$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer File: 32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.cer (raw, json) Hash identifier: 7NsdqXcfOxxOpppTknaagRLQunfoyLCWpENCTZgRLEk= Subject key identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 407481F5D5C9BAA7C2ACC0CE84CC848E5A821698 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft caRepository: rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Jan 2025 18:26:51 +0000 Certificate not after: Thu 29 Jan 2026 18:31:51 +0000 Subordinate resources: AS: 269151 IP: 45.180.228.0/22 IP: 2804:6030::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:74:81:f5:d5:c9:ba:a7:c2:ac:c0:ce:84:cc:84:8e:5a:82:16:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 30 18:26:51 2025 GMT Not After : Jan 29 18:31:51 2026 GMT Subject: CN=32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1f:72:e6:a7:a6:2c:01:a5:7a:56:36:20:46: 7f:8b:8a:51:68:eb:1f:c0:f1:b8:4b:46:ff:40:56: e3:b4:94:f3:7a:53:db:13:16:69:41:e2:7f:e5:80: 8c:48:04:27:bc:c8:43:a7:03:a2:e5:01:13:87:15: f9:57:80:f8:b4:4b:5c:6e:80:c7:9d:00:01:86:76: 48:d1:c2:1e:62:65:c5:04:62:6f:4e:e3:85:69:45: b4:c3:4b:74:37:fb:88:36:49:ca:25:1a:fe:2a:27: 06:3e:8b:ff:5b:8e:c0:54:3b:aa:3e:68:21:9e:89: e2:25:38:fd:06:82:85:f8:f8:8c:3b:29:4b:41:5d: 51:12:99:aa:c0:91:1e:3a:18:55:00:8d:a0:c8:84: 09:0a:84:a9:9a:18:a0:c4:77:ec:b3:e8:8a:51:1a: 40:50:54:51:c4:3a:28:71:4e:d3:c0:1c:7a:eb:4e: 9c:c6:9f:b2:6f:2d:73:74:62:67:4c:b8:d3:5c:8b: 85:e6:29:e2:23:80:e3:98:47:f1:93:c4:bc:e2:00: 04:6d:79:bd:f2:0a:11:7c:23:29:e4:35:10:d4:e0: cd:81:d2:ee:f8:43:a3:af:b2:81:eb:11:d9:8f:ca: 3a:23:33:3c:7e:e9:0a:87:ff:ec:61:ba:e2:4b:38: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:52:7E:82:D6:03:FF:BE:6D:A2:EF:8E:D8:2C:7B:B1:F7:A3:9B:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pkCNY3gScgQV4xkDKAZtkqKdkq6N366GYyCsYkGNjPv/0/32527E82D603FFBE6DA2EF8ED82C7BB1F7A39B89.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.228.0/22 IPv6: 2804:6030::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269151 Signature Algorithm: sha256WithRSAEncryption 33:b7:f7:ec:86:e8:80:4a:c6:51:7d:ba:06:6e:cd:cc:12:67: fa:b3:c4:9a:01:aa:79:6d:e3:df:c7:1e:f8:8e:34:4a:67:28: 4f:46:5c:f5:c2:86:b2:d5:09:85:23:01:27:7a:4a:8a:62:7d: 09:3b:aa:e2:38:34:6f:04:e0:d1:cf:93:2a:1d:c6:79:65:58: 24:6d:4b:62:d0:b4:de:f3:1e:f7:78:76:f8:2a:8d:71:19:b0: 30:3f:4e:85:7d:4d:d4:f5:ec:dc:e1:3e:98:18:4d:f4:a9:f4: 8d:69:37:4d:a0:ef:b0:05:7e:30:e5:32:92:b7:9c:4f:27:ab: d8:57:2e:44:ed:75:3b:9e:30:5f:66:67:3b:46:86:ad:da:f1: 51:1b:b4:23:04:6f:f9:35:35:49:46:47:89:69:30:2f:53:d1: 01:bd:18:36:9a:7f:8e:89:cc:e6:f3:54:b9:b0:09:fb:49:92: 87:c8:49:9c:f3:aa:40:ec:b2:7b:18:de:33:86:b7:23:eb:9a: f3:3a:68:95:b7:b2:69:aa:71:75:1a:d0:64:f3:2f:db:92:40: e1:aa:55:9d:28:61:c2:92:b1:ca:d9:9a:61:ae:a9:d1:1a:4b: ef:2b:f1:ba:d8:18:4e:db:9b:68:7a:ce:25:97:61:ce:f6:11: 01:eb:26:87 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQHSB9dXJuqfCrMDOhMyEjlqCFpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMzAxODI2NTFaFw0yNjAxMjkxODMxNTFaMDMxMTAvBgNV BAMTKDMyNTI3RTgyRDYwM0ZGQkU2REEyRUY4RUQ4MkM3QkIxRjdBMzlCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSH3Lmp6YsAaV6VjYgRn+LilFo 6x/A8bhLRv9AVuO0lPN6U9sTFmlB4n/lgIxIBCe8yEOnA6LlAROHFflXgPi0S1xu gMedAAGGdkjRwh5iZcUEYm9O44VpRbTDS3Q3+4g2ScolGv4qJwY+i/9bjsBUO6o+ aCGeieIlOP0GgoX4+Iw7KUtBXVESmarAkR46GFUAjaDIhAkKhKmaGKDEd+yz6IpR GkBQVFHEOihxTtPAHHrrTpzGn7JvLXN0YmdMuNNci4XmKeIjgOOYR/GTxLziAARt eb3yChF8IynkNRDU4M2B0u74Q6OvsoHrEdmPyjojMzx+6QqH/+xhuuJLOD75AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyUn6C1gP/vm2i 747YLHux96ObiTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHBr Q05ZM2dTY2dRVjR4a0RLQVp0a3FLZGtxNk4zNjZHWXlDc1lrR05qUHYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRw a0NOWTNnU2NnUVY0eGtES0FadGtxS2RrcTZOMzY2R1l5Q3NZa0dOalB2LzAvMzI1 MjdFODJENjAzRkZCRTZEQTJFRjhFRDgyQzdCQjFGN0EzOUI4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbTkMA0EAgACMAcDBQAoBGAwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbXzANBgkqhkiG9w0BAQsFAAOCAQEAM7f37IbogErGUX26 Bm7NzBJn+rPEmgGqeW3j38ce+I40SmcoT0Zc9cKGstUJhSMBJ3pKimJ9CTuq4jg0 bwTg0c+TKh3GeWVYJG1LYtC03vMe93h2+CqNcRmwMD9OhX1N1PXs3OE+mBhN9Kn0 jWk3TaDvsAV+MOUykrecTyer2FcuRO11O54wX2ZnO0aGrdrxURu0IwRv+TU1SUZH iWkwL1PRAb0YNpp/jonM5vNUubAJ+0mSh8hJnPOqQOyyexjeM4a3I+ua8zpolbey aapxdRrQZPMv25JA4apVnShhwpKxytmaYa6p0RpL7yvxutgYTtubaHrOJZdhzvYR Aesmhw== -----END CERTIFICATE-----Generated at Sat Apr 5 00:14:47 2025 by rpki-client