$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer File: 512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.cer (raw, json) Hash identifier: Tw+Fh/rHY8gFDh9+MPFqqNgahbNixsTZKVPDIlEPegg= Subject key identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E022307603995806F24335548BA03CDBFECCA27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft caRepository: rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 23:20:50 +0000 Certificate not after: Thu 05 Mar 2026 23:25:50 +0000 Subordinate resources: AS: 266607 IP: 45.7.192.0/22 IP: 2804:3e94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:02:23:07:60:39:95:80:6f:24:33:55:48:ba:03:cd:bf:ec:ca:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 23:20:50 2025 GMT Not After : Mar 5 23:25:50 2026 GMT Subject: CN=512D0D56D1561B4AFE3C13FF6432B23FB5B38C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:c5:eb:b5:e8:8e:fd:e8:29:a7:07:1c:f0: fb:80:a2:a2:40:7e:dc:65:e1:72:e7:81:db:39:f6: de:9d:3a:9c:2e:8e:66:6b:a1:a0:1a:be:fc:da:a2: 53:1b:be:c9:19:e9:95:ef:60:78:d7:2f:9c:66:45: 6c:47:9a:d9:b8:20:bd:a7:be:fd:5c:ee:f9:7c:8c: e9:db:30:73:a5:fe:76:ee:8a:61:19:3c:26:0b:9a: b3:ba:1f:dd:b1:dc:f1:d5:e6:f8:73:9a:7d:43:19: 2c:14:3c:98:52:78:b5:ff:ee:57:d6:8a:dd:e9:47: 67:ec:a7:7c:17:7c:dd:fb:bd:20:58:d4:fe:b3:e2: 96:3b:e6:7c:02:1f:d8:a7:51:1f:f4:1b:1e:ba:53: 64:99:7f:24:c9:7b:aa:5e:0a:75:2b:77:61:73:b6: 24:d7:b5:fc:22:8e:8f:56:30:3d:b5:fd:89:30:9b: 75:0d:84:07:0e:2a:32:7a:06:46:18:3e:c8:81:8f: 4c:34:ba:c4:11:bd:87:46:91:74:5c:27:f9:9a:1f: d2:b0:4e:8d:93:bc:c4:58:5e:79:0f:e9:82:2f:1d: 33:23:29:c2:b8:5e:81:f5:50:8e:54:3a:85:2f:0d: 0a:dc:87:4d:99:d3:00:95:9e:d5:9c:8d:dc:2d:24: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:2D:0D:56:D1:56:1B:4A:FE:3C:13:FF:64:32:B2:3F:B5:B3:8C:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/1/512D0D56D1561B4AFE3C13FF6432B23FB5B38C51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.192.0/22 IPv6: 2804:3e94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266607 Signature Algorithm: sha256WithRSAEncryption 9a:40:cc:6e:86:80:9a:d3:15:07:71:2d:18:b9:44:56:68:80: ee:9d:87:b8:d3:94:48:ca:38:f9:72:fd:5f:4e:73:ce:94:4c: 52:7e:02:8e:5d:81:7f:f6:33:be:33:4f:0b:95:1d:7e:49:9d: f1:dc:ca:78:17:bb:73:ec:d3:bb:bb:09:fc:e6:ad:16:72:49: e8:4d:86:34:33:ec:7e:78:89:5b:04:ca:46:ca:26:01:ca:02: 88:83:be:cd:a3:86:6c:b8:08:e2:73:60:83:c7:1c:65:7a:62: 49:47:e2:7b:81:e8:00:80:20:00:42:99:58:62:8a:86:7c:f2: 32:a9:31:7c:1e:a2:5c:7f:36:f5:50:59:92:86:ab:9f:7c:79: 31:d3:a2:0e:b9:92:06:0a:1d:96:37:ee:8e:25:07:cf:45:f6: 2c:cb:81:21:db:4d:36:c8:2c:a9:91:85:2f:d8:ef:95:ea:2f: 1b:57:a6:b8:bb:d6:77:c2:43:85:39:d7:d9:7e:24:12:90:84: 96:de:a3:52:ae:6f:81:b1:e7:e6:7f:e6:9e:c9:ae:d2:7d:59: 4c:30:3e:c2:a4:79:6a:b5:ce:15:b7:1e:bc:de:d2:6d:49:72: 4d:7b:e2:a4:6e:e5:6f:d8:25:4e:d0:e0:6c:03:f9:42:09:bf: 12:cc:48:f0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDgIjB2A5lYBvJDNVSLoDzb/syicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMzIwNTBaFw0yNjAzMDUyMzI1NTBaMDMxMTAvBgNV BAMTKDUxMkQwRDU2RDE1NjFCNEFGRTNDMTNGRjY0MzJCMjNGQjVCMzhDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ssXrteiO/egppwcc8PuAoqJA ftxl4XLngds59t6dOpwujmZroaAavvzaolMbvskZ6ZXvYHjXL5xmRWxHmtm4IL2n vv1c7vl8jOnbMHOl/nbuimEZPCYLmrO6H92x3PHV5vhzmn1DGSwUPJhSeLX/7lfW it3pR2fsp3wXfN37vSBY1P6z4pY75nwCH9inUR/0Gx66U2SZfyTJe6peCnUrd2Fz tiTXtfwijo9WMD21/Ykwm3UNhAcOKjJ6BkYYPsiBj0w0usQRvYdGkXRcJ/maH9Kw To2TvMRYXnkP6YIvHTMjKcK4XoH1UI5UOoUvDQrch02Z0wCVntWcjdwtJI/5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRLQ1W0VYbSv48 E/9kMrI/tbOMUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXc0 RmQydjRzUTN4d210VkNWS2RpWnpzcHJWb2tmVGtLWERKOUpCWmVUaHAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V3 NEZkMnY0c1EzeHdtdFZDVktkaVp6c3ByVm9rZlRrS1hESjlKQlplVGhwLzEvNTEy RDBENTZEMTU2MUI0QUZFM0MxM0ZGNjQzMkIyM0ZCNUIzOEM1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQfAMA0EAgACMAcDBQAoBD6UMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRbzANBgkqhkiG9w0BAQsFAAOCAQEAmkDMboaAmtMVB3Et GLlEVmiA7p2HuNOUSMo4+XL9X05zzpRMUn4Cjl2Bf/YzvjNPC5Udfkmd8dzKeBe7 c+zTu7sJ/OatFnJJ6E2GNDPsfniJWwTKRsomAcoCiIO+zaOGbLgI4nNgg8ccZXpi SUfie4HoAIAgAEKZWGKKhnzyMqkxfB6iXH829VBZkoarn3x5MdOiDrmSBgodljfu jiUHz0X2LMuBIdtNNsgsqZGFL9jvleovG1emuLvWd8JDhTnX2X4kEpCElt6jUq5v gbHn5n/mnsmu0n1ZTDA+wqR5arXOFbcevN7SbUlyTXvipG7lb9glTtDgbAP5Qgm/ EsxI8A== -----END CERTIFICATE-----Generated at Sat Apr 5 00:06:18 2025 by rpki-client