$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer File: 3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer (raw, json) Hash identifier: 22BMDFebrmesZAYyyp8Erjcly1bnhDN6YBED5oFQzyA= Subject key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4CBE33393712FEABE611BE285B28028BCD7EBD2E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft caRepository: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 14 Feb 2025 17:39:10 +0000 Certificate not after: Fri 13 Feb 2026 17:44:10 +0000 Subordinate resources: AS: 268091 IP: 45.169.24.0/22 IP: 2804:57dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 03:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:be:33:39:37:12:fe:ab:e6:11:be:28:5b:28:02:8b:cd:7e:bd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 14 17:39:10 2025 GMT Not After : Feb 13 17:44:10 2026 GMT Subject: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:0c:0a:0c:61:8b:ff:85:bd:ed:22:94:46: a2:78:17:20:51:df:e6:04:68:6b:9c:df:71:f1:0b: 34:22:fa:33:42:e3:c0:4a:f1:93:2e:0d:54:1f:58: 6e:4c:be:9e:62:88:c8:2c:ea:1d:b9:7b:0d:6e:31: 0d:44:88:db:e7:50:b6:7b:d7:9c:54:11:04:50:7a: 96:25:61:f2:fa:16:97:c1:49:5e:72:21:f1:9f:b7: d3:5c:93:a3:5f:88:78:e1:1c:d9:97:cd:77:49:53: 79:d8:2e:43:3c:f8:e7:40:a4:c8:5f:d8:a8:e6:3b: 7a:2e:e6:4f:11:dd:3a:b9:d9:8a:92:ee:60:56:94: 18:b7:3f:c2:0b:6b:e8:b7:71:fe:ca:83:a2:c8:87: cb:bc:11:df:53:c5:ca:04:0e:1c:39:fa:cb:21:c2: 1f:7d:6d:83:d9:8d:0c:58:c9:c9:83:37:1d:61:55: 70:fe:ee:ab:0e:77:52:9f:8a:28:14:9b:01:48:c3: c2:d0:d1:1d:51:60:c3:60:d2:b9:f5:2a:6f:46:4d: 16:23:6f:bc:81:f7:5a:87:58:8e:eb:4a:0a:dd:8d: 1d:34:56:e0:15:1f:ac:0e:99:13:7f:c9:e0:34:61: e0:cd:1b:b4:b4:27:8b:93:43:4e:fa:60:57:ee:39: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.24.0/22 IPv6: 2804:57dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268091 Signature Algorithm: sha256WithRSAEncryption 8a:2e:1c:1e:7a:1f:c8:2e:0e:00:77:a5:7b:cb:2f:fc:a3:3b: d8:aa:da:6e:de:a3:74:2a:06:bf:c6:09:78:44:70:b9:53:39: 3f:a0:5c:56:4a:a1:b4:fd:69:40:35:2b:96:e2:cd:36:1f:b1: f7:c3:22:0e:b5:83:ac:06:6f:cb:e9:48:33:a1:fd:5a:79:3c: a9:c5:1f:1a:9b:61:f8:7a:da:24:c2:b6:39:fc:d6:5e:ca:a6: 08:b7:d4:e9:db:14:11:bb:51:31:11:65:d8:8a:14:be:72:0b: 93:50:6f:cc:c5:db:f5:04:16:cf:89:04:88:05:4b:c0:53:29: 68:60:da:ee:d1:36:e3:17:52:49:de:df:ed:77:a1:85:a5:59: cd:69:78:e8:ad:e1:36:23:ed:7f:9d:47:3b:44:89:a3:78:96: ed:84:fa:ab:e9:ca:c8:52:4b:2f:3b:bc:0e:23:0a:95:0b:0a: 21:7d:39:11:f9:ba:96:a4:1b:fc:1d:b1:13:af:b0:fe:eb:60: 6f:64:96:3e:8d:4b:99:27:0e:03:35:93:2e:3a:01:8c:6f:f0: 63:f5:47:0f:24:f8:24:a2:04:c6:cf:e7:a0:7f:16:10:f9:6a: 40:19:3a:c1:3e:2b:69:21:19:1c:ec:51:45:bb:12:2e:98:e1: ae:52:4e:b7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTL4zOTcS/qvmEb4oWygCi81+vS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTQxNzM5MTBaFw0yNjAyMTMxNzQ0MTBaMDMxMTAvBgNV BAMTKDNDOUY3MkI5RDRFN0NBN0VFRjRGRDZFQUYwNzAzMjBBMTg2MDlFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYnAwKDGGL/4W97SKURqJ4FyBR 3+YEaGuc33HxCzQi+jNC48BK8ZMuDVQfWG5Mvp5iiMgs6h25ew1uMQ1EiNvnULZ7 15xUEQRQepYlYfL6FpfBSV5yIfGft9Nck6NfiHjhHNmXzXdJU3nYLkM8+OdApMhf 2KjmO3ou5k8R3Tq52YqS7mBWlBi3P8ILa+i3cf7Kg6LIh8u8Ed9TxcoEDhw5+ssh wh99bYPZjQxYycmDNx1hVXD+7qsOd1KfiigUmwFIw8LQ0R1RYMNg0rn1Km9GTRYj b7yB91qHWI7rSgrdjR00VuAVH6wOmRN/yeA0YeDNG7S0J4uTQ076YFfuOXuBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8n3K51OfKfu9P 1urwcDIKGGCe/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2E4 S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVnRTgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdh OEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAvM0M5 RjcyQjlENEU3Q0E3RUVGNEZENkVBRjA3MDMyMEExODYwOUVGRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLakYMA0EAgACMAcDBQAoBFfcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXOzANBgkqhkiG9w0BAQsFAAOCAQEAii4cHnofyC4OAHel e8sv/KM72Krabt6jdCoGv8YJeERwuVM5P6BcVkqhtP1pQDUrluLNNh+x98MiDrWD rAZvy+lIM6H9Wnk8qcUfGpth+HraJMK2OfzWXsqmCLfU6dsUEbtRMRFl2IoUvnIL k1BvzMXb9QQWz4kEiAVLwFMpaGDa7tE24xdSSd7f7XehhaVZzWl46K3hNiPtf51H O0SJo3iW7YT6q+nKyFJLLzu8DiMKlQsKIX05Efm6lqQb/B2xE6+w/utgb2SWPo1L mScOAzWTLjoBjG/wY/VHDyT4JKIExs/noH8WEPlqQBk6wT4raSEZHOxRRbsSLpjh rlJOtw== -----END CERTIFICATE-----Generated at Tue Apr 15 04:59:32 2025 by rpki-client