkZzlZRTRuSFRDYnN4d1dzdW9maTMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkJ2 Z1ZMc2YxcVZSeWVxZ1NZZWtpYWNkZzlZRTRuSFRDYnN4d1dzdW9maTMvMS8zMDg3 QzM3MTBGQjFDNUVEMkEzODEyMjRGMUU4MUJBQzM5REE3RkNFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKozUwwDQQCAAIwBwMFACgELpwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAyLMA0GCSqGSIb3DQEBCwUAA4IBAQBxPQCV/ah0lXjgbnGv K+sWfEuPiAXMbWW+ZPxR7nGAXeb2R6vEGGqOAkvC3/QL+26PvCmqjuVrm068Brq9 VYMfDyb65uXoLk14n8lteHnKSQGMqAzCVPHpdGcy8fVtXICe6VoY6lKiyaVXwsHz gtuzm/UowLJk3h/SAMvkSQZS/BfI0/0okXi2isnpirQppgbCTyfCVlvA42i12lag ItDH8CQDpUSiAJz6CBmbRitK5mqm/kYJQWa8y7R3sJ+oGySQkXn/95OduwY8LTWd IB0BIBkpaCAplljDf6oXTBHl9Oub/yydzKin9OZ3suCaEX7YHb+N2io5jEDIBCtO bVXd -----END CERTIFICATE-----Generated at Fri Apr 4 20:19:04 2025 by rpki-client