$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer File: 3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer (raw, json) Hash identifier: L/M1tohPap2e2uKF9Y29D8DUfKG8XZ19xzfmLBPVRNM= Subject key identifier: 3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 053D9059F5A198BDC2408F9871DC6FA2B747C798 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.mft caRepository: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 02 Jan 2025 18:06:55 +0000 Certificate not after: Thu 01 Jan 2026 18:11:55 +0000 Subordinate resources: AS: 271216 IP: 177.36.76.0/22 IP: 2804:7808::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3d:90:59:f5:a1:98:bd:c2:40:8f:98:71:dc:6f:a2:b7:47:c7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 2 18:06:55 2025 GMT Not After : Jan 1 18:11:55 2026 GMT Subject: CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:f9:3c:17:58:4d:d2:69:02:57:66:38:bc: 72:d8:4c:49:e8:ac:32:95:5c:0e:aa:67:76:64:69: 84:b9:e3:e4:f3:2d:e0:e2:65:2f:a5:bf:e2:c5:bc: 00:12:4a:31:e2:24:ec:9c:8e:03:fb:03:48:e4:15: ed:6d:54:9a:aa:03:47:bf:cb:27:40:6f:2e:30:72: 37:e6:64:64:22:22:04:93:c8:ef:d0:1c:5a:92:28: ee:24:12:8b:6b:4e:57:40:81:15:2b:45:34:99:ef: 42:72:af:53:24:2e:70:a9:10:44:3a:4d:6c:a2:cb: 62:c7:08:2f:0b:56:32:59:b0:e8:c0:ae:c1:54:14: 3c:d3:f3:f2:88:68:77:5f:ac:16:59:93:07:fa:a1: 99:41:cb:6e:76:dc:24:a1:ee:28:a5:52:00:09:5f: 28:7b:fb:52:44:d0:ef:8a:1d:f6:e5:62:a8:07:87: 4c:fb:d0:4b:6e:23:0b:e9:7a:a1:a4:fb:b3:03:c7: ec:63:43:8d:e5:44:91:d9:91:a7:ae:19:7a:fe:ff: b9:77:05:f0:6a:34:e8:fa:49:51:6d:3b:34:99:b5: b7:31:28:d0:db:c0:cc:29:ba:b8:3a:8b:36:97:1c: f4:2d:4b:63:9f:59:ed:70:ce:01:58:9b:22:1e:f1: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.36.76.0/22 IPv6: 2804:7808::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271216 Signature Algorithm: sha256WithRSAEncryption 5b:2b:85:77:72:0d:c1:05:4c:00:50:41:70:eb:a7:26:1a:c2: a9:e3:a9:46:42:ec:a5:d9:dd:73:1c:e8:73:04:c1:29:6d:dc: 59:51:10:39:84:c5:f6:6d:f7:9a:dd:05:31:d6:a0:00:8b:6a: 43:f7:37:f1:36:96:45:fc:0e:d9:9b:c9:90:02:b6:3b:54:85: 8c:12:ac:c4:11:10:9c:2c:24:7f:51:27:27:e8:1d:f2:d7:97: 13:09:64:2a:21:f5:37:ca:a3:74:04:92:10:26:74:64:d6:3e: 78:d5:4f:be:15:e2:da:12:1b:b5:72:36:d9:64:12:73:50:af: c2:71:b4:69:76:9b:79:a7:bc:6f:5b:4c:70:e5:83:89:6b:1c: a7:12:27:df:4f:b0:22:f3:9c:97:8c:0e:2d:7e:b6:66:d3:0d: 13:7e:c3:5e:ba:15:10:12:b0:10:f6:65:36:3c:e3:9b:b1:24: 7b:c5:86:6c:02:78:94:d7:16:c5:ed:25:20:bc:cc:95:cb:ad: dc:31:e4:15:2c:70:92:19:ba:61:ab:e1:f5:10:b3:a7:b6:2c: ab:7a:d7:c8:d2:15:b1:59:af:92:7f:9b:d9:bc:65:10:e8:88: dd:67:27:b2:41:aa:fd:96:25:8e:38:50:7f:6c:22:38:8a:92: ba:60:79:a9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBT2QWfWhmL3CQI+YcdxvordHx5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDIxODA2NTVaFw0yNjAxMDExODExNTVaMDMxMTAvBgNV BAMTKDNCMzIzRTJCNkY3MDk1MkVEQzVCRjZGOUU2OEIyMjBEMDRDODEzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnvk8F1hN0mkCV2Y4vHLYTEno rDKVXA6qZ3ZkaYS54+TzLeDiZS+lv+LFvAASSjHiJOycjgP7A0jkFe1tVJqqA0e/ yydAby4wcjfmZGQiIgSTyO/QHFqSKO4kEotrTldAgRUrRTSZ70Jyr1MkLnCpEEQ6 TWyiy2LHCC8LVjJZsOjArsFUFDzT8/KIaHdfrBZZkwf6oZlBy2523CSh7iilUgAJ Xyh7+1JE0O+KHfblYqgHh0z70EtuIwvpeqGk+7MDx+xjQ43lRJHZkaeuGXr+/7l3 BfBqNOj6SVFtOzSZtbcxKNDbwMwpurg6izaXHPQtS2OfWe1wzgFYmyIe8d1VAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7Mj4rb3CVLtxb 9vnmiyINBMgTyzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREt3 aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RL d2lCM01IRFU5OTEyUHhVWXVBTGQ4aEd6dGZYaWI5V0RBR0FDVDVjbktULzAvM0Iz MjNFMkI2RjcwOTUyRURDNUJGNkY5RTY4QjIyMEQwNEM4MTNDQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsSRMMA0EAgACMAcDBQAoBHgIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjcDANBgkqhkiG9w0BAQsFAAOCAQEAWyuFd3INwQVMAFBB cOunJhrCqeOpRkLspdndcxzocwTBKW3cWVEQOYTF9m33mt0FMdagAItqQ/c38TaW RfwO2ZvJkAK2O1SFjBKsxBEQnCwkf1EnJ+gd8teXEwlkKiH1N8qjdASSECZ0ZNY+ eNVPvhXi2hIbtXI22WQSc1CvwnG0aXabeae8b1tMcOWDiWscpxIn30+wIvOcl4wO LX62ZtMNE37DXroVEBKwEPZlNjzjm7Eke8WGbAJ4lNcWxe0lILzMlcut3DHkFSxw khm6Yavh9RCzp7Ysq3rXyNIVsVmvkn+b2bxlEOiI3WcnskGq/ZYljjhQf2wiOIqS umB5qQ== -----END CERTIFICATE-----Generated at Thu Feb 20 17:46:19 2025 by rpki-client