$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer File: 598DA71AEBD137B402470BB062F68BE6315A8ABF.cer (raw, json) Hash identifier: 6EDIDiZP8MxDBqBQrsAAdMdzmKE6A9q0AagliTgzgbw= Subject key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0C443E7DA117DD50FE3B7731EBE04B72A22CC440 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft caRepository: rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 23:40:55 +0000 Certificate not after: Thu 05 Mar 2026 23:45:55 +0000 Subordinate resources: AS: 264042 IP: 143.137.152.0/22 IP: 2804:29e4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:44:3e:7d:a1:17:dd:50:fe:3b:77:31:eb:e0:4b:72:a2:2c:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 23:40:55 2025 GMT Not After : Mar 5 23:45:55 2026 GMT Subject: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:70:0d:69:e9:38:52:8a:03:28:91:93:67: 39:08:71:39:99:1b:96:cb:2b:46:85:c1:bb:a1:75: 9d:ed:81:b4:90:28:4d:37:66:78:16:b3:24:cb:24: 25:d1:0b:c1:6d:35:7c:a5:61:e4:b0:28:75:50:f6: 11:b1:d5:a0:43:39:fa:11:8f:18:72:76:41:07:b9: 95:d6:ed:23:70:ea:f2:4c:25:1c:b9:cf:23:4a:ca: 80:07:1a:d3:02:b0:d0:e9:13:6a:2f:d7:e6:d4:d7: 33:bd:f6:8c:74:44:01:ca:02:74:6e:d5:aa:fa:9d: 57:4a:1c:fe:e3:35:4d:b3:87:90:84:1e:46:c9:04: a2:9c:09:4c:b9:34:b7:98:13:2a:e6:a9:4b:fb:69: e6:67:8f:58:9d:d6:29:8e:25:24:89:38:53:f6:f6: 30:88:e9:6c:b3:18:81:ff:ed:c6:9f:90:51:01:69: be:8d:14:8c:ce:d6:8b:7c:e2:9b:a0:42:6e:a6:37: 1f:62:e6:1d:d9:a0:b1:e9:6f:0f:4a:6e:f1:2a:98: bc:39:2f:be:41:2d:d4:30:00:cd:7a:9a:e3:ec:22: b2:a1:3c:36:e1:58:8f:c0:e9:58:7c:ce:cc:10:26: 4d:f0:13:fe:4c:2e:d2:22:5f:dc:e4:f1:b6:83:b5: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.152.0/22 IPv6: 2804:29e4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264042 Signature Algorithm: sha256WithRSAEncryption cd:59:dc:21:04:af:55:a0:0b:c6:22:24:ab:41:7b:ca:e2:6e: fb:17:a7:4a:b8:e0:d3:46:c9:47:bd:11:9f:81:c9:f3:99:c0: 63:94:3d:26:ae:e8:78:18:b5:af:19:70:6c:7a:0e:4f:fc:52: c6:17:63:e4:8f:fa:70:01:1b:4a:ac:4d:13:d3:2a:eb:d0:d2: af:49:96:07:2e:ae:db:be:62:aa:02:e0:f2:28:fe:bc:6c:a0: 4a:0d:c4:73:f3:2d:a9:a3:87:8f:c1:6d:1f:ef:a8:b2:b3:3e: 91:8e:c4:8e:4e:81:a5:be:7c:ab:4c:c4:1e:66:ae:b4:cf:e7: 0c:79:19:6c:ae:e6:7c:02:a6:c5:29:ff:de:00:d2:31:fd:1f: 9c:e0:18:c6:83:13:38:e4:d1:8f:43:ef:00:e7:4e:91:50:df: 70:e8:f8:52:68:39:2f:84:77:e7:3b:26:ac:b7:43:75:a3:03: 75:88:18:90:bd:2d:20:8e:81:5f:b0:8e:28:95:da:47:ac:61: 67:32:55:09:1b:72:9c:9d:0e:08:5b:fc:71:a5:8a:f3:3a:9f: 9a:d9:12:8b:9b:9a:8b:e7:4f:96:67:a0:98:e4:02:65:f2:aa: 20:ea:3d:d1:43:13:27:89:50:f7:87:a8:be:3f:5a:9d:f0:62: b0:ab:92:12 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDEQ+faEX3VD+O3cx6+BLcqIsxEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMzQwNTVaFw0yNjAzMDUyMzQ1NTVaMDMxMTAvBgNV BAMTKDU5OERBNzFBRUJEMTM3QjQwMjQ3MEJCMDYyRjY4QkU2MzE1QThBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMHANaek4UooDKJGTZzkIcTmZ G5bLK0aFwbuhdZ3tgbSQKE03ZngWsyTLJCXRC8FtNXylYeSwKHVQ9hGx1aBDOfoR jxhydkEHuZXW7SNw6vJMJRy5zyNKyoAHGtMCsNDpE2ov1+bU1zO99ox0RAHKAnRu 1ar6nVdKHP7jNU2zh5CEHkbJBKKcCUy5NLeYEyrmqUv7aeZnj1id1imOJSSJOFP2 9jCI6WyzGIH/7cafkFEBab6NFIzO1ot84pugQm6mNx9i5h3ZoLHpbw9KbvEqmLw5 L75BLdQwAM16muPsIrKhPDbhWI/A6Vh8zswQJk3wE/5MLtIiX9zk8baDtbblAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZjaca69E3tAJH C7Bi9ovmMVqKvzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXFa RzdMZ01makVSamZiNDNjMzE4akg1dlBpeWoySzRTMUpnZFlTRGtRWmIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vx Wkc3TGdNZmpFUmpmYjQzYzMxOGpINXZQaXlqMks0UzFKZ2RZU0RrUVpiLzEvNTk4 REE3MUFFQkQxMzdCNDAyNDcwQkIwNjJGNjhCRTYzMTVBOEFCRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj4mYMA0EAgACMAcDBQAoBCnkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHajANBgkqhkiG9w0BAQsFAAOCAQEAzVncIQSvVaALxiIk q0F7yuJu+xenSrjg00bJR70Rn4HJ85nAY5Q9Jq7oeBi1rxlwbHoOT/xSxhdj5I/6 cAEbSqxNE9Mq69DSr0mWBy6u275iqgLg8ij+vGygSg3Ec/MtqaOHj8FtH++osrM+ kY7Ejk6Bpb58q0zEHmautM/nDHkZbK7mfAKmxSn/3gDSMf0fnOAYxoMTOOTRj0Pv AOdOkVDfcOj4Umg5L4R35zsmrLdDdaMDdYgYkL0tII6BX7COKJXaR6xhZzJVCRty nJ0OCFv8caWK8zqfmtkSi5uai+dPlmegmOQCZfKqIOo90UMTJ4lQ94eovj9anfBi sKuSEg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:44 2025 by rpki-client