$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer File: 683528643A65F1188AB7E1EF5CB5E716A5A13959.cer (raw, json) Hash identifier: E0nB1vNzk0q/pqtmgGnOlhvLyviiSdHGRiiA2va+xOE= Subject key identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2BF14CB25FAA6D2CFC426B78680FC907433D4A53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.mft caRepository: rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Jan 2025 14:41:04 +0000 Certificate not after: Mon 19 Jan 2026 14:46:04 +0000 Subordinate resources: AS: 267440 IP: 192.141.0.0/22 IP: 2804:418c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f1:4c:b2:5f:aa:6d:2c:fc:42:6b:78:68:0f:c9:07:43:3d:4a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 20 14:41:04 2025 GMT Not After : Jan 19 14:46:04 2026 GMT Subject: CN=683528643A65F1188AB7E1EF5CB5E716A5A13959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:59:03:57:6f:ec:7b:98:fa:c5:18:81:ff:39: 37:bb:2e:6e:c9:c5:de:a2:cc:b9:7d:1d:eb:cc:ca: f9:bb:44:8f:5a:af:6c:01:4b:37:51:6d:06:87:cd: bb:51:5b:65:8b:4f:fe:fc:60:f7:06:5f:92:e4:d5: 77:f8:0f:60:08:f8:74:26:91:61:eb:6e:df:87:c2: 73:f1:55:de:44:40:51:19:c6:62:0a:45:6f:ab:e3: c5:18:ec:52:70:90:96:a7:e4:54:f7:40:9d:f7:b2: a7:fd:e9:c5:21:a9:52:45:26:64:2d:87:2c:5d:9e: 2d:de:a1:e0:64:82:2d:53:32:d4:c7:cd:0d:17:e4: 87:b6:26:77:c2:00:4c:8c:1f:4d:c9:c8:46:12:ac: 33:4d:8e:a6:30:73:06:b7:5b:3a:86:49:58:db:83: c1:2e:69:09:30:45:ae:aa:48:fa:bf:a4:05:e2:9e: 30:7e:98:fb:a7:45:a9:1c:01:bf:f1:c9:32:ab:98: 0d:8b:c2:f1:21:c9:df:6c:da:9e:bf:b4:48:ae:20: a5:8b:1c:f8:fd:b7:3a:30:47:ad:7e:7f:28:bc:08: da:29:ea:3d:dc:54:03:a8:fc:96:df:30:97:27:21: 6f:42:ce:53:08:61:a4:76:1b:94:ad:f7:3d:3c:c4: 3f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.0.0/22 IPv6: 2804:418c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267440 Signature Algorithm: sha256WithRSAEncryption a1:56:14:72:29:35:08:cb:92:78:e9:a3:0d:1b:f8:39:b5:af: e6:33:c0:11:aa:3e:f0:42:82:d9:56:72:97:fd:77:02:5f:e3: 26:cc:78:54:67:13:27:db:19:a6:f1:a5:58:1f:bc:91:65:1d: 7d:a7:bd:2b:87:16:c6:61:11:3a:4f:7b:24:9c:29:d7:40:68: f3:ed:2d:ea:eb:4e:c6:73:ae:c1:de:e7:02:cd:13:5e:ea:5c: 12:fb:1b:c8:82:6c:84:c7:2b:d8:27:1d:f3:77:f5:8e:56:02: 3c:ab:07:45:4e:6f:c8:48:89:ae:5b:de:46:4b:03:09:ea:60: f4:0c:c5:9a:db:c3:c2:39:5d:db:d9:c0:47:b7:99:64:e0:ab: 1c:d3:a3:7a:44:72:1e:7c:24:09:99:a4:bd:0f:fe:9a:73:5c: 71:e9:ce:15:74:64:a8:53:ff:64:fb:6c:22:89:e5:60:5b:6c: a0:0c:f8:cd:50:49:44:b7:46:b7:7d:00:91:29:df:6b:75:00: cc:5e:1d:46:7e:fb:62:7a:cb:86:98:39:f8:65:43:e9:8b:bc: 63:02:8e:aa:20:2f:ca:15:5e:0a:c4:8b:57:31:87:95:3f:a0: 5f:4c:d2:c0:e4:9b:1d:d2:52:db:a8:92:fa:d1:d0:5e:d3:73: 06:f5:a9:69 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUK/FMsl+qbSz8Qmt4aA/JB0M9SlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjAxNDQxMDRaFw0yNjAxMTkxNDQ2MDRaMDMxMTAvBgNV BAMTKDY4MzUyODY0M0E2NUYxMTg4QUI3RTFFRjVDQjVFNzE2QTVBMTM5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WQNXb+x7mPrFGIH/OTe7Lm7J xd6izLl9HevMyvm7RI9ar2wBSzdRbQaHzbtRW2WLT/78YPcGX5Lk1Xf4D2AI+HQm kWHrbt+HwnPxVd5EQFEZxmIKRW+r48UY7FJwkJan5FT3QJ33sqf96cUhqVJFJmQt hyxdni3eoeBkgi1TMtTHzQ0X5Ie2JnfCAEyMH03JyEYSrDNNjqYwcwa3WzqGSVjb g8EuaQkwRa6qSPq/pAXinjB+mPunRakcAb/xyTKrmA2LwvEhyd9s2p6/tEiuIKWL HPj9tzowR61+fyi8CNop6j3cVAOo/JbfMJcnIW9CzlMIYaR2G5St9z08xD8RAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoNShkOmXxGIq3 4e9ctecWpaE5WTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzlu SGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3OEEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc5 bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAvNjgz NTI4NjQzQTY1RjExODhBQjdFMUVGNUNCNUU3MTZBNUExMzk1OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCwI0AMA0EAgACMAcDBQAoBEGMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUsDANBgkqhkiG9w0BAQsFAAOCAQEAoVYUcik1CMuSeOmj DRv4ObWv5jPAEao+8EKC2VZyl/13Al/jJsx4VGcTJ9sZpvGlWB+8kWUdfae9K4cW xmEROk97JJwp10Bo8+0t6utOxnOuwd7nAs0TXupcEvsbyIJshMcr2Ccd83f1jlYC PKsHRU5vyEiJrlveRksDCepg9AzFmtvDwjld29nAR7eZZOCrHNOjekRyHnwkCZmk vQ/+mnNccenOFXRkqFP/ZPtsIonlYFtsoAz4zVBJRLdGt30AkSnfa3UAzF4dRn77 YnrLhpg5+GVD6Yu8YwKOqiAvyhVeCsSLVzGHlT+gX0zSwOSbHdJS26iS+tHQXtNz BvWpaQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:20 2025 by rpki-client