$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer File: 82564553AE299B22FAC12CA23483B4453FF22D0A.cer (raw, json) Hash identifier: Qeu3pkmx9jO5p/RiM3OMAJPZoSLiEKr/AQYX2+kRw88= Subject key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 41D4B2E1418EFB06B9AC5CC39327E70C558D98EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft caRepository: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 08:37:04 +0000 Certificate not after: Fri 06 Mar 2026 08:42:04 +0000 Subordinate resources: AS: 268250 IP: 45.236.236.0/22 IP: 2804:4e44::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d4:b2:e1:41:8e:fb:06:b9:ac:5c:c3:93:27:e7:0c:55:8d:98:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 08:37:04 2025 GMT Not After : Mar 6 08:42:04 2026 GMT Subject: CN=82564553AE299B22FAC12CA23483B4453FF22D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:76:dc:bf:b4:89:a2:f7:a8:34:8d:19:23: 96:34:be:95:fb:0e:66:e5:16:ef:da:29:13:ee:9c: cb:f7:1e:b1:64:ff:31:0d:4b:86:70:b9:11:15:1a: ff:b8:68:6b:b4:26:2c:9d:34:ab:68:ca:31:e1:c0: 50:a0:9d:d3:1c:b3:4a:c0:0d:4d:3d:48:43:6a:56: ab:bb:06:b8:1a:47:e5:1f:91:31:20:31:0b:67:40: 67:08:0d:f4:9d:91:12:d2:b7:32:60:fe:84:56:00: a1:f6:41:41:a8:9d:e9:27:47:98:91:b7:37:5e:ad: 8d:13:03:0f:a6:91:79:e8:50:d5:68:4f:ec:4f:fd: 30:b1:34:60:d4:30:82:e1:2e:7e:5c:c3:46:1b:9d: 42:42:af:0f:85:a9:0e:f6:b1:35:15:7f:fe:12:a7: a2:0d:e8:a3:e5:bb:bd:d1:9a:96:1f:24:19:19:74: f3:25:95:5e:a9:1b:d0:18:0c:ec:8e:ef:a5:25:ed: e8:77:e6:f8:e6:de:f4:3c:75:93:b4:71:42:6c:71: 9d:37:06:2e:ee:e7:e1:4e:6b:27:08:8d:97:16:78: 2d:1c:d1:99:77:0c:96:4a:3d:f0:6c:1d:ac:72:c1: 01:71:af:9a:2c:64:83:20:31:d4:89:07:a6:5f:96: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.236.0/22 IPv6: 2804:4e44::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268250 Signature Algorithm: sha256WithRSAEncryption 8c:35:5e:c1:f5:ad:87:b1:a4:33:bd:9d:11:c1:2f:8a:96:92: ed:4f:f1:5d:2e:0c:8e:09:38:20:25:9b:fb:af:02:30:fc:d6: 8c:c7:74:ec:17:ae:07:4f:83:67:11:f8:ed:4b:2d:12:f0:1b: 79:ca:ae:63:54:0a:7f:50:32:46:4a:dd:c2:5b:0f:23:8a:ee: 4a:65:30:10:74:a5:19:c5:19:e5:98:1e:0c:46:7c:13:78:46: a2:ed:d2:0c:9a:ab:d8:5b:49:0d:35:7d:b9:ef:92:d6:7b:78: 07:81:17:08:8b:d5:64:90:3e:11:9c:27:1d:ae:c2:0c:da:75: 00:9c:93:0d:35:4f:ef:32:0f:10:16:a5:ce:af:d2:74:32:8a: fa:4b:08:07:d9:ef:db:8b:c3:2f:3a:2d:49:3f:91:ef:7c:57: a0:48:03:56:1d:7a:95:34:80:33:1d:54:3a:17:e8:56:b2:2f: 79:b7:5a:39:aa:e8:67:66:75:4d:4c:bc:99:97:46:09:e4:31: d3:8b:33:3a:fc:40:e2:5b:b6:7e:b8:e5:f7:2a:76:c2:d6:da: 6c:a4:3b:e0:e9:a4:9b:67:2c:fd:00:7f:88:67:56:b8:e3:6a: 76:46:6f:4a:06:98:46:3f:ba:fc:66:9a:35:48:62:7f:59:76: e3:00:5f:b9 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUQdSy4UGO+wa5rFzDkyfnDFWNmOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwODM3MDRaFw0yNjAzMDYwODQyMDRaMDMxMTAvBgNV BAMTKDgyNTY0NTUzQUUyOTlCMjJGQUMxMkNBMjM0ODNCNDQ1M0ZGMjJEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHK3bcv7SJoveoNI0ZI5Y0vpX7 DmblFu/aKRPunMv3HrFk/zENS4ZwuREVGv+4aGu0JiydNKtoyjHhwFCgndMcs0rA DU09SENqVqu7BrgaR+UfkTEgMQtnQGcIDfSdkRLStzJg/oRWAKH2QUGoneknR5iR tzderY0TAw+mkXnoUNVoT+xP/TCxNGDUMILhLn5cw0YbnUJCrw+FqQ72sTUVf/4S p6IN6KPlu73RmpYfJBkZdPMllV6pG9AYDOyO76Ul7eh35vjm3vQ8dZO0cUJscZ03 Bi7u5+FOaycIjZcWeC0c0Zl3DJZKPfBsHaxywQFxr5osZIMgMdSJB6ZfloWBAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSCVkVTrimbIvrB LKI0g7RFP/ItCjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkZu N0xRMkhzbkEySmJUZExwNkZlRXBteWM4Vjh2UkVwRk0zQ3VhN25kdWMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkZu N0xRMkhzbkEySmJUZExwNkZlRXBteWM4Vjh2UkVwRk0zQ3VhN25kdWMvMS84MjU2 NDU1M0FFMjk5QjIyRkFDMTJDQTIzNDgzQjQ0NTNGRjIyRDBBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt7OwwDQQCAAIwBwMFACgETkQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBfaMA0GCSqGSIb3DQEBCwUAA4IBAQCMNV7B9a2HsaQzvZ0R wS+KlpLtT/FdLgyOCTggJZv7rwIw/NaMx3TsF64HT4NnEfjtSy0S8Bt5yq5jVAp/ UDJGSt3CWw8jiu5KZTAQdKUZxRnlmB4MRnwTeEai7dIMmqvYW0kNNX2575LWe3gH gRcIi9VkkD4RnCcdrsIM2nUAnJMNNU/vMg8QFqXOr9J0Mor6SwgH2e/bi8MvOi1J P5HvfFegSANWHXqVNIAzHVQ6F+hWsi95t1o5quhnZnVNTLyZl0YJ5DHTizM6/EDi W7Z+uOX3KnbC1tpspDvg6aSbZyz9AH+IZ1a442p2Rm9KBphGP7r8Zpo1SGJ/WXbj AF+5 -----END CERTIFICATE-----Generated at Fri Apr 4 20:20:45 2025 by rpki-client