$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer File: 871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.cer (raw, json) Hash identifier: hSUiGmj/TZgqtegzh211aK3C1iCqlv6G3KXjiAIQUYM= Subject key identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7FB16CE76BEAC764C062DD4DE589F5C2A0C08BCA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft caRepository: rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 24 Mar 2025 14:37:07 +0000 Certificate not after: Mon 23 Mar 2026 14:42:07 +0000 Subordinate resources: AS: 269155 IP: 45.180.208.0/22 IP: 2804:6040::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 23:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b1:6c:e7:6b:ea:c7:64:c0:62:dd:4d:e5:89:f5:c2:a0:c0:8b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 24 14:37:07 2025 GMT Not After : Mar 23 14:42:07 2026 GMT Subject: CN=871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:11:c5:5f:0c:f2:02:b1:0a:0a:42:02:29: bc:f6:6a:fe:c2:be:66:b3:e9:a6:08:3a:aa:ab:8c: 43:c4:65:d4:cb:7b:7a:b2:9b:ee:60:60:1e:47:c7: 69:9f:0a:35:68:f9:89:ee:73:9d:01:6e:6c:b2:af: 08:a1:1f:b0:d6:59:c7:7a:c0:5f:92:4d:d0:c9:6d: b8:05:cc:86:2c:ca:54:07:74:1f:d6:1a:a1:59:a0: 83:29:80:54:e4:ec:6c:e7:3f:5a:e2:db:9a:44:c4: 04:09:40:2d:dd:da:ff:2e:d9:e9:24:b7:47:4b:e4: 40:f9:55:03:12:9f:9f:65:ca:4a:96:a3:e3:2f:49: 22:f0:36:a1:74:1e:ad:a8:7c:7b:7c:f5:a9:0f:e3: 75:9b:c9:52:18:6a:50:47:9e:78:0a:eb:f5:a5:22: 70:d8:8c:d4:c6:42:5e:bc:d5:91:22:38:50:8a:2b: c7:6c:8f:71:14:23:49:40:90:26:c7:26:a5:88:63: d4:65:50:1c:3d:b1:a9:fa:e6:5e:8b:87:36:3d:65: 66:57:38:16:0f:ac:4a:19:98:51:46:a6:73:25:67: de:d6:1a:88:b0:3f:13:7e:d8:80:67:2d:36:3f:a7: dc:89:ea:5e:36:97:f1:50:25:3e:b3:91:e0:20:2a: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:1F:39:52:5B:CE:88:E6:9A:5D:C2:0E:DB:A2:CB:FE:AE:DC:9E:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/56uHrieCkLB77aMCxu2SkomsoamqtpMSBrQ43f3jzjjz/0/871F39525BCE88E69A5DC20EDBA2CBFEAEDC9E51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.208.0/22 IPv6: 2804:6040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269155 Signature Algorithm: sha256WithRSAEncryption 1b:7c:bf:85:a6:d9:2d:23:e2:e2:05:6c:76:b7:db:a9:db:1e: 28:2b:8b:a3:8d:db:05:61:16:9d:1d:85:37:0f:44:c4:6a:21: b9:f6:0a:08:17:e3:73:8b:77:ab:e0:c9:35:d7:aa:2b:4e:86: 46:45:2a:de:8b:2b:8f:3a:31:21:c0:0d:70:9b:d2:d0:a6:d7: 82:a5:7b:45:cc:14:f4:4c:07:83:fb:c6:6c:bb:67:18:84:a5: 85:af:8e:fe:a6:e6:8a:45:67:49:f9:e3:ef:25:07:82:a1:26: 9a:64:f6:09:82:58:0d:fd:de:5c:a6:4b:1e:57:e5:30:4c:dd: be:4f:c3:11:f8:8a:36:94:5c:2e:aa:33:99:85:68:5a:66:96: 5a:c2:4d:ef:05:05:4c:4b:20:fe:64:e1:52:6c:1e:c3:52:68: 0a:ac:cd:fb:47:90:b1:d4:bb:59:9a:10:c1:57:ad:59:57:8d: 1c:f1:2b:b0:4d:eb:92:86:d8:68:12:5f:4f:ba:49:28:80:74: 13:b4:4a:e5:39:ac:12:95:80:b3:98:ad:78:68:23:64:07:67: a2:d4:a7:ed:47:fe:21:be:77:a5:c1:0b:9b:b3:d1:67:5f:79: 1e:9e:a8:bd:92:3d:54:07:5c:71:83:1a:f1:56:8e:a4:95:da: 6b:d2:a7:f1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUf7Fs52vqx2TAYt1N5Yn1wqDAi8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjQxNDM3MDdaFw0yNjAzMjMxNDQyMDdaMDMxMTAvBgNV BAMTKDg3MUYzOTUyNUJDRTg4RTY5QTVEQzIwRURCQTJDQkZFQUVEQzlFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNxHFXwzyArEKCkICKbz2av7C vmaz6aYIOqqrjEPEZdTLe3qym+5gYB5Hx2mfCjVo+Ynuc50BbmyyrwihH7DWWcd6 wF+STdDJbbgFzIYsylQHdB/WGqFZoIMpgFTk7GznP1ri25pExAQJQC3d2v8u2ekk t0dL5ED5VQMSn59lykqWo+MvSSLwNqF0Hq2ofHt89akP43WbyVIYalBHnngK6/Wl InDYjNTGQl681ZEiOFCKK8dsj3EUI0lAkCbHJqWIY9RlUBw9san65l6LhzY9ZWZX OBYPrEoZmFFGpnMlZ97WGoiwPxN+2IBnLTY/p9yJ6l42l/FQJT6zkeAgKszzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHHzlSW86I5ppd wg7bosv+rtyeUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTZ1 SHJpZUNrTEI3N2FNQ3h1MlNrb21zb2FtcXRwTVNCclE0M2YzanpqanovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzU2 dUhyaWVDa0xCNzdhTUN4dTJTa29tc29hbXF0cE1TQnJRNDNmM2p6amp6LzAvODcx RjM5NTI1QkNFODhFNjlBNURDMjBFREJBMkNCRkVBRURDOUU1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbTQMA0EAgACMAcDBQAoBGBAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQbYzANBgkqhkiG9w0BAQsFAAOCAQEAG3y/habZLSPi4gVs drfbqdseKCuLo43bBWEWnR2FNw9ExGohufYKCBfjc4t3q+DJNdeqK06GRkUq3osr jzoxIcANcJvS0KbXgqV7RcwU9EwHg/vGbLtnGISlha+O/qbmikVnSfnj7yUHgqEm mmT2CYJYDf3eXKZLHlflMEzdvk/DEfiKNpRcLqozmYVoWmaWWsJN7wUFTEsg/mTh Umwew1JoCqzN+0eQsdS7WZoQwVetWVeNHPErsE3rkobYaBJfT7pJKIB0E7RK5Tms EpWAs5iteGgjZAdnotSn7Uf+Ib53pcELm7PRZ195Hp6ovZI9VAdccYMa8VaOpJXa a9Kn8Q== -----END CERTIFICATE-----Generated at Sat Apr 5 00:35:36 2025 by rpki-client