$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer File: 4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer (raw, json) Hash identifier: 8xbqV6kIgoZ2NMtG0FYDnkBrq+oA2f2f/GDH8aWrR1Q= Subject key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2CAEADDCFC70A8BCCB7BBAF89EECED8AB8AEF8A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft caRepository: rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 21:25:06 +0000 Certificate not after: Wed 04 Mar 2026 21:30:06 +0000 Subordinate resources: AS: 266338 IP: 170.238.184.0/22 IP: 2804:3644::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ae:ad:dc:fc:70:a8:bc:cb:7b:ba:f8:9e:ec:ed:8a:b8:ae:f8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 21:25:06 2025 GMT Not After : Mar 4 21:30:06 2026 GMT Subject: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:08:86:ea:70:23:c6:d3:bf:35:33:88:d7:e7: e8:ce:d1:b0:0d:bd:7f:7a:64:f4:30:9a:66:22:e9: 15:df:a7:d7:df:41:10:af:9f:85:92:55:bc:4a:4c: 29:34:4e:1f:09:f9:b5:34:22:71:2b:21:02:86:e9: 0c:9d:24:34:ab:91:97:e5:f3:4c:64:57:90:6b:56: 08:e2:d6:21:b6:d0:c8:14:67:73:c9:3d:c1:1b:0d: 11:3c:a0:a8:20:c4:5c:91:7e:0f:e2:35:63:e4:12: 4c:37:19:4a:1a:a2:9d:fb:70:99:74:3f:47:99:21: 14:0a:20:f8:c1:08:a7:40:67:fe:04:22:d6:20:a8: 8c:f5:7b:ac:f4:f9:77:28:01:62:e6:31:f6:e7:25: b9:d0:bb:04:d4:42:76:e2:1c:54:22:95:91:b5:00: 26:b5:56:82:d8:e5:f8:e1:4b:69:84:a8:05:8d:08: 28:e7:d4:82:3e:de:96:b6:bb:f8:68:18:5d:41:7b: 92:cc:9f:08:c5:32:25:68:31:2f:20:8a:37:37:e8: 5e:f1:2f:a3:66:86:20:e6:00:02:b8:4a:56:09:ee: 12:25:ed:0a:a1:dd:4b:a2:14:d2:48:55:0a:6c:82: ba:31:d4:e7:0c:1f:e2:a0:1d:9d:aa:51:51:32:65: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.184.0/22 IPv6: 2804:3644::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266338 Signature Algorithm: sha256WithRSAEncryption 59:28:0d:50:c1:3d:38:42:91:52:0f:b1:2a:78:75:21:89:1b: e3:cb:8b:7e:34:a5:5c:b4:0a:9a:ad:46:cc:38:51:f4:f9:31: ae:3d:09:aa:dc:1b:1b:c3:b6:7e:de:0c:15:f6:8e:d6:52:de: 44:9c:74:d1:c4:47:15:cc:d0:52:84:28:90:7e:1b:69:d8:2a: 6a:2c:33:67:d4:45:03:9a:bb:47:cc:02:56:93:e7:8e:e5:bd: 0c:b9:a9:aa:84:c8:c9:ea:ee:f8:7c:bf:b1:20:48:68:c3:99: af:05:55:48:04:7f:b0:c7:0b:0b:6b:c8:23:87:62:30:61:44: f5:d6:f4:d3:46:40:b3:93:32:3b:da:05:0e:a1:9d:ad:0c:ea: 90:92:08:75:fb:5f:19:ad:31:21:3c:27:14:c6:0d:c2:21:30: 69:a2:cf:12:84:01:72:ca:45:bd:c2:0f:cc:d0:4d:07:92:3c: 6f:21:75:85:fe:0a:6c:e4:f4:84:3a:c4:1d:9e:f3:3a:5a:ae: e2:e3:bd:cc:81:92:c3:88:14:ef:e3:c7:82:55:6c:37:f6:00: b8:90:5b:55:ec:eb:48:08:7f:f2:46:20:8d:0e:91:a6:16:48: cc:82:7b:83:36:36:15:0e:9c:e4:04:ce:06:68:b8:85:f4:03: 8e:30:5d:db -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULK6t3PxwqLzLe7r4nuztiriu+KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUyMTI1MDZaFw0yNjAzMDQyMTMwMDZaMDMxMTAvBgNV BAMTKDRFRTBBQTM5RTU2NzMyMDVCNjE1QjEzMzdDMjRFODZGQkNEM0M2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0CIbqcCPG0781M4jX5+jO0bAN vX96ZPQwmmYi6RXfp9ffQRCvn4WSVbxKTCk0Th8J+bU0InErIQKG6QydJDSrkZfl 80xkV5BrVgji1iG20MgUZ3PJPcEbDRE8oKggxFyRfg/iNWPkEkw3GUoaop37cJl0 P0eZIRQKIPjBCKdAZ/4EItYgqIz1e6z0+XcoAWLmMfbnJbnQuwTUQnbiHFQilZG1 ACa1VoLY5fjhS2mEqAWNCCjn1II+3pa2u/hoGF1Be5LMnwjFMiVoMS8gijc36F7x L6NmhiDmAAK4SlYJ7hIl7Qqh3UuiFNJIVQpsgrox1OcMH+KgHZ2qUVEyZdLdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRO4Ko55WcyBbYV sTN8JOhvvNPGNTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ002 MVlYNDhGeHZxOVVUSzU3YUdRNVpmaEsxajhwamlvaHBVS05wZWtINTUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NN NjFZWDQ4Rnh2cTlVVEs1N2FHUTVaZmhLMWo4cGppb2hwVUtOcGVrSDU1LzEvNEVF MEFBMzlFNTY3MzIwNUI2MTVCMTMzN0MyNEU4NkZCQ0QzQzYzNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqu64MA0EAgACMAcDBQAoBDZEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQYjANBgkqhkiG9w0BAQsFAAOCAQEAWSgNUME9OEKRUg+x Knh1IYkb48uLfjSlXLQKmq1GzDhR9Pkxrj0JqtwbG8O2ft4MFfaO1lLeRJx00cRH FczQUoQokH4badgqaiwzZ9RFA5q7R8wCVpPnjuW9DLmpqoTIyeru+Hy/sSBIaMOZ rwVVSAR/sMcLC2vII4diMGFE9db000ZAs5MyO9oFDqGdrQzqkJIIdftfGa0xITwn FMYNwiEwaaLPEoQBcspFvcIPzNBNB5I8byF1hf4KbOT0hDrEHZ7zOlqu4uO9zIGS w4gU7+PHglVsN/YAuJBbVezrSAh/8kYgjQ6RphZIzIJ7gzY2FQ6c5ATOBmi4hfQD jjBd2w== -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:51 2025 by rpki-client