$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer File: 8C3BD6398920A573D10A232EF4F43F8ABF5B4153.cer (raw, json) Hash identifier: n1KtrbZamkR4xYMiXMw8SRPzgyPwNVJ1BDiousEdUF4= Subject key identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A007B02B9FE59EDDAF86B614A7B9EA66A78175E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft caRepository: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 21 Jan 2025 13:44:54 +0000 Certificate not after: Tue 20 Jan 2026 13:49:54 +0000 Subordinate resources: AS: 267596 IP: 45.71.20.0/22 IP: 2804:43e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:00:7b:02:b9:fe:59:ed:da:f8:6b:61:4a:7b:9e:a6:6a:78:17:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 21 13:44:54 2025 GMT Not After : Jan 20 13:49:54 2026 GMT Subject: CN=8C3BD6398920A573D10A232EF4F43F8ABF5B4153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:38:36:4d:1d:56:3e:cc:dd:0f:45:aa:87: 65:a9:68:1f:fb:91:eb:94:2d:ba:59:38:59:96:fa: 70:28:83:bf:18:d7:7d:5f:17:3e:5d:4d:3a:61:8a: d1:d5:1e:b0:3f:33:0f:60:d5:95:e5:82:70:fc:2f: 94:7f:0c:3d:05:7b:a2:fc:5d:bf:f1:33:3f:ee:df: 2b:2b:4c:79:c7:d2:19:29:8b:48:21:ed:65:61:1a: ed:40:e6:6b:7a:6a:c3:79:1d:13:75:7a:81:a6:eb: 82:76:d0:42:f8:8e:d9:b5:46:4f:0a:6c:e0:a6:2e: 19:c1:e5:5a:5e:5d:bb:57:f5:e6:9c:af:b0:0e:55: f4:19:7e:27:f1:0a:2a:c8:07:7b:b9:f5:29:54:8a: 2a:54:b1:c7:bc:27:db:e6:ad:83:20:1d:bf:71:0e: 87:7c:80:78:a5:0d:8f:05:75:6d:be:8a:51:f9:8c: b7:7f:1e:3a:63:80:fe:f2:14:69:9b:3b:81:19:23: db:d9:e5:3c:37:f4:3f:cb:a4:b3:05:32:3f:dc:b5: cd:be:65:a4:a8:ef:7a:ed:4b:53:b5:0e:58:c1:f5: 25:9e:48:9a:a6:0e:80:89:66:90:79:51:f6:f4:fb: 66:bb:52:02:eb:3a:d4:77:ce:fc:75:85:4b:e6:92: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:3B:D6:39:89:20:A5:73:D1:0A:23:2E:F4:F4:3F:8A:BF:5B:41:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/8C3BD6398920A573D10A232EF4F43F8ABF5B4153.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.20.0/22 IPv6: 2804:43e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267596 Signature Algorithm: sha256WithRSAEncryption 08:11:a4:5a:06:61:65:4f:d4:d2:87:49:fe:95:be:59:80:dd: 5c:9c:f2:07:c0:0f:b3:67:20:e8:9c:6a:12:53:94:df:59:e3: 4c:fe:f2:5f:86:53:b3:38:6a:ac:0a:24:52:4e:7c:a8:fd:24: 48:37:da:f9:85:23:69:4b:b9:96:14:77:53:22:86:60:7a:bf: c3:b5:14:47:e1:22:f9:37:78:52:e9:9e:f4:3e:8f:55:66:27: 54:a0:71:2c:d3:ae:1b:4b:86:15:81:9f:4f:d5:b5:58:ae:0b: 84:1a:e8:47:39:55:91:35:bb:17:61:67:ce:9b:12:4e:40:30: 62:ee:95:08:f4:a4:2e:a8:e1:61:5a:0d:01:be:87:eb:b8:97: 99:27:de:48:dc:ff:f3:4d:e8:80:e1:63:65:98:b1:13:ba:a1: fc:c8:77:28:1a:76:d8:a0:1c:2e:4f:ae:98:95:e5:c2:89:06: cf:4b:a1:75:5e:1d:7d:a0:59:b9:b4:4f:a4:4c:56:d1:38:9c: ff:57:99:fd:e3:89:a8:f8:52:ff:b5:4f:76:f1:a3:d5:5f:7a: af:15:84:06:55:72:66:d2:0c:79:e9:38:f5:8c:eb:d0:60:36: 21:52:f4:8b:25:b6:4f:f9:a5:8f:a8:28:78:da:fd:5f:44:08: ca:d4:a2:98 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCgB7Arn+We3a+GthSnuepmp4F14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjExMzQ0NTRaFw0yNjAxMjAxMzQ5NTRaMDMxMTAvBgNV BAMTKDhDM0JENjM5ODkyMEE1NzNEMTBBMjMyRUY0RjQzRjhBQkY1QjQxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1jg2TR1WPszdD0Wqh2WpaB/7 keuULbpZOFmW+nAog78Y131fFz5dTTphitHVHrA/Mw9g1ZXlgnD8L5R/DD0Fe6L8 Xb/xMz/u3ysrTHnH0hkpi0gh7WVhGu1A5mt6asN5HRN1eoGm64J20EL4jtm1Rk8K bOCmLhnB5VpeXbtX9eacr7AOVfQZfifxCirIB3u59SlUiipUsce8J9vmrYMgHb9x Dod8gHilDY8FdW2+ilH5jLd/HjpjgP7yFGmbO4EZI9vZ5Tw39D/LpLMFMj/ctc2+ ZaSo73rtS1O1DljB9SWeSJqmDoCJZpB5Ufb0+2a7UgLrOtR3zvx1hUvmko8FAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMO9Y5iSClc9EK Iy709D+Kv1tBUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkE1 YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3c3ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pB NWFHZlBTNVhoMkR6VGJYb000aE02ekYxdVl5NnFmVlhUTFVqRlU2N3N6LzAvOEMz QkQ2Mzk4OTIwQTU3M0QxMEEyMzJFRjRGNDNGOEFCRjVCNDE1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUcUMA0EAgACMAcDBQAoBEPgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVTDANBgkqhkiG9w0BAQsFAAOCAQEACBGkWgZhZU/U0odJ /pW+WYDdXJzyB8APs2cg6JxqElOU31njTP7yX4ZTszhqrAokUk58qP0kSDfa+YUj aUu5lhR3UyKGYHq/w7UUR+Ei+Td4Uume9D6PVWYnVKBxLNOuG0uGFYGfT9W1WK4L hBroRzlVkTW7F2FnzpsSTkAwYu6VCPSkLqjhYVoNAb6H67iXmSfeSNz/803ogOFj ZZixE7qh/Mh3KBp22KAcLk+umJXlwokGz0uhdV4dfaBZubRPpExW0Tic/1eZ/eOJ qPhS/7VPdvGj1V96rxWEBlVyZtIMeek49Yzr0GA2IVL0iyW2T/mlj6goeNr9X0QI ytSimA== -----END CERTIFICATE-----Generated at Wed Feb 19 22:18:04 2025 by rpki-client