$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/66824A767900C552472395AD8C51458F3693E9E7.cer File: 66824A767900C552472395AD8C51458F3693E9E7.cer (raw, json) Hash identifier: 674gqY2DeYh2iAz5e6ZF/E1j7pkqTpTrsTnGt1CXzXo= Subject key identifier: 66:82:4A:76:79:00:C5:52:47:23:95:AD:8C:51:45:8F:36:93:E9:E7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35CAD5169CEBFDA0FF927093FBC55B56D5B4E33C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.mft caRepository: rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Feb 2025 15:25:11 +0000 Certificate not after: Fri 27 Feb 2026 15:30:11 +0000 Subordinate resources: AS: 268924 IP: 45.176.0.0/22 IP: 2804:5cb0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 22:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ca:d5:16:9c:eb:fd:a0:ff:92:70:93:fb:c5:5b:56:d5:b4:e3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 28 15:25:11 2025 GMT Not After : Feb 27 15:30:11 2026 GMT Subject: CN=66824A767900C552472395AD8C51458F3693E9E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:d9:ce:00:00:40:8b:e2:f5:0c:03:50:4a: 0c:d5:4a:00:ad:b9:f3:c9:83:9e:2a:4c:7c:ab:66: b4:08:89:12:95:0a:6a:4b:f6:82:44:20:69:17:5d: 63:ba:cf:5e:81:a5:fa:a5:a7:da:bd:27:91:8a:fd: ce:d0:4b:4c:ad:ff:ea:30:0c:18:e9:ae:96:cf:29: 57:7a:67:c4:1a:bd:b0:18:00:4f:51:0f:12:c2:6c: a6:76:5d:a0:78:a7:9f:7e:d5:56:e6:2e:58:61:4f: 56:04:3e:01:8b:16:b9:24:2c:b8:5f:68:d5:a8:00: c7:1f:1a:af:ec:7a:69:0d:97:95:85:79:a8:f6:e2: f3:17:1b:36:3a:63:71:6a:6b:cc:9f:80:d4:47:1e: 4e:9a:ee:62:b9:cc:a4:94:ce:aa:67:fb:84:74:b4: a9:39:5d:aa:7d:8e:3d:f5:d7:af:c1:a5:c8:41:31: 09:14:2a:90:76:77:a1:04:bd:85:4e:b6:fa:13:91: f2:b5:b8:ce:22:fe:ad:b1:f8:21:b9:97:46:a5:a2: e9:75:38:7c:c9:dc:e2:34:2b:c7:cf:98:d0:3c:a9: 60:d9:cd:e5:c1:87:32:59:4d:2c:62:23:09:74:75: 8b:4d:a6:cb:a3:f5:04:cc:e5:5f:49:7f:90:52:b4: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:82:4A:76:79:00:C5:52:47:23:95:AD:8C:51:45:8F:36:93:E9:E7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.0.0/22 IPv6: 2804:5cb0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268924 Signature Algorithm: sha256WithRSAEncryption 80:7c:6b:e1:7a:02:ad:8c:f7:51:fd:8a:66:6d:31:c5:f8:74: 0f:f3:e6:ea:82:f7:54:08:ea:e9:43:56:b9:1e:6f:e6:0b:c1: 19:7c:63:68:7d:c8:b2:3e:c4:cf:c7:d6:fb:c9:07:4d:ef:39: b2:97:32:71:06:c1:e7:45:3d:02:40:22:93:83:ce:38:a6:c5: 82:fa:9e:69:5e:08:80:f7:db:d2:c8:29:ee:3c:11:50:cb:67: cc:39:a0:ed:6a:0a:f7:ff:bf:4f:37:11:fd:74:f2:7e:62:e8: 77:d2:a1:1b:ec:19:07:af:a6:10:53:1a:58:89:53:8f:cf:0a: c6:2f:67:7d:9a:00:77:6e:c6:76:32:d2:33:0d:6f:aa:0d:dd: f9:7a:38:6e:4a:b7:70:5b:00:68:70:1e:01:3d:7d:ef:9a:bc: 70:5f:7e:e2:60:be:91:d1:3e:eb:92:e3:99:0f:2d:0a:70:42: 2d:10:d2:a6:bf:a0:70:d3:7e:e5:d6:a8:3b:fb:fa:31:54:e4: 16:04:68:a9:0a:ca:e3:95:83:e6:cf:3e:95:d5:11:ad:ad:0e: f4:bc:97:70:e2:d5:63:c5:53:22:6c:55:08:1f:ef:13:83:f8: 4f:59:fd:4b:39:90:1a:e7:82:41:75:02:bb:9e:e4:5d:ef:86: 24:84:2a:50 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNcrVFpzr/aD/knCT+8VbVtW04zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjgxNTI1MTFaFw0yNjAyMjcxNTMwMTFaMDMxMTAvBgNV BAMTKDY2ODI0QTc2NzkwMEM1NTI0NzIzOTVBRDhDNTE0NThGMzY5M0U5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLNnOAABAi+L1DANQSgzVSgCt ufPJg54qTHyrZrQIiRKVCmpL9oJEIGkXXWO6z16Bpfqlp9q9J5GK/c7QS0yt/+ow DBjprpbPKVd6Z8QavbAYAE9RDxLCbKZ2XaB4p59+1VbmLlhhT1YEPgGLFrkkLLhf aNWoAMcfGq/semkNl5WFeaj24vMXGzY6Y3Fqa8yfgNRHHk6a7mK5zKSUzqpn+4R0 tKk5Xap9jj3116/BpchBMQkUKpB2d6EEvYVOtvoTkfK1uM4i/q2x+CG5l0aloul1 OHzJ3OI0K8fPmNA8qWDZzeXBhzJZTSxiIwl0dYtNpsuj9QTM5V9Jf5BStMWBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmgkp2eQDFUkcj la2MUUWPNpPp5zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTI4 TnJkZHI4WW1Cc0NqY1hKdHVQbUt2NGhweEFkRmhRYUFSbkdKSmdVcHQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUy OE5yZGRyOFltQnNDamNYSnR1UG1LdjRocHhBZEZoUWFBUm5HSkpnVXB0LzAvNjY4 MjRBNzY3OTAwQzU1MjQ3MjM5NUFEOEM1MTQ1OEYzNjkzRTlFNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbAAMA0EAgACMAcDBQAoBFywMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQafDANBgkqhkiG9w0BAQsFAAOCAQEAgHxr4XoCrYz3Uf2K Zm0xxfh0D/Pm6oL3VAjq6UNWuR5v5gvBGXxjaH3Isj7Ez8fW+8kHTe85spcycQbB 50U9AkAik4POOKbFgvqeaV4IgPfb0sgp7jwRUMtnzDmg7WoK9/+/TzcR/XTyfmLo d9KhG+wZB6+mEFMaWIlTj88Kxi9nfZoAd27GdjLSMw1vqg3d+Xo4bkq3cFsAaHAe AT1975q8cF9+4mC+kdE+65LjmQ8tCnBCLRDSpr+gcNN+5daoO/v6MVTkFgRoqQrK 45WD5s8+ldURra0O9LyXcOLVY8VTImxVCB/vE4P4T1n9SzmQGueCQXUCu57kXe+G JIQqUA== -----END CERTIFICATE-----Generated at Wed Apr 9 23:21:52 2025 by rpki-client