$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer File: 8C11D210FEF8CE51634B3FB4169312F41DD06FC0.cer (raw, json) Hash identifier: 0b9+I1yro7rtLMFBcfZuRfrYr7GEb7tEJ2BCZmae4ng= Subject key identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21A7CEC953A8DC854893E4025B0EB909979D36F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft caRepository: rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:55 +0000 Certificate not after: Wed 04 Mar 2026 18:40:55 +0000 Subordinate resources: AS: 267410 IP: 45.235.92.0/22 IP: 2804:4d10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a7:ce:c9:53:a8:dc:85:48:93:e4:02:5b:0e:b9:09:97:9d:36:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:55 2025 GMT Not After : Mar 4 18:40:55 2026 GMT Subject: CN=8C11D210FEF8CE51634B3FB4169312F41DD06FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:a9:44:6f:42:d2:6e:18:d0:c6:17:71:82: 48:32:07:9a:fd:59:68:f9:58:19:a9:af:e4:ad:02: 13:a2:47:54:95:f5:e7:2d:ef:5c:11:70:70:9d:f6: 74:86:dc:9c:0c:5b:19:34:27:89:84:ad:bb:8b:63: 84:ab:c0:98:c9:0c:c3:22:c9:85:8e:55:0a:55:55: 68:72:73:b0:bb:53:bf:f7:94:26:a1:85:4d:03:e1: 9f:d2:1f:b4:d8:6b:37:49:c4:31:01:35:fc:f2:7b: 4e:af:f4:84:8f:58:6c:9e:be:7b:6c:68:bb:67:e1: b5:2e:9b:28:53:9d:f9:cb:d0:2a:01:2b:ec:b7:18: e2:6a:3f:d6:05:c2:4d:bf:59:d7:e3:fc:54:1f:55: ba:54:80:ec:ec:b8:4c:b3:ef:64:d7:04:70:45:25: f5:fd:97:36:65:48:87:eb:2b:0d:01:c3:f4:2e:db: ca:79:21:10:dc:4d:16:11:6a:69:8e:99:51:11:f1: 10:9f:32:d2:ab:5c:7c:bc:ba:47:8e:c3:51:3b:f7: e3:12:f1:96:b0:cf:5b:d2:32:44:72:b1:a0:49:9d: bc:85:95:de:78:67:56:1c:f2:16:5e:3c:b4:01:17: c6:aa:63:3b:20:13:bb:b3:7c:75:e2:6b:77:21:38: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:11:D2:10:FE:F8:CE:51:63:4B:3F:B4:16:93:12:F4:1D:D0:6F:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/1/8C11D210FEF8CE51634B3FB4169312F41DD06FC0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.92.0/22 IPv6: 2804:4d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267410 Signature Algorithm: sha256WithRSAEncryption 2f:71:3d:4e:81:88:48:27:3c:64:0e:f2:88:0f:55:a0:e6:4b: bf:78:c9:9a:9b:5c:b8:c8:72:57:38:e0:eb:6e:6c:43:cc:bd: 81:40:6a:08:9a:67:4c:3c:f2:62:58:4d:71:ca:fd:48:ff:4f: 0c:62:86:f8:9e:41:e4:18:62:cf:43:d8:12:c2:a2:a1:66:71: c7:38:ba:1a:89:30:35:a7:2a:73:60:66:eb:75:da:5e:16:59: 0b:50:c1:d6:91:d4:d8:da:26:ca:25:f8:36:6b:6a:52:cc:26: c9:e3:e1:59:5f:e4:a3:66:17:21:56:9d:0b:5c:c1:5b:8d:14: 9a:1e:49:6e:0f:a1:44:49:06:23:53:d9:03:c0:55:9c:f1:b0: 76:d4:f6:5f:b9:40:a3:6f:d3:5e:6a:4e:3a:82:06:42:c0:90: 86:16:48:9f:1d:9e:ca:e9:c0:4e:74:18:e9:fa:74:00:09:86: 31:f1:70:2b:0b:4a:a0:e4:22:88:f9:60:a7:44:b0:7e:28:39: a0:37:cf:1b:78:7f:32:77:62:6a:34:da:07:8b:0f:08:d2:da: ce:d7:c7:80:2e:bb:55:e9:85:f5:d0:9d:0b:bc:ca:15:81:f3: 8f:f4:59:17:77:fd:b6:9a:4e:03:00:41:3d:87:21:ec:2d:48: b9:98:33:6a -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUIafOyVOo3IVIk+QCWw65CZedNvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NTVaFw0yNjAzMDQxODQwNTVaMDMxMTAvBgNV BAMTKDhDMTFEMjEwRkVGOENFNTE2MzRCM0ZCNDE2OTMxMkY0MUREMDZGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXKlEb0LSbhjQxhdxgkgyB5r9 WWj5WBmpr+StAhOiR1SV9ect71wRcHCd9nSG3JwMWxk0J4mErbuLY4SrwJjJDMMi yYWOVQpVVWhyc7C7U7/3lCahhU0D4Z/SH7TYazdJxDEBNfzye06v9ISPWGyevnts aLtn4bUumyhTnfnL0CoBK+y3GOJqP9YFwk2/Wdfj/FQfVbpUgOzsuEyz72TXBHBF JfX9lzZlSIfrKw0Bw/Qu28p5IRDcTRYRammOmVER8RCfMtKrXHy8ukeOw1E79+MS 8Zawz1vSMkRysaBJnbyFld54Z1Yc8hZePLQBF8aqYzsgE7uzfHXia3chONSjAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMEdIQ/vjOUWNL P7QWkxL0HdBvwDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkIy RWE3SEU2ZkRCTGVYOFlHSkRWbUh0eDVBNXZWZVpLY2dtZFVIc1JUU2EvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkIy RWE3SEU2ZkRCTGVYOFlHSkRWbUh0eDVBNXZWZVpLY2dtZFVIc1JUU2EvMS84QzEx RDIxMEZFRjhDRTUxNjM0QjNGQjQxNjkzMTJGNDFERDA2RkMwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt61wwDQQCAAIwBwMFACgETRAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBSSMA0GCSqGSIb3DQEBCwUAA4IBAQAvcT1OgYhIJzxkDvKI D1Wg5ku/eMmam1y4yHJXOODrbmxDzL2BQGoImmdMPPJiWE1xyv1I/08MYob4nkHk GGLPQ9gSwqKhZnHHOLoaiTA1pypzYGbrddpeFlkLUMHWkdTY2ibKJfg2a2pSzCbJ 4+FZX+SjZhchVp0LXMFbjRSaHkluD6FESQYjU9kDwFWc8bB21PZfuUCjb9Neak46 ggZCwJCGFkifHZ7K6cBOdBjp+nQACYYx8XArC0qg5CKI+WCnRLB+KDmgN88beH8y d2JqNNoHiw8I0trO18eALrtV6YX10J0LvMoVgfOP9FkXd/22mk4DAEE9hyHsLUi5 mDNq -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:10 2025 by rpki-client