$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer File: 3DFAB11D75C819D05773554EBACF15CD75341EF8.cer (raw, json) Hash identifier: +Af586ATyvo5ag5/euT/YKjOuqiXeNiL3IBfyuPJu+U= Subject key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1B9AF3D4C106EF0484FF7060EA8EEF27FD610F2C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft caRepository: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:28 +0000 Certificate not after: Wed 04 Mar 2026 18:40:28 +0000 Subordinate resources: AS: 271328 IP: 200.9.116.0/22 IP: 2804:79cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 18:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9a:f3:d4:c1:06:ef:04:84:ff:70:60:ea:8e:ef:27:fd:61:0f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:28 2025 GMT Not After : Mar 4 18:40:28 2026 GMT Subject: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:c7:9d:95:65:db:da:ed:a4:77:c8:cf:75: 37:f4:6b:d6:32:42:77:0b:3b:32:3b:35:2b:a0:29: 2c:b1:ab:e4:90:8d:ad:2b:6f:f0:78:aa:20:6c:e1: f3:9f:c6:39:b8:2f:c2:28:ac:13:01:93:0c:13:15: 38:f7:5e:a4:4d:d9:73:83:e1:44:9e:67:4c:37:f3: 0a:82:f8:89:d8:f8:5e:4f:11:42:c4:db:7c:63:ad: ab:41:2c:8d:d6:a5:68:7d:71:23:6d:d8:93:7c:6c: 7c:d7:70:eb:71:88:2c:ea:57:82:60:22:d4:93:c8: 70:1f:18:0d:c9:53:25:6a:50:9a:7f:00:0d:3e:39: 81:fd:17:8a:22:0e:63:2b:c6:b5:6a:5b:19:45:41: d8:88:61:b1:c9:59:3d:f9:87:64:0b:ff:4f:6a:6d: 62:cc:98:cd:a1:d8:a1:f3:a6:45:62:b2:eb:41:57: cb:6b:8e:b0:06:a3:bb:33:b7:9a:80:a1:f0:04:96: 8d:e3:67:6a:34:f8:9a:68:5b:73:34:07:e3:70:ea: 1a:7d:e2:e9:d0:3f:8a:0d:8b:a7:ed:ea:52:7b:77: 7a:26:6b:ba:6d:37:66:74:28:7f:bb:4b:08:04:74: e4:a8:2c:69:c2:73:b0:96:8e:9c:b3:82:5f:7a:f5: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.9.116.0/22 IPv6: 2804:79cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271328 Signature Algorithm: sha256WithRSAEncryption ac:9b:9c:b9:5d:4d:db:96:38:3d:35:26:57:f5:23:f1:e1:d7: cd:ac:d7:10:eb:38:90:f4:4a:cf:72:e2:4c:a9:6f:c6:7d:6b: c7:15:d3:98:fc:65:f9:b3:cc:85:34:98:c2:b4:53:41:7f:82: ec:cc:90:46:93:6a:d9:be:8b:56:bd:81:a1:a5:2a:e0:99:19: 53:1e:f1:89:88:5a:9a:0c:e9:fb:61:a0:3b:67:01:9c:f5:a5: 48:c1:af:a9:cd:57:ff:b1:4a:07:16:3d:6c:fd:f4:d7:58:23: 12:c5:6d:3c:80:6d:54:0e:6c:dc:25:1b:f3:87:4d:5e:be:f0: 7d:96:46:7e:03:a7:c7:36:bc:0c:2b:df:d2:f9:bc:de:0b:b5: 48:02:b4:f9:6c:ef:bf:23:23:1d:5f:de:53:65:62:4e:3c:02: c8:38:00:e8:a2:ee:93:90:6c:f4:54:ca:48:ce:e6:a6:4c:4f: ae:6e:67:8e:77:28:97:a8:7a:71:70:75:15:b1:be:9a:a3:de: bc:97:03:2d:12:1e:9d:f0:77:4f:e8:a6:1c:4d:7d:64:37:e3: 98:6b:34:2c:c8:cd:94:cc:58:f3:e0:d0:d7:16:66:68:63:f0: 88:e2:2e:7d:a1:17:ac:4f:50:c2:e1:77:7e:8e:3a:14:00:3a: cb:0b:56:3b -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIUG5rz1MEG7wSE/3Bg6o7vJ/1hDywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MjhaFw0yNjAzMDQxODQwMjhaMDMxMTAvBgNV BAMTKDNERkFCMTFENzVDODE5RDA1NzczNTU0RUJBQ0YxNUNENzUzNDFFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+8edlWXb2u2kd8jPdTf0a9Yy QncLOzI7NSugKSyxq+SQja0rb/B4qiBs4fOfxjm4L8IorBMBkwwTFTj3XqRN2XOD 4USeZ0w38wqC+InY+F5PEULE23xjratBLI3WpWh9cSNt2JN8bHzXcOtxiCzqV4Jg ItSTyHAfGA3JUyVqUJp/AA0+OYH9F4oiDmMrxrVqWxlFQdiIYbHJWT35h2QL/09q bWLMmM2h2KHzpkVisutBV8trjrAGo7szt5qAofAElo3jZ2o0+JpoW3M0B+Nw6hp9 4unQP4oNi6ft6lJ7d3oma7ptN2Z0KH+7SwgEdOSoLGnCc7CWjpyzgl969X9BAgMB AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9+rEddcgZ0Fdz VU66zxXNdTQe+DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkVZ M0hvN0dFY0ViTUVna3NlUkY2b3JaUTliQXA5V1hWUlY5ejJhMkRiZC8xMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KRVkz SG83R0VjRWJNRWdrc2VSRjZvclpROWJBcDlXWFZSVjl6MmEyRGJkLzEvM0RGQUIx MUQ3NUM4MTlEMDU3NzM1NTRFQkFDRjE1Q0Q3NTM0MUVGOC5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCyAl0MA0EAgACMAcDBQAoBHnMMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQj4DANBgkqhkiG9w0BAQsFAAOCAQEArJucuV1N25Y4PTUmV/Uj 8eHXzazXEOs4kPRKz3LiTKlvxn1rxxXTmPxl+bPMhTSYwrRTQX+C7MyQRpNq2b6L Vr2BoaUq4JkZUx7xiYhamgzp+2GgO2cBnPWlSMGvqc1X/7FKBxY9bP3011gjEsVt PIBtVA5s3CUb84dNXr7wfZZGfgOnxza8DCvf0vm83gu1SAK0+WzvvyMjHV/eU2Vi TjwCyDgA6KLuk5Bs9FTKSM7mpkxPrm5njncol6h6cXB1FbG+mqPevJcDLRIenfB3 T+imHE19ZDfjmGs0LMjNlMxY8+DQ1xZmaGPwiOIufaEXrE9QwuF3fo46FAA6ywtW Ow== -----END CERTIFICATE-----Generated at Tue Apr 8 18:15:05 2025 by rpki-client