$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer File: 5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer (raw, json) Hash identifier: PnoD1a4gdifOIxtgcO6tej1WIFSG7yGQ8E6wAVdUl08= Subject key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A2A6716F6634878C8037F192793D5D853CADAE6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft caRepository: rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Mar 2025 16:56:47 +0000 Certificate not after: Tue 03 Mar 2026 17:01:47 +0000 Subordinate resources: AS: 52962 IP: 177.11.0.0/21 IP: 179.97.48.0/20 IP: 2804:31c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2a:67:16:f6:63:48:78:c8:03:7f:19:27:93:d5:d8:53:ca:da:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 4 16:56:47 2025 GMT Not After : Mar 3 17:01:47 2026 GMT Subject: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:1a:ed:d2:d2:c7:9b:69:35:e6:a9:46:cd: 14:29:83:af:2c:d8:af:79:61:f4:b4:a0:b2:f8:b5: e3:06:a4:d9:7b:b7:f4:37:12:56:7d:cb:ad:8c:63: 12:c2:9a:dd:82:99:19:be:e8:ff:6c:96:34:cc:50: 11:dd:51:a0:ab:84:82:79:0d:cc:93:8b:7d:60:e5: 46:87:00:50:a7:2d:fc:d0:9e:2d:e3:f9:24:4e:f0: 1d:b9:ac:3d:e3:a7:97:4c:e0:97:f7:8d:19:1c:2b: 46:9b:fd:37:89:01:80:4c:81:e9:af:14:7f:ba:04: 15:2a:e9:b1:52:6d:a7:81:c4:47:c4:da:b8:41:65: 3d:7d:49:2d:92:c9:f9:f4:a2:bd:74:92:5b:a3:5c: 36:5a:23:4b:66:de:ba:05:71:82:3b:46:ee:73:6c: 55:d9:5e:11:5f:32:3b:99:20:c2:60:e8:11:40:fa: 9f:a4:83:ab:46:10:f5:79:52:9a:5d:dd:48:87:55: 96:16:bc:76:a6:57:25:ea:4d:5e:9a:2a:32:ec:c5: 9c:8b:72:4a:8e:d1:9f:d8:64:d5:7a:f3:f5:00:36: f9:db:37:83:bc:76:db:b5:37:b5:c0:64:b7:fd:57: 27:42:d6:4a:8f:b5:6c:5e:6d:ed:59:18:fd:bf:0d: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.11.0.0/21 179.97.48.0/20 IPv6: 2804:31c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52962 Signature Algorithm: sha256WithRSAEncryption 50:30:10:eb:f1:bd:61:06:ad:84:29:b5:34:a1:ca:d5:9e:97: dd:d3:75:88:15:e7:18:17:81:8b:50:bf:59:d7:e5:5e:25:47: b1:0a:9a:5f:a3:28:ed:76:d4:6e:b1:cd:da:a3:b0:90:04:3a: 7a:82:cc:08:d7:a1:06:69:5b:cc:c3:f9:62:91:50:92:dc:f0: e4:a5:3e:ee:3e:e2:8a:e5:46:8e:27:ac:d8:ed:59:fc:11:f0: 02:ee:09:94:a4:1b:71:e6:01:46:dd:cf:ea:17:4c:b9:c6:2c: 32:a5:37:9d:5a:9d:be:9e:8d:a3:db:1c:f0:7d:73:85:e2:5a: f2:4c:45:e4:7c:94:cc:0a:2c:85:a6:16:d5:72:05:e4:e6:7a: 0a:4a:af:5f:06:da:c8:c6:d8:39:b9:56:11:1a:3d:c5:10:b1: f4:69:03:47:41:6f:2b:e5:1f:20:46:9f:0e:d0:07:b8:15:4f: 4d:a0:f0:ec:37:3f:c2:c7:78:dd:04:8d:51:85:39:05:fa:55: 15:b8:92:0e:1b:df:d1:8b:6c:fd:65:9d:8c:5a:26:7e:4d:93: 12:71:f0:b3:81:b3:9e:03:6e:8b:b6:67:85:98:2e:5a:86:65: 6b:73:42:79:78:bf:e9:4b:db:c8:1b:b4:27:61:45:e0:3d:e4: 4f:57:84:17 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSipnFvZjSHjIA38ZJ5PV2FPK2uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDQxNjU2NDdaFw0yNjAzMDMxNzAxNDdaMDMxMTAvBgNV BAMTKDVBRUUzOUUwM0EzREFFQTVCNzgxOERGRTdEMjY0NUJDRUNFNEREMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Bxrt0tLHm2k15qlGzRQpg68s 2K95YfS0oLL4teMGpNl7t/Q3ElZ9y62MYxLCmt2CmRm+6P9sljTMUBHdUaCrhIJ5 DcyTi31g5UaHAFCnLfzQni3j+SRO8B25rD3jp5dM4Jf3jRkcK0ab/TeJAYBMgemv FH+6BBUq6bFSbaeBxEfE2rhBZT19SS2Syfn0or10klujXDZaI0tm3roFcYI7Ru5z bFXZXhFfMjuZIMJg6BFA+p+kg6tGEPV5Uppd3UiHVZYWvHamVyXqTV6aKjLsxZyL ckqO0Z/YZNV68/UANvnbN4O8dtu1N7XAZLf9VydC1kqPtWxebe1ZGP2/DXiPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRa7jngOj2upbeB jf59JkW87OTdHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjF3 alZvUFVlUndldURBV2tmZ3o0TkhGZTQ1ejFIRXdmcWlEQWdSRUpEaFIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Yx d2pWb1BVZVJ3ZXVEQVdrZmd6NE5IRmU0NXoxSEV3ZnFpREFnUkVKRGhSLzAvNUFF RTM5RTAzQTNEQUVBNUI3ODE4REZFN0QyNjQ1QkNFQ0U0REQxQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsQsAAwQEs2EwMA0EAgACMAcDBQAoBAMcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDO4jANBgkqhkiG9w0BAQsFAAOCAQEAUDAQ6/G9 YQathCm1NKHK1Z6X3dN1iBXnGBeBi1C/WdflXiVHsQqaX6Mo7XbUbrHN2qOwkAQ6 eoLMCNehBmlbzMP5YpFQktzw5KU+7j7iiuVGjies2O1Z/BHwAu4JlKQbceYBRt3P 6hdMucYsMqU3nVqdvp6No9sc8H1zheJa8kxF5HyUzAoshaYW1XIF5OZ6CkqvXwba yMbYOblWERo9xRCx9GkDR0FvK+UfIEafDtAHuBVPTaDw7Dc/wsd43QSNUYU5BfpV FbiSDhvf0Yts/WWdjFomfk2TEnHws4GzngNui7ZnhZguWoZla3NCeXi/6UvbyBu0 J2FF4D3kT1eEFw== -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:52 2025 by rpki-client