$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/48C87475D420636563076BE1273C88E52EBA52F6.cer File: 48C87475D420636563076BE1273C88E52EBA52F6.cer (raw, json) Hash identifier: lzxatq2zSW7w2dNDn+1Uwq7QOYdVjBQhp6/sYiU7VDA= Subject key identifier: 48:C8:74:75:D4:20:63:65:63:07:6B:E1:27:3C:88:E5:2E:BA:52:F6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E6FE685DF6AA435EB324CFB2AC6A68657D77AF7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/48C87475D420636563076BE1273C88E52EBA52F6.mft caRepository: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Dec 2024 19:28:58 +0000 Certificate not after: Thu 11 Dec 2025 19:33:58 +0000 Subordinate resources: AS: 264360 IP: 131.161.28.0/22 IP: 138.255.132.0/22 IP: 2804:1d50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6f:e6:85:df:6a:a4:35:eb:32:4c:fb:2a:c6:a6:86:57:d7:7a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 12 19:28:58 2024 GMT Not After : Dec 11 19:33:58 2025 GMT Subject: CN=48C87475D420636563076BE1273C88E52EBA52F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:6e:ad:cb:06:0f:6c:d3:c3:5b:13:34:74: d9:53:a4:93:77:ee:91:c6:78:3b:44:bf:07:23:a9: 88:bd:51:a0:ee:d4:7b:43:b2:70:83:72:a7:cc:bf: 1b:84:5b:0f:43:d8:08:cd:a7:ec:cc:57:79:f1:33: 2c:a3:0c:5f:3b:2c:29:95:14:ad:4b:ca:b3:99:b8: 35:f1:34:a8:ef:50:99:2f:8e:f8:52:06:d2:8c:3d: e8:9c:be:f6:2d:50:09:76:43:15:48:5f:50:49:c1: 7e:8a:08:a8:01:48:f5:0c:eb:9c:dd:65:51:c9:cd: ea:d4:33:9e:77:37:3f:e3:6d:31:75:93:66:a6:87: 79:f5:b3:79:8c:85:3a:3b:0c:1c:05:40:32:4f:76: e7:a5:57:ad:d0:81:b1:b0:06:ba:59:19:c6:e9:80: c7:82:5b:22:93:a0:80:ac:ec:60:e6:77:3e:d5:b8: b6:25:68:1c:e6:0e:c6:ff:06:f0:0d:e2:79:b3:0c: 22:d6:6e:95:d1:59:20:d8:08:27:7d:32:21:c7:93: de:fa:af:12:fd:cc:c9:84:f2:e6:dd:af:55:ec:80: aa:2c:0c:5f:00:78:56:00:5d:cc:95:f9:60:e5:40: af:10:02:4a:ac:53:5a:cc:e1:b8:f9:4c:92:76:c5: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:C8:74:75:D4:20:63:65:63:07:6B:E1:27:3C:88:E5:2E:BA:52:F6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/48C87475D420636563076BE1273C88E52EBA52F6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.28.0/22 138.255.132.0/22 IPv6: 2804:1d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264360 Signature Algorithm: sha256WithRSAEncryption 69:4a:b9:83:f3:fc:1c:d5:02:99:10:a2:26:2b:31:c2:35:ca: 45:37:fc:c7:19:e8:e0:4a:ea:b9:41:82:0d:7b:62:9e:1d:79: 07:c0:a9:df:cd:5f:ee:1d:91:de:de:ce:74:73:6d:38:c0:0f: 55:88:11:24:b6:fc:bd:36:29:5b:0d:a1:9c:5d:99:27:96:37: c0:71:1b:e6:e0:f3:f0:e5:99:21:41:f8:01:38:66:17:71:b5: 58:91:bd:31:66:ff:8a:16:38:2d:e0:7e:56:8b:c5:dc:4e:e9: 41:f5:10:2a:06:54:15:94:89:f3:8f:5b:82:d9:67:bd:75:42: 76:82:f9:46:d8:8e:17:9b:ed:f4:50:e4:93:b8:ee:85:86:6d: 42:c7:ed:fd:e6:b8:d8:21:2d:e2:f0:98:a4:90:14:7a:50:b0: 03:e6:2f:7f:bb:78:4c:5c:0d:fb:a7:00:38:a5:79:19:8e:5f: 28:83:6b:5a:f9:37:ad:6c:dc:f0:f8:f2:69:fd:8a:06:3c:6c: c5:e3:a1:36:d3:68:85:e5:7c:97:eb:e9:86:88:df:78:d5:25: 79:0b:41:9a:a6:db:f0:06:63:cd:a3:c8:a5:df:7d:db:90:45: 2c:bd:92:73:3d:f4:f6:0c:98:3d:62:25:71:04:db:25:25:41: 7e:43:0e:4e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDm/mhd9qpDXrMkz7KsamhlfXevcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTIxOTI4NThaFw0yNTEyMTExOTMzNThaMDMxMTAvBgNV BAMTKDQ4Qzg3NDc1RDQyMDYzNjU2MzA3NkJFMTI3M0M4OEU1MkVCQTUyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUG6tywYPbNPDWxM0dNlTpJN3 7pHGeDtEvwcjqYi9UaDu1HtDsnCDcqfMvxuEWw9D2AjNp+zMV3nxMyyjDF87LCmV FK1LyrOZuDXxNKjvUJkvjvhSBtKMPeicvvYtUAl2QxVIX1BJwX6KCKgBSPUM65zd ZVHJzerUM553Nz/jbTF1k2amh3n1s3mMhTo7DBwFQDJPduelV63QgbGwBrpZGcbp gMeCWyKToICs7GDmdz7VuLYlaBzmDsb/BvAN4nmzDCLWbpXRWSDYCCd9MiHHk976 rxL9zMmE8ubdr1XsgKosDF8AeFYAXcyV+WDlQK8QAkqsU1rM4bj5TJJ2xWI/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRIyHR11CBjZWMH a+EnPIjlLrpS9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0tM NGI0S2s4UFFjbzZYb3NQNGdHY3hZMnNiZGl5UGZKRER6UzF2UnNhTHUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNL TDRiNEtrOFBRY282WG9zUDRnR2N4WTJzYmRpeVBmSkREelMxdlJzYUx1LzAvNDhD ODc0NzVENDIwNjM2NTYzMDc2QkUxMjczQzg4RTUyRUJBNTJGNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg6EcAwQCiv+EMA0EAgACMAcDBQAoBB1QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIqDANBgkqhkiG9w0BAQsFAAOCAQEAaUq5g/P8 HNUCmRCiJisxwjXKRTf8xxno4ErquUGCDXtinh15B8Cp381f7h2R3t7OdHNtOMAP VYgRJLb8vTYpWw2hnF2ZJ5Y3wHEb5uDz8OWZIUH4AThmF3G1WJG9MWb/ihY4LeB+ VovF3E7pQfUQKgZUFZSJ849bgtlnvXVCdoL5RtiOF5vt9FDkk7juhYZtQsft/ea4 2CEt4vCYpJAUelCwA+Yvf7t4TFwN+6cAOKV5GY5fKINrWvk3rWzc8Pjyaf2KBjxs xeOhNtNoheV8l+vphojfeNUleQtBmqbb8AZjzaPIpd9925BFLL2Scz309gyYPWIl cQTbJSVBfkMOTg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:37:41 2025 by rpki-client