$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.cer File: 767F272B321E8F16F6202C66AA9057CC10E66ECA.cer (raw, json) Hash identifier: nrN1BTHEGPypfBwoVdwa782ZF4ErBS51r9eZBZqfTAM= Subject key identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7D8076B3D5A2F67FEE1B1BC870A2A0EDCD16FAC7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft caRepository: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Feb 2025 13:45:14 +0000 Certificate not after: Fri 20 Feb 2026 13:50:14 +0000 Subordinate resources: AS: 53225 IP: 177.137.16.0/20 IP: 186.251.128.0/20 IP: 2804:644::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:80:76:b3:d5:a2:f6:7f:ee:1b:1b:c8:70:a2:a0:ed:cd:16:fa:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 21 13:45:14 2025 GMT Not After : Feb 20 13:50:14 2026 GMT Subject: CN=767F272B321E8F16F6202C66AA9057CC10E66ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:d7:24:88:69:5c:e0:ff:f2:8a:50:db:89: 0f:78:52:fd:1d:a6:7b:a7:2f:74:70:c0:0a:57:ff: f1:b0:ef:b0:5b:f4:b5:04:4f:03:1c:53:28:8f:21: e3:bc:c8:e8:29:36:c8:0c:85:b4:03:a1:3f:ec:86: 5f:e3:ef:9d:cc:e3:37:69:fb:d2:b8:1b:2e:a7:4e: d5:4b:76:55:b1:41:c4:ce:50:38:b4:73:18:92:09: 2b:2c:d9:b2:41:a3:01:6d:e6:db:5b:f2:8e:fb:0c: fd:69:21:3b:d4:2e:fe:07:f4:b1:90:d3:10:be:d0: d8:8d:97:02:61:6e:8d:9e:8f:cb:19:c5:35:07:85: 2e:35:3b:25:e3:27:a0:88:d5:08:2e:00:09:fd:05: 84:c7:10:28:34:45:5f:34:65:20:07:e8:40:93:e8: d7:38:a8:66:cb:20:74:15:6d:14:fb:cd:0c:15:77: 0e:0c:4d:fe:fa:04:f0:80:50:f6:51:91:35:fa:5a: 48:bd:7f:60:78:bc:51:b1:d6:f2:55:c7:d6:d3:09: 33:0a:d4:5c:dd:90:5c:36:ad:e0:a4:37:b9:76:9b: 8c:37:2b:03:e3:ed:53:1e:92:64:93:b3:58:27:71: 98:9c:1e:96:6c:b6:ac:84:27:b0:c0:46:fd:cb:69: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:7F:27:2B:32:1E:8F:16:F6:20:2C:66:AA:90:57:CC:10:E6:6E:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/1/767F272B321E8F16F6202C66AA9057CC10E66ECA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.137.16.0/20 186.251.128.0/20 IPv6: 2804:644::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53225 Signature Algorithm: sha256WithRSAEncryption 97:de:9d:2a:9b:35:de:38:df:06:59:d0:f6:6a:79:ae:91:ca: ec:b4:29:07:08:32:e6:8f:3c:70:a3:fc:2f:91:51:b5:13:97: 34:9f:b7:2b:9d:4f:86:c5:61:23:56:d1:87:00:f0:28:a5:9c: 68:3f:b2:6e:db:3b:1e:be:ca:55:82:08:d0:40:af:a3:17:bf: 75:fe:43:a8:a5:7f:80:eb:54:f2:2a:60:67:1c:39:94:66:94: 1c:10:7f:49:51:56:49:45:30:ad:81:31:13:2f:65:56:44:c5: 39:4e:bf:5b:29:38:4f:65:74:5a:22:85:97:2d:56:eb:f9:b1: c3:86:12:62:7f:f7:df:18:ac:87:8b:0a:1c:8a:05:34:4f:c1: b9:4b:48:c1:e7:f5:70:b7:04:a5:aa:6e:24:e0:2b:f4:9b:d1: d7:44:dd:dc:6d:a7:8e:73:4b:8a:44:a5:6b:73:0e:c5:00:f1: 10:71:0a:a5:e4:d5:fc:6d:c0:d1:f0:4a:b9:80:4d:d2:4e:f4: 3d:7c:92:e9:60:a4:b2:2a:e9:da:7c:7b:57:fc:8f:68:cb:62: 22:b2:96:e1:13:aa:25:8e:fb:81:7f:06:cf:22:f0:9f:0b:33: e4:08:bb:d8:17:d3:e7:ee:19:4f:64:20:f1:8e:b0:ba:0f:59: 7a:29:8a:ca -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUfYB2s9Wi9n/uGxvIcKKg7c0W+scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjExMzQ1MTRaFw0yNjAyMjAxMzUwMTRaMDMxMTAvBgNV BAMTKDc2N0YyNzJCMzIxRThGMTZGNjIwMkM2NkFBOTA1N0NDMTBFNjZFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbdckiGlc4P/yilDbiQ94Uv0d pnunL3RwwApX//Gw77Bb9LUETwMcUyiPIeO8yOgpNsgMhbQDoT/shl/j753M4zdp +9K4Gy6nTtVLdlWxQcTOUDi0cxiSCSss2bJBowFt5ttb8o77DP1pITvULv4H9LGQ 0xC+0NiNlwJhbo2ej8sZxTUHhS41OyXjJ6CI1QguAAn9BYTHECg0RV80ZSAH6ECT 6Nc4qGbLIHQVbRT7zQwVdw4MTf76BPCAUPZRkTX6Wki9f2B4vFGx1vJVx9bTCTMK 1FzdkFw2reCkN7l2m4w3KwPj7VMekmSTs1gncZicHpZstqyEJ7DARv3LaUnLAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2fycrMh6PFvYg LGaqkFfMEOZuyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlNm b2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZTUFEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlNm b2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZTUFEvMS83NjdG MjcyQjMyMUU4RjE2RjYyMDJDNjZBQTkwNTdDQzEwRTY2RUNBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBASxiRADBAS6+4AwDQQCAAIwBwMFACgEBkQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM/pMA0GCSqGSIb3DQEBCwUAA4IBAQCX3p0qmzXe ON8GWdD2anmukcrstCkHCDLmjzxwo/wvkVG1E5c0n7crnU+GxWEjVtGHAPAopZxo P7Ju2zsevspVggjQQK+jF791/kOopX+A61TyKmBnHDmUZpQcEH9JUVZJRTCtgTET L2VWRMU5Tr9bKThPZXRaIoWXLVbr+bHDhhJif/ffGKyHiwocigU0T8G5S0jB5/Vw twSlqm4k4Cv0m9HXRN3cbaeOc0uKRKVrcw7FAPEQcQql5NX8bcDR8Eq5gE3STvQ9 fJLpYKSyKunafHtX/I9oy2IispbhE6oljvuBfwbPIvCfCzPkCLvYF9Pn7hlPZCDx jrC6D1l6KYrK -----END CERTIFICATE-----Generated at Fri Apr 4 19:54:40 2025 by rpki-client