$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer File: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer (raw, json) Hash identifier: Dx3/OZozeav6ZtOmrcAYjzOwPwQKbNGZvRT2P+lYL9A= Subject key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 17A4F158F8FBB88F191F4E91726ABB72A4B42570 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft caRepository: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 05:39:01 +0000 Certificate not after: Thu 05 Mar 2026 05:44:01 +0000 Subordinate resources: AS: 264350 IP: 131.108.92.0/22 IP: 2804:1d24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a4:f1:58:f8:fb:b8:8f:19:1f:4e:91:72:6a:bb:72:a4:b4:25:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 05:39:01 2025 GMT Not After : Mar 5 05:44:01 2026 GMT Subject: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:28:f1:55:38:0b:29:99:29:f2:f9:6a:b1:79: bb:ff:0c:db:f5:a2:5c:0f:b3:e3:f1:b9:9c:18:8d: 9f:a8:db:71:08:42:94:fc:17:7d:79:99:fc:23:ab: 2e:56:1c:96:f2:9f:41:3f:10:1b:44:e5:9f:08:21: 41:13:18:91:65:70:88:5b:07:20:5a:96:d0:80:9e: 95:0e:53:62:fa:14:5d:a0:48:f9:6a:a9:25:ee:ae: bc:30:5c:8c:d7:4b:31:d9:bb:58:7a:e5:f6:43:dc: c5:d1:90:3b:07:33:8c:1e:74:fa:04:f8:84:cf:79: 7e:73:f3:59:e6:dc:d8:aa:e6:0b:c0:1f:90:25:b0: 04:80:f3:45:ec:41:f4:0d:9d:b7:8a:b1:79:27:69: 6f:87:1c:2d:cf:ee:b6:07:10:84:31:f3:28:29:90: e2:7e:46:b4:00:2e:0b:da:a9:33:33:54:d3:97:8f: b2:40:34:47:49:5d:ff:34:5b:20:25:2d:7a:e9:e4: 5a:cb:dd:77:55:98:53:2c:9d:60:74:61:98:d7:50: ee:a1:c9:4b:4b:bc:f7:8e:f4:0b:f7:50:ee:1d:2a: 0b:96:3a:8e:18:f4:99:70:0c:d4:d4:f5:96:49:45: 6e:7f:b5:f2:55:4a:a0:5f:52:87:88:a0:c7:9e:1e: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.92.0/22 IPv6: 2804:1d24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264350 Signature Algorithm: sha256WithRSAEncryption b4:68:20:53:2b:30:fc:b5:6d:e6:f1:49:9a:83:e4:50:20:fc: fa:a7:71:94:22:74:d2:cf:75:f1:98:e0:11:82:63:8c:f4:12: b7:e5:98:35:e2:fb:9e:87:d1:e2:89:47:f6:69:06:1d:ff:73: 7d:0e:c5:ab:0c:30:f4:7d:d8:8f:c1:c2:0c:82:4e:e2:db:5a: 41:e2:64:b8:0f:8c:b6:01:d8:20:d8:35:02:33:9b:a2:f9:ea: 26:1a:20:df:19:92:63:a5:32:54:0e:82:ca:79:58:ef:e0:4e: 1f:df:fe:f6:71:b6:6e:04:97:ab:8c:13:1b:ab:a2:0e:c9:33: 2f:bc:ce:ca:93:13:07:05:3a:72:9c:77:80:46:5d:0e:ba:d0: bd:2e:44:8c:3c:68:5c:3d:48:b8:e0:00:b1:6c:e6:f5:52:55: 2a:5f:22:7f:74:07:70:a4:58:f1:92:56:b9:b5:6c:eb:37:42: 68:cc:e8:aa:5d:35:9f:fa:b4:8a:b3:ca:52:b1:03:f2:73:e8: 62:0f:15:74:76:54:8d:2b:74:1e:c7:c4:d4:68:55:5a:38:35: 55:d1:a8:6e:20:80:42:6e:3c:17:69:9b:b1:4a:10:ae:f9:d6: 3d:c1:87:ac:03:9b:a4:7d:f6:5b:8a:83:d0:b6:10:98:84:b8: b2:db:b1:81 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUF6TxWPj7uI8ZH06Rcmq7cqS0JXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwNTM5MDFaFw0yNjAzMDUwNTQ0MDFaMDMxMTAvBgNV BAMTKDY4NkYwQkJGRUZBQjI0QzkwRENDNDVENzQzQzkyMzM3MjUxQjJDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKPFVOAspmSny+Wqxebv/DNv1 olwPs+PxuZwYjZ+o23EIQpT8F315mfwjqy5WHJbyn0E/EBtE5Z8IIUETGJFlcIhb ByBaltCAnpUOU2L6FF2gSPlqqSXurrwwXIzXSzHZu1h65fZD3MXRkDsHM4wedPoE +ITPeX5z81nm3Niq5gvAH5AlsASA80XsQfQNnbeKsXknaW+HHC3P7rYHEIQx8ygp kOJ+RrQALgvaqTMzVNOXj7JANEdJXf80WyAlLXrp5FrL3XdVmFMsnWB0YZjXUO6h yUtLvPeO9Av3UO4dKguWOo4Y9JlwDNTU9ZZJRW5/tfJVSqBfUoeIoMeeHkkXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRobwu/76skyQ3M RddDySM3JRsspzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGZx YjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZvZjIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hm cWIzUjVnSzJTUTNLdmd4ejZEaG5IM25MMTI1U3czQWpqMndNWG1mb2YyLzEvNjg2 RjBCQkZFRkFCMjRDOTBEQ0M0NUQ3NDNDOTIzMzcyNTFCMkNBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg2xcMA0EAgACMAcDBQAoBB0kMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQInjANBgkqhkiG9w0BAQsFAAOCAQEAtGggUysw/LVt5vFJ moPkUCD8+qdxlCJ00s918ZjgEYJjjPQSt+WYNeL7nofR4olH9mkGHf9zfQ7Fqwww 9H3Yj8HCDIJO4ttaQeJkuA+MtgHYINg1AjObovnqJhog3xmSY6UyVA6CynlY7+BO H9/+9nG2bgSXq4wTG6uiDskzL7zOypMTBwU6cpx3gEZdDrrQvS5EjDxoXD1IuOAA sWzm9VJVKl8if3QHcKRY8ZJWubVs6zdCaMzoql01n/q0irPKUrED8nPoYg8VdHZU jSt0HsfE1GhVWjg1VdGobiCAQm48F2mbsUoQrvnWPcGHrAObpH32W4qD0LYQmIS4 stuxgQ== -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:45 2025 by rpki-client