$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.cer File: 4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.cer (raw, json) Hash identifier: C+ZsJ2Yepsu/CKK+eX1XakL//DCz13823xXgIhZvQLY= Subject key identifier: 4E:2A:FD:0A:2B:BA:64:72:89:85:B8:44:3F:C5:00:D9:EF:1D:96:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F3CB96FB60B578303E811A0E184B1A23AF19046 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.mft caRepository: rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 31 Dec 2024 11:33:39 +0000 Certificate not after: Tue 30 Dec 2025 11:38:39 +0000 Subordinate resources: AS: 61700 IP: 131.0.112.0/22 IP: 170.78.64.0/22 IP: 2804:1af4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3c:b9:6f:b6:0b:57:83:03:e8:11:a0:e1:84:b1:a2:3a:f1:90:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 31 11:33:39 2024 GMT Not After : Dec 30 11:38:39 2025 GMT Subject: CN=4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:c0:44:79:ec:57:3e:69:8e:06:da:4a:4a: 35:29:35:97:81:48:4e:9c:42:8f:0d:ba:d8:2a:76: 0f:a4:48:22:69:fd:f8:6d:ce:f2:06:61:29:87:21: d5:13:8d:ff:84:94:e2:d1:c6:f4:66:24:47:eb:e8: 4c:64:76:46:89:86:66:64:32:a5:65:e5:78:c3:ec: 6b:c6:86:39:fe:b4:41:a5:be:c5:b8:4f:04:e3:c6: b3:e9:f9:0e:e2:f3:e6:1e:81:e3:20:69:da:60:bd: af:44:7e:a0:79:2c:81:94:74:5d:c2:04:c5:0b:0a: 94:06:ff:24:b7:6f:43:a6:d0:a2:94:f5:a9:36:64: 7a:5e:1c:ff:5f:07:8e:d7:78:f2:ad:bc:46:f3:88: 19:cd:42:f6:59:e4:cd:c0:fc:85:b9:83:89:a5:82: 4a:27:5c:e7:7d:98:52:81:d8:34:2b:e2:f0:dc:f4: c5:1f:32:91:57:85:d0:70:c0:5e:39:56:12:02:c3: 4b:58:66:46:ca:a1:f6:21:b8:03:bb:97:f3:bb:cd: 7a:f5:10:80:7a:18:2f:8a:be:15:99:b4:31:66:97: 6d:06:8d:be:8b:69:33:d8:41:5e:69:8f:2b:5a:dd: 73:b5:7a:88:57:d8:7b:35:11:39:42:9b:0e:88:22: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:2A:FD:0A:2B:BA:64:72:89:85:B8:44:3F:C5:00:D9:EF:1D:96:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ThWCdod8Z2aAYiJUSTJDbZvYNhVLsqhiuEk3Jyg1zjD/0/4E2AFD0A2BBA64728985B8443FC500D9EF1D96FF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.112.0/22 170.78.64.0/22 IPv6: 2804:1af4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61700 Signature Algorithm: sha256WithRSAEncryption 8f:a7:ce:9c:2d:50:01:c2:a9:ca:8d:f9:a0:0c:95:06:65:b6: aa:6f:2d:3b:b9:a7:c3:4d:20:42:4e:e1:86:a9:7f:d8:15:cb: f9:ca:9a:93:15:4e:66:8e:02:00:ef:04:3d:60:d2:6e:61:d8: fd:bc:83:a1:87:1e:81:c8:fa:5a:ae:bc:30:0f:19:8b:7d:49: 0f:38:fe:fc:fc:b4:1b:ee:0c:6f:a0:92:d1:14:dd:42:c3:a1: ec:b3:30:7c:45:42:6c:18:d7:08:22:56:41:92:16:17:bc:00: a1:6d:6b:f9:84:33:78:eb:d0:a1:20:4a:2f:4b:0f:5e:5e:9a: ac:c1:d5:92:9d:c1:0c:d6:1f:c8:bd:9f:90:c2:ed:80:54:58: 36:65:3f:5b:03:33:e9:fd:19:6b:35:80:1a:29:be:07:61:37: 4c:f3:69:80:f5:b8:c0:cd:12:67:54:62:e5:dd:44:7d:dc:44: f6:4b:2f:24:10:41:38:a0:11:19:c6:6b:27:1a:05:99:d0:e9: a5:2d:13:0b:7c:16:4b:86:46:f0:49:03:3a:d0:61:27:fb:e2: a2:43:b8:53:8c:b7:b8:2e:86:df:9f:75:57:0d:50:30:ef:54: 1f:9e:f8:fd:cb:f5:14:19:80:20:37:b9:78:f9:1f:77:f8:2b: 5e:cf:6b:df -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXzy5b7YLV4MD6BGg4YSxojrxkEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMzExMTMzMzlaFw0yNTEyMzAxMTM4MzlaMDMxMTAvBgNV BAMTKDRFMkFGRDBBMkJCQTY0NzI4OTg1Qjg0NDNGQzUwMEQ5RUYxRDk2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNsBEeexXPmmOBtpKSjUpNZeB SE6cQo8Nutgqdg+kSCJp/fhtzvIGYSmHIdUTjf+ElOLRxvRmJEfr6ExkdkaJhmZk MqVl5XjD7GvGhjn+tEGlvsW4TwTjxrPp+Q7i8+YegeMgadpgva9EfqB5LIGUdF3C BMULCpQG/yS3b0Om0KKU9ak2ZHpeHP9fB47XePKtvEbziBnNQvZZ5M3A/IW5g4ml gkonXOd9mFKB2DQr4vDc9MUfMpFXhdBwwF45VhICw0tYZkbKofYhuAO7l/O7zXr1 EIB6GC+KvhWZtDFml20Gjb6LaTPYQV5pjyta3XO1eohX2Hs1ETlCmw6IIqfJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROKv0KK7pkcomF uEQ/xQDZ7x2W/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFRo V0Nkb2Q4WjJhQVlpSlVTVEpEYlp2WU5oVkxzcWhpdUVrM0p5ZzF6akQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRU aFdDZG9kOFoyYUFZaUpVU1RKRGJadllOaFZMc3FoaXVFazNKeWcxempELzAvNEUy QUZEMEEyQkJBNjQ3Mjg5ODVCODQ0M0ZDNTAwRDlFRjFEOTZGRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCgwBwAwQCqk5AMA0EAgACMAcDBQAoBBr0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxBDANBgkqhkiG9w0BAQsFAAOCAQEAj6fOnC1Q AcKpyo35oAyVBmW2qm8tO7mnw00gQk7hhql/2BXL+cqakxVOZo4CAO8EPWDSbmHY /byDoYcegcj6Wq68MA8Zi31JDzj+/Py0G+4Mb6CS0RTdQsOh7LMwfEVCbBjXCCJW QZIWF7wAoW1r+YQzeOvQoSBKL0sPXl6arMHVkp3BDNYfyL2fkMLtgFRYNmU/WwMz 6f0ZazWAGim+B2E3TPNpgPW4wM0SZ1Ri5d1EfdxE9ksvJBBBOKARGcZrJxoFmdDp pS0TC3wWS4ZG8EkDOtBhJ/viokO4U4y3uC6G3591Vw1QMO9UH574/cv1FBmAIDe5 ePkfd/grXs9r3w== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:16 2025 by rpki-client