$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer File: 328938F6B87D58141D853FA04B61F2EC68371E43.cer (raw, json) Hash identifier: 6DwK6EpSYCVm0jFO6v7kx2NrLz6v5SsqYfg24gmH6mk= Subject key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 52A29B17A63ABD98BEC2ECFD4D59D83D68541358 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft caRepository: rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:53 +0000 Certificate not after: Wed 04 Mar 2026 18:40:53 +0000 Subordinate resources: AS: 272185 IP: 2804:833c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a2:9b:17:a6:3a:bd:98:be:c2:ec:fd:4d:59:d8:3d:68:54:13:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:53 2025 GMT Not After : Mar 4 18:40:53 2026 GMT Subject: CN=328938F6B87D58141D853FA04B61F2EC68371E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:53:82:bd:9d:01:e5:5a:2f:e0:c7:44:b5: d7:a5:97:00:b5:2d:cc:8d:1a:12:0c:aa:87:d8:fd: bb:1a:1f:43:66:35:9a:59:6d:f9:9b:7c:7e:dd:55: 67:0b:ae:7e:79:17:e0:05:3b:68:7c:b1:d8:ea:a0: 9d:ad:2c:a3:31:5a:60:5f:44:e7:a4:a7:5f:96:15: df:03:df:aa:93:b9:9a:86:09:5b:18:51:a3:46:fc: 8f:b7:92:67:f4:81:39:f4:02:eb:99:70:c5:aa:e6: bc:cf:1f:e0:d5:5f:67:eb:43:04:06:c4:c8:65:35: e9:54:74:da:d7:06:26:5f:9b:6b:92:45:48:2e:3a: 2d:41:aa:c2:6d:f7:7c:c2:fa:1d:7b:b0:da:d0:80: 9d:f6:bb:b9:83:a7:ac:fa:0d:cc:64:18:9b:73:a4: fc:90:34:42:73:19:d2:be:d7:6e:96:31:6e:cf:04: 96:5e:ee:31:d2:89:f0:dc:0f:7c:9a:e3:15:ee:35: aa:08:e5:24:9c:c8:7b:53:a9:f8:9d:54:c8:84:02: 85:0e:b5:ce:4c:74:5f:17:e7:73:a1:57:e6:b1:d4: a9:eb:0e:21:d6:eb:54:53:08:5d:d8:a8:e3:08:ed: 5d:01:3d:06:8c:5b:a5:26:69:2c:0e:34:4e:11:6f: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:833c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272185 Signature Algorithm: sha256WithRSAEncryption 2f:80:62:2c:a5:47:f8:f4:d1:fd:84:a4:d9:bf:71:3c:34:c8: 70:52:a9:5c:b9:88:f9:26:6c:ed:d3:1b:1d:0e:56:9d:50:99: fa:ac:1e:fc:8e:21:46:4d:4c:60:d3:6c:ff:d5:f2:aa:63:84: be:bc:67:21:8f:d9:9f:77:c9:1b:60:3e:0c:a8:a7:c9:c6:e5: b0:b9:3a:22:dc:46:9a:f2:36:9b:9f:52:05:eb:5e:2a:93:d3: 6d:e5:ab:e8:2b:21:26:56:23:ad:01:f2:8a:b7:ce:eb:49:05: 28:9e:84:eb:f0:de:de:0e:2a:ee:52:f9:8e:c1:39:37:b1:72: 01:cf:c5:e9:82:6e:bf:58:62:3a:3b:95:bf:9a:dd:00:82:82: 3e:a0:94:b7:59:ee:0f:c3:6d:e9:e2:26:70:de:6a:2b:5f:34: c9:fd:f9:87:84:81:f6:ea:1d:85:e5:48:9d:62:5d:12:e3:71: e0:45:24:f4:c8:22:65:a7:e7:fe:e3:f0:f0:e3:26:6c:ca:99: a4:96:96:7b:0d:f4:9e:b8:be:dd:13:94:d9:ab:9f:3c:8a:e8: ca:97:e8:4e:1e:42:70:b3:e5:c3:31:fd:c2:7a:46:25:c7:7a: e2:91:2b:88:63:f4:4f:5c:e2:b2:6b:68:73:c8:7e:fb:a9:92: e6:fb:57:e0 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIUUqKbF6Y6vZi+wuz9TVnYPWhUE1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NTNaFw0yNjAzMDQxODQwNTNaMDMxMTAvBgNV BAMTKDMyODkzOEY2Qjg3RDU4MTQxRDg1M0ZBMDRCNjFGMkVDNjgzNzFFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6FOCvZ0B5Vov4MdEtdellwC1 LcyNGhIMqofY/bsaH0NmNZpZbfmbfH7dVWcLrn55F+AFO2h8sdjqoJ2tLKMxWmBf ROekp1+WFd8D36qTuZqGCVsYUaNG/I+3kmf0gTn0AuuZcMWq5rzPH+DVX2frQwQG xMhlNelUdNrXBiZfm2uSRUguOi1BqsJt93zC+h17sNrQgJ32u7mDp6z6DcxkGJtz pPyQNEJzGdK+126WMW7PBJZe7jHSifDcD3ya4xXuNaoI5SScyHtTqfidVMiEAoUO tc5MdF8X53OhV+ax1KnrDiHW61RTCF3YqOMI7V0BPQaMW6UmaSwONE4Rb00NAgMB AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyiTj2uH1YFB2F P6BLYfLsaDceQzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU04 dWt1VnBjbms5TFdKUXI3WTlaaWlGQ2hiWUs3aDNwY3FqWUoyOWdadmcvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU04 dWt1VnBjbms5TFdKUXI3WTlaaWlGQ2hiWUs3aDNwY3FqWUoyOWdadmcvMi8zMjg5 MzhGNkI4N0Q1ODE0MUQ4NTNGQTA0QjYxRjJFQzY4MzcxRTQzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBIM8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQn OTANBgkqhkiG9w0BAQsFAAOCAQEAL4BiLKVH+PTR/YSk2b9xPDTIcFKpXLmI+SZs 7dMbHQ5WnVCZ+qwe/I4hRk1MYNNs/9XyqmOEvrxnIY/Zn3fJG2A+DKinycblsLk6 ItxGmvI2m59SBeteKpPTbeWr6CshJlYjrQHyirfO60kFKJ6E6/De3g4q7lL5jsE5 N7FyAc/F6YJuv1hiOjuVv5rdAIKCPqCUt1nuD8Nt6eImcN5qK180yf35h4SB9uod heVInWJdEuNx4EUk9MgiZafn/uPw8OMmbMqZpJaWew30nri+3ROU2aufPIroypfo Th5CcLPlwzH9wnpGJcd64pEriGP0T1zismtoc8h++6mS5vtX4A== -----END CERTIFICATE-----Generated at Sat Apr 5 02:59:35 2025 by rpki-client