$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer File: 35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer (raw, json) Hash identifier: HVEgw0DqCj/AqJVsDl1/vlAfrpuYHF+zQS73d4xEw8Y= Subject key identifier: 35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 13D5041DAA5BBB915139E53931C268A02A39FDBB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft caRepository: rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 03:54:55 +0000 Certificate not after: Fri 06 Mar 2026 03:59:55 +0000 Subordinate resources: AS: 266512 IP: 170.245.33.0/24 IP: 2801:80:1bd0::/44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d5:04:1d:aa:5b:bb:91:51:39:e5:39:31:c2:68:a0:2a:39:fd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 03:54:55 2025 GMT Not After : Mar 6 03:59:55 2026 GMT Subject: CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ec:8d:0e:cf:e4:45:e7:37:5e:ea:5c:28:5e: fd:47:42:70:90:a8:06:62:30:f8:76:1f:d8:b3:21: de:df:02:77:b5:d9:e1:9e:0d:cc:7c:b8:dd:2d:45: ff:68:03:0e:5f:c4:e8:fc:d6:b0:5e:69:e3:98:1e: 02:e3:a7:23:d4:3d:21:b4:15:be:09:16:8a:4e:a4: 63:20:d8:1a:fe:eb:47:d9:9f:a0:49:f4:42:ac:f5: 21:58:f0:77:09:17:42:4f:c6:13:f1:48:84:88:65: c1:a7:6d:fd:66:47:c5:11:ea:98:60:c5:d2:0a:56: c6:f2:b5:62:ed:1a:60:de:92:6e:9f:d7:e5:bc:3d: 7f:d1:8a:cc:e7:15:9c:0e:21:37:9e:06:72:06:38: 25:41:a4:9a:c6:d6:a1:db:b7:c6:da:84:d1:c3:18: 46:69:b6:73:a1:48:44:ea:49:48:5a:f5:34:8e:ca: ff:03:91:7d:fc:bd:32:ce:75:9a:ba:9a:9e:a9:fb: 3a:aa:1d:4a:43:49:02:a5:b0:07:ab:2d:2b:dd:1c: 0c:2d:26:d6:01:13:4d:fd:b1:60:64:ca:8b:76:57: a9:1a:63:67:35:6d:49:76:73:b5:28:6e:9f:f9:5b: 84:d7:d1:76:88:42:f2:8f:05:ca:ac:3c:a1:51:6c: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.33.0/24 IPv6: 2801:80:1bd0::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266512 Signature Algorithm: sha256WithRSAEncryption bb:01:31:cd:8d:1e:26:ed:eb:05:76:80:e1:48:89:23:f0:1f: 58:3a:13:95:d3:5b:c7:d5:11:6b:17:d5:95:5c:ad:e3:38:42: 47:90:0b:a3:74:33:f4:67:71:60:38:c9:38:1b:46:90:fe:41: 7d:8b:68:f9:68:a6:1e:d0:a4:24:49:ce:8a:c4:58:47:7d:84: 84:60:d3:3b:24:3d:81:c6:07:ac:0b:90:c5:8a:8f:a0:0c:ed: 5b:54:d7:b7:3b:c7:74:2f:b3:31:e7:0a:5b:c9:10:2c:26:f4: ae:af:d3:78:8f:0e:04:dd:30:9b:f4:1a:28:82:2a:14:2e:54: 44:a2:75:22:a0:bb:c5:f6:b1:31:ad:86:02:d1:10:97:ad:f9: 1d:d9:5d:73:fb:83:68:5b:82:a9:0c:dd:65:28:78:c5:48:00: 8a:af:76:2a:6a:4b:89:78:2e:d3:48:f9:b7:68:2d:32:cd:bf: 12:67:c9:03:e1:aa:3f:96:3f:1c:93:fd:ab:20:be:0f:d4:25: c8:42:ab:01:52:8e:c9:c9:91:13:7d:c3:eb:68:36:e3:9d:72: 5f:37:ab:29:e5:98:97:38:ba:4d:a7:2b:dc:54:60:10:c1:63: 02:32:34:2f:4b:13:49:4d:8b:24:03:a7:fe:05:33:c2:dc:17: 65:78:a4:d2 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUE9UEHapbu5FROeU5McJooCo5/bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMzU0NTVaFw0yNjAzMDYwMzU5NTVaMDMxMTAvBgNV BAMTKDM1RjdCNkEwM0NCN0QyMUQwNzA5NEJENDQxRDMwOTYwOTJDQjkzQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy7I0Oz+RF5zde6lwoXv1HQnCQ qAZiMPh2H9izId7fAne12eGeDcx8uN0tRf9oAw5fxOj81rBeaeOYHgLjpyPUPSG0 Fb4JFopOpGMg2Br+60fZn6BJ9EKs9SFY8HcJF0JPxhPxSISIZcGnbf1mR8UR6phg xdIKVsbytWLtGmDekm6f1+W8PX/RisznFZwOITeeBnIGOCVBpJrG1qHbt8bahNHD GEZptnOhSETqSUha9TSOyv8DkX38vTLOdZq6mp6p+zqqHUpDSQKlsAerLSvdHAwt JtYBE039sWBkyot2V6kaY2c1bUl2c7Uobp/5W4TX0XaIQvKPBcqsPKFRbNHhAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ197agPLfSHQcJ S9RB0wlgksuTsjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1RO YkhIZEJLbmh5blU0ZjlnMU00Z0x3aGVwRFZKY1ZpcDJEbXZldVVXY1gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdU TmJISGRCS25oeW5VNGY5ZzFNNGdMd2hlcERWSmNWaXAyRG12ZXVVV2NYLzEvMzVG N0I2QTAzQ0I3RDIxRDA3MDk0QkQ0NDFEMzA5NjA5MkNCOTNCMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAqvUhMA8EAgACMAkDBwQoAQCAG9AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBBEQMA0GCSqGSIb3DQEBCwUAA4IBAQC7ATHNjR4m7esF doDhSIkj8B9YOhOV01vH1RFrF9WVXK3jOEJHkAujdDP0Z3FgOMk4G0aQ/kF9i2j5 aKYe0KQkSc6KxFhHfYSEYNM7JD2BxgesC5DFio+gDO1bVNe3O8d0L7Mx5wpbyRAs JvSur9N4jw4E3TCb9BoogioULlREonUioLvF9rExrYYC0RCXrfkd2V1z+4NoW4Kp DN1lKHjFSACKr3YqakuJeC7TSPm3aC0yzb8SZ8kD4ao/lj8ck/2rIL4P1CXIQqsB Uo7JyZETfcPraDbjnXJfN6sp5ZiXOLpNpyvcVGAQwWMCMjQvSxNJTYskA6f+BTPC 3BdleKTS -----END CERTIFICATE-----Generated at Sat Apr 5 03:01:47 2025 by rpki-client