$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer File: 777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer (raw, json) Hash identifier: QiQRb2ChwNy6EGcINWR4Twr+MhG7eKsbVmFD9o8eNXQ= Subject key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 47384593FBD575C7A32E72C3D5A053536932C859 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft caRepository: rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 13:43:10 +0000 Certificate not after: Thu 02 Apr 2026 13:48:10 +0000 Subordinate resources: AS: 263484 IP: 191.242.232.0/21 IP: 2804:1290::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 16:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:38:45:93:fb:d5:75:c7:a3:2e:72:c3:d5:a0:53:53:69:32:c8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 13:43:10 2025 GMT Not After : Apr 2 13:48:10 2026 GMT Subject: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:7a:08:e7:c9:2d:93:79:a6:3f:06:c0:f1: e7:9b:af:9e:1a:ca:fd:49:0a:c8:f4:52:32:af:e2: 08:3f:f9:54:7c:ba:36:58:ea:de:e1:b8:d7:38:4f: 29:7e:86:62:39:6f:cb:30:04:d2:d6:0a:28:38:d8: b1:90:69:c4:17:92:5a:d4:47:ca:4e:05:dd:e9:71: c8:b2:78:21:62:d5:58:12:46:a2:6e:bb:48:30:82: ff:17:8a:d3:df:1d:fe:5b:c3:85:e8:11:0c:52:97: 93:5a:22:5b:1f:78:41:15:c0:f3:30:91:ee:cc:bb: f3:37:25:b8:30:a0:df:91:13:45:a0:0c:88:e3:df: e2:0c:1c:ac:01:56:17:75:45:56:0b:5b:e4:6f:5d: c3:21:b0:56:ec:ab:91:07:0f:b6:1a:b7:31:83:2b: 4e:ef:c1:bb:52:da:d9:57:32:4a:a1:93:87:ae:b2: 6f:0a:65:f5:71:8d:76:79:ef:34:ee:b7:82:03:a2: da:90:b2:ba:81:60:26:70:6c:0e:a7:d3:d6:5c:b4: 97:b6:77:5c:9d:24:ed:88:bf:f9:ae:b2:de:68:e6: 93:41:cc:a0:04:2f:b4:43:6c:45:a2:4e:30:d6:14: eb:04:86:0f:bb:14:5b:e8:9e:3c:5d:ef:c1:f6:df: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.242.232.0/21 IPv6: 2804:1290::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263484 Signature Algorithm: sha256WithRSAEncryption c7:7d:a6:dd:21:5c:e5:3c:66:ad:ed:dd:94:3c:1f:a4:a3:5e: 13:27:34:7c:bb:be:44:2e:e3:0c:4d:43:9d:fe:fe:3e:5c:f0: 88:cc:6a:cc:22:e7:9f:5d:d2:e0:83:09:13:98:a1:7c:89:d1: 3c:8f:e0:1e:80:56:3a:05:36:02:0b:2d:54:8f:23:f7:82:8a: 31:09:df:a6:a9:b1:62:3e:52:6c:7c:e7:c7:a7:9d:06:af:6a: 88:d5:50:2a:e4:56:5b:c3:74:ac:c9:ce:d4:2e:27:56:db:96: 8a:e4:4d:4a:56:53:96:d5:fb:a3:44:b1:96:6a:5b:2d:4f:a9: a5:92:2e:7e:15:d0:c7:1f:c3:c9:05:39:9b:00:d0:c6:6f:af: ba:91:bb:04:83:8f:30:31:85:fd:c5:77:e5:24:21:7c:db:53: 2b:5f:9a:d4:e0:0d:bc:63:37:1c:1d:24:f1:22:90:05:8b:08: 27:a2:ae:35:40:dc:99:04:7e:ab:26:9e:24:b2:96:31:20:96: 46:6e:12:bd:21:d8:2b:49:c5:7b:04:72:fd:49:87:81:9f:20: 3d:e2:c5:74:20:02:a3:69:85:72:b5:34:ad:c2:a6:34:1b:38: 65:df:2b:af:3f:15:bc:63:ef:52:67:29:20:bc:88:00:e8:ac: 9d:7a:db:00 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURzhFk/vVdcejLnLD1aBTU2kyyFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDMxMzQzMTBaFw0yNjA0MDIxMzQ4MTBaMDMxMTAvBgNV BAMTKDc3N0JENUQ1QkU0Qzk5MTNDM0NCODFFNjdGRTc3QzMxNDNDMUMxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsw3oI58ktk3mmPwbA8eebr54a yv1JCsj0UjKv4gg/+VR8ujZY6t7huNc4Tyl+hmI5b8swBNLWCig42LGQacQXklrU R8pOBd3pcciyeCFi1VgSRqJuu0gwgv8XitPfHf5bw4XoEQxSl5NaIlsfeEEVwPMw ke7Mu/M3JbgwoN+RE0WgDIjj3+IMHKwBVhd1RVYLW+RvXcMhsFbsq5EHD7YatzGD K07vwbtS2tlXMkqhk4eusm8KZfVxjXZ57zTut4IDotqQsrqBYCZwbA6n09ZctJe2 d1ydJO2Iv/must5o5pNBzKAEL7RDbEWiTjDWFOsEhg+7FFvonjxd78H233uPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR3e9XVvkyZE8PL geZ/53wxQ8HB3TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNG aXJNc0tZa05oRkRiblZydTF6aGhyUnZHRWdxOTV4WmNOa0hwNEN2WVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fz RmlyTXNLWWtOaEZEYm5WcnUxemhoclJ2R0VncTk1eFpjTmtIcDRDdllSLzAvNzc3 QkQ1RDVCRTRDOTkxM0MzQ0I4MUU2N0ZFNzdDMzE0M0MxQzFERC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDv/LoMA0EAgACMAcDBQAoBBKQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQFPDANBgkqhkiG9w0BAQsFAAOCAQEAx32m3SFc5Txmre3d lDwfpKNeEyc0fLu+RC7jDE1Dnf7+PlzwiMxqzCLnn13S4IMJE5ihfInRPI/gHoBW OgU2AgstVI8j94KKMQnfpqmxYj5SbHznx6edBq9qiNVQKuRWW8N0rMnO1C4nVtuW iuRNSlZTltX7o0SxlmpbLU+ppZIufhXQxx/DyQU5mwDQxm+vupG7BIOPMDGF/cV3 5SQhfNtTK1+a1OANvGM3HB0k8SKQBYsIJ6KuNUDcmQR+qyaeJLKWMSCWRm4SvSHY K0nFewRy/UmHgZ8gPeLFdCACo2mFcrU0rcKmNBs4Zd8rrz8VvGPvUmcpILyIAOis nXrbAA== -----END CERTIFICATE-----Generated at Mon Apr 7 18:23:01 2025 by rpki-client