$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer File: 8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.cer (raw, json) Hash identifier: JczkxIYGP75CXglPXPe3D+BAmY0oGJrkQr2M15gKZGQ= Subject key identifier: 8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 77D9CFEF0DE87122D496103C1E1F7CAA1199F75E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft caRepository: rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 12 Feb 2025 19:47:14 +0000 Certificate not after: Wed 11 Feb 2026 19:52:14 +0000 Subordinate resources: AS: 271267 IP: 168.197.180.0/22 IP: 2804:78d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d9:cf:ef:0d:e8:71:22:d4:96:10:3c:1e:1f:7c:aa:11:99:f7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 12 19:47:14 2025 GMT Not After : Feb 11 19:52:14 2026 GMT Subject: CN=8BAF9C211E3CB74E1F1681A900A74E3AF81D715E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:31:d6:80:ca:01:9b:a4:af:4b:da:c7:2a: e3:f7:e7:3c:05:22:aa:7a:f9:70:e4:be:9a:1d:80: 5d:5c:b7:20:f1:b1:0a:13:44:dd:59:70:f6:c9:e9: fd:a1:86:47:a0:6d:ac:a3:d5:f7:0d:da:3f:15:85: 84:f2:80:ec:db:26:47:7d:65:aa:52:bf:e7:c5:31: ed:6e:34:d3:4e:43:be:6f:d6:32:d3:60:1c:f4:4c: 4c:a6:d9:45:90:6c:af:d1:13:ae:d0:0f:6c:2d:92: 87:dd:07:d4:32:8b:a3:f9:dc:46:db:94:41:67:3e: cd:88:2f:e2:a0:57:87:5a:8d:d7:7b:ad:e5:cc:81: 10:06:73:19:63:39:8b:c4:50:2c:89:86:93:c3:9a: 76:b8:0e:ca:8c:2d:26:08:22:f9:c5:2a:eb:fa:4a: a6:de:2e:b6:7c:8c:7a:1c:95:45:b1:f5:08:31:1a: 85:35:65:27:0f:1b:52:64:96:18:94:5e:b7:83:dd: c9:3d:20:ef:fd:28:b7:bd:e5:a2:04:b7:11:79:6a: 02:d9:f3:22:9d:83:0b:22:64:39:c4:88:8c:23:2f: 8f:d6:cb:98:c8:bf:66:8c:d2:d0:3c:74:f4:04:75: ba:fc:a2:52:79:aa:f1:f1:35:64:88:6a:01:fb:7a: 6f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:AF:9C:21:1E:3C:B7:4E:1F:16:81:A9:00:A7:4E:3A:F8:1D:71:5E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/0/8BAF9C211E3CB74E1F1681A900A74E3AF81D715E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.180.0/22 IPv6: 2804:78d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271267 Signature Algorithm: sha256WithRSAEncryption 74:84:da:d1:31:86:c1:6d:87:5d:20:c9:9d:cf:8f:63:2a:3f: 7a:57:00:83:0e:a1:a1:95:6c:7c:f3:04:ab:0b:fd:96:34:53: 17:b0:78:0b:e4:51:b8:d5:e2:70:b6:94:15:6a:c7:e0:3f:72: 77:66:3b:bc:f7:65:e5:36:f1:32:26:1b:a2:a3:67:27:a0:95: 6c:df:65:65:18:a7:3e:81:34:9e:d2:bf:24:9c:3e:93:d2:35: ea:15:38:47:71:3e:68:29:99:bf:3a:5d:49:f8:d8:ea:c4:79: b7:d4:36:c8:ed:1e:a3:95:6d:35:e6:71:07:b0:f9:de:1a:27: 8b:d4:85:09:dc:a9:e2:de:95:ed:e1:e6:17:ca:b5:48:bf:12: f4:b6:d8:7b:63:24:e8:8f:72:16:56:a2:2a:93:36:2d:86:ae: 48:a6:81:78:e1:d9:3e:74:98:73:d6:f2:98:0a:11:a4:9c:1a: c2:aa:76:ad:46:ae:bf:27:b5:8b:e9:cc:86:d0:e9:6b:eb:b1: 82:0d:e4:9e:14:3c:dc:e0:a5:a5:e1:63:73:b3:4c:38:76:7f: af:23:71:63:af:63:ac:46:6c:e8:da:41:29:9d:70:78:1d:02: 09:fc:03:a3:b1:dc:d8:c5:61:43:84:3d:2d:4d:4c:3d:4a:9e: 8d:2c:81:3a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUd9nP7w3ocSLUlhA8Hh98qhGZ914wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTIxOTQ3MTRaFw0yNjAyMTExOTUyMTRaMDMxMTAvBgNV BAMTKDhCQUY5QzIxMUUzQ0I3NEUxRjE2ODFBOTAwQTc0RTNBRjgxRDcxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmjHWgMoBm6SvS9rHKuP35zwF Iqp6+XDkvpodgF1ctyDxsQoTRN1ZcPbJ6f2hhkegbayj1fcN2j8VhYTygOzbJkd9 ZapSv+fFMe1uNNNOQ75v1jLTYBz0TEym2UWQbK/RE67QD2wtkofdB9Qyi6P53Ebb lEFnPs2IL+KgV4dajdd7reXMgRAGcxljOYvEUCyJhpPDmna4DsqMLSYIIvnFKuv6 SqbeLrZ8jHoclUWx9QgxGoU1ZScPG1JklhiUXreD3ck9IO/9KLe95aIEtxF5agLZ 8yKdgwsiZDnEiIwjL4/Wy5jIv2aM0tA8dPQEdbr8olJ5qvHxNWSIagH7em+BAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLr5whHjy3Th8W gakAp046+B1xXjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGo4 ZUJEZlFyRmhWOEN1NlhxTFk3eEQ0N1d5MlZKNWlZbUVzaTh3ekI0OTYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hq OGVCRGZRckZoVjhDdTZYcUxZN3hENDdXeTJWSjVpWW1Fc2k4d3pCNDk2LzAvOEJB RjlDMjExRTNDQjc0RTFGMTY4MUE5MDBBNzRFM0FGODFENzE1RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqMW0MA0EAgACMAcDBQAoBHjQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjozANBgkqhkiG9w0BAQsFAAOCAQEAdITa0TGGwW2HXSDJ nc+PYyo/elcAgw6hoZVsfPMEqwv9ljRTF7B4C+RRuNXicLaUFWrH4D9yd2Y7vPdl 5TbxMiYboqNnJ6CVbN9lZRinPoE0ntK/JJw+k9I16hU4R3E+aCmZvzpdSfjY6sR5 t9Q2yO0eo5VtNeZxB7D53honi9SFCdyp4t6V7eHmF8q1SL8S9LbYe2Mk6I9yFlai KpM2LYauSKaBeOHZPnSYc9bymAoRpJwawqp2rUauvye1i+nMhtDpa+uxgg3knhQ8 3OClpeFjc7NMOHZ/ryNxY69jrEZs6NpBKZ1weB0CCfwDo7Hc2MVhQ4Q9LU1MPUqe jSyBOg== -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:45 2025 by rpki-client