$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer File: 77A5C569B2294D2C9A8D2E4BD781081A234F1C24.cer (raw, json) Hash identifier: oOHi5utfoWePmpQxo2opoBpIdi3ZbKT9kxHEKOHRxfc= Subject key identifier: 77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08BEDE7ABF65899880577A2B6EA1776AD0933E1C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft caRepository: rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:14 +0000 Certificate not after: Wed 04 Mar 2026 18:40:14 +0000 Subordinate resources: AS: 267544 IP: 45.70.32.0/22 IP: 45.71.76.0/22 IP: 2804:4308::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:be:de:7a:bf:65:89:98:80:57:7a:2b:6e:a1:77:6a:d0:93:3e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:14 2025 GMT Not After : Mar 4 18:40:14 2026 GMT Subject: CN=77A5C569B2294D2C9A8D2E4BD781081A234F1C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:75:0c:fc:31:83:57:74:da:4c:8d:25:cc: 3f:b9:a9:25:6f:99:cb:63:22:db:d4:4d:51:42:a3: ef:56:68:d7:78:e7:f4:6d:de:ad:c1:c6:9c:8b:11: b6:fe:42:88:28:16:21:d3:2b:83:80:ca:3b:95:0f: 65:35:b2:5b:c8:7f:5b:00:41:5d:fa:ee:b5:e1:42: 80:9a:6b:2f:34:bb:97:b9:30:81:08:86:c9:ec:12: 3d:35:96:05:b1:12:8e:96:0f:f3:f3:6d:ea:ba:e9: b0:1b:ae:11:6a:03:76:fe:fd:95:5c:90:ab:9f:6a: 9a:72:47:1e:63:11:5e:92:3e:e7:f0:e5:c3:86:b3: 31:ca:f8:5c:04:ee:8b:81:0c:39:04:92:e1:cc:55: 9b:32:c9:0b:d1:2b:fa:01:41:c5:89:25:48:c3:4e: 36:5e:ab:e1:e5:3b:bf:a7:7e:4d:eb:60:7c:74:0c: a3:53:38:76:76:ee:9e:16:74:b4:97:20:23:5a:06: cf:7f:32:73:e6:b0:30:99:c0:ec:e1:c6:4c:db:0c: 78:36:1d:c6:2b:37:11:eb:08:b7:c7:23:b0:7c:9d: a9:32:fa:d4:f8:52:00:82:6f:47:eb:f3:6b:8a:e2: 3f:01:25:11:be:56:24:ca:8b:8f:d0:af:3e:f1:86: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:A5:C5:69:B2:29:4D:2C:9A:8D:2E:4B:D7:81:08:1A:23:4F:1C:24 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BbkqLcN59rGCWDmrKNTv4F5gAg2bjGKm6br6H1BG4ZYY/1/77A5C569B2294D2C9A8D2E4BD781081A234F1C24.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.32.0/22 45.71.76.0/22 IPv6: 2804:4308::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267544 Signature Algorithm: sha256WithRSAEncryption 75:68:96:33:e5:39:3f:29:55:ef:2b:d3:1f:57:dd:28:b8:ae: 25:de:15:d2:03:df:ca:4f:2c:0d:6c:71:6c:9f:ed:a7:08:00: cc:be:e8:1b:99:0e:bf:11:4a:9c:d2:ee:ab:ff:b1:4e:b7:cd: 39:f3:4b:9b:c0:68:57:8e:e4:86:e2:1e:fa:0a:c2:c7:87:ae: 81:e5:90:bf:da:9d:01:ea:ee:21:aa:b6:a0:47:b2:ea:85:33: ed:29:18:3c:c3:00:30:f8:34:df:84:86:29:03:c6:ce:e2:76: 26:64:cb:25:d5:c8:0e:2a:1c:00:e5:92:a0:cf:44:b4:ff:a7: c7:05:67:80:ea:20:ef:bc:1e:48:af:fd:0c:55:9a:ab:df:3f: 0a:e9:69:1b:f8:28:63:00:60:d3:d0:a4:42:18:f5:5f:bd:e8: 74:46:d4:c3:5d:0e:49:4f:4d:5a:74:96:1d:bf:7d:3e:1b:9e: 93:d1:a9:b2:e4:40:55:07:24:3f:b5:0a:62:14:aa:73:a3:4a: 8a:c7:69:e8:5b:af:8c:33:21:59:9b:30:ee:dd:e3:43:65:13: 39:f4:7e:55:9c:17:ed:29:74:76:aa:2c:9d:0b:95:69:49:4e: 76:10:9b:4b:23:02:43:43:aa:f3:04:8e:23:56:98:da:71:c6: 53:30:69:83 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUCL7eer9liZiAV3orbqF3atCTPhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MTRaFw0yNjAzMDQxODQwMTRaMDMxMTAvBgNV BAMTKDc3QTVDNTY5QjIyOTREMkM5QThEMkU0QkQ3ODEwODFBMjM0RjFDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wXUM/DGDV3TaTI0lzD+5qSVv mctjItvUTVFCo+9WaNd45/Rt3q3BxpyLEbb+QogoFiHTK4OAyjuVD2U1slvIf1sA QV367rXhQoCaay80u5e5MIEIhsnsEj01lgWxEo6WD/Pzbeq66bAbrhFqA3b+/ZVc kKufappyRx5jEV6SPufw5cOGszHK+FwE7ouBDDkEkuHMVZsyyQvRK/oBQcWJJUjD TjZeq+HlO7+nfk3rYHx0DKNTOHZ27p4WdLSXICNaBs9/MnPmsDCZwOzhxkzbDHg2 HcYrNxHrCLfHI7B8naky+tT4UgCCb0fr82uK4j8BJRG+ViTKi4/Qrz7xhhTtAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR3pcVpsilNLJqN LkvXgQgaI08cJDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmJr cUxjTjU5ckdDV0RtcktOVHY0RjVnQWcyYmpHS202YnI2SDFCRzRaWVkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmJr cUxjTjU5ckdDV0RtcktOVHY0RjVnQWcyYmpHS202YnI2SDFCRzRaWVkvMS83N0E1 QzU2OUIyMjk0RDJDOUE4RDJFNEJENzgxMDgxQTIzNEYxQzI0Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItRiADBAItR0wwDQQCAAIwBwMFACgEQwgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBUYMA0GCSqGSIb3DQEBCwUAA4IBAQB1aJYz5Tk/ KVXvK9MfV90ouK4l3hXSA9/KTywNbHFsn+2nCADMvugbmQ6/EUqc0u6r/7FOt805 80ubwGhXjuSG4h76CsLHh66B5ZC/2p0B6u4hqragR7LqhTPtKRg8wwAw+DTfhIYp A8bO4nYmZMsl1cgOKhwA5ZKgz0S0/6fHBWeA6iDvvB5Ir/0MVZqr3z8K6Wkb+Chj AGDT0KRCGPVfveh0RtTDXQ5JT01adJYdv30+G56T0amy5EBVByQ/tQpiFKpzo0qK x2noW6+MMyFZmzDu3eNDZRM59H5VnBftKXR2qiydC5VpSU52EJtLIwJDQ6rzBI4j VpjaccZTMGmD -----END CERTIFICATE-----Generated at Fri Apr 4 16:51:37 2025 by rpki-client