$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.cer File: 4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.cer (raw, json) Hash identifier: NHpDwKVwR1AU7h7MXfnjhLUd+VFJJV4YdeINrsa1ZLc= Subject key identifier: 4F:B4:FF:F1:F5:39:1A:17:BF:21:8A:7E:6F:C1:4F:8E:E7:F4:02:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 51946064A6BCE3E731A3D3F72B8E69BAC0CEFFBC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.mft caRepository: rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Jan 2025 14:18:54 +0000 Certificate not after: Fri 16 Jan 2026 14:23:54 +0000 Subordinate resources: AS: 269130 IP: 45.180.40.0/22 IP: 2804:5fe4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Feb 2025 03:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:94:60:64:a6:bc:e3:e7:31:a3:d3:f7:2b:8e:69:ba:c0:ce:ff:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 17 14:18:54 2025 GMT Not After : Jan 16 14:23:54 2026 GMT Subject: CN=4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:e7:37:63:20:96:be:20:e8:a7:77:fa:78: 6a:f3:75:69:cf:51:c2:76:7e:be:1f:72:c8:95:27: d7:40:5c:90:27:80:8b:1c:43:da:df:dc:83:16:0a: c3:cb:db:eb:49:40:42:ce:80:db:a7:ba:e4:8e:b1: 68:5a:25:cc:c1:b2:2f:ec:8b:cf:45:ee:8c:55:e1: 5c:12:6d:22:bd:c5:98:a4:a9:0e:e3:d1:de:f6:fd: 35:36:55:75:2e:0c:8a:07:d1:a1:a5:37:1f:60:90: 55:c3:e1:62:ad:18:1a:f3:0a:2a:58:44:99:20:16: 63:25:a4:f6:cb:70:5c:78:fa:ec:6c:6d:a6:5b:8f: 1d:67:e0:78:9a:9b:4c:67:2c:26:27:40:65:ca:72: 65:c8:5c:1e:37:1e:a2:05:ee:10:0b:3c:a4:e3:7e: 06:3b:ac:33:4d:15:51:60:bf:d5:1a:7f:7d:70:a2: 57:91:23:1d:06:d0:56:79:54:08:91:57:f5:c5:fb: f8:06:b3:6e:08:2f:ab:48:ce:c1:56:cc:ca:a2:42: 0e:3c:62:29:94:c3:c7:81:fb:c0:ee:62:87:30:2c: c0:83:af:f6:92:2a:4e:2e:e4:c8:75:1b:04:63:75: b5:25:ca:92:3f:ac:6e:0a:3e:1a:25:87:74:89:ca: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:B4:FF:F1:F5:39:1A:17:BF:21:8A:7E:6F:C1:4F:8E:E7:F4:02:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.40.0/22 IPv6: 2804:5fe4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269130 Signature Algorithm: sha256WithRSAEncryption 8a:8c:7b:fc:7a:49:66:0e:d3:c3:2d:b0:35:cb:ee:13:2d:fc: 99:2b:e4:d6:3b:46:1b:22:14:3c:da:79:c1:ce:90:ca:ca:90: b4:18:29:19:30:2f:f4:53:81:e4:4f:b1:c4:dc:12:2a:6c:26: 66:1d:70:17:7a:db:af:72:12:88:e7:ed:a5:76:43:1e:e5:ea: e9:13:ad:a3:c9:18:99:2d:bf:2c:8d:3b:dc:1f:cb:d9:3c:e7: bf:83:c4:d6:e8:8f:c9:96:80:32:9e:13:68:0c:05:82:a3:53: aa:ae:0b:8a:c3:50:52:c7:38:cd:05:b4:bc:30:f2:36:e7:f1: 86:c2:f6:8b:00:82:54:75:da:5e:e6:93:75:f4:78:54:ae:25: e6:66:2c:a7:07:10:29:f3:cc:0f:18:66:f9:40:6f:be:e3:d6: 0d:23:be:69:2a:15:ca:07:19:2f:e8:3d:c1:ba:5b:90:1e:f2: 13:0e:74:b6:49:ec:4d:f4:18:4e:66:7e:f9:ec:d5:be:e0:77: 7a:71:83:d9:a6:24:99:23:7a:18:16:de:da:b0:35:42:ca:0b: bb:18:78:d3:0d:02:32:4d:c8:64:2f:f0:ad:16:ae:0f:b7:c9: 7c:be:21:4a:d6:fe:cf:ff:d2:fe:6c:18:34:66:28:77:63:93: 61:17:99:e0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUZRgZKa84+cxo9P3K45pusDO/7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTcxNDE4NTRaFw0yNjAxMTYxNDIzNTRaMDMxMTAvBgNV BAMTKDRGQjRGRkYxRjUzOTFBMTdCRjIxOEE3RTZGQzE0RjhFRTdGNDAyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZec3YyCWviDop3f6eGrzdWnP UcJ2fr4fcsiVJ9dAXJAngIscQ9rf3IMWCsPL2+tJQELOgNunuuSOsWhaJczBsi/s i89F7oxV4VwSbSK9xZikqQ7j0d72/TU2VXUuDIoH0aGlNx9gkFXD4WKtGBrzCipY RJkgFmMlpPbLcFx4+uxsbaZbjx1n4Hiam0xnLCYnQGXKcmXIXB43HqIF7hALPKTj fgY7rDNNFVFgv9Uaf31woleRIx0G0FZ5VAiRV/XF+/gGs24IL6tIzsFWzMqiQg48 YimUw8eB+8DuYocwLMCDr/aSKk4u5Mh1GwRjdbUlypI/rG4KPholh3SJyiQZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPtP/x9TkaF78h in5vwU+O5/QCvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2Qz clh0Q1Nnc3ljYVVNYkFWN3lUdHcxY01OSDN0YWlHelZXaVlSaHdQRnYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dk M3JYdENTZ3N5Y2FVTWJBVjd5VHR3MWNNTkgzdGFpR3pWV2lZUmh3UEZ2LzAvNEZC NEZGRjFGNTM5MUExN0JGMjE4QTdFNkZDMTRGOEVFN0Y0MDJCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbQoMA0EAgACMAcDBQAoBF/kMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbSjANBgkqhkiG9w0BAQsFAAOCAQEAiox7/HpJZg7Twy2w NcvuEy38mSvk1jtGGyIUPNp5wc6QysqQtBgpGTAv9FOB5E+xxNwSKmwmZh1wF3rb r3ISiOftpXZDHuXq6ROto8kYmS2/LI073B/L2Tznv4PE1uiPyZaAMp4TaAwFgqNT qq4LisNQUsc4zQW0vDDyNufxhsL2iwCCVHXaXuaTdfR4VK4l5mYspwcQKfPMDxhm +UBvvuPWDSO+aSoVygcZL+g9wbpbkB7yEw50tknsTfQYTmZ++ezVvuB3enGD2aYk mSN6GBbe2rA1QsoLuxh40w0CMk3IZC/wrRauD7fJfL4hStb+z//S/mwYNGYod2OT YReZ4A== -----END CERTIFICATE-----Generated at Sat Feb 22 04:33:24 2025 by rpki-client