$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer File: 8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer (raw, json) Hash identifier: yvCfJZEhyNNvBEkdIF5O2hnfCG788x11zNvECdgUvOw= Subject key identifier: 8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 23A28FBD44668597FFC437C64A7D07C5546CF2D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.mft caRepository: rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 09:27:44 +0000 Certificate not after: Thu 05 Mar 2026 09:32:44 +0000 Subordinate resources: AS: 266148 IP: 201.140.236.0/22 IP: 2804:3b6c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a2:8f:bd:44:66:85:97:ff:c4:37:c6:4a:7d:07:c5:54:6c:f2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 09:27:44 2025 GMT Not After : Mar 5 09:32:44 2026 GMT Subject: CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:53:44:13:86:e7:e1:f4:a0:df:21:88:44: 42:61:af:c6:c2:28:3e:4d:7e:95:e6:d5:9f:db:e9: c2:7c:21:5f:f2:64:01:96:c1:f3:1d:3f:8a:76:cf: 11:fd:c0:c5:1d:30:04:f3:e5:8c:92:6f:98:5b:7c: 64:f2:c4:ce:38:c1:1c:68:9e:c8:0c:76:84:57:9c: 20:8f:28:48:e4:ea:4b:c7:05:fb:7e:99:17:7d:cf: 7f:1d:9f:2f:7f:85:f1:7f:bd:7a:54:d6:07:07:2b: 26:e0:c6:ab:99:ef:93:29:bd:0b:e1:dd:8c:d7:52: eb:ee:58:99:de:1d:e0:b9:85:96:45:03:52:a7:5b: ce:48:b9:95:8b:fe:53:bc:8c:24:49:de:f6:0e:ee: 56:1d:8f:e4:49:88:14:6f:0f:8c:e0:53:6c:75:16: 9f:dd:f0:04:ff:cb:c7:d1:63:e2:3c:86:b6:30:f5: 93:6a:fd:bd:64:b0:5e:9f:55:31:36:1b:01:d6:87: a1:80:c2:2a:74:64:0d:d3:28:59:ec:c7:94:46:c6: 7d:97:99:79:f0:f1:7e:60:d5:19:9c:63:4a:be:ce: fe:45:8b:01:10:be:75:dc:1b:1a:b8:41:fc:f3:ba: 89:e8:b4:21:13:e1:7f:9d:77:db:24:ad:50:47:29: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.140.236.0/22 IPv6: 2804:3b6c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266148 Signature Algorithm: sha256WithRSAEncryption 01:0e:39:e6:73:55:b3:59:01:68:68:8b:66:d6:df:85:48:68: e7:16:22:60:22:a2:01:fd:8a:88:77:04:cc:94:a2:04:6c:91: d3:2d:a5:d0:8d:51:81:b8:d3:b5:31:30:58:ca:38:46:fb:02: 98:4a:70:29:8a:c8:76:dc:f3:c9:5c:db:6d:a0:81:50:07:13: 6d:fd:0f:82:76:7f:1c:a0:57:07:ee:0d:c8:37:eb:57:5f:47: fb:cb:f2:47:7c:20:98:d6:83:f7:df:ec:0e:41:24:c4:02:8c: 4e:b1:bf:b6:90:2d:3b:29:80:23:b9:5c:ea:5a:2c:a3:f9:2b: 6f:f2:3e:12:00:5f:47:59:87:0c:70:65:0e:0c:92:9d:34:ea: 92:82:e9:80:3c:9f:57:e9:79:fd:1c:43:5e:45:ac:74:62:a1: 85:4e:47:e0:f7:5d:19:f4:13:7e:3d:00:b1:7a:ea:a8:a3:60: 02:50:d1:9e:eb:70:f5:88:02:4a:ed:07:a0:b2:7a:b6:22:40: 0b:1c:1d:33:c8:40:b5:73:1b:78:0b:7a:fb:63:82:9e:a1:28: a5:c5:ca:24:c9:d7:d4:f8:6e:ee:5d:1b:3c:95:b0:6c:6d:54: 7c:b6:03:48:85:83:e3:e1:62:a6:0e:a9:a5:49:a1:b3:e8:33: d4:15:e2:34 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUI6KPvURmhZf/xDfGSn0HxVRs8tAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwOTI3NDRaFw0yNjAzMDUwOTMyNDRaMDMxMTAvBgNV BAMTKDhDMkU5MkUwQkFEMDJFODlCQUU2REJCNUIyM0I2NzRBMkQ1NzdBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvVNEE4bn4fSg3yGIREJhr8bC KD5NfpXm1Z/b6cJ8IV/yZAGWwfMdP4p2zxH9wMUdMATz5YySb5hbfGTyxM44wRxo nsgMdoRXnCCPKEjk6kvHBft+mRd9z38dny9/hfF/vXpU1gcHKybgxquZ75MpvQvh 3YzXUuvuWJneHeC5hZZFA1KnW85IuZWL/lO8jCRJ3vYO7lYdj+RJiBRvD4zgU2x1 Fp/d8AT/y8fRY+I8hrYw9ZNq/b1ksF6fVTE2GwHWh6GAwip0ZA3TKFnsx5RGxn2X mXnw8X5g1RmcY0q+zv5FiwEQvnXcGxq4QfzzuonotCET4X+dd9skrVBHKTOxAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMLpLgutAuibrm 27WyO2dKLVd6HTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVRQ Vm1Yd1k2enFIVFl4NUF1enRZMXdkN1pZV2szc2F6VW53eDRvUXlobnkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FU UFZtWHdZNnpxSFRZeDVBdXp0WTF3ZDdaWVdrM3NhelVud3g0b1F5aG55LzEvOEMy RTkyRTBCQUQwMkU4OUJBRTZEQkI1QjIzQjY3NEEyRDU3N0ExRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyYzsMA0EAgACMAcDBQAoBDtsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPpDANBgkqhkiG9w0BAQsFAAOCAQEAAQ455nNVs1kBaGiL ZtbfhUho5xYiYCKiAf2KiHcEzJSiBGyR0y2l0I1RgbjTtTEwWMo4RvsCmEpwKYrI dtzzyVzbbaCBUAcTbf0PgnZ/HKBXB+4NyDfrV19H+8vyR3wgmNaD99/sDkEkxAKM TrG/tpAtOymAI7lc6loso/krb/I+EgBfR1mHDHBlDgySnTTqkoLpgDyfV+l5/RxD XkWsdGKhhU5H4PddGfQTfj0AsXrqqKNgAlDRnutw9YgCSu0HoLJ6tiJACxwdM8hA tXMbeAt6+2OCnqEopcXKJMnX1Phu7l0bPJWwbG1UfLYDSIWD4+Fipg6ppUmhs+gz 1BXiNA== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:08 2025 by rpki-client