$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer File: 3E9ABEDC7E771B85710E3E49ED20657F04DA1797.cer (raw, json) Hash identifier: 7YfXqB+PzNqBbrPVFm5nxelbLKZ5musNTPbaLwOy9YI= Subject key identifier: 3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E3C5101EBC7E840CDBE5A877E9CF0A9576CD386 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft caRepository: rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 03:22:12 +0000 Certificate not after: Fri 06 Mar 2026 03:27:12 +0000 Subordinate resources: AS: 266204 IP: 190.123.196.0/22 IP: 2804:3c54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3c:51:01:eb:c7:e8:40:cd:be:5a:87:7e:9c:f0:a9:57:6c:d3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 03:22:12 2025 GMT Not After : Mar 6 03:27:12 2026 GMT Subject: CN=3E9ABEDC7E771B85710E3E49ED20657F04DA1797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:86:3a:49:5a:81:64:37:b0:85:3e:27:5a:60: 9d:f1:b9:56:c4:7e:ac:73:bf:de:df:ed:2f:3a:6e: f0:8c:3e:a6:05:1a:f9:27:6c:50:ff:27:88:78:36: f1:6d:60:7e:25:c4:16:66:40:f5:2d:8c:0e:cf:d6: bc:1a:b3:92:3d:d0:bb:44:db:0f:3a:59:91:37:ff: 41:8c:d2:ee:a5:94:92:ec:9d:52:de:09:17:63:14: d2:df:a0:aa:0e:fe:e6:01:6c:1b:2c:f1:b8:af:aa: 11:c4:b1:d9:02:e6:77:0a:a4:aa:e1:01:1a:cd:03: 94:c1:0b:01:3b:17:66:1b:1c:db:b3:86:ec:3c:d2: 05:d9:43:0c:58:c8:88:ac:a8:58:b7:66:ab:da:c0: 29:69:ea:60:da:0d:e0:5a:95:c8:e6:5b:a8:88:18: b5:99:2f:8a:23:56:d0:fc:46:ff:b0:c3:71:95:a7: 36:d6:e1:72:1a:7c:5b:42:95:bf:08:de:53:e9:15: 5b:ea:c0:d8:be:c9:37:d0:b6:0a:93:a4:1e:27:61: de:ad:8f:c8:2a:cc:79:51:0f:ae:83:ee:f5:ef:29: a6:53:d9:ed:2e:61:b1:41:29:4b:15:53:6b:65:4f: 8f:77:5f:ed:85:c2:83:43:1a:f4:61:5a:23:08:b2: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:9A:BE:DC:7E:77:1B:85:71:0E:3E:49:ED:20:65:7F:04:DA:17:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sJpx1DJz5t7V4itgR9VrFS8KHNAfoNZYZ2s3F2Jvp2B/1/3E9ABEDC7E771B85710E3E49ED20657F04DA1797.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.123.196.0/22 IPv6: 2804:3c54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266204 Signature Algorithm: sha256WithRSAEncryption 54:16:db:63:f6:93:89:1b:5d:c7:da:ff:a8:94:4c:1f:26:06: 97:a3:99:8b:49:c2:fb:62:c3:2e:cb:2f:75:42:96:9c:94:22: 8c:ff:81:82:2e:8b:8b:a4:f9:36:39:80:da:26:51:19:a1:fa: 65:82:ff:d8:17:3f:b6:d2:29:40:06:0c:5d:66:98:ee:04:f2: 14:16:71:50:45:93:8b:16:d4:0a:71:9f:5c:93:76:7f:33:e6: d7:3d:34:10:00:67:52:7d:3a:59:8b:a5:56:4c:0c:0c:7e:83: 55:f2:21:e5:31:b0:1c:eb:33:c8:56:c9:77:34:3b:7c:1f:b5: 44:60:22:ec:50:68:56:35:a9:af:3c:16:94:19:c7:7a:4f:e4: 32:77:ea:7d:16:ce:21:32:6b:9b:cb:6b:d5:09:5a:44:f4:cf: 32:67:1f:ca:49:09:0e:b5:b5:ee:bd:b9:6f:5c:62:12:aa:46: 6f:f5:9f:e3:c7:f7:cc:aa:27:fc:6f:3a:34:bf:99:66:45:68: 90:c9:24:28:43:74:e2:f1:28:ec:be:4b:f2:c9:f9:dd:fd:0a: 44:4e:bd:ac:84:ef:73:66:79:38:58:a4:60:c1:92:f4:78:92: 99:23:c5:9b:80:aa:f3:e5:ee:eb:ff:13:5e:05:cb:c6:54:19: de:79:6d:03 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUDjxRAevH6EDNvlqHfpzwqVds04YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMzIyMTJaFw0yNjAzMDYwMzI3MTJaMDMxMTAvBgNV BAMTKDNFOUFCRURDN0U3NzFCODU3MTBFM0U0OUVEMjA2NTdGMDREQTE3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhjpJWoFkN7CFPidaYJ3xuVbE fqxzv97f7S86bvCMPqYFGvknbFD/J4h4NvFtYH4lxBZmQPUtjA7P1rwas5I90LtE 2w86WZE3/0GM0u6llJLsnVLeCRdjFNLfoKoO/uYBbBss8bivqhHEsdkC5ncKpKrh ARrNA5TBCwE7F2YbHNuzhuw80gXZQwxYyIisqFi3ZqvawClp6mDaDeBalcjmW6iI GLWZL4ojVtD8Rv+ww3GVpzbW4XIafFtClb8I3lPpFVvqwNi+yTfQtgqTpB4nYd6t j8gqzHlRD66D7vXvKaZT2e0uYbFBKUsVU2tlT493X+2FwoNDGvRhWiMIsmERAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+mr7cfncbhXEO PkntIGV/BNoXlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3NK cHgxREp6NXQ3VjRpdGdSOVZyRlM4S0hOQWZvTlpZWjJzM0YySnZwMkIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3NK cHgxREp6NXQ3VjRpdGdSOVZyRlM4S0hOQWZvTlpZWjJzM0YySnZwMkIvMS8zRTlB QkVEQzdFNzcxQjg1NzEwRTNFNDlFRDIwNjU3RjA0REExNzk3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK+e8QwDQQCAAIwBwMFACgEPFQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBA/cMA0GCSqGSIb3DQEBCwUAA4IBAQBUFttj9pOJG13H2v+o lEwfJgaXo5mLScL7YsMuyy91QpaclCKM/4GCLouLpPk2OYDaJlEZofplgv/YFz+2 0ilABgxdZpjuBPIUFnFQRZOLFtQKcZ9ck3Z/M+bXPTQQAGdSfTpZi6VWTAwMfoNV 8iHlMbAc6zPIVsl3NDt8H7VEYCLsUGhWNamvPBaUGcd6T+Qyd+p9Fs4hMmuby2vV CVpE9M8yZx/KSQkOtbXuvblvXGISqkZv9Z/jx/fMqif8bzo0v5lmRWiQySQoQ3Ti 8Sjsvkvyyfnd/QpETr2shO9zZnk4WKRgwZL0eJKZI8WbgKrz5e7r/xNeBcvGVBne eW0D -----END CERTIFICATE-----Generated at Tue Apr 8 12:09:52 2025 by rpki-client