$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer File: 8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.cer (raw, json) Hash identifier: Jc+B1xOf54GXr2ugarnkjRrHbJObcYNnCdPHB6OA4ww= Subject key identifier: 8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 69381CAF6482950D6AA85B91CFD0639D6B78D698 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft caRepository: rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 24 Feb 2025 14:36:19 +0000 Certificate not after: Mon 23 Feb 2026 14:41:19 +0000 Subordinate resources: AS: 273590 IP: 189.85.120.0/23 IP: 2804:8938::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:38:1c:af:64:82:95:0d:6a:a8:5b:91:cf:d0:63:9d:6b:78:d6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 24 14:36:19 2025 GMT Not After : Feb 23 14:41:19 2026 GMT Subject: CN=8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:66:d5:f4:8c:90:10:af:17:ff:88:22:60: 6a:b6:d1:35:20:c9:79:06:7f:16:01:b3:f6:f8:9b: 1d:4a:cc:94:6d:f6:96:4f:ab:c4:3e:97:51:f4:b0: 86:ca:2b:e0:67:e8:98:93:b4:e4:77:4f:31:ef:c8: fb:05:a6:64:07:26:8a:0f:dd:3c:ed:f4:f3:41:34: ba:85:eb:5a:fd:60:d0:bc:5d:c2:e7:87:a2:ad:8c: 7a:17:6b:9a:9c:c9:6e:bd:40:17:48:1d:91:d6:1a: cc:c7:9a:e1:9a:a9:f3:8c:3e:95:6c:f5:56:10:29: 51:ef:56:09:4c:68:bc:6c:34:c9:65:3a:e3:d5:92: c3:52:e5:44:07:fe:95:0b:02:ab:f6:59:d2:4f:e5: d0:d9:8b:35:ba:ac:e7:95:81:a5:0b:e3:d8:40:e8: 57:70:0d:bf:86:29:a2:38:33:5a:53:b1:1f:13:41: 74:b0:e6:31:08:50:6a:63:ec:6a:93:f0:69:5f:bc: 0d:a0:41:d6:3d:c9:90:d0:53:e8:78:80:ad:81:f5: 22:55:8a:f9:0d:ff:19:d8:4b:18:45:88:18:12:29: 8c:06:45:24:68:5a:8a:b8:b6:36:da:08:6e:d9:57: 76:e5:5d:af:fd:75:4b:29:3f:d5:ae:6f:1b:98:07: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:EA:C6:E2:ED:B6:8B:CA:5A:6C:78:EE:1E:F5:D1:E7:7E:4A:68:3C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/8CEAC6E2EDB68BCA5A6C78EE1EF5D1E77E4A683C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.85.120.0/23 IPv6: 2804:8938::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273590 Signature Algorithm: sha256WithRSAEncryption ce:44:00:51:17:c2:06:95:32:22:b4:41:14:d3:c7:98:24:18: e7:1b:79:ed:99:0a:89:01:f1:98:56:91:b8:8d:f3:17:c5:83: 10:a7:c3:68:2e:fe:3f:23:52:f6:b3:fd:4f:8e:27:72:f0:e1: 3b:47:49:20:20:a6:e9:fe:98:9c:9a:7f:18:8c:a5:e8:1b:3d: b2:c2:47:0e:27:98:b3:aa:4f:dc:8d:8e:cb:f6:2d:01:1d:32: 7a:f5:42:61:a2:da:20:af:01:70:67:ab:41:5c:c0:75:90:56: e5:28:ab:36:02:45:d6:c3:92:3c:b2:83:c5:3b:c8:30:8f:63: e4:3d:b0:e6:48:67:dc:e2:38:f9:73:0d:66:3c:c0:6b:0d:43: 17:35:6b:28:11:d0:1c:83:76:dc:f3:d8:7e:00:6b:13:59:fb: c1:1a:25:d9:e6:20:f2:dd:87:96:0f:6c:5a:3d:5f:a8:d9:ad: 64:f7:29:4b:7b:60:8e:16:37:c5:f3:c8:96:79:2d:68:5f:cb: 27:ee:6c:6c:b5:10:3f:b8:7f:f7:5f:c5:ff:2a:a8:37:e2:a6: cb:c8:ca:d6:b1:f7:e1:04:b9:71:54:92:84:5c:8c:e4:b9:bf: dc:f0:fe:92:c0:43:b3:d9:9f:48:da:1f:21:ba:13:1a:9e:f5: c4:62:b9:e4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUaTgcr2SClQ1qqFuRz9BjnWt41pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjQxNDM2MTlaFw0yNjAyMjMxNDQxMTlaMDMxMTAvBgNV BAMTKDhDRUFDNkUyRURCNjhCQ0E1QTZDNzhFRTFFRjVEMUU3N0U0QTY4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bWbV9IyQEK8X/4giYGq20TUg yXkGfxYBs/b4mx1KzJRt9pZPq8Q+l1H0sIbKK+Bn6JiTtOR3TzHvyPsFpmQHJooP 3Tzt9PNBNLqF61r9YNC8XcLnh6KtjHoXa5qcyW69QBdIHZHWGszHmuGaqfOMPpVs 9VYQKVHvVglMaLxsNMllOuPVksNS5UQH/pULAqv2WdJP5dDZizW6rOeVgaUL49hA 6FdwDb+GKaI4M1pTsR8TQXSw5jEIUGpj7GqT8GlfvA2gQdY9yZDQU+h4gK2B9SJV ivkN/xnYSxhFiBgSKYwGRSRoWoq4tjbaCG7ZV3blXa/9dUspP9WubxuYB7V1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM6sbi7baLylps eO4e9dHnfkpoPDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXlR SjNlZU4yN0hIWkt4MXRNdEZHY0pEbW1FeTNTV0cyejVRYVN3OHhSNVYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV5 UUozZWVOMjdISFpLeDF0TXRGR2NKRG1tRXkzU1dHMno1UWFTdzh4UjVWLzAvOENF QUM2RTJFREI2OEJDQTVBNkM3OEVFMUVGNUQxRTc3RTRBNjgzQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBvVV4MA0EAgACMAcDBQAoBIk4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQstjANBgkqhkiG9w0BAQsFAAOCAQEAzkQAURfCBpUyIrRB FNPHmCQY5xt57ZkKiQHxmFaRuI3zF8WDEKfDaC7+PyNS9rP9T44ncvDhO0dJICCm 6f6YnJp/GIyl6Bs9ssJHDieYs6pP3I2Oy/YtAR0yevVCYaLaIK8BcGerQVzAdZBW 5SirNgJF1sOSPLKDxTvIMI9j5D2w5khn3OI4+XMNZjzAaw1DFzVrKBHQHIN23PPY fgBrE1n7wRol2eYg8t2Hlg9sWj1fqNmtZPcpS3tgjhY3xfPIlnktaF/LJ+5sbLUQ P7h/91/F/yqoN+Kmy8jK1rH34QS5cVSShFyM5Lm/3PD+ksBDs9mfSNofIboTGp71 xGK55A== -----END CERTIFICATE-----Generated at Fri Apr 4 16:28:03 2025 by rpki-client