$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5096373658543AD02A3562D6EBE37A8A75AF47A3.cer File: 5096373658543AD02A3562D6EBE37A8A75AF47A3.cer (raw, json) Hash identifier: pqAqEB22JRYZlz1r2UhaY2J68Feq0F5PXzhStPwEH9A= Subject key identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 304C1CDCABF750271F9A36BB75F753F3ECFE5938 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft caRepository: rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 31 Dec 2024 18:12:13 +0000 Certificate not after: Tue 30 Dec 2025 18:17:13 +0000 Subordinate resources: AS: 265899 IP: 45.163.212.0/22 IP: 131.196.16.0/22 IP: 2804:3f88::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4c:1c:dc:ab:f7:50:27:1f:9a:36:bb:75:f7:53:f3:ec:fe:59:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 31 18:12:13 2024 GMT Not After : Dec 30 18:17:13 2025 GMT Subject: CN=5096373658543AD02A3562D6EBE37A8A75AF47A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:c3:9b:e5:03:79:c4:ef:66:f4:00:91:15: 2e:2c:86:fb:51:a7:fc:a5:d3:b4:2b:c1:fd:ce:92: aa:81:00:d4:42:e4:bb:06:4b:65:67:a6:36:09:9b: bf:0c:65:43:a1:db:2d:9b:30:9a:11:f8:ef:b6:8a: 53:30:9c:94:29:a2:de:74:0f:24:42:7a:12:88:6c: 8b:a2:1e:09:fd:db:3e:b6:c1:88:a0:01:18:d0:b8: 61:c4:6b:b8:89:29:e7:97:36:76:9b:4b:cf:2b:44: 68:24:94:24:e9:2b:da:5b:0b:c4:51:16:c1:9c:1f: 59:df:43:51:e7:eb:64:10:fb:bb:e8:5c:c9:cf:3b: 4c:1a:16:d5:a0:5b:1e:78:19:7a:b8:f8:a0:4c:d2: c2:9d:b7:6a:a6:ef:c0:4e:fe:c1:b0:dc:0e:6f:f8: 95:9d:94:ba:7b:9a:21:24:57:81:7d:c3:cb:15:f4: 2d:c2:d3:30:31:28:6e:de:94:8e:2a:64:40:0a:bf: 95:0b:d1:e3:8a:13:a6:f6:e3:aa:98:53:a5:cf:91: 4d:30:f6:2b:70:74:28:d2:b0:e4:46:d9:a3:16:a4: 92:ce:d7:5b:fc:d6:fc:58:9a:a6:2b:c3:55:37:99: 2d:61:5b:a0:a1:60:7a:77:37:c7:0f:58:80:d4:13: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:96:37:36:58:54:3A:D0:2A:35:62:D6:EB:E3:7A:8A:75:AF:47:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25SrbQdoUYNjqkDoEtfbpy7v97F2KZnxTuhHAvf3aJ3w/0/5096373658543AD02A3562D6EBE37A8A75AF47A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.212.0/22 131.196.16.0/22 IPv6: 2804:3f88::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265899 Signature Algorithm: sha256WithRSAEncryption 3f:f8:11:cf:f7:58:ae:a8:04:90:e7:4e:d0:d6:77:2f:98:cb: 62:1e:4a:e2:c0:7b:ec:e9:00:5d:87:de:e4:48:02:2e:1b:93: 37:27:11:52:7c:60:fe:57:ed:09:27:fe:56:47:9f:2a:25:92: 3d:33:f7:27:74:aa:fa:96:c9:17:10:15:2b:05:29:65:f7:51: 99:07:a2:46:89:33:42:8e:b9:d0:49:9a:f7:1a:de:ec:06:79: ad:b8:5d:18:56:d2:b7:d5:6a:c8:e5:9a:9b:0b:6f:52:18:e9: f9:8f:53:2f:8b:12:fd:da:e5:6f:6b:a1:73:e1:d6:04:2a:ba: dc:6c:4a:6f:54:74:79:3a:53:9b:c3:cd:5c:0c:4b:ec:f3:ce: 70:17:58:26:74:a8:ba:ba:36:93:28:f7:27:0b:b0:da:ee:48: f7:05:c1:10:48:d4:21:74:b0:d5:45:d4:43:6d:e6:5e:a7:d4: 00:66:ee:d0:2e:e7:92:f9:42:24:76:ea:e7:82:8a:54:b6:22: 97:28:3c:cc:9b:10:42:12:2d:e8:0b:fa:03:38:54:da:ed:d9: d4:2c:51:16:f2:2d:0e:db:14:79:18:af:90:be:a3:49:24:1c: 29:7f:5e:ac:85:b8:85:71:4c:fb:66:0b:a1:90:f8:55:d9:23: ab:cf:0d:99 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMEwc3Kv3UCcfmja7dfdT8+z+WTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMzExODEyMTNaFw0yNTEyMzAxODE3MTNaMDMxMTAvBgNV BAMTKDUwOTYzNzM2NTg1NDNBRDAyQTM1NjJENkVCRTM3QThBNzVBRjQ3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/MsOb5QN5xO9m9ACRFS4shvtR p/yl07Qrwf3OkqqBANRC5LsGS2VnpjYJm78MZUOh2y2bMJoR+O+2ilMwnJQpot50 DyRCehKIbIuiHgn92z62wYigARjQuGHEa7iJKeeXNnabS88rRGgklCTpK9pbC8RR FsGcH1nfQ1Hn62QQ+7voXMnPO0waFtWgWx54GXq4+KBM0sKdt2qm78BO/sGw3A5v +JWdlLp7miEkV4F9w8sV9C3C0zAxKG7elI4qZEAKv5UL0eOKE6b246qYU6XPkU0w 9itwdCjSsORG2aMWpJLO11v81vxYmqYrw1U3mS1hW6ChYHp3N8cPWIDUE7QnAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRQljc2WFQ60Co1 Ytbr43qKda9HozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMjVT cmJRZG9VWU5qcWtEb0V0ZmJweTd2OTdGMktabnhUdWhIQXZmM2FKM3cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzI1 U3JiUWRvVVlOanFrRG9FdGZicHk3djk3RjJLWm54VHVoSEF2ZjNhSjN3LzAvNTA5 NjM3MzY1ODU0M0FEMDJBMzU2MkQ2RUJFMzdBOEE3NUFGNDdBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaPUAwQCg8QQMA0EAgACMAcDBQAoBD+IMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQOqzANBgkqhkiG9w0BAQsFAAOCAQEAP/gRz/dY rqgEkOdO0NZ3L5jLYh5K4sB77OkAXYfe5EgCLhuTNycRUnxg/lftCSf+VkefKiWS PTP3J3Sq+pbJFxAVKwUpZfdRmQeiRokzQo650Ema9xre7AZ5rbhdGFbSt9VqyOWa mwtvUhjp+Y9TL4sS/drlb2uhc+HWBCq63GxKb1R0eTpTm8PNXAxL7PPOcBdYJnSo uro2kyj3Jwuw2u5I9wXBEEjUIXSw1UXUQ23mXqfUAGbu0C7nkvlCJHbq54KKVLYi lyg8zJsQQhIt6Av6AzhU2u3Z1CxRFvItDtsUeRivkL6jSSQcKX9erIW4hXFM+2YL oZD4Vdkjq88NmQ== -----END CERTIFICATE-----Generated at Thu Feb 20 17:42:39 2025 by rpki-client