$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6B40A09DF23B2D61F8D65CBFEC77E8BC8BFEAF9A.cer File: 6B40A09DF23B2D61F8D65CBFEC77E8BC8BFEAF9A.cer (raw, json) Hash identifier: GdzW5laqkOm1sE94VxWFQMYx/s5zAT0GmVED100nhKk= Subject key identifier: 6B:40:A0:9D:F2:3B:2D:61:F8:D6:5C:BF:EC:77:E8:BC:8B:FE:AF:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 415C5DBD9CC9FCE9AF1FD2A653AC9C138546D339 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/6B40A09DF23B2D61F8D65CBFEC77E8BC8BFEAF9A.mft caRepository: rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 11 Aug 2024 18:23:04 +0000 Certificate not after: Sun 10 Aug 2025 18:28:04 +0000 Subordinate resources: AS: 271163 IP: 179.42.60.0/22 IP: 2804:7738::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5c:5d:bd:9c:c9:fc:e9:af:1f:d2:a6:53:ac:9c:13:85:46:d3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 11 18:23:04 2024 GMT Not After : Aug 10 18:28:04 2025 GMT Subject: CN=6B40A09DF23B2D61F8D65CBFEC77E8BC8BFEAF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:30:40:95:9d:1c:f4:c5:c9:fc:7c:cc:dd: fd:b0:e8:ce:0a:f7:7c:f6:4b:0d:67:43:cf:59:f5: c5:d2:5b:bd:12:60:c2:50:78:4c:fc:e4:1a:cd:1d: e6:cb:57:32:dc:a5:1d:95:1c:79:bb:78:11:25:ef: 7e:44:dc:3d:b3:61:a1:f7:b6:11:7e:37:7d:7c:86: c0:7c:73:53:92:64:cb:89:08:53:77:6e:83:b0:ab: 3b:f2:58:c8:8b:74:96:5e:0d:59:a6:53:f3:0e:3c: 94:df:b1:fe:93:91:6c:de:eb:9e:24:55:2e:43:40: 08:82:19:b0:07:6c:e4:15:35:30:ce:a7:90:d2:6a: a6:32:3d:93:a0:69:80:7f:7c:e8:89:25:fe:2c:e5: bc:94:a8:35:08:29:f8:13:4c:c6:8c:1c:27:4a:cd: ba:54:45:1c:ef:1b:5f:a3:3f:cc:e4:b7:8b:f7:56: 16:f5:15:42:32:2e:93:b5:7d:d0:41:03:32:0a:1c: ed:49:97:6b:3b:5e:c2:7e:01:ab:12:61:29:9a:80: ac:f3:66:5a:0b:0e:c7:08:20:9b:f0:3e:86:82:0a: ab:2e:ed:55:91:fd:2c:29:f8:75:04:40:9b:78:24: 3d:11:38:5f:c7:f7:15:5a:ab:b1:82:07:ae:64:de: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:40:A0:9D:F2:3B:2D:61:F8:D6:5C:BF:EC:77:E8:BC:8B:FE:AF:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CMuVurvn3CdgrrPNeruiP7kzyKGfnitfZHM67oTiv9VU/0/6B40A09DF23B2D61F8D65CBFEC77E8BC8BFEAF9A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.42.60.0/22 IPv6: 2804:7738::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271163 Signature Algorithm: sha256WithRSAEncryption 5d:b6:28:f5:ba:6b:34:8f:55:15:53:7b:37:60:d8:00:14:9c: 9d:66:18:3c:e8:66:be:14:52:80:b6:13:05:ee:fd:01:7f:25: 4c:db:0b:5f:05:4e:9a:92:ab:de:96:48:16:0d:f7:77:4f:c0: 79:d0:6e:22:d6:8a:f6:3b:b7:14:1f:42:ba:65:f2:6b:65:d3: ee:18:d9:bc:34:ef:d9:91:1d:9e:c5:23:7d:d1:73:bc:13:20: f7:07:da:21:d8:a2:73:59:cd:8c:90:3c:d4:6e:7c:d4:27:06: d8:0b:19:55:d2:8f:0b:07:e4:50:4f:7e:70:0d:41:59:08:ab: 54:a5:12:c7:7b:e9:52:2e:66:b1:97:53:8a:47:f8:4a:ec:76: 2c:03:93:19:b0:4b:28:01:4e:19:e5:de:12:5f:ee:45:1a:66: d3:2f:97:44:1f:38:cb:ea:0e:9b:33:7e:18:3e:04:28:6e:9a: 26:6b:28:75:99:5f:f6:ce:4e:5e:95:19:65:d1:17:48:23:60: 0a:b1:4b:b4:f7:19:b6:85:7c:67:57:e5:19:6c:ad:f4:27:eb: 79:79:21:b6:cc:56:56:f0:29:47:c9:d4:4d:fc:9a:b6:59:b8: 83:8c:e0:a1:89:35:2b:e2:03:90:32:9b:d5:e1:2a:5b:8f:01: 55:69:96:92 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQVxdvZzJ/OmvH9KmU6ycE4VG0zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MTExODIzMDRaFw0yNTA4MTAxODI4MDRaMDMxMTAvBgNV BAMTKDZCNDBBMDlERjIzQjJENjFGOEQ2NUNCRkVDNzdFOEJDOEJGRUFGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+DBAlZ0c9MXJ/HzM3f2w6M4K 93z2Sw1nQ89Z9cXSW70SYMJQeEz85BrNHebLVzLcpR2VHHm7eBEl735E3D2zYaH3 thF+N318hsB8c1OSZMuJCFN3boOwqzvyWMiLdJZeDVmmU/MOPJTfsf6TkWze654k VS5DQAiCGbAHbOQVNTDOp5DSaqYyPZOgaYB/fOiJJf4s5byUqDUIKfgTTMaMHCdK zbpURRzvG1+jP8zkt4v3Vhb1FUIyLpO1fdBBAzIKHO1Jl2s7XsJ+AasSYSmagKzz ZloLDscIIJvwPoaCCqsu7VWR/Swp+HUEQJt4JD0ROF/H9xVaq7GCB65k3oYbAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRrQKCd8jstYfjW XL/sd+i8i/6vmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ011 VnVydm4zQ2RncnJQTmVydWlQN2t6eUtHZm5pdGZaSE02N29UaXY5VlUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NN dVZ1cnZuM0NkZ3JyUE5lcnVpUDdrenlLR2ZuaXRmWkhNNjdvVGl2OVZVLzAvNkI0 MEEwOURGMjNCMkQ2MUY4RDY1Q0JGRUM3N0U4QkM4QkZFQUY5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsyo8MA0EAgACMAcDBQAoBHc4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjOzANBgkqhkiG9w0BAQsFAAOCAQEAXbYo9bprNI9VFVN7 N2DYABScnWYYPOhmvhRSgLYTBe79AX8lTNsLXwVOmpKr3pZIFg33d0/AedBuItaK 9ju3FB9CumXya2XT7hjZvDTv2ZEdnsUjfdFzvBMg9wfaIdiic1nNjJA81G581CcG 2AsZVdKPCwfkUE9+cA1BWQirVKUSx3vpUi5msZdTikf4Sux2LAOTGbBLKAFOGeXe El/uRRpm0y+XRB84y+oOmzN+GD4EKG6aJmsodZlf9s5OXpUZZdEXSCNgCrFLtPcZ toV8Z1flGWyt9CfreXkhtsxWVvApR8nUTfyatlm4g4zgoYk1K+IDkDKb1eEqW48B VWmWkg== -----END CERTIFICATE-----Generated at Mon Feb 17 08:23:27 2025 by rpki-client