$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer File: 886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer (raw, json) Hash identifier: lL/z8vsYoD0/CMFg8josSyOsxowjYcrurGtU1K1f7kE= Subject key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5B493DFA81BF3A0635A68BF41601AF2D51C98C45 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft caRepository: rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 08 Mar 2025 01:55:54 +0000 Certificate not after: Sat 07 Mar 2026 02:00:54 +0000 Subordinate resources: AS: 263506 IP: 170.150.192.0/22 IP: 177.107.216.0/21 IP: 2804:12f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 05:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:49:3d:fa:81:bf:3a:06:35:a6:8b:f4:16:01:af:2d:51:c9:8c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 8 01:55:54 2025 GMT Not After : Mar 7 02:00:54 2026 GMT Subject: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:b1:2c:54:b5:7e:47:b9:a2:5d:ae:e3:fe: 82:46:03:04:90:87:d0:2a:1a:8a:47:5c:54:a4:3d: f3:14:c0:3a:5e:36:78:fa:95:b3:4b:00:46:1f:6f: 8f:0a:c5:d6:4e:18:7f:54:92:0c:15:ea:27:7b:3e: 20:4a:85:09:cd:d8:da:de:29:ea:d4:04:72:87:cd: 4c:8f:3f:c6:3e:d1:42:8e:88:55:da:01:a2:ef:2c: 9e:e8:39:7f:3c:24:b6:5f:db:9d:50:fc:5c:8f:e0: cf:4b:c5:9b:39:51:e0:20:b8:5e:6d:4b:d4:90:ac: 44:9a:6e:f2:1c:2d:ab:98:61:65:1d:36:bc:a6:60: 09:8a:c6:f1:01:c8:af:73:a4:1c:a8:99:5c:97:2e: b0:3e:9f:6d:1c:8f:82:f9:7a:c7:e1:39:8d:b4:7f: 7e:f1:b9:0b:e3:05:58:24:12:b4:60:db:14:af:13: 83:7f:7c:68:3e:d5:2d:9c:6a:2c:70:3a:07:a7:39: f9:fa:92:85:1d:52:2b:c3:ff:2c:38:c3:12:ad:9a: db:12:5d:8e:88:b6:39:05:4a:f6:b8:d6:38:94:b8: aa:5f:33:52:28:a6:1a:20:4d:09:0d:c7:a2:1b:e0: 05:59:9e:51:a5:ab:31:80:9f:61:95:8b:bb:bd:1a: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.150.192.0/22 177.107.216.0/21 IPv6: 2804:12f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263506 Signature Algorithm: sha256WithRSAEncryption a9:3b:6a:fe:71:c0:2e:45:a5:88:06:b8:6b:6e:fb:43:82:1b: b3:f7:14:b2:af:3d:15:3c:e2:20:41:fc:03:4d:22:3d:61:bf: a4:45:7c:83:7a:1d:28:bf:b7:8a:27:da:a6:0d:ff:99:2f:ea: 22:11:55:15:ee:e6:9a:df:0b:14:82:93:e3:6a:ea:d1:19:32: c8:0e:8f:64:c0:43:31:bb:fd:97:c0:1b:16:8d:93:51:15:bb: 07:37:cc:0a:a6:02:4d:54:47:7e:3e:1a:99:e6:c6:08:ac:79: 87:cc:b5:8b:a4:ea:58:5f:b7:4b:8f:d8:ac:32:39:6a:03:1c: 3f:10:12:b2:a3:f0:ca:e5:f9:80:4f:83:b7:2a:28:83:b4:eb: 39:46:b1:03:d5:d2:0d:54:91:ab:27:6e:86:ea:40:34:b6:f8: ba:92:fc:26:b4:b9:f0:43:6c:f5:b0:32:25:92:7f:92:34:38: a4:32:92:dd:a2:c8:47:1a:ba:a3:7f:1f:f3:7f:4c:e2:16:86: 35:06:75:08:ba:4a:72:f9:fa:08:05:ec:6f:3f:14:56:6e:39: 0b:70:30:0d:a8:b8:cd:9d:1f:69:d3:f5:a3:22:92:1f:22:78: 87:cd:b7:11:66:58:e8:18:69:06:4c:17:34:f3:5f:b2:d7:9d: a1:90:4e:06 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUW0k9+oG/OgY1pov0FgGvLVHJjEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDgwMTU1NTRaFw0yNjAzMDcwMjAwNTRaMDMxMTAvBgNV BAMTKDg4NkVFQUM5RkIzNDMzQkU5NkE1MUE5RDAxNTRENDY2MzY4MkZGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7rEsVLV+R7miXa7j/oJGAwSQ h9AqGopHXFSkPfMUwDpeNnj6lbNLAEYfb48KxdZOGH9UkgwV6id7PiBKhQnN2Nre KerUBHKHzUyPP8Y+0UKOiFXaAaLvLJ7oOX88JLZf251Q/FyP4M9LxZs5UeAguF5t S9SQrESabvIcLauYYWUdNrymYAmKxvEByK9zpByomVyXLrA+n20cj4L5esfhOY20 f37xuQvjBVgkErRg2xSvE4N/fGg+1S2caixwOgenOfn6koUdUivD/yw4wxKtmtsS XY6ItjkFSva41jiUuKpfM1IophogTQkNx6Ib4AVZnlGlqzGAn2GVi7u9GgAlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIburJ+zQzvpal Gp0BVNRmNoL/ZTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXhH aTk3VjJUY2JQN2pRb3p6emFYYUgzUnY3QTdjWXZ2a1BENURXdGExWWMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V4 R2k5N1YyVGNiUDdqUW96enphWGFIM1J2N0E3Y1l2dmtQRDVEV3RhMVljLzEvODg2 RUVBQzlGQjM0MzNCRTk2QTUxQTlEMDE1NEQ0NjYzNjgyRkY2NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqpbAAwQDsWvYMA0EAgACMAcDBQAoBBL0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFUjANBgkqhkiG9w0BAQsFAAOCAQEAqTtq/nHA LkWliAa4a277Q4Ibs/cUsq89FTziIEH8A00iPWG/pEV8g3odKL+3iifapg3/mS/q IhFVFe7mmt8LFIKT42rq0RkyyA6PZMBDMbv9l8AbFo2TURW7BzfMCqYCTVRHfj4a mebGCKx5h8y1i6TqWF+3S4/YrDI5agMcPxASsqPwyuX5gE+Dtyoog7TrOUaxA9XS DVSRqyduhupANLb4upL8JrS58ENs9bAyJZJ/kjQ4pDKS3aLIRxq6o38f839M4haG NQZ1CLpKcvn6CAXsbz8UVm45C3AwDai4zZ0fadP1oyKSHyJ4h823EWZY6BhpBkwX NPNfstedoZBOBg== -----END CERTIFICATE-----Generated at Tue Apr 22 05:09:50 2025 by rpki-client