$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer File: 806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.cer (raw, json) Hash identifier: 3FOR1ELLWEI57m7M2V4SESmiHDDJ70L7Vs50kl4z4CU= Subject key identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0D1C5445F2B079DE129E45CB70B031789318C2F5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft caRepository: rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 20:31:06 +0000 Certificate not after: Thu 05 Mar 2026 20:36:06 +0000 Subordinate resources: AS: 272169 IP: 2804:82fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 06:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1c:54:45:f2:b0:79:de:12:9e:45:cb:70:b0:31:78:93:18:c2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 20:31:06 2025 GMT Not After : Mar 5 20:36:06 2026 GMT Subject: CN=806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:44:1a:75:de:c2:25:61:16:07:f6:0a:1b: 64:af:25:44:96:4a:a7:47:b8:37:36:0b:2c:2d:05: ff:56:3a:62:da:20:e0:1b:83:d4:2c:16:a5:56:7f: 08:d9:91:38:5b:d0:a5:91:46:c7:82:8d:d9:74:40: 3e:aa:0e:1f:66:b8:ce:38:0f:1e:b7:53:a7:4f:f7: 93:34:41:2f:d7:f2:6d:c8:b3:b8:e9:8f:36:3f:32: 6d:01:c8:1f:66:29:af:bf:10:23:18:14:e0:5b:c4: e1:5f:a8:d9:91:de:c3:5a:d4:be:c4:c1:b9:7e:53: 9f:33:0b:45:66:ab:93:22:25:c3:dd:84:bb:b8:65: 4b:4b:0c:c2:ae:d9:55:58:bc:a1:ba:b5:4f:f5:ae: d2:73:ca:d4:fa:c0:65:63:b1:37:8a:63:21:f9:c6: 0c:f0:42:95:91:8d:2a:ba:75:98:ea:7b:ca:c7:80: 92:6f:8c:a1:d5:85:ba:36:84:3a:24:ad:09:5b:c2: e0:a9:ed:30:b4:4b:7c:c1:02:15:ec:ba:0a:55:42: 9d:04:a2:37:f7:b2:05:a4:6b:e0:f3:85:5c:d5:4e: 84:5d:23:16:f2:1c:ad:13:06:0d:57:55:00:3b:8e: 4c:4a:22:53:83:fe:4c:ba:71:1a:50:71:a8:6c:4f: b9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:6E:0B:40:C6:7F:11:AA:3B:FD:31:E2:84:4B:8D:C3:A0:CA:14:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/1/806E0B40C67F11AA3BFD31E2844B8DC3A0CA1452.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:82fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272169 Signature Algorithm: sha256WithRSAEncryption d1:c0:2e:73:8f:99:fe:b2:b8:05:25:92:d3:d1:81:a2:74:59: 9c:4b:ab:1c:08:4b:f6:61:56:d7:06:a0:aa:78:9b:bb:6c:6b: f8:e3:44:11:20:a6:0b:9a:5f:c4:4a:8f:f7:42:41:35:70:f5: 13:2d:e3:90:02:26:e5:fd:33:c5:ae:c2:2a:51:89:90:cf:28: 1a:8f:7d:f6:44:4a:1e:19:6b:54:b3:c1:2d:aa:32:ed:bd:18: f7:8b:fe:c7:28:ee:4c:6b:1f:d7:b7:3a:a8:c9:55:69:10:e4: 75:88:fc:ae:b6:3b:00:10:95:47:c1:fd:8d:2a:97:04:66:e8: ed:28:4f:48:9a:6f:f0:73:28:c7:1f:31:9d:bb:7d:67:83:54: d7:91:63:92:a2:bb:25:b9:00:57:91:60:b9:d7:8c:60:01:7a: 50:49:f0:09:c3:1a:c9:60:d8:28:8a:3c:01:2e:fc:2c:62:69: 61:ee:ce:ff:92:f1:06:72:5e:65:7f:ff:4a:92:6d:c4:dd:94: 37:49:28:13:bd:92:97:5f:21:9f:7f:6d:19:9d:f0:98:c3:02: b9:a1:a3:3d:7e:e7:a6:14:b6:5d:1a:a1:fb:79:bd:44:9a:61: b1:5b:5e:d0:71:11:26:93:eb:69:00:e4:3a:14:70:51:e0:82: e6:f7:da:82 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUDRxURfKwed4SnkXLcLAxeJMYwvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMDMxMDZaFw0yNjAzMDUyMDM2MDZaMDMxMTAvBgNV BAMTKDgwNkUwQjQwQzY3RjExQUEzQkZEMzFFMjg0NEI4REMzQTBDQTE0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTUQadd7CJWEWB/YKG2SvJUSW SqdHuDc2CywtBf9WOmLaIOAbg9QsFqVWfwjZkThb0KWRRseCjdl0QD6qDh9muM44 Dx63U6dP95M0QS/X8m3Is7jpjzY/Mm0ByB9mKa+/ECMYFOBbxOFfqNmR3sNa1L7E wbl+U58zC0Vmq5MiJcPdhLu4ZUtLDMKu2VVYvKG6tU/1rtJzytT6wGVjsTeKYyH5 xgzwQpWRjSq6dZjqe8rHgJJvjKHVhbo2hDokrQlbwuCp7TC0S3zBAhXsugpVQp0E ojf3sgWka+DzhVzVToRdIxbyHK0TBg1XVQA7jkxKIlOD/ky6cRpQcahsT7npAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSAbgtAxn8Rqjv9 MeKES43DoMoUUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ25T RWE0SGhDWlFiTHM4c2d5YWF4clkyaGZFVTdQVGdkbnNlNExxblJNdVgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nu U0VhNEhoQ1pRYkxzOHNneWFheHJZMmhmRVU3UFRnZG5zZTRMcW5STXVYLzEvODA2 RTBCNDBDNjdGMTFBQTNCRkQzMUUyODQ0QjhEQzNBMENBMTQ1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASC/DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME JykwDQYJKoZIhvcNAQELBQADggEBANHALnOPmf6yuAUlktPRgaJ0WZxLqxwIS/Zh VtcGoKp4m7tsa/jjRBEgpguaX8RKj/dCQTVw9RMt45ACJuX9M8WuwipRiZDPKBqP ffZESh4Za1SzwS2qMu29GPeL/sco7kxrH9e3OqjJVWkQ5HWI/K62OwAQlUfB/Y0q lwRm6O0oT0iab/BzKMcfMZ27fWeDVNeRY5KiuyW5AFeRYLnXjGABelBJ8AnDGslg 2CiKPAEu/CxiaWHuzv+S8QZyXmV//0qSbcTdlDdJKBO9kpdfIZ9/bRmd8JjDArmh oz1+56YUtl0aoft5vUSaYbFbXtBxESaT62kA5DoUcFHggub32oI= -----END CERTIFICATE-----Generated at Mon Apr 7 07:21:28 2025 by rpki-client