$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer File: 3B4B1D11DA1C8532237B102F0C1C617E70A272C5.cer (raw, json) Hash identifier: cWRHpOJqjayUBOTBKahUHKP8R1PGcjfB/DJB9xityjo= Subject key identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 288FFD7DCB207870E7590B7E3A516F4137EA2161 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft caRepository: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Jan 2025 15:59:27 +0000 Certificate not after: Thu 29 Jan 2026 16:04:27 +0000 Subordinate resources: AS: 267657 IP: 45.224.112.0/22 IP: 2804:44d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8f:fd:7d:cb:20:78:70:e7:59:0b:7e:3a:51:6f:41:37:ea:21:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 30 15:59:27 2025 GMT Not After : Jan 29 16:04:27 2026 GMT Subject: CN=3B4B1D11DA1C8532237B102F0C1C617E70A272C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:4f:a2:3e:c2:61:67:1a:76:9c:a5:90:5c: b7:0e:e6:74:9e:18:91:12:e9:32:9b:bf:b3:41:2f: 21:f8:cd:ec:b6:81:e5:19:44:1d:80:1f:5f:0d:88: 6b:e1:63:0d:fc:ed:56:3b:60:1b:c4:42:b8:2a:6a: 66:84:24:f1:0c:69:c4:47:42:98:01:a7:63:27:95: 29:67:1e:53:77:f3:86:6a:c3:d9:6e:35:6d:85:01: 1f:c3:e0:cc:96:dc:82:ec:a1:6e:71:98:82:d0:6b: be:b5:7e:5e:a9:43:70:82:26:7a:5c:a6:a3:26:2e: 70:5a:32:df:8a:e5:6f:a3:8f:f3:9a:30:17:e0:0c: 2c:6c:03:a8:d6:7e:22:af:e5:a6:5b:74:02:6a:30: ff:25:80:3a:6e:64:91:c9:c6:3a:51:a5:ad:7d:ce: 95:cd:55:1e:11:a9:95:7d:fd:59:92:16:16:d4:03: 39:ee:a7:6d:57:1b:fb:1e:2a:fd:16:d0:9a:cd:84: 18:2e:70:d4:26:43:0b:a6:f7:f0:78:20:ea:86:5e: 3a:d8:15:0d:c4:0a:fc:86:e7:3f:a6:01:c3:8d:40: 08:c5:9b:8e:c6:a6:76:f6:1a:0c:09:a1:a4:92:b0: 46:2e:95:90:74:a5:63:87:74:3e:6d:eb:57:03:6f: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:4B:1D:11:DA:1C:85:32:23:7B:10:2F:0C:1C:61:7E:70:A2:72:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/3B4B1D11DA1C8532237B102F0C1C617E70A272C5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.112.0/22 IPv6: 2804:44d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267657 Signature Algorithm: sha256WithRSAEncryption 3b:cd:de:32:55:59:d2:eb:be:5a:0f:f3:13:c8:65:79:84:d9: 2a:dd:69:0d:bd:fd:bd:e1:02:88:51:f1:c9:a4:d5:05:ed:54: 96:a4:be:f1:b8:1d:03:80:c2:63:8e:da:00:06:9b:b0:1f:03: 4d:9b:16:b3:36:6e:7d:c2:73:01:82:6f:da:ce:12:bc:4b:26: e4:f6:4f:2a:a6:35:4e:69:db:3a:6d:82:39:74:fa:bc:6a:ac: 81:d8:61:cb:2c:0c:b3:0c:e6:38:52:98:bc:a9:36:2d:3b:61: 45:56:1a:01:18:9a:b8:6e:11:5b:08:d7:ec:c7:e7:07:8e:83: 9d:b3:3b:4c:f4:54:95:73:e8:1a:01:9a:2f:50:24:ef:1f:27: 77:d0:1d:8a:66:58:f3:a6:9e:c7:7b:38:fc:e6:c9:3a:f6:1f: bf:cf:bf:6e:4b:91:ed:22:d3:17:4a:f8:72:03:ab:37:ad:e3: 9a:c8:6e:19:0a:20:72:50:6d:c7:25:b0:9e:96:3c:2a:92:74: c0:52:f6:f5:3b:6d:5d:9f:d1:3c:17:db:ae:14:74:2d:37:72: 52:77:45:70:ce:83:f4:7d:35:e6:3f:14:35:26:64:f8:92:f4: 5d:a5:8d:f0:58:ce:3f:e0:7f:a5:76:bf:4e:2a:2d:1b:82:8e: c2:eb:0d:7e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKI/9fcsgeHDnWQt+OlFvQTfqIWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMzAxNTU5MjdaFw0yNjAxMjkxNjA0MjdaMDMxMTAvBgNV BAMTKDNCNEIxRDExREExQzg1MzIyMzdCMTAyRjBDMUM2MTdFNzBBMjcyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLr0+iPsJhZxp2nKWQXLcO5nSe GJES6TKbv7NBLyH4zey2geUZRB2AH18NiGvhYw387VY7YBvEQrgqamaEJPEMacRH QpgBp2MnlSlnHlN384Zqw9luNW2FAR/D4MyW3ILsoW5xmILQa761fl6pQ3CCJnpc pqMmLnBaMt+K5W+jj/OaMBfgDCxsA6jWfiKv5aZbdAJqMP8lgDpuZJHJxjpRpa19 zpXNVR4RqZV9/VmSFhbUAznup21XG/seKv0W0JrNhBgucNQmQwum9/B4IOqGXjrY FQ3ECvyG5z+mAcONQAjFm47Gpnb2GgwJoaSSsEYulZB0pWOHdD5t61cDb7YXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7Sx0R2hyFMiN7 EC8MHGF+cKJyxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlhr d0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41UzMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZY a3dLd1k1dXlBU3c4UmJ6cTVNeGMxamNUaWJ0MWNyc2tkdVJWSzVONVMzLzAvM0I0 QjFEMTFEQTFDODUzMjIzN0IxMDJGMEMxQzYxN0U3MEEyNzJDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeBwMA0EAgACMAcDBQAoBETYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQViTANBgkqhkiG9w0BAQsFAAOCAQEAO83eMlVZ0uu+Wg/z E8hleYTZKt1pDb39veECiFHxyaTVBe1UlqS+8bgdA4DCY47aAAabsB8DTZsWszZu fcJzAYJv2s4SvEsm5PZPKqY1TmnbOm2COXT6vGqsgdhhyywMswzmOFKYvKk2LTth RVYaARiauG4RWwjX7MfnB46DnbM7TPRUlXPoGgGaL1Ak7x8nd9AdimZY86aex3s4 /ObJOvYfv8+/bkuR7SLTF0r4cgOrN63jmshuGQogclBtxyWwnpY8KpJ0wFL29Ttt XZ/RPBfbrhR0LTdyUndFcM6D9H015j8UNSZk+JL0XaWN8FjOP+B/pXa/TiotG4KO wusNfg== -----END CERTIFICATE-----Generated at Fri Apr 4 10:59:06 2025 by rpki-client