$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer File: 85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer (raw, json) Hash identifier: /1Ks4S6oDjMbx8+geUppl1kDjorJds2g1MyToCIYKkU= Subject key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5CF676C0757E19F96974D8EBDD2C8C343FAE5F9C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft caRepository: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Dec 2024 15:35:18 +0000 Certificate not after: Wed 03 Dec 2025 15:40:18 +0000 Subordinate resources: AS: 53153 IP: 138.204.220.0/22 IP: 186.209.96.0/20 IP: 187.61.96.0/20 IP: 2804:738::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f6:76:c0:75:7e:19:f9:69:74:d8:eb:dd:2c:8c:34:3f:ae:5f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 4 15:35:18 2024 GMT Not After : Dec 3 15:40:18 2025 GMT Subject: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:c9:c4:fc:27:fa:6e:87:da:56:b8:24:bd: 81:5c:56:c3:2e:41:9d:c0:e6:7f:22:11:cd:0b:20: a1:ce:72:8d:1d:2e:b1:2c:ca:1e:75:f9:73:16:3b: 6c:46:3f:82:78:74:fa:49:69:8d:4b:e3:4d:0b:58: e0:8e:ce:82:e7:64:47:3f:b2:84:5b:6a:a4:e3:02: 92:e2:d3:ff:88:fd:33:87:43:09:7f:c4:b7:01:72: 56:fa:01:68:76:55:a6:85:f0:17:16:b8:93:51:10: 80:7d:e6:99:54:75:3e:c8:1f:06:23:82:6e:c5:4b: 65:5c:6d:b0:cb:a5:52:94:c8:44:71:dd:8c:72:3b: 11:61:82:16:20:61:ac:2e:3e:02:3e:b7:81:20:b0: 8c:05:c8:2e:05:ec:c2:7b:52:c6:be:c2:c7:8f:e8: fa:04:db:2b:b3:d3:56:2d:f9:3d:67:62:a2:19:46: d2:9e:0b:c3:ef:b8:ac:4a:46:21:3c:24:fd:19:48: ac:b7:cf:7a:35:50:28:b9:d6:87:29:64:85:f5:7b: 96:ba:8e:35:d4:08:ed:4e:95:f2:fa:c0:97:6f:42: f8:bb:73:1c:82:7f:b0:88:24:52:ab:ce:9c:9a:0c: ed:fd:93:f1:07:97:b9:c5:8c:2e:77:3f:03:2d:33: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.220.0/22 186.209.96.0/20 187.61.96.0/20 IPv6: 2804:738::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53153 Signature Algorithm: sha256WithRSAEncryption 6b:03:d5:74:aa:6d:fe:38:75:67:8c:6b:30:b8:06:f6:7b:4d: 0c:c7:9d:65:cc:7b:9e:08:82:fc:be:6c:9e:9f:15:a7:12:1b: 89:22:2b:25:a4:ab:21:cc:37:36:31:a7:17:6e:ad:8c:ff:41: 41:37:78:9d:6f:fd:3c:cf:db:64:89:0d:67:62:bf:cc:29:fa: 39:aa:27:b3:ed:a3:09:43:54:50:7f:52:6e:f5:2c:5d:cc:d7: ec:f2:cb:b5:dc:ac:78:7d:d9:65:40:af:1e:bf:90:0c:ef:42: d8:40:4e:1a:67:63:bf:1e:57:66:4b:97:bf:04:c2:fc:10:af: fc:0b:bb:2a:8d:da:c6:b2:6f:19:a9:21:80:09:13:8b:6c:48: 53:c2:a0:d3:b2:d0:77:4f:ec:a4:e8:3a:6b:84:01:4b:ad:a2: 0e:10:0a:8b:dc:4b:1a:04:1d:01:34:02:64:3a:ea:48:f1:87: 2d:3b:be:0b:2e:41:a5:15:b0:6e:23:8d:3e:41:72:58:5b:66: c7:e3:d8:02:10:4e:e8:6e:b6:8b:4f:1a:ce:c1:f6:05:c0:08: 90:9b:a1:a1:b6:0d:7f:73:a3:37:51:a6:70:a2:52:14:1b:26: a7:f7:a1:ab:c2:f4:66:69:5f:00:6d:49:67:f1:bc:0e:9c:e5: ea:7e:57:b8 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUXPZ2wHV+GflpdNjr3SyMND+uX5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMDQxNTM1MThaFw0yNTEyMDMxNTQwMThaMDMxMTAvBgNV BAMTKDg1Q0I4MzhFMzRCNDFFQUYyQUExOEVDQ0IyODEyOEI3NzVFN0RGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPcnE/Cf6bofaVrgkvYFcVsMu QZ3A5n8iEc0LIKHOco0dLrEsyh51+XMWO2xGP4J4dPpJaY1L400LWOCOzoLnZEc/ soRbaqTjApLi0/+I/TOHQwl/xLcBclb6AWh2VaaF8BcWuJNREIB95plUdT7IHwYj gm7FS2VcbbDLpVKUyERx3YxyOxFhghYgYawuPgI+t4EgsIwFyC4F7MJ7Usa+wseP 6PoE2yuz01Yt+T1nYqIZRtKeC8PvuKxKRiE8JP0ZSKy3z3o1UCi51ocpZIX1e5a6 jjXUCO1OlfL6wJdvQvi7cxyCf7CIJFKrzpyaDO39k/EHl7nFjC53PwMtMwHvAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFy4OONLQeryqh jsyygSi3deffCDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5z ZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJCSmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJu c2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAvODVD QjgzOEUzNEI0MUVBRjJBQTE4RUNDQjI4MTI4Qjc3NUU3REYwOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCiszcAwQEutFgAwQEuz1gMA0EAgACMAcDBQAoBAc4 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPoTANBgkqhkiG9w0BAQsFAAOCAQEA awPVdKpt/jh1Z4xrMLgG9ntNDMedZcx7ngiC/L5snp8VpxIbiSIrJaSrIcw3NjGn F26tjP9BQTd4nW/9PM/bZIkNZ2K/zCn6Oaons+2jCUNUUH9SbvUsXczX7PLLtdys eH3ZZUCvHr+QDO9C2EBOGmdjvx5XZkuXvwTC/BCv/Au7Ko3axrJvGakhgAkTi2xI U8Kg07LQd0/spOg6a4QBS62iDhAKi9xLGgQdATQCZDrqSPGHLTu+Cy5BpRWwbiON PkFyWFtmx+PYAhBO6G62i08azsH2BcAIkJuhobYNf3OjN1GmcKJSFBsmp/ehq8L0 ZmlfAG1JZ/G8Dpzl6n5XuA== -----END CERTIFICATE-----Generated at Tue Apr 15 09:37:59 2025 by rpki-client