$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer File: 8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.cer (raw, json) Hash identifier: Av6BVjbt6qdN8BAP186ZavWBT/Zg6xjwnwRO7z04tJE= Subject key identifier: 8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A45C84A071352B4A4F3235205DD0B1AF5842B54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft caRepository: rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 18 Feb 2025 13:21:20 +0000 Certificate not after: Tue 17 Feb 2026 13:26:20 +0000 Subordinate resources: AS: 61664 IP: 131.108.60.0/22 IP: 2804:1c98::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:45:c8:4a:07:13:52:b4:a4:f3:23:52:05:dd:0b:1a:f5:84:2b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 18 13:21:20 2025 GMT Not After : Feb 17 13:26:20 2026 GMT Subject: CN=8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:d9:5a:45:ce:79:e5:50:e7:85:ee:00:a2: 65:a0:4f:f0:27:d6:da:97:bc:59:20:9f:f1:38:03: e8:69:cd:8b:54:0b:4d:e3:e3:66:6f:89:35:dc:44: df:84:23:55:d1:f4:ca:ed:e8:24:b8:9c:54:29:fb: e9:24:08:28:f2:38:da:ae:04:3f:ad:ff:c8:01:0a: b2:85:10:37:0b:34:b3:e0:ac:82:59:f4:3e:28:39: 22:d6:3f:a0:ea:91:95:a1:5f:69:84:48:8d:85:b9: 29:a7:30:bf:ea:d7:0f:12:1c:66:e2:18:8a:ef:06: 1b:25:66:dc:a6:ec:2a:9a:b9:f8:d9:f1:c5:63:35: 38:ce:25:e9:ef:19:a3:c4:eb:67:15:7b:3e:33:ce: 8d:09:e1:f7:7d:04:fe:18:d3:30:97:6f:7d:e8:07: fe:c2:c9:c0:0a:80:bb:88:fc:e1:a6:54:7e:f0:c2: 52:b0:2a:0a:78:c3:9b:75:6d:ba:e0:39:25:f5:a0: 38:77:7b:2b:04:9f:da:48:55:b3:40:3b:7a:3e:62: 71:44:6c:03:8c:18:be:3b:06:23:7c:a1:23:67:3a: 6f:2a:8f:bf:cb:bf:a5:c3:25:8f:2b:8e:84:5a:fe: 57:15:60:58:3d:a0:2e:25:08:ed:e5:3e:49:25:fe: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:7A:B2:E0:B7:3A:2D:33:41:57:B4:75:4E:6E:B2:34:E9:D3:A1:5E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/8B7AB2E0B73A2D334157B4754E6EB234E9D3A15E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.60.0/22 IPv6: 2804:1c98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61664 Signature Algorithm: sha256WithRSAEncryption 30:04:90:a3:22:8e:02:5f:5d:59:38:1a:14:19:e5:e8:84:c5: fa:2d:0d:f3:75:08:88:2c:23:d9:5c:6f:15:99:58:7c:66:8b: 08:82:cf:e2:39:eb:2b:1d:6e:c2:8a:cd:7b:5c:4d:af:69:9f: 49:cf:24:68:1a:7a:2a:be:8a:1c:fd:c0:a8:36:31:78:6d:09: b2:43:02:87:82:e8:8a:cc:48:95:34:06:74:77:8d:90:6e:ce: 83:be:36:80:46:3c:37:34:83:fc:d0:24:d6:1d:4b:53:d1:8a: 29:e1:7f:4f:aa:fd:41:8c:e7:c4:e0:e3:18:9e:76:cc:fd:2a: 8c:62:63:a9:31:23:12:0b:8e:ac:a4:17:78:99:2f:8c:bf:7d: 70:ce:53:ad:0f:3c:9e:70:09:a5:6f:f5:14:de:14:ad:50:4f: 54:50:64:ec:da:f7:68:49:bf:1d:51:2b:34:a8:6f:db:56:5d: 20:ff:61:c0:dc:63:80:e7:ce:7a:bf:5d:70:ae:13:ee:09:6b: 51:6a:d0:4b:19:3c:67:50:3f:fe:0f:89:73:24:f9:4b:99:42: 70:39:ca:7c:68:91:de:0f:5d:3a:59:1d:58:e6:ac:7c:21:9b: a6:e5:31:43:1f:1b:c3:bb:cb:21:51:2c:69:67:10:cc:6a:2d: 37:03:df:07 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKkXISgcTUrSk8yNSBd0LGvWEK1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTgxMzIxMjBaFw0yNjAyMTcxMzI2MjBaMDMxMTAvBgNV BAMTKDhCN0FCMkUwQjczQTJEMzM0MTU3QjQ3NTRFNkVCMjM0RTlEM0ExNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jdlaRc555VDnhe4AomWgT/An 1tqXvFkgn/E4A+hpzYtUC03j42ZviTXcRN+EI1XR9Mrt6CS4nFQp++kkCCjyONqu BD+t/8gBCrKFEDcLNLPgrIJZ9D4oOSLWP6DqkZWhX2mESI2FuSmnML/q1w8SHGbi GIrvBhslZtym7CqaufjZ8cVjNTjOJenvGaPE62cVez4zzo0J4fd9BP4Y0zCXb33o B/7CycAKgLuI/OGmVH7wwlKwKgp4w5t1bbrgOSX1oDh3eysEn9pIVbNAO3o+YnFE bAOMGL47BiN8oSNnOm8qj7/Lv6XDJY8rjoRa/lcVYFg9oC4lCO3lPkkl/qdjAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLerLgtzotM0FX tHVObrI06dOhXjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBR YVlDYTMxY1A1cUd1UERNeDJWNWR2NnVuS1Axd3NYZnJOWlNFelFoTWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw UWFZQ2EzMWNQNXFHdVBETXgyVjVkdjZ1bktQMXdzWGZyTlpTRXpRaE1lLzAvOEI3 QUIyRTBCNzNBMkQzMzQxNTdCNDc1NEU2RUIyMzRFOUQzQTE1RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg2w8MA0EAgACMAcDBQAoBByYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDw4DANBgkqhkiG9w0BAQsFAAOCAQEAMASQoyKOAl9dWTga FBnl6ITF+i0N83UIiCwj2VxvFZlYfGaLCILP4jnrKx1uworNe1xNr2mfSc8kaBp6 Kr6KHP3AqDYxeG0JskMCh4LoisxIlTQGdHeNkG7Og742gEY8NzSD/NAk1h1LU9GK KeF/T6r9QYznxODjGJ52zP0qjGJjqTEjEguOrKQXeJkvjL99cM5TrQ88nnAJpW/1 FN4UrVBPVFBk7Nr3aEm/HVErNKhv21ZdIP9hwNxjgOfOer9dcK4T7glrUWrQSxk8 Z1A//g+JcyT5S5lCcDnKfGiR3g9dOlkdWOasfCGbpuUxQx8bw7vLIVEsaWcQzGot NwPfBw== -----END CERTIFICATE-----Generated at Fri Apr 4 20:19:06 2025 by rpki-client