$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer File: 7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer (raw, json) Hash identifier: aqERpmrR+BawUfDy2Waelmh5rr23x2frtUmdGRwDSNg= Subject key identifier: 7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 419640A9B3497F3751AB4E74CE7C0BB12A196E28 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft caRepository: rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 21 Dec 2024 14:31:10 +0000 Certificate not after: Sat 20 Dec 2025 14:36:10 +0000 Subordinate resources: AS: 270755 IP: 186.233.0.0/22 IP: 2804:70e8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:96:40:a9:b3:49:7f:37:51:ab:4e:74:ce:7c:0b:b1:2a:19:6e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 21 14:31:10 2024 GMT Not After : Dec 20 14:36:10 2025 GMT Subject: CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:9b:44:8b:08:1f:f7:b3:47:2c:d4:e6:85: da:cb:c0:65:db:18:23:10:eb:fd:1a:89:6c:bc:86: 07:7e:c5:23:17:de:6b:52:d7:36:f1:c5:06:70:0e: 10:03:82:0c:fd:e7:6a:73:99:6f:bf:9a:62:0c:9a: 9b:d2:44:51:8b:9a:52:a3:0a:60:9d:13:e4:4f:d3: 16:f5:7b:9b:1d:ab:8b:37:52:b0:07:ff:a1:87:f6: af:e5:f7:b2:87:27:cb:35:03:c8:25:e2:3b:21:7b: 08:cd:43:b9:86:06:22:4a:b6:2d:bc:12:ed:40:aa: dc:1b:7d:78:bc:76:1f:b2:16:00:5d:9e:05:be:45: a0:6a:f1:fb:e4:c8:c1:cc:e1:fc:96:41:46:6c:f0: 8f:1c:82:0c:fc:64:3d:ad:e9:1a:0e:53:55:ab:d1: 05:a4:45:3f:9a:b2:74:21:ae:17:cf:d2:67:e6:9d: 41:b4:be:f3:65:1d:9c:f8:dc:b8:aa:c7:c9:bb:78: c4:a0:c3:fb:9e:2c:6a:9b:00:0e:a2:a8:89:25:be: b7:3a:26:fd:71:8f:68:5c:57:32:4b:6e:d2:a7:7b: 36:f9:7b:4f:08:7d:0e:ca:2a:f3:24:c0:94:63:6a: 41:43:57:2f:41:2e:88:80:66:64:f6:68:6c:9a:80: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.233.0.0/22 IPv6: 2804:70e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270755 Signature Algorithm: sha256WithRSAEncryption b2:3a:4e:2b:42:a9:d8:8a:98:3d:c4:25:4f:46:d3:d0:fc:18: 60:db:b7:ae:28:66:8a:58:2b:94:92:43:a0:1b:85:b0:d0:ca: cf:cc:5b:d5:e0:d2:a5:ed:a2:5d:55:10:cd:78:be:f1:f0:cc: 55:04:36:09:23:9f:9b:55:ad:a1:3e:59:19:9a:e6:d5:45:84: 5d:82:8f:52:55:61:f7:13:70:4d:48:c6:e8:7f:eb:66:57:5b: f3:7d:f8:13:50:2b:38:b8:53:c9:26:32:88:f8:a5:10:1b:55: 88:ca:42:ef:62:6a:3a:5a:26:df:b6:bc:24:1f:47:c1:29:88: 89:e4:1d:76:77:c7:29:13:ea:5e:db:df:a7:92:0d:d2:52:77: d5:c0:50:2c:7d:9a:e7:3a:6b:bb:7d:2f:1d:ce:d9:11:d1:65: d5:32:86:be:57:22:d7:d3:02:4a:85:73:e3:94:36:8d:c5:18: b6:c5:ae:dc:35:a8:f4:34:3b:8d:e1:02:4f:f7:60:c4:6f:31: ec:d7:c6:33:73:4a:c8:a1:a8:b1:c6:a0:9e:cb:7e:d3:c4:32: 55:d7:75:a4:99:42:db:2e:a3:d4:ff:4f:aa:98:02:28:ac:89: ae:95:ab:7e:b4:3c:ca:4c:15:e4:b8:ff:19:f6:47:81:c4:82: cb:d8:21:89 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQZZAqbNJfzdRq050znwLsSoZbigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMjExNDMxMTBaFw0yNTEyMjAxNDM2MTBaMDMxMTAvBgNV BAMTKDdGN0NEMUU1RDBDMTYzMUVBM0M5NTg0NzhDNzc4MkQwNEVCN0ZCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8G5tEiwgf97NHLNTmhdrLwGXb GCMQ6/0aiWy8hgd+xSMX3mtS1zbxxQZwDhADggz952pzmW+/mmIMmpvSRFGLmlKj CmCdE+RP0xb1e5sdq4s3UrAH/6GH9q/l97KHJ8s1A8gl4jshewjNQ7mGBiJKti28 Eu1AqtwbfXi8dh+yFgBdngW+RaBq8fvkyMHM4fyWQUZs8I8cggz8ZD2t6RoOU1Wr 0QWkRT+asnQhrhfP0mfmnUG0vvNlHZz43Liqx8m7eMSgw/ueLGqbAA6iqIklvrc6 Jv1xj2hcVzJLbtKnezb5e08IfQ7KKvMkwJRjakFDVy9BLoiAZmT2aGyagBQpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/fNHl0MFjHqPJ WEeMd4LQTrf7NzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnZ3 eWNncWVpTm5HYlNkOVhCSEttdHQzaHd5ekpHOHE0cEdDWWNNaVJjQ1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ2 d3ljZ3FlaU5uR2JTZDlYQkhLbXR0M2h3eXpKRzhxNHBHQ1ljTWlSY0NTLzAvN0Y3 Q0QxRTVEMEMxNjMxRUEzQzk1ODQ3OEM3NzgyRDA0RUI3RkIzNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCuukAMA0EAgACMAcDBQAoBHDoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhozANBgkqhkiG9w0BAQsFAAOCAQEAsjpOK0Kp2IqYPcQl T0bT0PwYYNu3rihmilgrlJJDoBuFsNDKz8xb1eDSpe2iXVUQzXi+8fDMVQQ2CSOf m1WtoT5ZGZrm1UWEXYKPUlVh9xNwTUjG6H/rZldb8334E1ArOLhTySYyiPilEBtV iMpC72JqOlom37a8JB9HwSmIieQddnfHKRPqXtvfp5IN0lJ31cBQLH2a5zpru30v Hc7ZEdFl1TKGvlci19MCSoVz45Q2jcUYtsWu3DWo9DQ7jeECT/dgxG8x7NfGM3NK yKGoscagnst+08QyVdd1pJlC2y6j1P9PqpgCKKyJrpWrfrQ8ykwV5Lj/GfZHgcSC y9ghiQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:06 2025 by rpki-client