$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer (raw, json) Hash identifier: JXlCnh+UFoDDR7DuTNcGxL3p5o8y51rOuimnxkmLpPA= Subject key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7FBCD8B36EE7AC4D099C6DFED201F655E6B78989 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft caRepository: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:14:26 +0000 Certificate not after: Fri 06 Mar 2026 02:19:26 +0000 Subordinate resources: AS: 52576 IP: 177.86.200.0/21 IP: 2804:cf0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:bc:d8:b3:6e:e7:ac:4d:09:9c:6d:fe:d2:01:f6:55:e6:b7:89:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:14:26 2025 GMT Not After : Mar 6 02:19:26 2026 GMT Subject: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:24:28:4a:2f:77:c1:68:9d:e8:3b:84:ba: 5e:ea:0b:09:5c:e2:07:7d:77:b8:31:ff:a9:60:6b: 6f:2d:a9:7a:79:5f:6b:7d:c4:da:ed:58:a3:ea:01: 73:bd:38:1f:cf:0e:29:99:8d:32:7c:ab:c5:81:ad: c5:d3:95:9f:c5:35:bc:29:cc:57:35:74:bf:c0:d0: 7f:ec:7b:5e:a4:90:bd:16:92:a9:70:8d:59:9a:fd: 3f:a1:7f:8c:8f:7c:fd:21:4e:a6:3d:50:42:71:75: fe:b1:d2:f3:d9:85:6e:72:46:8b:20:01:ce:0e:58: e2:2a:56:4c:d1:8d:a8:6c:02:44:9c:94:e4:17:8a: 58:4e:cc:2f:2b:e2:ca:f7:c6:c2:86:fb:80:78:86: 82:08:c3:51:ec:8a:25:68:75:aa:43:82:17:62:ce: fe:64:a0:51:2d:b7:36:e2:ce:b7:bd:d1:83:cb:f9: 06:81:95:43:5f:ab:3d:24:75:f7:c8:8e:64:d3:2f: 51:e7:08:9d:cf:de:a2:2c:3c:47:68:42:ed:48:19: d6:2a:d4:e9:97:b6:e6:64:85:36:15:6d:82:9f:a8: 61:8d:4d:55:32:1d:d6:2d:9d:a4:c6:4e:bc:20:f3: 69:ac:41:61:de:3a:6c:5b:38:8d:1e:91:1b:f8:10: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.86.200.0/21 IPv6: 2804:cf0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52576 Signature Algorithm: sha256WithRSAEncryption 32:47:30:4c:c4:0c:d8:b9:c1:e3:12:28:d0:5e:d4:0b:e9:c4: 61:17:43:81:cd:1f:13:f4:32:58:d9:1e:71:5c:a1:2e:bd:1e: ea:9a:4b:0d:68:31:86:27:83:43:1a:0b:4c:b2:d5:a7:45:bf: 2d:32:eb:aa:d5:79:d1:b6:95:e7:e0:de:6f:c4:b9:7e:4a:91: 72:fe:38:70:d3:39:c8:43:ce:5f:ef:f3:a5:98:1c:63:e9:91: dd:6c:53:0e:98:49:e1:80:af:17:97:3d:52:07:6c:79:d0:d3: ab:1b:d8:67:3c:c7:58:d7:fe:6d:14:81:4a:a0:78:a2:9b:49: 86:fc:86:ab:fc:d0:ef:f9:31:47:fb:ba:04:85:6e:76:15:c9: 90:44:85:0e:f2:ab:1d:60:1b:68:b0:36:ad:7b:62:cc:a1:c7: ab:4c:6e:14:ee:31:b1:94:2c:dc:1f:6e:27:29:2b:6e:c5:b2: 23:d7:5b:51:39:aa:23:ce:44:ba:7f:ce:ef:80:fb:7e:ac:a8: a2:1b:d4:cd:ac:de:b5:4d:39:5e:64:5a:61:c2:c9:96:be:d1: 24:fd:30:d3:89:a8:d3:d2:fc:9e:09:45:e8:f0:b9:1e:70:72: f6:93:06:25:34:da:49:a2:de:5c:f1:9d:27:ac:b8:01:16:f3: 1c:3e:5b:5f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUf7zYs27nrE0JnG3+0gH2Vea3iYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjE0MjZaFw0yNjAzMDYwMjE5MjZaMDMxMTAvBgNV BAMTKDg1QUM3RkYwNzIyNDA5MTE2QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3iQoSi93wWid6DuEul7qCwlc 4gd9d7gx/6lga28tqXp5X2t9xNrtWKPqAXO9OB/PDimZjTJ8q8WBrcXTlZ/FNbwp zFc1dL/A0H/se16kkL0WkqlwjVma/T+hf4yPfP0hTqY9UEJxdf6x0vPZhW5yRosg Ac4OWOIqVkzRjahsAkSclOQXilhOzC8r4sr3xsKG+4B4hoIIw1HsiiVodapDghdi zv5koFEttzbizre90YPL+QaBlUNfqz0kdffIjmTTL1HnCJ3P3qIsPEdoQu1IGdYq 1OmXtuZkhTYVbYKfqGGNTVUyHdYtnaTGTrwg82msQWHeOmxbOI0ekRv4EOoZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFrH/wciQJEWwe PED+R+qmA93ZlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWNu YTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVj bmE2ZVJNOVRzV2dyYzJ2U3hlN0E0TDNqYmdKSGpvTlhFVUo2Q01HSlhSLzEvODVB QzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYwM0RERDk5NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsVbIMA0EAgACMAcDBQAoBAzwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDNYDANBgkqhkiG9w0BAQsFAAOCAQEAMkcwTMQM2LnB4xIo 0F7UC+nEYRdDgc0fE/QyWNkecVyhLr0e6ppLDWgxhieDQxoLTLLVp0W/LTLrqtV5 0baV5+Deb8S5fkqRcv44cNM5yEPOX+/zpZgcY+mR3WxTDphJ4YCvF5c9UgdsedDT qxvYZzzHWNf+bRSBSqB4optJhvyGq/zQ7/kxR/u6BIVudhXJkESFDvKrHWAbaLA2 rXtizKHHq0xuFO4xsZQs3B9uJykrbsWyI9dbUTmqI85Eun/O74D7fqyoohvUzaze tU05XmRaYcLJlr7RJP0w04mo09L8nglF6PC5HnBy9pMGJTTaSaLeXPGdJ6y4ARbz HD5bXw== -----END CERTIFICATE-----Generated at Fri Apr 4 01:37:55 2025 by rpki-client