$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer File: 75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer (raw, json) Hash identifier: zKqvWaWU0sYGeckqSHr32KLXPG0ExYOYmVgI8Lkqj0Q= Subject key identifier: 75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1D6223A85869FA5223EE12892CC3A08CA60C89CD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.mft caRepository: rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Jan 2025 11:37:17 +0000 Certificate not after: Fri 16 Jan 2026 11:42:17 +0000 Subordinate resources: AS: 264232 IP: 138.117.92.0/22 IP: 2804:2498::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:62:23:a8:58:69:fa:52:23:ee:12:89:2c:c3:a0:8c:a6:0c:89:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 17 11:37:17 2025 GMT Not After : Jan 16 11:42:17 2026 GMT Subject: CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:72:f1:63:aa:bb:57:c7:8d:b7:12:2a:65: 27:40:1b:d7:43:75:91:06:d1:af:5f:09:f2:c4:33: b1:0b:5f:89:16:59:06:42:92:87:85:42:e6:21:c9: 17:85:6c:a8:8a:0b:bf:b8:31:53:51:16:76:4b:04: 91:17:74:33:64:e7:71:80:64:99:01:60:a7:3e:3b: 0b:81:5a:cc:87:85:11:2e:34:68:64:7c:6a:b3:44: de:a6:03:0c:56:80:95:0e:b5:c1:a0:e2:57:a4:82: 0c:24:23:17:0c:94:c2:a2:a4:59:d5:02:66:96:dc: c8:a6:2b:a1:b4:95:4e:7c:91:4c:37:dd:49:6b:da: e7:7e:61:d1:a6:74:62:a2:79:63:73:d6:b4:1f:1a: b1:18:33:a5:4f:af:f7:30:14:27:e9:18:66:ab:db: b5:81:c7:7c:d5:2b:15:c2:c9:5c:90:a2:ab:28:8f: 0c:22:6f:e0:9b:42:9e:ba:fa:2e:b8:36:2a:62:d9: 82:d2:5f:75:06:31:e4:73:5c:d2:76:22:b5:02:e6: d1:04:fe:a8:24:15:13:53:96:47:f3:ae:fe:0c:44: fc:81:c8:dc:83:5e:b7:c9:5e:39:ad:14:8c:fd:a2: 13:76:02:76:8b:c5:20:b1:89:64:cb:1c:56:54:d6: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.92.0/22 IPv6: 2804:2498::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264232 Signature Algorithm: sha256WithRSAEncryption 6d:c6:28:2d:7e:f8:5b:52:21:5f:aa:e2:d9:f8:f9:f4:2e:9d: a3:40:a6:03:1d:be:29:c9:b5:fd:fc:b4:6d:98:be:e8:62:6d: 39:69:9e:43:bb:06:e0:99:9e:45:8e:c9:e5:4a:cd:e0:56:a0: 1d:9c:48:37:72:dd:28:e0:8a:6c:7f:93:ff:09:f5:ec:44:ff: c9:10:60:2e:f2:2e:3d:93:43:6b:b8:37:51:63:e9:7a:4e:ae: 86:75:c0:fa:7a:f3:b0:c8:b6:2e:bd:78:6b:0e:1b:a0:ab:e2: c2:6f:eb:84:a2:d0:0f:36:38:93:04:08:66:75:05:51:f5:36: 00:9a:75:df:fb:5b:4b:5e:37:9a:bd:d8:01:57:55:70:c5:1e: 48:94:4f:f2:4f:78:94:06:35:fa:9f:63:f4:be:1e:0c:9a:f2: 75:c8:3b:aa:0a:c8:08:92:95:6f:fc:9e:4a:ee:26:3b:52:3d: 7c:c3:35:c2:1b:ca:c9:9b:5e:c2:c3:b0:84:7e:86:2f:9a:dd: d8:a9:71:f7:e4:ed:fa:c9:27:22:30:b1:24:ea:0c:78:10:29: 9a:c3:07:9e:64:03:7b:45:45:f6:68:55:6f:e3:15:5e:1e:c4: 24:8b:2d:7c:72:44:b8:fe:06:4b:5a:ef:0c:e2:ed:cd:cb:8c: 4e:3f:0a:8c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHWIjqFhp+lIj7hKJLMOgjKYMic0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTcxMTM3MTdaFw0yNjAxMTYxMTQyMTdaMDMxMTAvBgNV BAMTKDc1REY5QzFGQTEyNzFBRTIyRjhENDNDNDZDOTM0NEU5MzlCNUNGQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG3LxY6q7V8eNtxIqZSdAG9dD dZEG0a9fCfLEM7ELX4kWWQZCkoeFQuYhyReFbKiKC7+4MVNRFnZLBJEXdDNk53GA ZJkBYKc+OwuBWsyHhREuNGhkfGqzRN6mAwxWgJUOtcGg4lekggwkIxcMlMKipFnV AmaW3MimK6G0lU58kUw33Ulr2ud+YdGmdGKieWNz1rQfGrEYM6VPr/cwFCfpGGar 27WBx3zVKxXCyVyQoqsojwwib+CbQp66+i64Nipi2YLSX3UGMeRzXNJ2IrUC5tEE /qgkFRNTlkfzrv4MRPyByNyDXrfJXjmtFIz9ohN2AnaLxSCxiWTLHFZU1hh7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR135wfoSca4i+N Q8Rsk0TpObXPuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmdB UXlYbUFFR1FXUzdDd01iQkw2Mng4ZzZuQmNtbVBtb1B2TldBUUNvdmUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJn QVF5WG1BRUdRV1M3Q3dNYkJMNjJ4OGc2bkJjbW1QbW9Qdk5XQVFDb3ZlLzAvNzVE RjlDMUZBMTI3MUFFMjJGOEQ0M0M0NkM5MzQ0RTkzOUI1Q0ZCOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCinVcMA0EAgACMAcDBQAoBCSYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQIKDANBgkqhkiG9w0BAQsFAAOCAQEAbcYoLX74W1IhX6ri 2fj59C6do0CmAx2+Kcm1/fy0bZi+6GJtOWmeQ7sG4JmeRY7J5UrN4FagHZxIN3Ld KOCKbH+T/wn17ET/yRBgLvIuPZNDa7g3UWPpek6uhnXA+nrzsMi2Lr14aw4boKvi wm/rhKLQDzY4kwQIZnUFUfU2AJp13/tbS143mr3YAVdVcMUeSJRP8k94lAY1+p9j 9L4eDJrydcg7qgrICJKVb/yeSu4mO1I9fMM1whvKyZtewsOwhH6GL5rd2Klx9+Tt +sknIjCxJOoMeBApmsMHnmQDe0VF9mhVb+MVXh7EJIstfHJEuP4GS1rvDOLtzcuM Tj8KjA== -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:56 2025 by rpki-client