$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer File: 63D0CD7989A27283F0FE9C2C9601426AC969B1D3.cer (raw, json) Hash identifier: gUQe8cAA9ZIiO7L32+kYuW7HLRF++IIxGPw5UkQfPuE= Subject key identifier: 63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58931EDC3C9352CC124EE01DE22B622FD450F5AB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.mft caRepository: rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Feb 2025 12:51:16 +0000 Certificate not after: Mon 09 Feb 2026 12:56:16 +0000 Subordinate resources: AS: 271207 IP: 179.42.136.0/22 IP: 2804:77e8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:93:1e:dc:3c:93:52:cc:12:4e:e0:1d:e2:2b:62:2f:d4:50:f5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 10 12:51:16 2025 GMT Not After : Feb 9 12:56:16 2026 GMT Subject: CN=63D0CD7989A27283F0FE9C2C9601426AC969B1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:42:59:88:93:5f:e0:cb:6a:74:5a:7b:31: 25:dc:fb:a3:79:a0:ea:c6:24:e5:1a:28:be:f0:f6: 12:3b:99:06:c2:b9:6f:f1:5d:97:09:a2:27:e7:19: 52:21:e3:83:e4:22:69:47:ee:a3:d7:32:91:ac:15: 57:a4:0f:f4:35:74:c5:47:4c:8f:4e:7b:22:30:a0: fe:e2:e2:5a:b3:13:42:8d:38:03:c0:1a:4f:29:cd: 49:5b:25:05:8c:21:df:e6:a6:73:ba:d8:40:d0:9b: ac:a7:2d:03:be:22:7b:4d:5e:21:5b:75:9f:47:69: 59:0e:6d:7b:ed:b2:9e:d4:06:0f:84:28:19:51:e0: e1:0d:3c:51:22:82:42:ee:29:27:31:47:a0:c0:17: 41:91:1e:11:07:16:fd:38:73:e7:aa:82:ef:da:ee: 36:a8:dc:90:7f:92:bc:4a:90:d1:89:33:36:dc:29: 43:42:3f:24:be:37:86:62:a0:13:3d:2a:70:b8:14: cc:19:3a:09:c7:75:45:e7:06:a7:50:46:63:ba:46: a1:fa:17:37:ec:2e:2f:be:74:55:56:ea:a3:d1:72: 39:4c:5b:a4:ce:62:04:53:92:5e:55:9c:cc:9e:fe: 41:fe:4d:f5:a3:65:08:77:b5:ca:17:a4:97:2a:09: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:D0:CD:79:89:A2:72:83:F0:FE:9C:2C:96:01:42:6A:C9:69:B1:D3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/63D0CD7989A27283F0FE9C2C9601426AC969B1D3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.42.136.0/22 IPv6: 2804:77e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271207 Signature Algorithm: sha256WithRSAEncryption d0:53:96:3b:7b:59:92:c8:1a:71:cc:59:ee:67:75:81:74:1b: db:c6:96:08:5c:4c:f9:fe:52:3a:13:af:ba:92:61:aa:b2:0a: 36:c3:86:c4:ff:7c:9e:83:96:91:71:a2:30:29:3d:5e:f6:bb: 40:bd:b9:d3:15:e0:7d:d0:01:0f:61:a9:13:26:d4:92:44:a3: f1:10:2f:7d:0e:64:64:7c:5a:b4:a9:c7:f7:28:82:2f:ac:d2: c0:4b:8f:0f:80:1a:f0:4e:a3:fb:7d:3e:60:fa:4a:a7:73:e3: 69:4d:70:5f:4e:e9:fe:ab:a3:37:c2:42:1a:c0:c6:84:c6:ff: 98:84:71:55:aa:70:b8:50:66:37:29:a2:17:6f:7f:8f:e0:c0: 4e:6a:46:18:57:68:18:31:b5:c6:c2:ba:21:e5:1e:1b:b6:b4: 70:06:1f:da:82:17:f0:63:ff:33:e6:ce:94:40:68:f9:0d:ea: ad:2e:a6:e2:94:54:08:2b:a3:9b:14:d0:01:98:95:29:47:e2: 9b:a9:09:96:ab:bb:f3:46:d7:fd:00:dd:2d:72:49:3c:5f:3c: 69:dd:1e:50:83:8f:07:5b:35:34:eb:ab:83:91:da:59:9b:48: 5d:7d:6f:14:be:a5:1f:0b:47:f6:e6:f8:61:42:69:65:31:1a: 91:01:54:34 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWJMe3DyTUswSTuAd4itiL9RQ9aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTAxMjUxMTZaFw0yNjAyMDkxMjU2MTZaMDMxMTAvBgNV BAMTKDYzRDBDRDc5ODlBMjcyODNGMEZFOUMyQzk2MDE0MjZBQzk2OUIxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmX0JZiJNf4MtqdFp7MSXc+6N5 oOrGJOUaKL7w9hI7mQbCuW/xXZcJoifnGVIh44PkImlH7qPXMpGsFVekD/Q1dMVH TI9OeyIwoP7i4lqzE0KNOAPAGk8pzUlbJQWMId/mpnO62EDQm6ynLQO+IntNXiFb dZ9HaVkObXvtsp7UBg+EKBlR4OENPFEigkLuKScxR6DAF0GRHhEHFv04c+eqgu/a 7jao3JB/krxKkNGJMzbcKUNCPyS+N4ZioBM9KnC4FMwZOgnHdUXnBqdQRmO6RqH6 FzfsLi++dFVW6qPRcjlMW6TOYgRTkl5VnMye/kH+TfWjZQh3tcoXpJcqCcy1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRj0M15iaJyg/D+ nCyWAUJqyWmx0zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ205 ZXZlOUxaeHpwRDRid1pYYlE0YlpmRllBY1B6a1pTVjdncTR1RHp4dzYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nt OWV2ZTlMWnh6cEQ0YndaWGJRNGJaZkZZQWNQemtaU1Y3Z3E0dUR6eHc2LzAvNjNE MENENzk4OUEyNzI4M0YwRkU5QzJDOTYwMTQyNkFDOTY5QjFEMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsyqIMA0EAgACMAcDBQAoBHfoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjZzANBgkqhkiG9w0BAQsFAAOCAQEA0FOWO3tZksgaccxZ 7md1gXQb28aWCFxM+f5SOhOvupJhqrIKNsOGxP98noOWkXGiMCk9Xva7QL250xXg fdABD2GpEybUkkSj8RAvfQ5kZHxatKnH9yiCL6zSwEuPD4Aa8E6j+30+YPpKp3Pj aU1wX07p/qujN8JCGsDGhMb/mIRxVapwuFBmNymiF29/j+DATmpGGFdoGDG1xsK6 IeUeG7a0cAYf2oIX8GP/M+bOlEBo+Q3qrS6m4pRUCCujmxTQAZiVKUfim6kJlqu7 80bX/QDdLXJJPF88ad0eUIOPB1s1NOurg5HaWZtIXX1vFL6lHwtH9ub4YUJpZTEa kQFUNA== -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:49 2025 by rpki-client