$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer File: 3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer (raw, json) Hash identifier: XeWZg3l+DXHPOZT/KknKIt/2QU8sCm2wcCMBQy1CLro= Subject key identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 44CD56E0AE6F339D0502116739D51215836799E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft caRepository: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 14:23:04 +0000 Certificate not after: Thu 05 Mar 2026 14:28:04 +0000 Subordinate resources: AS: 266502 IP: 170.244.172.0/22 IP: 2804:38cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cd:56:e0:ae:6f:33:9d:05:02:11:67:39:d5:12:15:83:67:99:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 14:23:04 2025 GMT Not After : Mar 5 14:28:04 2026 GMT Subject: CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:5f:f0:79:94:6b:a8:4d:27:04:8b:df:a4: a4:3b:ee:57:30:06:e1:0b:16:bf:bf:06:ea:ad:c1: 5d:71:2c:32:4a:22:78:9d:51:4c:5f:38:88:cd:6d: b6:79:07:cb:70:be:b9:4c:39:cd:95:06:7c:ec:03: ae:ab:5a:7d:ef:08:6a:31:36:89:13:ed:1a:01:09: da:22:0d:0e:ef:4d:61:00:01:45:9e:fc:c3:2b:19: e6:eb:05:14:34:dd:2e:1f:58:ae:b6:80:7a:5b:24: d8:18:97:b1:4c:ce:e4:e3:10:f0:c4:6e:af:9c:4a: 21:23:9c:c4:e4:46:6a:35:69:f6:83:3f:09:bc:0f: 9e:9a:c2:42:93:c1:4f:3f:82:f2:d8:f3:84:22:2d: 71:4f:49:52:3c:f0:7f:a7:8d:00:c1:53:bb:fe:fa: 8c:0f:15:32:c9:8d:cd:88:99:67:50:00:6f:b8:9c: b4:a5:ea:37:40:b2:65:1b:f5:a7:d2:bc:16:f1:dc: 57:07:36:e9:21:49:97:9b:9c:e0:a2:bb:3d:5a:c9: 05:c4:70:a2:90:1f:6f:9e:3f:6a:50:d0:7a:d6:0b: 2f:54:38:90:39:17:bd:b8:df:16:2a:ae:24:b2:99: b0:ec:1c:bf:c3:4a:74:bf:8e:d3:99:0d:20:59:db: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.172.0/22 IPv6: 2804:38cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266502 Signature Algorithm: sha256WithRSAEncryption 3a:a4:07:7d:2c:3d:0c:b9:66:73:6a:07:b4:10:b0:20:0a:80: 93:0a:0f:56:1f:a4:13:a1:68:92:5c:0e:59:9f:2e:67:0b:c9: 94:4d:e6:d6:65:e6:ff:68:2c:80:32:34:8a:cc:c1:a1:c3:b9: e6:84:00:09:2b:19:75:65:06:86:d3:f3:86:50:f1:18:9d:5b: 32:91:5f:8a:50:93:a3:a5:74:ed:01:7b:99:e4:a7:61:c0:de: c1:b8:6a:a2:54:5c:f5:c6:92:ee:ac:21:5d:71:3a:90:d2:07: 99:d8:64:ec:09:00:77:41:6b:72:26:3f:c8:cb:3b:11:bc:93: f9:37:af:02:ac:31:e5:b3:12:1b:83:cd:32:9c:cf:bc:ea:7b: 63:e7:5e:0d:4e:15:34:2c:75:88:70:46:53:95:4d:99:64:24: 19:4a:68:f1:3d:26:c0:4b:bc:c9:ca:cb:a7:a0:04:7e:b4:e1: cb:d8:4b:52:1d:0c:a1:8c:f8:b5:5d:1b:42:79:11:63:b0:12: 3d:1f:27:3a:8c:01:c1:16:b9:6e:c7:d4:54:3e:14:a6:8d:c7: cd:d5:85:84:81:d4:c6:11:bf:69:c9:20:88:64:36:c5:39:3e: 70:8b:32:36:a4:8a:01:4b:1c:75:18:c8:34:e9:e6:0e:48:41: c6:a4:31:31 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURM1W4K5vM50FAhFnOdUSFYNnmegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNDIzMDRaFw0yNjAzMDUxNDI4MDRaMDMxMTAvBgNV BAMTKDNFNENFM0ZDMEYxNTExMUU4MTdGNkNFNTI2MjU2QUE3QzNCRjgyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lV/weZRrqE0nBIvfpKQ77lcw BuELFr+/BuqtwV1xLDJKInidUUxfOIjNbbZ5B8twvrlMOc2VBnzsA66rWn3vCGox NokT7RoBCdoiDQ7vTWEAAUWe/MMrGebrBRQ03S4fWK62gHpbJNgYl7FMzuTjEPDE bq+cSiEjnMTkRmo1afaDPwm8D56awkKTwU8/gvLY84QiLXFPSVI88H+njQDBU7v+ +owPFTLJjc2ImWdQAG+4nLSl6jdAsmUb9afSvBbx3FcHNukhSZebnOCiuz1ayQXE cKKQH2+eP2pQ0HrWCy9UOJA5F7243xYqriSymbDsHL/DSnS/jtOZDSBZ2wGBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+TOP8DxURHoF/ bOUmJWqnw7+CijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVhX cU5aekRZcDFBTmUza0FlZkhaZDVHWEo4QlY5ck5jQ1FNMTRzelhSb1AvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVY V3FOWnpEWXAxQU5lM2tBZWZIWmQ1R1hKOEJWOXJOY0NRTTE0c3pYUm9QLzEvM0U0 Q0UzRkMwRjE1MTExRTgxN0Y2Q0U1MjYyNTZBQTdDM0JGODI4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvSsMA0EAgACMAcDBQAoBDjMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRBjANBgkqhkiG9w0BAQsFAAOCAQEAOqQHfSw9DLlmc2oH tBCwIAqAkwoPVh+kE6FoklwOWZ8uZwvJlE3m1mXm/2gsgDI0iszBocO55oQACSsZ dWUGhtPzhlDxGJ1bMpFfilCTo6V07QF7meSnYcDewbhqolRc9caS7qwhXXE6kNIH mdhk7AkAd0FrciY/yMs7EbyT+TevAqwx5bMSG4PNMpzPvOp7Y+deDU4VNCx1iHBG U5VNmWQkGUpo8T0mwEu8ycrLp6AEfrThy9hLUh0MoYz4tV0bQnkRY7ASPR8nOowB wRa5bsfUVD4Upo3HzdWFhIHUxhG/ackgiGQ2xTk+cIsyNqSKAUscdRjINOnmDkhB xqQxMQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:35:24 2025 by rpki-client