$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer File: 725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer (raw, json) Hash identifier: 2GaBJcSxpjo8vhEpQwgs/hlvR/1g+p/bb/stsoyUE1w= Subject key identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 57CDF35278EC79B8A7673F07DE2F9B7DD45EA60C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft caRepository: rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 29 May 2024 13:35:05 +0000 Certificate not after: Wed 28 May 2025 13:40:05 +0000 Subordinate resources: AS: 262764 IP: 186.226.192.0/21 IP: 2804:1b8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cd:f3:52:78:ec:79:b8:a7:67:3f:07:de:2f:9b:7d:d4:5e:a6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 29 13:35:05 2024 GMT Not After : May 28 13:40:05 2025 GMT Subject: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:45:c4:40:44:0c:be:b7:24:85:f5:1a:29: 36:80:8b:cc:b8:c2:22:98:1e:ab:b1:b3:fb:46:2b: a8:32:76:ab:78:f7:7b:87:ab:a0:9e:12:05:a1:51: 75:98:03:d0:53:c4:b9:bc:fc:e7:de:88:33:6c:af: 38:c8:fc:4f:30:48:a3:35:17:d9:ba:b2:66:1e:cb: 88:d3:1b:8b:03:92:1b:94:91:ef:f2:3e:8f:bf:bc: 9a:90:6e:92:30:3a:26:e3:bd:74:74:aa:fa:56:26: e9:12:63:ec:e9:63:43:56:d2:ba:fc:96:2c:89:20: 73:9b:a1:d5:ca:ce:d5:6f:47:09:a3:69:22:25:48: 14:f3:c7:a4:68:26:f7:10:c1:ec:15:84:a9:3a:e2: 0b:0f:fa:0e:79:86:ee:cc:3b:a4:e5:4f:17:10:52: a2:c2:28:af:7d:87:03:0a:d7:0b:b6:ff:ac:23:54: 64:f2:58:4b:e2:4b:e7:ec:35:4e:3b:bc:53:81:8d: 3e:b8:b1:bc:4e:48:28:6d:8e:b7:7d:f4:72:33:de: d0:ce:51:36:aa:dd:64:ff:51:91:66:1c:de:af:96: 62:6c:d9:2f:d9:31:f8:f0:20:45:33:e5:a3:97:89: 8a:a7:ca:cc:6a:11:f9:58:4f:6d:a3:7d:7f:47:64: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.226.192.0/21 IPv6: 2804:1b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262764 Signature Algorithm: sha256WithRSAEncryption 95:ca:ac:95:1c:18:01:ba:dd:a4:3e:51:b9:be:d9:cf:2a:e3: 52:b7:38:6a:3f:11:58:97:b2:31:b1:b1:f2:ae:11:88:1a:1b: 69:6e:cb:fc:19:56:46:c6:df:64:98:71:ba:12:33:fc:7f:dd: 44:dd:9b:2a:e6:a4:6b:00:81:d9:68:87:92:0f:b9:f2:c6:8f: a3:a1:ec:df:a7:5b:09:a9:63:43:dd:d5:88:97:09:fd:aa:9f: da:8d:f6:31:0b:6c:2d:df:0d:52:1c:7d:21:87:a1:23:07:35: 8d:38:74:61:d1:b6:80:e6:e2:af:41:ee:67:96:d8:25:a9:b8: 65:04:fe:ce:87:31:a1:a6:ba:81:1b:5f:1f:4b:81:9c:d3:fe: ab:ca:3a:66:9d:e3:a4:54:02:4b:f4:2a:b0:6d:4c:4b:2f:30: ac:84:19:db:ba:47:3d:f5:d7:43:36:9a:0e:c7:5c:a1:60:53: 7e:8a:46:37:d4:c3:2f:dd:c1:a0:99:42:b0:7d:90:70:f7:30: 17:a3:e8:8d:34:ca:b3:88:ac:7d:7c:c4:f2:4c:12:0e:ef:b9: 59:cb:2e:d3:89:cd:ff:32:ba:cc:39:f7:14:13:e1:a6:fc:6b: 74:f9:e1:a9:b4:83:53:6c:76:88:41:3f:d4:cc:21:78:5f:25: fa:35:92:8e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUV83zUnjsebinZz8H3i+bfdRepgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjkxMzM1MDVaFw0yNTA1MjgxMzQwMDVaMDMxMTAvBgNV BAMTKDcyNUNGQjM0NEQzQkM4RDREMTI4QTZERThBNTI3RDlEMUUzQzcwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpUXEQEQMvrckhfUaKTaAi8y4 wiKYHquxs/tGK6gydqt493uHq6CeEgWhUXWYA9BTxLm8/OfeiDNsrzjI/E8wSKM1 F9m6smYey4jTG4sDkhuUke/yPo+/vJqQbpIwOibjvXR0qvpWJukSY+zpY0NW0rr8 liyJIHObodXKztVvRwmjaSIlSBTzx6RoJvcQwewVhKk64gsP+g55hu7MO6TlTxcQ UqLCKK99hwMK1wu2/6wjVGTyWEviS+fsNU47vFOBjT64sbxOSChtjrd99HIz3tDO UTaq3WT/UZFmHN6vlmJs2S/ZMfjwIEUz5aOXiYqnysxqEflYT22jfX9HZIDPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyXPs0TTvI1NEo pt6KUn2dHjxwpTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVBS TWVmM1htazFoR2syZlk3S2hBMlJyUTc2cmdpakp4dWRualp4WkZ4WEMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlQ Uk1lZjNYbWsxaEdrMmZZN0toQTJSclE3NnJnaWpKeHVkbmpaeFpGeFhDLzAvNzI1 Q0ZCMzQ0RDNCQzhENEQxMjhBNkRFOEE1MjdEOUQxRTNDNzBBNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDuuLAMA0EAgACMAcDBQAoBAG4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQCbDANBgkqhkiG9w0BAQsFAAOCAQEAlcqslRwYAbrdpD5R ub7ZzyrjUrc4aj8RWJeyMbGx8q4RiBobaW7L/BlWRsbfZJhxuhIz/H/dRN2bKuak awCB2WiHkg+58saPo6Hs36dbCaljQ93ViJcJ/aqf2o32MQtsLd8NUhx9IYehIwc1 jTh0YdG2gObir0HuZ5bYJam4ZQT+zocxoaa6gRtfH0uBnNP+q8o6Zp3jpFQCS/Qq sG1MSy8wrIQZ27pHPfXXQzaaDsdcoWBTfopGN9TDL93BoJlCsH2QcPcwF6PojTTK s4isfXzE8kwSDu+5Wcsu04nN/zK6zDn3FBPhpvxrdPnhqbSDU2x2iEE/1MwheF8l +jWSjg== -----END CERTIFICATE-----Generated at Mon Feb 17 08:19:56 2025 by rpki-client