$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer File: 5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.cer (raw, json) Hash identifier: Q7jHBtBMWmr83vBL5T6JzYpYw1j9XiPd3i41c9oAKsI= Subject key identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 56F6C8E11B623DF387E7F7988473DE0A993F013F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft caRepository: rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:56:16 +0000 Certificate not after: Fri 06 Mar 2026 03:01:16 +0000 Subordinate resources: AS: 265953 IP: 164.163.52.0/22 IP: 2804:4058::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f6:c8:e1:1b:62:3d:f3:87:e7:f7:98:84:73:de:0a:99:3f:01:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:56:16 2025 GMT Not After : Mar 6 03:01:16 2026 GMT Subject: CN=5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:44:c6:35:86:6d:7d:80:cf:ed:76:82:b7: 9d:c6:12:bb:7b:d9:11:ad:05:1c:fd:8d:1e:1b:73: bc:d7:4a:5d:22:f7:46:19:6c:af:5d:58:e6:ca:85: 3f:b1:53:d3:28:d1:42:ed:2c:06:b7:32:d8:68:a6: 1a:28:c0:15:ed:bf:c9:d5:8c:04:00:18:d6:0f:9d: f6:b5:c0:b8:1e:13:8a:2f:fe:41:cd:d1:9a:8a:c9: d3:0e:51:42:b2:35:30:9a:3f:2d:ba:ec:7d:2e:01: 8f:30:e0:10:1d:d0:d6:c9:d5:a3:34:0a:7b:2c:a1: 9f:b5:74:6b:66:ef:25:d1:de:7e:43:39:0d:f6:bc: 64:4f:80:f6:80:f4:38:ac:27:8a:95:54:03:40:16: aa:d5:8a:cf:7e:58:91:2f:6f:16:c7:23:ca:8b:68: 48:de:56:29:1e:96:7e:98:08:7d:4a:8e:58:a2:7e: 6c:69:6b:7f:3b:0e:b9:4e:29:8d:4e:84:30:19:2f: bc:2b:05:25:37:01:79:41:6f:8f:fe:8a:64:41:c3: eb:b2:cb:28:dd:55:c3:0d:da:31:c1:c0:c5:ed:ab: 67:f4:a2:3d:fe:47:63:bf:7e:4d:0a:ad:07:cb:42: bd:72:3b:aa:5e:29:71:1e:7e:48:47:ab:d7:95:95: 64:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:F9:55:DC:B3:FA:6C:6B:A7:AE:C3:D8:BC:13:72:70:86:96:B8:ED X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/1/5AF955DCB3FA6C6BA7AEC3D8BC1372708696B8ED.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.52.0/22 IPv6: 2804:4058::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265953 Signature Algorithm: sha256WithRSAEncryption 73:73:15:16:9f:06:8f:81:64:ee:f8:76:90:2b:66:6b:2d:ae: 21:90:c8:8f:c6:28:46:bc:04:8c:af:2e:b3:bd:e1:5e:97:34: 14:32:14:39:25:0e:da:13:b4:87:48:e0:f8:44:e2:83:01:de: b5:30:c9:cc:b8:ed:d9:8a:f2:88:27:1b:6f:40:c2:f9:2d:ab: 7f:aa:f7:2b:4a:40:bd:7a:11:86:14:a2:c6:47:7e:95:fe:44: a4:63:3b:82:36:20:90:84:b7:66:8d:83:30:2a:42:93:30:89: 5b:f0:67:98:c1:9f:cc:de:f9:6f:f4:b8:07:45:10:ad:1c:c9: 87:c5:7d:c4:4d:3d:00:bf:0e:5e:84:01:eb:9d:79:b7:1e:5b: 64:88:0d:c2:c7:d9:55:a2:0b:a1:4e:ea:f6:cb:80:ed:6a:a6: 88:4f:4c:10:ee:4b:62:77:f1:c9:bf:ee:78:92:38:cb:9a:a0: 8c:fe:a1:c1:b1:92:b9:ea:e3:bb:d6:93:f4:f8:18:7f:d7:bc: ed:74:2d:2e:08:da:f2:08:d6:93:4d:14:c0:7d:31:b1:9c:10: 02:a1:32:73:6b:f3:5b:7c:87:e4:19:32:a7:da:29:dd:58:b4: c5:a3:1e:ca:fe:74:77:19:a2:ea:8f:9c:36:d0:df:b3:b0:98: ad:52:d0:91 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUVvbI4RtiPfOH5/eYhHPeCpk/AT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjU2MTZaFw0yNjAzMDYwMzAxMTZaMDMxMTAvBgNV BAMTKDVBRjk1NURDQjNGQTZDNkJBN0FFQzNEOEJDMTM3MjcwODY5NkI4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8kTGNYZtfYDP7XaCt53GErt7 2RGtBRz9jR4bc7zXSl0i90YZbK9dWObKhT+xU9Mo0ULtLAa3MthophoowBXtv8nV jAQAGNYPnfa1wLgeE4ov/kHN0ZqKydMOUUKyNTCaPy267H0uAY8w4BAd0NbJ1aM0 CnssoZ+1dGtm7yXR3n5DOQ32vGRPgPaA9DisJ4qVVANAFqrVis9+WJEvbxbHI8qL aEjeVikeln6YCH1Kjliifmxpa387DrlOKY1OhDAZL7wrBSU3AXlBb4/+imRBw+uy yyjdVcMN2jHBwMXtq2f0oj3+R2O/fk0KrQfLQr1yO6peKXEefkhHq9eVlWT1AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRa+VXcs/psa6eu w9i8E3Jwhpa47TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkpI Y3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4TmQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkpI Y3lLQTQyeXNWNDNqelJSZmZLVlNUM2VTMzl3dGhVRGVjMXc3RlI4TmQvMS81QUY5 NTVEQ0IzRkE2QzZCQTdBRUMzRDhCQzEzNzI3MDg2OTZCOEVELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKkozQwDQQCAAIwBwMFACgEQFgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBA7hMA0GCSqGSIb3DQEBCwUAA4IBAQBzcxUWnwaPgWTu+HaQ K2ZrLa4hkMiPxihGvASMry6zveFelzQUMhQ5JQ7aE7SHSOD4ROKDAd61MMnMuO3Z ivKIJxtvQML5Lat/qvcrSkC9ehGGFKLGR36V/kSkYzuCNiCQhLdmjYMwKkKTMIlb 8GeYwZ/M3vlv9LgHRRCtHMmHxX3ETT0Avw5ehAHrnXm3HltkiA3Cx9lVoguhTur2 y4DtaqaIT0wQ7ktid/HJv+54kjjLmqCM/qHBsZK56uO71pP0+Bh/17ztdC0uCNry CNaTTRTAfTGxnBACoTJza/NbfIfkGTKn2indWLTFox7K/nR3GaLqj5w20N+zsJit UtCR -----END CERTIFICATE-----Generated at Sat Apr 5 00:10:01 2025 by rpki-client