$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer File: 74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer (raw, json) Hash identifier: HOUD8jXqflflurXBe2o/jvF9QxEPq06mweB4zRKOZpE= Subject key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 468A815F1E0BD136AFD238FE61F64698C3D8C146 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft caRepository: rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 13 Mar 2025 11:17:43 +0000 Certificate not after: Thu 12 Mar 2026 11:22:43 +0000 Subordinate resources: AS: 53112 IP: 138.97.4.0/22 IP: 143.255.60.0/22 IP: 170.231.72.0/22 IP: 177.23.8.0/21 IP: 187.109.16.0/20 IP: 189.90.144.0/20 IP: 2804:d0c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8a:81:5f:1e:0b:d1:36:af:d2:38:fe:61:f6:46:98:c3:d8:c1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 13 11:17:43 2025 GMT Not After : Mar 12 11:22:43 2026 GMT Subject: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:dd:e0:62:f5:d6:ca:43:05:a2:06:e4:3f: 5c:76:62:95:6a:20:c3:0f:c3:92:bb:b9:cb:fa:58: 23:1b:d9:76:5f:6f:04:7e:4c:35:01:b1:52:cf:1e: a5:4f:7e:eb:f4:fd:60:b4:2c:c8:80:f4:cb:12:e8: fe:22:2a:21:db:23:e9:02:97:97:98:1b:ac:40:a5: ec:57:a4:54:fe:05:b6:d3:e3:1c:27:a0:3d:81:f1: cd:41:f2:60:07:24:2a:bc:14:a9:19:3c:3c:97:c2: cd:1b:67:9e:53:eb:1b:1d:cc:1e:18:02:1d:06:c9: a7:a4:e8:78:2f:2c:07:cb:b0:1e:fb:88:69:7a:4f: 6b:ba:e1:d9:b1:a9:bf:6d:c1:34:a9:d1:6b:d2:ad: 05:82:66:19:07:21:3e:be:35:8b:9f:23:80:67:39: da:99:c6:98:fe:fe:9c:2a:22:ce:0d:b6:62:11:69: 14:e1:a2:d7:46:08:eb:da:c9:2a:1a:34:1f:87:1a: 52:bc:d4:37:c8:e8:c8:f0:c5:a8:56:38:c3:a4:a3: 70:ae:72:31:24:c9:8c:28:b9:06:93:18:8d:ca:cf: 05:39:89:19:cb:0f:68:b6:79:9a:d6:99:45:36:b8: 18:54:81:d8:83:19:ac:b1:e5:a4:67:24:ef:95:eb: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.4.0/22 143.255.60.0/22 170.231.72.0/22 177.23.8.0/21 187.109.16.0/20 189.90.144.0/20 IPv6: 2804:d0c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53112 Signature Algorithm: sha256WithRSAEncryption ac:c3:7c:8b:2f:10:13:cb:b7:53:cd:9e:9f:c7:66:86:b3:48: 9e:fa:63:23:eb:aa:4e:07:0f:31:22:11:c9:66:2d:1b:6e:d3: a8:94:9a:2b:78:ad:02:62:9c:17:91:83:58:a6:87:c4:1d:74: 51:25:8d:3b:d4:c1:77:06:b4:53:a2:ef:ef:10:f8:c9:0d:f3: 8b:00:b6:25:21:98:e1:29:4a:75:85:b6:bc:5a:a3:16:99:d2: 0c:a0:a4:dc:ab:96:69:27:f8:99:4b:6d:87:5d:89:15:5e:e3: fa:ec:d8:b3:63:cc:03:f6:01:98:87:09:4a:90:e6:84:5a:cb: f6:30:38:03:60:84:fc:33:c4:4b:7c:a2:69:c1:12:e9:c0:51: 63:d6:ac:fd:51:b6:93:69:de:8b:f9:71:ae:23:0b:e7:eb:b1: b8:a4:13:16:33:6d:2a:70:5c:e8:4a:48:5a:18:87:11:dc:36: 41:5c:96:4d:52:68:06:51:43:b9:2f:db:10:6d:a6:45:a2:54: 8a:b8:df:4b:eb:bc:76:25:ff:41:94:e6:7e:ed:fb:84:a2:5e: 7d:a6:53:7b:b6:2b:d4:ce:c1:fb:34:fc:f7:0e:0b:ac:a8:6d: b0:ff:65:d7:fe:98:c6:ce:95:23:f2:9f:24:01:21:93:04:8b: 6a:27:31:29 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIURoqBXx4L0Tav0jj+YfZGmMPYwUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTMxMTE3NDNaFw0yNjAzMTIxMTIyNDNaMDMxMTAvBgNV BAMTKDc0QURFQjVCMEIwNjlEQUMyRDk0QTVEREM1NTEwRDlEQ0MwQ0I2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnj93gYvXWykMFogbkP1x2YpVq IMMPw5K7ucv6WCMb2XZfbwR+TDUBsVLPHqVPfuv0/WC0LMiA9MsS6P4iKiHbI+kC l5eYG6xApexXpFT+BbbT4xwnoD2B8c1B8mAHJCq8FKkZPDyXws0bZ55T6xsdzB4Y Ah0Gyaek6HgvLAfLsB77iGl6T2u64dmxqb9twTSp0WvSrQWCZhkHIT6+NYufI4Bn OdqZxpj+/pwqIs4NtmIRaRThotdGCOvaySoaNB+HGlK81DfI6MjwxahWOMOko3Cu cjEkyYwouQaTGI3KzwU5iRnLD2i2eZrWmUU2uBhUgdiDGayx5aRnJO+V6xoJAgMB AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR0retbCwadrC2U pd3FUQ2dzAy2UTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjVm VEdWZkFzeTFOMzJTMmJIdG9MMlltV1hLU01Gd0hlZUhvVTJEWVFRWjEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o1 ZlRHVmZBc3kxTjMyUzJiSHRvTDJZbVdYS1NNRndIZWVIb1UyRFlRUVoxLzEvNzRB REVCNUIwQjA2OURBQzJEOTRBNUREQzU1MTBEOURDQzBDQjY1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEH AQH/BD0wOzAqBAIAATAkAwQCimEEAwQCj/88AwQCqudIAwQDsRcIAwQEu20QAwQE vVqQMA0EAgACMAcDBQAoBA0MMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPeDAN BgkqhkiG9w0BAQsFAAOCAQEArMN8iy8QE8u3U82en8dmhrNInvpjI+uqTgcPMSIR yWYtG27TqJSaK3itAmKcF5GDWKaHxB10USWNO9TBdwa0U6Lv7xD4yQ3ziwC2JSGY 4SlKdYW2vFqjFpnSDKCk3KuWaSf4mUtth12JFV7j+uzYs2PMA/YBmIcJSpDmhFrL 9jA4A2CE/DPES3yiacES6cBRY9as/VG2k2nei/lxriML5+uxuKQTFjNtKnBc6EpI WhiHEdw2QVyWTVJoBlFDuS/bEG2mRaJUirjfS+u8diX/QZTmfu37hKJefaZTe7Yr 1M7B+zT89w4LrKhtsP9l1/6Yxs6VI/KfJAEhkwSLaicxKQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:18 2025 by rpki-client