$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/43A7C7C2B310D67DE688F19B159433597525FE31.cer File: 43A7C7C2B310D67DE688F19B159433597525FE31.cer (raw, json) Hash identifier: s8vtS1vhMdr7g0DB1VsNSGM8qEUk2jT5fCtEfxj+yrM= Subject key identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7E771B5702D1EE673FA52F84AECD22C0DDE54705 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft caRepository: rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:26 +0000 Certificate not after: Wed 04 Mar 2026 18:40:26 +0000 Subordinate resources: AS: 266136 IP: 45.6.136.0/22 IP: 2804:3b38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:77:1b:57:02:d1:ee:67:3f:a5:2f:84:ae:cd:22:c0:dd:e5:47:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:26 2025 GMT Not After : Mar 4 18:40:26 2026 GMT Subject: CN=43A7C7C2B310D67DE688F19B159433597525FE31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:7d:92:f2:be:25:99:e0:19:32:c0:bd:9e: 6d:f2:15:56:c6:03:1e:44:1f:7a:28:74:1d:a6:b8: 9b:16:e5:d0:21:3e:88:7f:b5:5f:08:c0:bf:49:27: 4b:75:9d:95:38:15:64:53:5e:e0:e1:9c:04:69:14: e8:7c:db:f8:41:60:39:0e:14:a8:91:ef:94:a8:1c: 09:63:85:3f:98:1e:0f:8f:d8:a7:17:fd:6c:4c:5f: 8d:6d:a9:a9:8b:18:aa:e1:77:01:2c:09:24:18:6f: ba:48:5d:87:fb:f0:35:0f:d2:7b:2a:62:ca:4d:7f: f6:08:f9:65:c9:2e:c2:da:2f:9b:13:e8:31:0a:f8: d4:0b:fa:9b:d0:79:0d:80:5f:a9:71:5a:2b:fb:5e: 2d:c0:00:f9:d4:fb:63:36:f0:3d:b1:ca:6a:ba:e7: e5:c9:ea:18:b2:25:9a:58:54:60:38:f4:cb:c5:46: 70:c5:3f:82:da:2b:6e:73:e0:55:cb:d2:22:e9:5d: 42:17:08:66:df:79:5c:26:a8:64:61:f4:63:f9:65: 1e:9d:d8:c0:06:e1:72:1b:a5:18:a4:8e:31:c0:9e: b7:cc:16:75:8b:f3:92:7a:a9:5a:95:4f:79:a4:80: 14:e8:f4:f1:5e:b9:ac:53:e1:9b:29:7e:bd:32:40: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 43:A7:C7:C2:B3:10:D6:7D:E6:88:F1:9B:15:94:33:59:75:25:FE:31 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56VtGHoZByZLtSXm5yTPFD9CENxPvQyguYkbJK9T3bim/1/43A7C7C2B310D67DE688F19B159433597525FE31.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.136.0/22 IPv6: 2804:3b38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266136 Signature Algorithm: sha256WithRSAEncryption 98:4d:92:b3:b4:66:07:3a:55:22:48:26:0a:89:27:81:bf:3b: 9d:61:9e:bb:c1:90:b0:bf:00:bb:f2:10:7a:fd:ff:db:1e:ad: ed:6e:4d:b5:4b:93:07:f7:b3:ce:e4:c6:72:38:5a:af:19:2a: df:ae:20:18:e0:f1:02:a0:da:3a:4b:2b:d1:61:46:0f:b6:18: 3d:fb:d9:5f:55:52:61:50:c9:fe:87:81:8f:12:88:86:f2:16: 59:7c:e3:58:a2:c3:fc:da:0c:ad:eb:87:8e:a7:9d:1b:6b:89: 76:81:c8:d9:b1:c9:60:e5:68:bd:2d:27:d6:99:fe:27:d7:47: d5:3e:44:3f:e6:dd:ae:0b:46:df:c5:fb:a4:6e:c0:d1:c4:7e: 3a:11:02:27:ba:0b:90:ff:d9:12:7b:49:18:23:f8:d0:80:c1: f6:8e:e0:9f:2e:c8:9d:84:bc:60:ab:eb:df:c4:96:cc:90:ef: a5:e3:24:2b:0f:28:7b:06:d2:5c:f1:05:b4:77:2e:30:f1:63: 65:c1:75:8d:d9:90:14:0a:72:bc:43:c6:d8:49:43:c1:8c:1e: a9:88:50:34:5a:34:e6:0e:74:0f:42:7b:80:2f:53:1b:97:0b: e0:48:b4:ad:88:c1:cf:bb:01:ec:61:ff:37:fe:72:2f:3f:77: ba:27:cb:b3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfncbVwLR7mc/pS+Ers0iwN3lRwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MjZaFw0yNjAzMDQxODQwMjZaMDMxMTAvBgNV BAMTKDQzQTdDN0MyQjMxMEQ2N0RFNjg4RjE5QjE1OTQzMzU5NzUyNUZFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaX2S8r4lmeAZMsC9nm3yFVbG Ax5EH3oodB2muJsW5dAhPoh/tV8IwL9JJ0t1nZU4FWRTXuDhnARpFOh82/hBYDkO FKiR75SoHAljhT+YHg+P2KcX/WxMX41tqamLGKrhdwEsCSQYb7pIXYf78DUP0nsq YspNf/YI+WXJLsLaL5sT6DEK+NQL+pvQeQ2AX6lxWiv7Xi3AAPnU+2M28D2xymq6 5+XJ6hiyJZpYVGA49MvFRnDFP4LaK25z4FXL0iLpXUIXCGbfeVwmqGRh9GP5ZR6d 2MAG4XIbpRikjjHAnrfMFnWL85J6qVqVT3mkgBTo9PFeuaxT4Zspfr0yQDEHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRDp8fCsxDWfeaI 8ZsVlDNZdSX+MTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZW dEdIb1pCeVpMdFNYbTV5VFBGRDlDRU54UHZReWd1WWtiSks5VDNiaW0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 VnRHSG9aQnlaTHRTWG01eVRQRkQ5Q0VOeFB2UXlndVlrYkpLOVQzYmltLzEvNDNB N0M3QzJCMzEwRDY3REU2ODhGMTlCMTU5NDMzNTk3NTI1RkUzMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQaIMA0EAgACMAcDBQAoBDs4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPmDANBgkqhkiG9w0BAQsFAAOCAQEAmE2Ss7RmBzpVIkgm Cokngb87nWGeu8GQsL8Au/IQev3/2x6t7W5NtUuTB/ezzuTGcjharxkq364gGODx AqDaOksr0WFGD7YYPfvZX1VSYVDJ/oeBjxKIhvIWWXzjWKLD/NoMreuHjqedG2uJ doHI2bHJYOVovS0n1pn+J9dH1T5EP+bdrgtG38X7pG7A0cR+OhECJ7oLkP/ZEntJ GCP40IDB9o7gny7InYS8YKvr38SWzJDvpeMkKw8oewbSXPEFtHcuMPFjZcF1jdmQ FApyvEPG2ElDwYweqYhQNFo05g50D0J7gC9TG5cL4Ei0rYjBz7sB7GH/N/5yLz93 uifLsw== -----END CERTIFICATE-----Generated at Fri Apr 4 10:50:51 2025 by rpki-client