$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.cer File: 63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.cer (raw, json) Hash identifier: cOjru6F/oRhP6quVWvAe3UXxB71S172rEGuy7EKunK0= Subject key identifier: 63:CB:F6:0A:F0:95:01:B6:1A:E4:A7:8C:98:5B:DC:C1:DE:3E:48:3D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5BA66A150555AB4C0F8A9F1F6050D9481D6B3F0B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.mft caRepository: rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 18 Feb 2025 10:06:07 +0000 Certificate not after: Tue 17 Feb 2026 10:11:07 +0000 Subordinate resources: AS: 262805 IP: 177.128.92.0/22 IP: 186.250.40.0/21 IP: 186.250.104.0/21 IP: 2804:74c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a6:6a:15:05:55:ab:4c:0f:8a:9f:1f:60:50:d9:48:1d:6b:3f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 18 10:06:07 2025 GMT Not After : Feb 17 10:11:07 2026 GMT Subject: CN=63CBF60AF09501B61AE4A78C985BDCC1DE3E483D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:e0:c5:58:f5:14:09:90:e3:79:81:44:30: 15:60:84:4b:39:85:37:47:d7:0a:e9:37:3f:f8:5c: 77:45:a6:c9:1a:dd:26:f9:07:06:dc:1d:b1:e3:02: 68:83:1c:f7:46:c1:da:cf:34:b8:51:e6:a8:a4:ef: f1:55:b9:27:fb:8e:f4:86:79:d2:ba:1c:a8:66:83: bc:3c:73:fa:c9:a5:c8:91:d6:e9:00:90:74:ff:53: d1:88:10:d6:29:81:f8:11:db:23:5a:e8:86:e8:69: e8:ad:27:95:b3:b9:92:15:d1:31:f5:a3:1e:3c:b0: 16:d8:a6:f2:dc:6c:67:62:53:fc:10:ff:0e:d3:df: f1:23:e5:6e:f0:21:c2:ab:96:56:a4:0f:30:c3:33: 1f:99:d6:62:17:31:95:84:aa:db:a7:24:21:a5:57: d5:92:1b:87:cb:b2:8c:d1:5d:2b:b2:f5:d0:3b:1c: 23:43:3d:54:3b:f1:e3:19:79:1d:af:57:e6:0c:4d: 9e:99:55:76:ba:4b:7b:f3:8a:c5:af:f9:be:63:3f: 2a:a2:96:66:df:92:94:bc:9b:08:87:89:76:ee:b9: 74:bf:f5:b2:8c:37:cc:55:7a:6d:c7:1e:25:ef:8b: 24:f6:50:ca:4c:bf:02:4d:7d:b3:0d:7b:76:ab:8a: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:CB:F6:0A:F0:95:01:B6:1A:E4:A7:8C:98:5B:DC:C1:DE:3E:48:3D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/63CBF60AF09501B61AE4A78C985BDCC1DE3E483D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.92.0/22 186.250.40.0/21 186.250.104.0/21 IPv6: 2804:74c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262805 Signature Algorithm: sha256WithRSAEncryption 9b:58:6a:b5:95:1f:15:d9:e8:72:09:06:89:89:f8:9d:e3:b1: 9c:f7:11:50:16:da:c9:ec:8f:31:bb:08:3e:55:7a:c8:58:45: eb:05:0d:a7:63:71:60:0b:1c:66:a3:57:3b:0d:00:e4:20:be: 91:fe:fd:c3:0d:ac:4d:06:bb:43:45:8b:99:28:ff:9f:53:65: 87:b6:ab:f8:80:69:df:e7:fd:05:88:86:76:70:14:22:00:1d: 76:bc:b0:33:ed:54:a7:29:7e:b0:b6:ee:b9:4b:51:26:02:4f: 22:47:5b:9d:98:35:bb:21:ef:59:59:4d:07:c1:ec:bd:f9:ab: 17:2d:2b:09:e3:c9:e7:7e:01:d1:44:1e:a5:98:69:1c:30:a4: 81:c2:5f:c8:89:56:03:84:80:70:b9:70:85:2e:aa:39:00:45: 47:76:5d:47:5c:ae:57:35:24:ff:77:74:ea:13:a1:4f:fd:37: 14:e7:90:fa:89:9c:44:e9:19:6e:23:8b:7e:b9:35:d5:30:bf: e2:67:37:34:d3:d4:16:45:51:3a:91:d5:d2:26:12:b7:94:17: 8e:ac:22:8a:90:ed:9a:72:3f:7d:8e:da:00:b6:7e:d1:ef:c0: 46:da:e3:8b:1f:23:76:f6:6f:c9:3b:c9:a6:44:0c:55:68:a0: ec:52:1c:e8 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUW6ZqFQVVq0wPip8fYFDZSB1rPwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTgxMDA2MDdaFw0yNjAyMTcxMDExMDdaMDMxMTAvBgNV BAMTKDYzQ0JGNjBBRjA5NTAxQjYxQUU0QTc4Qzk4NUJEQ0MxREUzRTQ4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5+DFWPUUCZDjeYFEMBVghEs5 hTdH1wrpNz/4XHdFpska3Sb5BwbcHbHjAmiDHPdGwdrPNLhR5qik7/FVuSf7jvSG edK6HKhmg7w8c/rJpciR1ukAkHT/U9GIENYpgfgR2yNa6IboaeitJ5WzuZIV0TH1 ox48sBbYpvLcbGdiU/wQ/w7T3/Ej5W7wIcKrllakDzDDMx+Z1mIXMZWEqtunJCGl V9WSG4fLsozRXSuy9dA7HCNDPVQ78eMZeR2vV+YMTZ6ZVXa6S3vzisWv+b5jPyqi lmbfkpS8mwiHiXbuuXS/9bKMN8xVem3HHiXviyT2UMpMvwJNfbMNe3ariqffAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjy/YK8JUBthrk p4yYW9zB3j5IPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRU1k d2tVVEdhcVpLSFVwOXdCZEsxeGt4TFRocnI0ZXhGTWtEV29KZk51Y3kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VN ZHdrVVRHYXFaS0hVcDl3QmRLMXhreExUaHJyNGV4Rk1rRFdvSmZOdWN5LzAvNjND QkY2MEFGMDk1MDFCNjFBRTRBNzhDOTg1QkRDQzFERTNFNDgzRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCsYBcAwQDuvooAwQDuvpoMA0EAgACMAcDBQAoBAdM MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQClTANBgkqhkiG9w0BAQsFAAOCAQEA m1hqtZUfFdnocgkGiYn4neOxnPcRUBbayeyPMbsIPlV6yFhF6wUNp2NxYAscZqNX Ow0A5CC+kf79ww2sTQa7Q0WLmSj/n1Nlh7ar+IBp3+f9BYiGdnAUIgAddrywM+1U pyl+sLbuuUtRJgJPIkdbnZg1uyHvWVlNB8HsvfmrFy0rCePJ534B0UQepZhpHDCk gcJfyIlWA4SAcLlwhS6qOQBFR3ZdR1yuVzUk/3d06hOhT/03FOeQ+omcROkZbiOL frk11TC/4mc3NNPUFkVROpHV0iYSt5QXjqwiipDtmnI/fY7aALZ+0e/ARtrjix8j dvZvyTvJpkQMVWig7FIc6A== -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:56 2025 by rpki-client