$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer File: 88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer (raw, json) Hash identifier: PkcgOSNW5OvPvsq/EoKDlSVgO3N0u8KDBXjHi1Cu1QY= Subject key identifier: 88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 36A90CA9FA51F0FE2E13C8E9034E3967BF7AD6BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.mft caRepository: rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 23 Mar 2025 07:57:06 +0000 Certificate not after: Sun 22 Mar 2026 08:02:06 +0000 Subordinate resources: AS: 271314 IP: 131.196.124.0/22 IP: 2804:7994::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a9:0c:a9:fa:51:f0:fe:2e:13:c8:e9:03:4e:39:67:bf:7a:d6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 07:57:06 2025 GMT Not After : Mar 22 08:02:06 2026 GMT Subject: CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:99:d6:89:4c:29:42:1f:58:13:5d:86:54: ea:1f:47:0a:5f:a6:25:07:e8:7c:ac:47:8c:a1:a1: 0a:84:89:d8:c3:86:d5:94:9d:2d:dc:8d:d7:36:bc: 91:9b:31:e7:9f:91:66:2d:09:9c:c2:eb:ce:62:3d: 3b:38:e9:56:8a:4c:19:54:7f:d0:ed:00:d7:a2:61: 12:85:65:b0:f0:22:98:d0:0b:4f:3f:81:47:a0:f0: f8:1d:5b:66:64:9e:d8:84:68:3e:cf:36:62:3e:65: 71:d8:e8:c7:82:2d:39:e7:39:1c:d1:22:96:99:f1: 01:8a:06:b3:49:ae:c3:00:9d:67:e2:da:e2:1f:e2: 97:11:fd:b1:c9:cd:c3:42:bf:24:71:52:44:46:12: 30:2c:ca:71:3a:cb:52:94:1e:5c:a1:f4:e7:d9:32: 4f:d5:94:ec:50:ee:70:88:ea:b9:50:82:a7:d6:b0: e9:0c:77:3e:83:3b:ec:9d:a6:f2:01:8c:cb:d6:a3: ec:7e:b0:e5:f0:32:c0:2a:18:73:f1:b5:ec:ef:37: a1:16:3a:7d:3f:d1:19:ad:35:89:86:22:41:81:6f: 6f:71:14:d8:b2:f1:99:8a:40:f4:dc:43:fd:14:37: bd:5e:ce:01:6d:02:ca:4f:54:63:9e:19:f3:cf:e4: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.124.0/22 IPv6: 2804:7994::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271314 Signature Algorithm: sha256WithRSAEncryption 3c:ce:9e:dc:40:71:d0:a3:6f:8b:3a:7e:79:9b:33:30:a0:57: d0:90:7f:d9:7a:e4:ea:87:03:9c:53:ca:40:3c:ad:93:a5:6e: ff:b7:a1:d3:ef:da:04:c6:43:51:9e:17:d4:39:a8:23:05:ba: 2a:e2:49:b4:c2:40:e7:33:4c:7a:2f:17:b4:da:15:10:66:25: 78:92:8a:7f:16:3b:cc:ec:e4:a6:67:6c:cb:86:54:04:93:4f: b1:f8:4c:cb:d4:a7:e9:bf:86:ab:b3:19:e0:ba:23:cc:eb:52: 52:7e:60:67:42:a0:ec:a6:3f:93:c9:c4:d3:79:1c:3e:c1:ae: 83:04:43:0e:9c:21:4f:45:80:34:fd:8f:7f:98:3d:8a:ab:84: 86:e6:0f:80:14:b4:14:6d:71:9d:6a:9d:bf:44:55:c1:15:5b: a5:49:82:46:1f:55:c0:03:46:b9:ca:1c:e8:26:39:96:ac:58: 24:3e:7c:2d:bf:eb:1a:7e:53:81:52:09:3e:2e:f9:22:b7:e3: aa:c3:eb:c0:58:80:e0:a5:45:70:33:64:7b:9b:9b:99:91:ba: 23:eb:c4:6d:71:2e:c2:ee:99:15:84:9e:8a:fc:c2:86:a2:0a: 1b:c8:48:30:f1:0f:8c:bd:5d:ff:60:96:77:40:6a:d9:d2:72: cc:7b:f3:01 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNqkMqfpR8P4uE8jpA045Z7961r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjMwNzU3MDZaFw0yNjAzMjIwODAyMDZaMDMxMTAvBgNV BAMTKDg4QkE3NTgwNTU3QUEzMTEzQzQ2QjJFRTU2N0Y1RDFGOUY5QzgxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJM5nWiUwpQh9YE12GVOofRwpf piUH6HysR4yhoQqEidjDhtWUnS3cjdc2vJGbMeefkWYtCZzC685iPTs46VaKTBlU f9DtANeiYRKFZbDwIpjQC08/gUeg8PgdW2ZkntiEaD7PNmI+ZXHY6MeCLTnnORzR IpaZ8QGKBrNJrsMAnWfi2uIf4pcR/bHJzcNCvyRxUkRGEjAsynE6y1KUHlyh9OfZ Mk/VlOxQ7nCI6rlQgqfWsOkMdz6DO+ydpvIBjMvWo+x+sOXwMsAqGHPxtezvN6EW On0/0RmtNYmGIkGBb29xFNiy8ZmKQPTcQ/0UN71ezgFtAspPVGOeGfPP5GMPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIunWAVXqjETxG su5Wf10fn5yBlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU5v YkNqenBKallhcTdkeHlnaDdyQjMxV241anlGM3liYzR1UWM5ZFdlNjUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlO b2JDanpwSmpZYXE3ZHh5Z2g3ckIzMVduNWp5RjN5YmM0dVFjOWRXZTY1LzEvODhC QTc1ODA1NTdBQTMxMTNDNDZCMkVFNTY3RjVEMUY5RjlDODE5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8R8MA0EAgACMAcDBQAoBHmUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQj0jANBgkqhkiG9w0BAQsFAAOCAQEAPM6e3EBx0KNvizp+ eZszMKBX0JB/2Xrk6ocDnFPKQDytk6Vu/7eh0+/aBMZDUZ4X1DmoIwW6KuJJtMJA 5zNMei8XtNoVEGYleJKKfxY7zOzkpmdsy4ZUBJNPsfhMy9Sn6b+Gq7MZ4LojzOtS Un5gZ0Kg7KY/k8nE03kcPsGugwRDDpwhT0WANP2Pf5g9iquEhuYPgBS0FG1xnWqd v0RVwRVbpUmCRh9VwANGucoc6CY5lqxYJD58Lb/rGn5TgVIJPi75IrfjqsPrwFiA 4KVFcDNke5ubmZG6I+vEbXEuwu6ZFYSeivzChqIKG8hIMPEPjL1d/2CWd0Bq2dJy zHvzAQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:56 2025 by rpki-client