$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.cer File: 822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.cer (raw, json) Hash identifier: 4IV8bRhrgEZrXnW9P6vZq+uff56yT0eMbDx2kbEs+qo= Subject key identifier: 82:2E:39:8C:D6:E1:F5:D6:EC:6D:82:E1:34:00:D0:66:B6:F4:C8:B1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2204209E623B039C836E9B81FF3E43A5FB4399A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft caRepository: rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 05 Aug 2024 19:15:24 +0000 Certificate not after: Mon 04 Aug 2025 19:20:24 +0000 Subordinate resources: AS: 265131 IP: 143.208.220.0/22 IP: 2804:2b04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:04:20:9e:62:3b:03:9c:83:6e:9b:81:ff:3e:43:a5:fb:43:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 5 19:15:24 2024 GMT Not After : Aug 4 19:20:24 2025 GMT Subject: CN=822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0b:74:e4:21:57:ce:66:f0:25:c1:9d:41:ac: 20:9c:8b:d9:8d:5e:c0:df:af:18:76:d0:e0:e6:d7: 7e:a0:3f:8c:e1:07:69:43:c7:9d:71:12:b3:f3:a6: bd:3e:a9:75:fc:81:e0:2a:40:6d:18:9b:d9:43:55: ce:db:b5:ff:3f:d1:57:5b:f9:30:5a:dc:b0:56:3b: 69:70:dd:f1:10:7d:b9:48:86:41:06:3b:73:cd:ab: b9:b5:05:18:12:d3:6c:82:cd:a0:90:aa:e1:7a:46: 68:2a:72:b4:cd:b3:17:c2:2d:4f:8b:7e:09:21:37: 0f:54:85:a5:09:14:6e:79:1f:f4:20:2d:1f:dd:0c: e8:b1:9d:d0:d8:59:02:b2:41:1b:0d:5a:cf:a1:93: cb:94:a8:7e:03:e7:51:d2:47:82:1e:b6:6b:d1:07: 35:53:62:9d:8d:0b:81:9f:fa:41:e7:cd:37:c3:c8: 36:32:43:6d:bd:bb:b9:37:1a:7d:3f:3e:90:0c:71: 18:ec:2f:ee:90:6d:9a:78:c1:4f:6f:49:b1:32:c2: 87:9a:6b:b9:ea:99:25:71:6f:99:7a:28:e2:b5:58: a5:f2:2a:83:60:72:d6:e2:f5:77:80:a1:26:91:42: ef:f4:1c:50:ae:6b:61:bd:6a:d8:4a:08:9d:c7:c3: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:2E:39:8C:D6:E1:F5:D6:EC:6D:82:E1:34:00:D0:66:B6:F4:C8:B1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gq3Ytaocto7ED6ZQonb8G88kVCy1pryHSoSGuTVVr6De/0/822E398CD6E1F5D6EC6D82E13400D066B6F4C8B1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.220.0/22 IPv6: 2804:2b04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265131 Signature Algorithm: sha256WithRSAEncryption 7e:aa:b1:35:87:f1:10:8f:8d:fc:e5:da:1b:c4:2f:d3:4a:c5: 2e:f6:e2:22:43:38:e6:2b:a9:d0:34:c6:c1:39:79:71:0f:c6: 8a:7a:db:bb:63:ed:da:c2:53:3e:67:d3:ba:0a:b9:07:f0:a4: 35:33:19:79:97:61:08:0d:3d:f2:d2:dd:af:14:16:85:59:6c: e9:6b:26:cd:08:b5:29:11:e2:ce:a8:d7:be:aa:1c:0e:7d:35: b3:98:ce:0d:04:15:22:ed:34:1d:73:bf:34:65:84:64:b6:a5: 08:17:8c:0f:69:75:a9:92:bd:6b:72:79:33:68:eb:7a:c4:c6: 79:e4:6f:b2:04:0a:4a:05:97:d7:53:68:12:0f:67:2d:ff:3c: 05:e1:a3:fd:ff:29:eb:c2:c6:4e:de:3a:de:c1:16:81:e5:ae: e8:66:b7:62:4a:47:32:04:35:67:d9:c5:42:e4:21:3f:3d:bc: 7e:89:21:c9:4b:11:0d:60:90:dc:54:cc:30:f7:6e:35:60:3b: 65:13:f8:26:75:59:5e:b7:c2:db:f7:3b:31:a1:39:cf:24:40: 3e:14:4f:38:4a:06:58:4a:73:d1:03:b8:e1:8e:d5:08:8e:a2: 9f:f4:4a:74:4d:a9:2d:5e:05:ed:aa:1a:84:44:80:ea:bc:8f: 48:22:a2:6b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIgQgnmI7A5yDbpuB/z5DpftDmaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDUxOTE1MjRaFw0yNTA4MDQxOTIwMjRaMDMxMTAvBgNV BAMTKDgyMkUzOThDRDZFMUY1RDZFQzZEODJFMTM0MDBEMDY2QjZGNEM4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpC3TkIVfOZvAlwZ1BrCCci9mN XsDfrxh20ODm136gP4zhB2lDx51xErPzpr0+qXX8geAqQG0Ym9lDVc7btf8/0Vdb +TBa3LBWO2lw3fEQfblIhkEGO3PNq7m1BRgS02yCzaCQquF6RmgqcrTNsxfCLU+L fgkhNw9UhaUJFG55H/QgLR/dDOixndDYWQKyQRsNWs+hk8uUqH4D51HSR4IetmvR BzVTYp2NC4Gf+kHnzTfDyDYyQ229u7k3Gn0/PpAMcRjsL+6QbZp4wU9vSbEywoea a7nqmSVxb5l6KOK1WKXyKoNgctbi9XeAoSaRQu/0HFCua2G9athKCJ3Hw17dAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCLjmM1uH11uxt guE0ANBmtvTIsTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Ez WXRhb2N0bzdFRDZaUW9uYjhHODhrVkN5MXByeUhTb1NHdVRWVnI2RGUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dx M1l0YW9jdG83RUQ2WlFvbmI4Rzg4a1ZDeTFwcnlIU29TR3VUVlZyNkRlLzAvODIy RTM5OENENkUxRjVENkVDNkQ4MkUxMzQwMEQwNjZCNkY0QzhCMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj9DcMA0EAgACMAcDBQAoBCsEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLqzANBgkqhkiG9w0BAQsFAAOCAQEAfqqxNYfxEI+N/OXa G8Qv00rFLvbiIkM45iup0DTGwTl5cQ/Ginrbu2Pt2sJTPmfTugq5B/CkNTMZeZdh CA098tLdrxQWhVls6WsmzQi1KRHizqjXvqocDn01s5jODQQVIu00HXO/NGWEZLal CBeMD2l1qZK9a3J5M2jresTGeeRvsgQKSgWX11NoEg9nLf88BeGj/f8p68LGTt46 3sEWgeWu6Ga3YkpHMgQ1Z9nFQuQhPz28fokhyUsRDWCQ3FTMMPduNWA7ZRP4JnVZ XrfC2/c7MaE5zyRAPhRPOEoGWEpz0QO44Y7VCI6in/RKdE2pLV4F7aoahESA6ryP SCKiaw== -----END CERTIFICATE-----Generated at Mon Feb 17 08:13:11 2025 by rpki-client