$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer File: 835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer (raw, json) Hash identifier: tB0SxRC//xIHRhD9r18oJszLxnzOD/54oL6cN6Dxgeo= Subject key identifier: 83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B5FB13813A00B1AD601F46265CFCADA5A8C183D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft caRepository: rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 18:45:42 +0000 Certificate not after: Thu 05 Mar 2026 18:50:42 +0000 Subordinate resources: AS: 262880 IP: 168.197.52.0/22 IP: 168.227.28.0/22 IP: 177.10.232.0/21 IP: 2804:2ee8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5f:b1:38:13:a0:0b:1a:d6:01:f4:62:65:cf:ca:da:5a:8c:18:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 18:45:42 2025 GMT Not After : Mar 5 18:50:42 2026 GMT Subject: CN=835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:66:8c:46:bc:c4:18:ea:d3:39:c5:3d:3e: 60:2b:35:48:13:c7:3a:08:69:b4:10:c8:bc:44:62: 12:96:d4:60:3f:02:af:9c:11:31:b4:07:a8:b2:b1: 78:e7:94:22:ab:76:35:db:3d:b8:21:63:94:0b:52: 1b:3d:8f:6f:7e:82:c7:55:cb:a2:7f:af:be:c4:2c: b5:a9:28:c9:91:d8:6f:59:0e:86:66:e4:fb:bc:1b: f9:31:69:af:ec:2f:71:a7:8c:76:73:ef:d5:1c:9f: cd:c0:3f:e4:c7:20:c5:80:c9:3f:6d:23:ab:d2:3c: 94:6f:e2:52:ac:fb:09:f0:95:9a:6d:fe:a5:a7:bf: 62:a5:a9:3c:3d:e4:40:3a:d8:24:e4:73:67:d9:08: 80:c0:ef:a4:eb:8b:38:13:df:b7:b4:41:1d:a5:73: 4a:7e:54:83:47:8a:4f:eb:cc:d3:38:06:98:a9:12: a1:25:92:f8:be:b2:97:56:0d:c1:07:a9:73:96:06: af:3a:0d:1d:bd:c7:ec:ba:0c:74:09:18:0a:33:0a: 7c:75:f4:89:e7:18:2e:e7:6e:9d:f9:75:62:de:f8: c1:e7:58:31:c5:67:8a:af:e4:c5:13:d0:43:e6:7e: 0c:1b:ea:5f:f7:91:bb:ff:d5:21:76:b9:d4:80:4d: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.52.0/22 168.227.28.0/22 177.10.232.0/21 IPv6: 2804:2ee8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262880 Signature Algorithm: sha256WithRSAEncryption 1c:1b:58:f3:8c:35:88:4b:c1:96:c0:ec:65:f9:9a:14:d4:72: 4e:8b:6f:db:34:c7:3a:a9:73:51:0f:89:68:d4:99:92:16:ab: 4b:a6:d9:87:92:8b:d6:90:69:cd:f7:ec:1a:a0:ac:f3:94:9e: 07:d8:2e:f2:d0:8b:27:1b:60:e5:c9:87:66:5b:cb:f7:b4:5d: f4:94:1b:68:23:14:0a:ac:29:ea:48:ce:44:61:01:d5:34:9d: bb:e1:fc:7b:f2:4e:f3:f2:81:35:a8:d3:d2:0e:aa:f4:04:92: 6f:54:d2:38:44:dd:82:42:6f:cc:57:ab:96:d6:14:25:3e:bf: b4:17:b1:2b:e1:ee:c4:70:28:fd:02:c8:fb:59:20:01:c5:9d: a0:03:80:a3:72:45:68:8e:43:44:b0:b7:75:73:0f:6a:7e:98: aa:94:3f:cd:ff:bb:2b:13:6f:ca:db:00:04:2b:f2:a2:2f:3d: 3f:10:63:57:8e:4a:87:f2:e0:6e:97:b2:29:90:d6:cb:7e:13: f4:64:9b:e1:82:a3:40:d5:ae:b9:64:fe:b6:42:a7:87:a6:82: 87:2a:82:07:6c:73:86:89:42:6c:c6:27:a0:40:3a:45:1a:05: f0:c6:11:de:c6:6c:5e:27:ae:89:53:95:02:1b:ae:1f:12:30: b4:75:e2:1d -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUO1+xOBOgCxrWAfRiZc/K2lqMGD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxODQ1NDJaFw0yNjAzMDUxODUwNDJaMDMxMTAvBgNV BAMTKDgzNUExQUU1MUI2MDNEQ0VCM0ZDQTk4RUIyRkYzQ0M5NEI3OThDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0WaMRrzEGOrTOcU9PmArNUgT xzoIabQQyLxEYhKW1GA/Aq+cETG0B6iysXjnlCKrdjXbPbghY5QLUhs9j29+gsdV y6J/r77ELLWpKMmR2G9ZDoZm5Pu8G/kxaa/sL3GnjHZz79Ucn83AP+THIMWAyT9t I6vSPJRv4lKs+wnwlZpt/qWnv2KlqTw95EA62CTkc2fZCIDA76TrizgT37e0QR2l c0p+VINHik/rzNM4BpipEqElkvi+spdWDcEHqXOWBq86DR29x+y6DHQJGAozCnx1 9InnGC7nbp35dWLe+MHnWDHFZ4qv5MUT0EPmfgwb6l/3kbv/1SF2udSATXK1AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDWhrlG2A9zrP8 qY6y/zzJS3mMETAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFVr VVNMaFVDTkQ0WXdjNks4bVgxTGNTVW5tSnBWY1hSTTE2OU5paDZpRHcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhV a1VTTGhVQ05ENFl3YzZLOG1YMUxjU1VubUpwVmNYUk0xNjlOaWg2aUR3LzEvODM1 QTFBRTUxQjYwM0RDRUIzRkNBOThFQjJGRjNDQzk0Qjc5OEMxMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCqMU0AwQCqOMcAwQDsQroMA0EAgACMAcDBQAoBC7o MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQC4DANBgkqhkiG9w0BAQsFAAOCAQEA HBtY84w1iEvBlsDsZfmaFNRyTotv2zTHOqlzUQ+JaNSZkharS6bZh5KL1pBpzffs GqCs85SeB9gu8tCLJxtg5cmHZlvL97Rd9JQbaCMUCqwp6kjORGEB1TSdu+H8e/JO 8/KBNajT0g6q9ASSb1TSOETdgkJvzFerltYUJT6/tBexK+HuxHAo/QLI+1kgAcWd oAOAo3JFaI5DRLC3dXMPan6YqpQ/zf+7KxNvytsABCvyoi89PxBjV45Kh/Lgbpey KZDWy34T9GSb4YKjQNWuuWT+tkKnh6aChyqCB2xzholCbMYnoEA6RRoF8MYR3sZs XieuiVOVAhuuHxIwtHXiHQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:14 2025 by rpki-client