$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer File: 768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.cer (raw, json) Hash identifier: MEMQc6EewFYQdFbxTZvO8Jg499cqlkm1E/FQhI1VDu0= Subject key identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 438E830AB5FF9C2AE0208590C9D2991BBA46A45E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft caRepository: rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 04 Aug 2024 18:35:07 +0000 Certificate not after: Sun 03 Aug 2025 18:40:07 +0000 Subordinate resources: AS: 262813 IP: 177.70.144.0/20 IP: 186.237.160.0/20 IP: 2804:26c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8e:83:0a:b5:ff:9c:2a:e0:20:85:90:c9:d2:99:1b:ba:46:a4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 4 18:35:07 2024 GMT Not After : Aug 3 18:40:07 2025 GMT Subject: CN=768C468840EAB0C1EAF4BADFFD473AF4BC4719CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:5d:6e:37:f7:ae:35:80:ae:44:10:a3:f8: 86:15:83:9f:62:f8:d4:98:28:6f:23:65:66:01:cb: 69:de:82:da:00:64:10:db:4b:d2:57:02:cb:e9:10: 38:19:b2:b7:8e:04:8b:62:03:b1:a6:a8:cf:a3:94: 58:cf:2a:78:79:8c:8f:d6:3f:3f:2f:c3:65:9e:2e: 7a:4d:31:1f:07:aa:4b:48:90:51:cb:1b:d7:00:78: 4e:02:3a:a9:11:77:16:7d:77:01:b0:a3:68:a8:e2: f3:f1:5f:13:39:ec:42:22:4f:4c:71:22:2f:00:89: 46:65:8b:9b:eb:d7:be:17:f7:6a:a0:62:59:dc:dd: bb:95:09:79:1e:87:98:f6:e8:aa:35:7f:79:12:4c: 17:11:c4:6f:eb:80:69:23:71:f8:34:aa:e9:a6:b3: 29:69:bd:36:71:b9:51:03:4d:a0:e4:e4:2e:f2:4d: e4:46:c3:be:45:1a:ea:d7:d6:dd:50:ef:19:82:68: b5:df:ef:3b:e5:8e:ce:b6:9c:ae:25:2a:64:23:ac: 36:19:02:89:10:23:0e:46:43:40:b0:4b:a2:bd:b2: b5:e3:55:e7:ed:06:72:4d:a0:c7:1c:33:7d:a2:3c: e5:87:f2:b3:78:bd:8c:53:ab:a2:07:bd:0b:53:05: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:8C:46:88:40:EA:B0:C1:EA:F4:BA:DF:FD:47:3A:F4:BC:47:19:CD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/1/768C468840EAB0C1EAF4BADFFD473AF4BC4719CD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.70.144.0/20 186.237.160.0/20 IPv6: 2804:26c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262813 Signature Algorithm: sha256WithRSAEncryption 67:d2:da:41:50:05:07:2b:c6:93:ba:1d:24:6f:09:80:62:0f: c8:84:ba:31:26:6c:a1:96:e6:23:e3:75:bc:ca:0b:73:b3:17: 60:ae:eb:2c:f6:06:e4:22:e7:e2:d6:23:9f:cc:ca:99:a5:4d: c6:7a:d0:df:86:43:f1:7d:7b:44:63:fc:22:a1:0a:51:5f:90: 6f:28:49:d5:72:16:eb:31:3c:5b:6e:1d:ff:09:9d:46:06:90: 33:54:2d:67:e8:97:57:22:43:1b:85:6d:9a:65:f1:3a:f4:e6: 45:fb:62:9d:33:92:76:21:17:5d:e7:4b:b5:02:db:2a:d3:7b: 05:0a:ba:be:49:3f:79:66:f6:21:39:e1:e9:c3:b2:1d:ab:9a: 2e:05:b9:ae:9e:9f:61:92:66:ba:8e:75:57:49:3f:7f:f8:b7: 2d:3e:9a:0e:c8:e3:78:24:8a:5c:80:13:eb:7f:a6:0d:ab:5c: 16:e3:dd:6e:ee:2a:c4:9f:93:b2:72:f8:1c:8b:48:0f:5e:69: 09:a1:9e:fa:73:59:e2:c1:cd:5c:ac:c2:5a:08:2a:af:29:9e: bc:67:1c:2c:f9:4b:5a:ce:1a:dd:11:d8:27:ea:09:36:e8:ae: ea:2c:33:ac:02:86:10:e9:6c:09:6b:10:ec:ba:78:0a:56:a5: 88:ed:99:f6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQ46DCrX/nCrgIIWQydKZG7pGpF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDQxODM1MDdaFw0yNTA4MDMxODQwMDdaMDMxMTAvBgNV BAMTKDc2OEM0Njg4NDBFQUIwQzFFQUY0QkFERkZENDczQUY0QkM0NzE5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xF1uN/euNYCuRBCj+IYVg59i +NSYKG8jZWYBy2negtoAZBDbS9JXAsvpEDgZsreOBItiA7GmqM+jlFjPKnh5jI/W Pz8vw2WeLnpNMR8HqktIkFHLG9cAeE4COqkRdxZ9dwGwo2io4vPxXxM57EIiT0xx Ii8AiUZli5vr174X92qgYlnc3buVCXkeh5j26Ko1f3kSTBcRxG/rgGkjcfg0qumm sylpvTZxuVEDTaDk5C7yTeRGw75FGurX1t1Q7xmCaLXf7zvljs62nK4lKmQjrDYZ AokQIw5GQ0CwS6K9srXjVeftBnJNoMccM32iPOWH8rN4vYxTq6IHvQtTBQa9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR2jEaIQOqwwer0 ut/9Rzr0vEcZzTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFEz ZkpIdkxMajYxYU04UmFCdHpCdkVEb0NUMnZuUkY5ZUtFb1E5Y0E3VUsvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhR M2ZKSHZMTGo2MWFNOFJhQnR6QnZFRG9DVDJ2blJGOWVLRW9ROWNBN1VLLzEvNzY4 QzQ2ODg0MEVBQjBDMUVBRjRCQURGRkQ0NzNBRjRCQzQ3MTlDRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsUaQAwQEuu2gMA0EAgACMAcDBQAoBAJsMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCnTANBgkqhkiG9w0BAQsFAAOCAQEAZ9LaQVAF ByvGk7odJG8JgGIPyIS6MSZsoZbmI+N1vMoLc7MXYK7rLPYG5CLn4tYjn8zKmaVN xnrQ34ZD8X17RGP8IqEKUV+QbyhJ1XIW6zE8W24d/wmdRgaQM1QtZ+iXVyJDG4Vt mmXxOvTmRftinTOSdiEXXedLtQLbKtN7BQq6vkk/eWb2ITnh6cOyHauaLgW5rp6f YZJmuo51V0k/f/i3LT6aDsjjeCSKXIAT63+mDatcFuPdbu4qxJ+TsnL4HItID15p CaGe+nNZ4sHNXKzCWggqrymevGccLPlLWs4a3RHYJ+oJNuiu6iwzrAKGEOlsCWsQ 7Lp4ClaliO2Z9g== -----END CERTIFICATE-----Generated at Sat Apr 5 04:52:06 2025 by rpki-client