$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.cer File: 4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.cer (raw, json) Hash identifier: 9meWNxqHfqzA1TX//mhaqJi//XbZgTO4PzrbkTQPOYM= Subject key identifier: 4C:AD:72:F1:E7:05:4D:CB:5D:B7:7A:0B:24:5F:7A:AD:63:A8:3E:84 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D805F3694576072A737C25CC16E56E3DDD36A7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.mft caRepository: rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 16 Jan 2025 18:51:03 +0000 Certificate not after: Thu 15 Jan 2026 18:56:03 +0000 Subordinate resources: AS: 271681 IP: 200.107.76.0/22 IP: 2804:7f54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:80:5f:36:94:57:60:72:a7:37:c2:5c:c1:6e:56:e3:dd:d3:6a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 16 18:51:03 2025 GMT Not After : Jan 15 18:56:03 2026 GMT Subject: CN=4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:b8:76:3f:6c:f6:7d:4f:7e:c3:53:b2:4a: e9:0b:dc:f3:0f:5c:a8:2d:6d:bb:4b:27:cf:e9:33: 94:53:e2:07:b8:3c:db:f8:c2:b0:9a:9f:ab:93:90: 98:92:d0:df:6f:c3:0e:d6:7e:cf:4e:57:c1:5d:e3: 03:71:ae:19:5b:95:49:7c:47:76:95:f0:b3:9d:a1: a5:9c:df:d4:a8:d9:ad:40:00:d3:c3:75:05:23:91: 41:41:0d:de:97:54:c2:ef:04:b5:f4:87:3b:fa:cb: ca:d1:e9:0d:e2:47:91:7b:05:2c:04:22:e4:e5:c6: 5a:8d:f8:7e:fe:b3:9e:36:18:2f:6d:93:2c:e6:8d: a5:ed:10:5f:c0:14:72:3c:63:3c:ec:77:ff:75:a1: 3b:41:fd:5f:9d:c4:49:68:7b:5e:5e:49:dd:ee:78: ad:df:6a:18:b0:a7:94:93:b9:1f:73:53:42:b4:a4: 01:5d:77:7b:92:bb:89:c7:4c:ef:0d:0b:bc:64:31: f9:9b:79:d0:9f:76:c4:f9:2e:c6:e3:63:d3:0c:3a: 21:89:f2:0b:e7:36:65:e8:5d:95:2e:3a:c8:ee:50: 71:a3:37:a0:f5:d8:e1:b0:a1:ce:d1:79:78:e9:37: 23:e4:d1:31:f1:bc:b9:24:ad:70:1f:7b:0f:ed:02: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:AD:72:F1:E7:05:4D:CB:5D:B7:7A:0B:24:5F:7A:AD:63:A8:3E:84 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.107.76.0/22 IPv6: 2804:7f54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271681 Signature Algorithm: sha256WithRSAEncryption 39:e0:3b:32:98:10:9c:f7:ef:d1:52:8f:86:61:e2:71:99:2c: 17:02:f0:6c:02:b4:39:ee:77:da:b3:e2:0c:11:a0:d5:1b:45: df:31:02:18:07:cf:80:43:e1:0d:8b:21:f5:04:dc:dd:f9:db: c7:22:a9:4b:d5:7d:dc:c5:21:88:04:b1:77:3e:76:66:3e:e5: 53:ab:98:b7:45:27:18:88:72:15:d9:98:cf:49:93:69:58:3f: 85:56:ad:ce:f0:cb:5b:5b:12:a0:dc:1e:9a:8b:e6:74:7c:8d: e1:09:60:46:66:7c:e5:f5:82:0f:2f:58:18:5a:c2:da:4b:c2: fd:63:d2:20:1b:0f:36:cd:49:ff:16:46:f5:8a:b7:60:90:1f: b8:f1:11:2a:24:f1:09:e5:de:45:3a:69:cb:ca:40:f2:c3:5e: 1e:63:2e:0c:55:15:8b:19:fc:e8:7f:77:f9:67:74:81:c3:56: 89:d1:b5:93:96:29:ce:6d:68:af:54:79:f6:5e:5a:61:7d:b9: 07:3b:b8:c7:bc:cc:8f:b1:93:66:19:12:7f:de:da:f4:c4:76: 95:bd:e7:f4:3a:9f:a5:61:94:7b:a1:02:e2:c0:04:18:fd:64: 24:3e:fd:c1:41:e7:65:a0:5a:19:46:05:11:bd:28:77:1c:83: c1:04:fb:55 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPYBfNpRXYHKnN8JcwW5W493Tan0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTYxODUxMDNaFw0yNjAxMTUxODU2MDNaMDMxMTAvBgNV BAMTKDRDQUQ3MkYxRTcwNTREQ0I1REI3N0EwQjI0NUY3QUFENjNBODNFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pbh2P2z2fU9+w1OySukL3PMP XKgtbbtLJ8/pM5RT4ge4PNv4wrCan6uTkJiS0N9vww7Wfs9OV8Fd4wNxrhlblUl8 R3aV8LOdoaWc39So2a1AANPDdQUjkUFBDd6XVMLvBLX0hzv6y8rR6Q3iR5F7BSwE IuTlxlqN+H7+s542GC9tkyzmjaXtEF/AFHI8Yzzsd/91oTtB/V+dxEloe15eSd3u eK3fahiwp5STuR9zU0K0pAFdd3uSu4nHTO8NC7xkMfmbedCfdsT5LsbjY9MMOiGJ 8gvnNmXoXZUuOsjuUHGjN6D12OGwoc7ReXjpNyPk0THxvLkkrXAfew/tAjp7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMrXLx5wVNy123 egskX3qtY6g+hDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmZB UktaZkFZVmhGaDVOWmVSNUtNMTlYbjg2RUVrWW5lSDRMekpvUFAybzkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jm QVJLWmZBWVZoRmg1TlplUjVLTTE5WG44NkVFa1luZUg0THpKb1BQMm85LzAvNENB RDcyRjFFNzA1NERDQjVEQjc3QTBCMjQ1RjdBQUQ2M0E4M0U4NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyGtMMA0EAgACMAcDBQAoBH9UMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlQTANBgkqhkiG9w0BAQsFAAOCAQEAOeA7MpgQnPfv0VKP hmHicZksFwLwbAK0Oe532rPiDBGg1RtF3zECGAfPgEPhDYsh9QTc3fnbxyKpS9V9 3MUhiASxdz52Zj7lU6uYt0UnGIhyFdmYz0mTaVg/hVatzvDLW1sSoNwemovmdHyN 4QlgRmZ85fWCDy9YGFrC2kvC/WPSIBsPNs1J/xZG9Yq3YJAfuPERKiTxCeXeRTpp y8pA8sNeHmMuDFUVixn86H93+Wd0gcNWidG1k5Ypzm1or1R59l5aYX25Bzu4x7zM j7GTZhkSf97a9MR2lb3n9DqfpWGUe6EC4sAEGP1kJD79wUHnZaBaGUYFEb0odxyD wQT7VQ== -----END CERTIFICATE-----Generated at Thu Feb 20 17:44:11 2025 by rpki-client