$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer File: 3C7FA74CDFF1E4752479602672F26A883C7A6052.cer (raw, json) Hash identifier: MdOCqlXKa6hDnJOwh1je03jB4HhA8FQnUGG6zXwJrJ0= Subject key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71B157E8F5AA0946A48E32778480111886DCBA5F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft caRepository: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 28 Nov 2024 13:15:38 +0000 Certificate not after: Thu 27 Nov 2025 13:20:38 +0000 Subordinate resources: AS: 61885 IP: 131.0.140.0/22 IP: 2804:1ac8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b1:57:e8:f5:aa:09:46:a4:8e:32:77:84:80:11:18:86:dc:ba:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 28 13:15:38 2024 GMT Not After : Nov 27 13:20:38 2025 GMT Subject: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:8c:0e:8e:c2:48:bd:6b:f3:e2:7f:f8:44: b4:88:f3:6a:1e:d0:1c:08:05:57:40:9b:e4:98:3d: 83:1f:b8:84:d1:7f:47:9d:17:86:d8:6a:24:51:13: b7:dd:62:03:f6:72:9c:4d:01:b3:a1:5e:21:1e:65: 72:81:97:42:c9:37:9f:1b:4a:70:05:47:07:1c:c1: 41:10:ac:2a:2b:de:f2:67:b4:eb:d7:51:1c:fe:36: ce:92:8b:fa:be:6e:4d:56:25:01:7e:df:a7:9a:c5: 46:4c:20:42:e9:39:1a:c9:e6:b7:c8:b4:c2:25:83: 5a:76:a9:3b:d0:d9:1f:8c:84:86:48:47:e3:6c:e4: 3d:ce:7e:ac:1e:e1:26:eb:d3:77:db:77:bf:13:17: 29:cb:f3:5f:f1:fa:4f:13:c7:21:ec:0c:9d:28:da: 8b:05:12:b1:46:7f:2f:d0:82:f0:26:dc:87:22:f2: 7b:ee:8d:08:96:7c:cc:75:e0:db:ed:81:68:51:98: dd:1d:93:9a:1c:5b:53:6b:50:61:af:e2:6c:cc:2e: 42:99:91:27:67:69:44:68:12:64:44:5c:ef:c3:0c: c3:7b:87:f6:fd:53:1a:1e:02:82:8e:27:fe:ea:46: 70:98:40:53:e5:12:b7:fc:e1:0f:a9:df:01:40:8c: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.140.0/22 IPv6: 2804:1ac8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61885 Signature Algorithm: sha256WithRSAEncryption 0d:9f:4f:83:72:12:96:76:ca:b4:8d:be:b5:a7:72:74:22:f5: ab:f7:62:04:bc:a8:76:9a:9e:f1:5e:ef:0f:ab:8f:8c:86:88: da:a7:34:e5:fb:09:35:17:9d:47:0d:09:88:e3:25:97:81:e3: 5c:0d:0e:f4:9c:e0:d0:bf:d8:a1:a1:c8:33:a8:d7:c9:9c:c3: 81:fd:8f:95:3c:9b:ce:45:41:a7:61:ee:ad:b7:ac:5a:45:c9: 81:a6:b7:5f:a5:fc:8c:d7:20:93:6b:21:6f:23:c3:8d:7c:40: 5e:b9:1f:1f:15:d3:16:76:71:96:e8:1c:c2:a9:15:d7:e2:07: e2:c5:ea:3d:75:b5:c2:da:c3:d4:3d:64:e8:b0:e8:81:01:00: 46:09:46:93:38:68:7d:f1:49:64:c3:e3:9c:11:6d:67:26:b9: 5a:69:3f:fa:50:84:9a:8b:8e:d4:b0:99:59:cb:43:85:b4:07: 34:0f:0e:1d:cc:90:18:0a:fe:01:38:95:27:5d:ac:eb:5a:26: bf:22:d8:1a:da:42:0a:75:16:67:93:9d:a3:af:1a:54:a9:1f: 5a:9d:2f:07:bd:a0:b8:dd:ea:08:53:10:cf:c6:ba:90:0a:fc: ef:06:da:a1:aa:a8:55:85:a8:41:45:58:73:8c:a9:e8:1f:df: 7c:b4:2a:69 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcbFX6PWqCUakjjJ3hIARGIbcul8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjgxMzE1MzhaFw0yNTExMjcxMzIwMzhaMDMxMTAvBgNV BAMTKDNDN0ZBNzRDREZGMUU0NzUyNDc5NjAyNjcyRjI2QTg4M0M3QTYwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZowOjsJIvWvz4n/4RLSI82oe 0BwIBVdAm+SYPYMfuITRf0edF4bYaiRRE7fdYgP2cpxNAbOhXiEeZXKBl0LJN58b SnAFRwccwUEQrCor3vJntOvXURz+Ns6Si/q+bk1WJQF+36eaxUZMIELpORrJ5rfI tMIlg1p2qTvQ2R+MhIZIR+Ns5D3Ofqwe4Sbr03fbd78TFynL81/x+k8TxyHsDJ0o 2osFErFGfy/QgvAm3Ici8nvujQiWfMx14NvtgWhRmN0dk5ocW1NrUGGv4mzMLkKZ kSdnaURoEmREXO/DDMN7h/b9UxoeAoKOJ/7qRnCYQFPlErf84Q+p3wFAjMT3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8f6dM3/HkdSR5 YCZy8mqIPHpgUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSERL U2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5ZHQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hE S1NpczdZQU5GdWpyOWRMRUdWZkZnaUdHOTlneVpwUVc3cXZBdGphOWR0LzAvM0M3 RkE3NENERkYxRTQ3NTI0Nzk2MDI2NzJGMjZBODgzQzdBNjA1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgwCMMA0EAgACMAcDBQAoBBrIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxvTANBgkqhkiG9w0BAQsFAAOCAQEADZ9Pg3ISlnbKtI2+ tadydCL1q/diBLyodpqe8V7vD6uPjIaI2qc05fsJNRedRw0JiOMll4HjXA0O9Jzg 0L/YoaHIM6jXyZzDgf2PlTybzkVBp2HurbesWkXJgaa3X6X8jNcgk2shbyPDjXxA XrkfHxXTFnZxlugcwqkV1+IH4sXqPXW1wtrD1D1k6LDogQEARglGkzhoffFJZMPj nBFtZya5Wmk/+lCEmouO1LCZWctDhbQHNA8OHcyQGAr+ATiVJ12s61omvyLYGtpC CnUWZ5Odo68aVKkfWp0vB72guN3qCFMQz8a6kAr87wbaoaqoVYWoQUVYc4yp6B/f fLQqaQ== -----END CERTIFICATE-----Generated at Fri Apr 4 10:19:58 2025 by rpki-client