$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7104176188EE68612EE3A6C683A28A3254AFD500.cer File: 7104176188EE68612EE3A6C683A28A3254AFD500.cer (raw, json) Hash identifier: qzcLMjJ0WuOUb+UZygtKhHNPPGxgPJYplpW3V9PwKag= Subject key identifier: 71:04:17:61:88:EE:68:61:2E:E3:A6:C6:83:A2:8A:32:54:AF:D5:00 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 747A142301BCFF5F5EF540113A82C3E490390BD9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7104176188EE68612EE3A6C683A28A3254AFD500.mft caRepository: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 11 Feb 2025 21:00:11 +0000 Certificate not after: Tue 10 Feb 2026 21:05:11 +0000 Subordinate resources: AS: 268308 IP: 45.238.4.0/22 IP: 2804:4f28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7a:14:23:01:bc:ff:5f:5e:f5:40:11:3a:82:c3:e4:90:39:0b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 11 21:00:11 2025 GMT Not After : Feb 10 21:05:11 2026 GMT Subject: CN=7104176188EE68612EE3A6C683A28A3254AFD500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:24:4f:9f:09:e1:0f:ad:51:4d:8c:9d:29: b2:4a:bf:18:8e:31:23:0f:bb:57:1d:2a:28:52:de: 75:29:1e:4a:1a:ad:15:25:82:87:53:81:09:9c:30: ef:78:39:87:ed:96:e9:26:fd:b0:9e:16:1e:df:05: a6:f9:71:00:67:a2:5a:8c:bb:0a:8f:6d:59:8d:f1: b9:fc:0e:c0:a7:8d:c8:a3:eb:78:12:90:3a:51:b8: c3:f5:84:39:b4:b7:7b:37:22:78:ce:33:b6:83:48: 1c:37:5f:d0:41:39:86:a9:c7:6c:76:75:ac:8e:23: 39:7b:42:9f:be:ac:2e:30:ae:8a:5c:1c:7b:b9:93: 75:4c:01:a4:21:fd:a3:9d:53:d0:6e:9c:0c:6a:87: 56:f8:93:73:b7:d9:77:ab:16:56:88:e1:23:79:29: ad:96:32:b2:e2:51:ba:9a:20:38:20:90:e3:7c:8b: 44:d4:7e:9f:66:59:67:2f:37:7e:5b:ab:ae:47:cc: 53:fb:f9:8f:36:0f:5c:5b:f0:6e:ea:20:63:90:9b: 4e:1c:90:1a:5a:ac:fa:36:b3:70:c7:a8:c7:34:58: 4e:d5:c2:e7:05:1a:ce:b9:40:3e:c6:d6:f1:3d:d2: e8:0c:1a:35:fe:a8:de:14:fc:23:b2:20:7a:69:07: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:04:17:61:88:EE:68:61:2E:E3:A6:C6:83:A2:8A:32:54:AF:D5:00 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/7104176188EE68612EE3A6C683A28A3254AFD500.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.4.0/22 IPv6: 2804:4f28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268308 Signature Algorithm: sha256WithRSAEncryption bb:39:6d:8d:80:17:9c:85:8f:f1:5e:0d:c4:73:f7:b1:cc:5f: a7:30:b3:88:5d:a9:a4:06:55:88:de:44:4f:4a:21:df:12:87: f9:69:2b:89:47:57:6b:e9:1f:a6:be:c4:e5:d4:61:91:e1:86: 9b:4f:ca:fd:2f:17:82:fb:d7:23:0d:6a:5b:0b:76:1b:0b:96: 30:ae:ed:9c:2c:67:53:e0:e0:6f:eb:57:b5:26:fa:09:cc:94: 02:e1:9c:bb:ef:c7:b3:52:29:f0:cc:e3:e0:67:9d:75:74:a5: 35:ba:c2:1e:d2:67:37:3d:dd:2a:b0:eb:c2:e9:7a:a0:fb:0d: 10:c3:5c:3f:b0:fe:af:d3:e9:de:8c:fe:10:55:df:31:2b:46: 37:46:74:b1:c8:20:48:16:18:10:8e:b5:86:6d:39:63:93:cd: 01:c5:92:ed:87:05:83:eb:c9:6b:b5:3f:7f:20:e0:5c:ae:5c: 0d:ff:77:a7:a6:ef:bc:0b:44:9d:a3:69:cf:67:f6:64:c2:57: df:39:ff:7d:6b:d4:78:64:0c:26:56:0b:f2:ea:1f:7c:b6:bb: 21:42:c1:3a:20:8b:45:87:98:3f:c8:f4:40:a5:2f:fd:cf:8d: 07:ee:e3:21:e3:81:c0:d5:06:14:24:fd:fd:34:1b:f5:92:25: 8a:55:c7:12 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdHoUIwG8/19e9UAROoLD5JA5C9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTEyMTAwMTFaFw0yNjAyMTAyMTA1MTFaMDMxMTAvBgNV BAMTKDcxMDQxNzYxODhFRTY4NjEyRUUzQTZDNjgzQTI4QTMyNTRBRkQ1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPnyRPnwnhD61RTYydKbJKvxiO MSMPu1cdKihS3nUpHkoarRUlgodTgQmcMO94OYftlukm/bCeFh7fBab5cQBnolqM uwqPbVmN8bn8DsCnjcij63gSkDpRuMP1hDm0t3s3InjOM7aDSBw3X9BBOYapx2x2 dayOIzl7Qp++rC4wropcHHu5k3VMAaQh/aOdU9BunAxqh1b4k3O32XerFlaI4SN5 Ka2WMrLiUbqaIDggkON8i0TUfp9mWWcvN35bq65HzFP7+Y82D1xb8G7qIGOQm04c kBparPo2s3DHqMc0WE7VwucFGs65QD7G1vE90ugMGjX+qN4U/COyIHppB4oLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxBBdhiO5oYS7j psaDoooyVK/VADAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzI1 REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3OW0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcy NURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAvNzEw NDE3NjE4OEVFNjg2MTJFRTNBNkM2ODNBMjhBMzI1NEFGRDUwMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe4EMA0EAgACMAcDBQAoBE8oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYFDANBgkqhkiG9w0BAQsFAAOCAQEAuzltjYAXnIWP8V4N xHP3scxfpzCziF2ppAZViN5ET0oh3xKH+WkriUdXa+kfpr7E5dRhkeGGm0/K/S8X gvvXIw1qWwt2GwuWMK7tnCxnU+Dgb+tXtSb6CcyUAuGcu+/Hs1Ip8Mzj4GeddXSl NbrCHtJnNz3dKrDrwul6oPsNEMNcP7D+r9Pp3oz+EFXfMStGN0Z0scggSBYYEI61 hm05Y5PNAcWS7YcFg+vJa7U/fyDgXK5cDf93p6bvvAtEnaNpz2f2ZMJX3zn/fWvU eGQMJlYL8uoffLa7IULBOiCLRYeYP8j0QKUv/c+NB+7jIeOBwNUGFCT9/TQb9ZIl ilXHEg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:38:48 2025 by rpki-client