$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer File: 32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer (raw, json) Hash identifier: 3Pt0uZaWD3oVlpBYSmkTv1pXQdtHWoX9dxmIi4759po= Subject key identifier: 32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 784DA95A14FDB4D164CF0A3BC3EC53DB79547439 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft caRepository: rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 21:20:27 +0000 Certificate not after: Fri 06 Mar 2026 21:25:27 +0000 Subordinate resources: AS: 263914 IP: 138.185.128.0/22 IP: 2804:27a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4d:a9:5a:14:fd:b4:d1:64:cf:0a:3b:c3:ec:53:db:79:54:74:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 21:20:27 2025 GMT Not After : Mar 6 21:25:27 2026 GMT Subject: CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:60:27:b1:88:bb:84:b7:a8:a0:ce:ec:7e:6e: a8:8e:1c:b6:bb:58:bc:38:b3:0b:03:1f:34:14:e1: 90:ca:1d:fa:6f:12:2a:a9:62:7f:59:0c:6b:fe:d0: 22:52:81:d8:75:b0:2b:92:1b:09:c3:1e:20:c5:40: 56:25:0c:5a:6f:1f:ec:aa:7d:b9:66:56:e3:97:3f: c7:a9:ac:14:b8:b3:7f:52:60:ba:90:3c:e8:9c:bd: 5d:cc:48:83:53:eb:4f:ba:46:8c:ae:4e:de:ef:2d: 5b:56:e6:7d:61:7e:54:0b:dc:ac:de:31:a0:ef:b3: e8:6e:66:96:55:42:dd:51:d5:dc:57:14:d0:df:cc: 17:78:94:f7:47:9b:f3:54:28:63:44:99:dc:61:e0: 1a:c7:51:5f:42:5c:52:5a:3c:ab:fc:16:16:ff:f6: 7f:d6:1f:c0:02:b7:3a:9b:50:30:05:b1:ef:0c:0e: 73:d7:99:38:c8:91:26:f1:8e:60:71:fa:5f:51:86: b0:20:5f:be:55:69:1e:9d:ab:e9:71:9c:8c:3d:57: cd:ee:15:9e:16:46:79:17:84:14:cd:6a:36:73:00: 94:3d:3b:c6:3b:1f:ce:af:30:01:da:4c:a3:91:27: 6d:20:66:fb:52:13:cd:9e:91:2e:57:7a:ff:b7:03: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.128.0/22 IPv6: 2804:27a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263914 Signature Algorithm: sha256WithRSAEncryption 7c:7e:87:70:2a:32:2d:a4:1a:b3:bd:11:99:44:a4:af:74:78: 26:d1:3d:1d:f9:b3:28:b6:97:7d:6d:b0:02:3b:10:42:50:2e: 35:d1:8b:17:bd:e8:6b:1a:e1:2d:8e:df:57:d5:7f:16:ac:58: 0c:ce:b1:47:9d:fe:66:13:00:d6:a5:72:d5:77:21:28:92:c2: a7:96:7e:1a:7e:9b:b3:12:65:78:c9:53:e7:4f:f6:b1:58:d8: 61:af:d4:3c:ea:41:df:f1:74:c8:f7:c0:78:c9:bd:10:a0:fe: 7c:54:fd:40:48:af:fe:dc:bb:23:0f:fd:b6:7d:36:6d:e5:5a: b6:0c:ff:1f:5b:a5:74:66:7f:a2:86:3a:6c:66:48:48:91:d2: 93:17:0d:f2:d6:55:a8:b3:f0:3c:b9:a8:3b:2d:d9:97:24:6e: fc:4d:d2:d9:0c:57:77:09:c7:05:1d:d8:2b:26:bc:a7:72:b3: 70:12:99:63:f6:b5:41:ba:fd:07:89:0f:0f:fd:4c:3a:22:44: b3:4e:86:5d:01:f8:73:14:4e:50:7b:d2:8a:3d:a0:25:2c:e7: bb:07:8a:2a:34:d9:a3:95:3d:8e:27:13:62:71:f5:70:e7:14: 9a:30:c5:6e:65:f2:31:04:ef:69:8a:80:bf:19:15:61:c3:f7: 5f:39:06:67 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUeE2pWhT9tNFkzwo7w+xT23lUdDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcyMTIwMjdaFw0yNjAzMDYyMTI1MjdaMDMxMTAvBgNV BAMTKDMyRjU5QTA5OEJCRTNCQUZCNDU3MzZCNURBNEI2MjExQjRFNTU1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoYCexiLuEt6igzux+bqiOHLa7 WLw4swsDHzQU4ZDKHfpvEiqpYn9ZDGv+0CJSgdh1sCuSGwnDHiDFQFYlDFpvH+yq fblmVuOXP8eprBS4s39SYLqQPOicvV3MSINT60+6RoyuTt7vLVtW5n1hflQL3Kze MaDvs+huZpZVQt1R1dxXFNDfzBd4lPdHm/NUKGNEmdxh4BrHUV9CXFJaPKv8Fhb/ 9n/WH8ACtzqbUDAFse8MDnPXmTjIkSbxjmBx+l9RhrAgX75VaR6dq+lxnIw9V83u FZ4WRnkXhBTNajZzAJQ9O8Y7H86vMAHaTKORJ20gZvtSE82ekS5Xev+3A7KLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQy9ZoJi747r7RX NrXaS2IRtOVVYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkNu aHU1Rnc3QTc0dGNwbmZ0UXhidzVTS2Q2WktpZWpTckN6WWpiS21heE0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JD bmh1NUZ3N0E3NHRjcG5mdFF4Ync1U0tkNlpLaWVqU3JDellqYkttYXhNLzEvMzJG NTlBMDk4QkJFM0JBRkI0NTczNkI1REE0QjYyMTFCNEU1NTU2MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCirmAMA0EAgACMAcDBQAoBCekMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQG6jANBgkqhkiG9w0BAQsFAAOCAQEAfH6HcCoyLaQas70R mUSkr3R4JtE9HfmzKLaXfW2wAjsQQlAuNdGLF73oaxrhLY7fV9V/FqxYDM6xR53+ ZhMA1qVy1XchKJLCp5Z+Gn6bsxJleMlT50/2sVjYYa/UPOpB3/F0yPfAeMm9EKD+ fFT9QEiv/ty7Iw/9tn02beVatgz/H1uldGZ/ooY6bGZISJHSkxcN8tZVqLPwPLmo Oy3ZlyRu/E3S2QxXdwnHBR3YKya8p3KzcBKZY/a1Qbr9B4kPD/1MOiJEs06GXQH4 cxROUHvSij2gJSznuweKKjTZo5U9jicTYnH1cOcUmjDFbmXyMQTvaYqAvxkVYcP3 XzkGZw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:35:11 2025 by rpki-client