$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer File: 8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer (raw, json) Hash identifier: kpbiQJjAORfF0Xh9+zd+5p5+n0BdfTYdhZqRmKFwhwo= Subject key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5275867EAEDF1276D3FD9E5B9C5DFACA67898621 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft caRepository: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:47 +0000 Certificate not after: Wed 04 Mar 2026 18:41:47 +0000 Subordinate resources: AS: 266129 IP: 45.6.92.0/22 IP: 45.165.54.0/23 IP: 2804:3b18::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 23:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:75:86:7e:ae:df:12:76:d3:fd:9e:5b:9c:5d:fa:ca:67:89:86:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:47 2025 GMT Not After : Mar 4 18:41:47 2026 GMT Subject: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:41:56:f7:98:e2:57:34:da:13:4f:38:77: a9:54:2b:c5:b3:96:f2:44:c1:26:97:0f:d4:53:7c: ef:f1:ae:05:4e:e0:a8:dc:85:3f:74:6e:82:3a:5f: 35:9c:d5:6e:8d:6b:2e:fe:c6:c6:fe:47:f5:6c:95: 12:1d:ed:2a:06:c5:99:9e:8d:12:54:72:32:3a:ff: b8:e3:71:71:a1:7c:07:a8:59:8a:56:85:01:3d:4d: 0f:79:7e:39:6d:cb:88:d1:cb:9c:1b:7b:34:b7:b7: ab:aa:7e:89:f1:c6:5d:87:53:15:35:01:57:50:eb: d1:36:89:03:c1:3b:b0:06:63:7e:31:60:1c:a7:3f: 10:f6:9f:41:2b:18:fd:14:8e:95:1b:4e:6d:08:28: 21:68:6f:a1:43:28:33:3f:e5:d7:a0:02:df:88:d0: 07:fa:8d:30:34:46:05:c6:a1:e3:99:c5:a2:61:dd: 6a:73:67:a6:51:f2:c6:75:cc:5e:4c:70:fe:a1:fc: c4:aa:e9:0f:70:fa:0a:4c:35:89:4b:a6:0b:2a:a4: e0:21:74:9b:7c:ba:01:08:2f:74:37:02:37:4d:f1: ba:8e:de:02:b0:df:08:25:63:1d:a2:5c:58:e3:d0: bf:72:a6:2c:f3:8a:9a:0d:b3:6f:24:dd:77:b0:bf: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.92.0/22 45.165.54.0/23 IPv6: 2804:3b18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266129 Signature Algorithm: sha256WithRSAEncryption 8b:6c:34:51:9e:c3:92:7f:3c:44:dd:a7:92:ec:6e:51:c7:3d: e0:a1:0a:a3:42:97:07:27:b4:04:43:10:f4:2d:c6:a1:c4:b3: 4b:8e:5f:18:d7:1b:d1:66:c9:09:2f:d1:e0:ad:55:50:f7:cc: db:17:25:1b:8f:84:27:24:05:9e:ac:83:75:81:97:dd:0c:8c: 71:65:f5:72:c1:7b:61:07:c8:86:95:af:a7:10:05:b0:9c:da: 2c:9b:32:d9:08:36:0a:2c:66:2e:07:a3:d2:41:b2:ca:99:3e: e7:db:ef:b4:b4:c1:f0:71:80:1c:c3:d1:dc:06:e0:29:17:3e: 47:a5:5b:64:6f:56:5c:2e:de:d3:3d:3c:d7:69:ba:11:78:f8: ae:f8:aa:13:53:8e:5b:72:86:e8:73:d8:62:71:1c:f7:8e:b7: 81:2f:e5:ff:54:c7:f6:37:59:7e:02:17:d9:50:6f:4b:7a:cc: ae:0c:7a:75:f3:da:e1:bb:59:31:09:4c:e0:65:be:f5:8b:22: 3f:dc:b7:a4:10:dc:89:05:a4:3a:35:03:40:2a:ca:8d:2c:bc: 28:dd:6a:5d:1f:d8:ad:11:81:71:df:13:e9:3f:74:fd:45:5c: 2f:c7:d2:74:a2:bc:d0:55:9f:75:e2:32:0f:f0:b5:9c:49:db: 35:8d:ac:81 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUUnWGfq7fEnbT/Z5bnF36ymeJhiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2NDdaFw0yNjAzMDQxODQxNDdaMDMxMTAvBgNV BAMTKDhFODRGRjkxMjFEOTI1NzM3NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoUFW95jiVzTaE084d6lUK8Wz lvJEwSaXD9RTfO/xrgVO4KjchT90boI6XzWc1W6Nay7+xsb+R/VslRId7SoGxZme jRJUcjI6/7jjcXGhfAeoWYpWhQE9TQ95fjlty4jRy5wbezS3t6uqfonxxl2HUxU1 AVdQ69E2iQPBO7AGY34xYBynPxD2n0ErGP0UjpUbTm0IKCFob6FDKDM/5degAt+I 0Af6jTA0RgXGoeOZxaJh3WpzZ6ZR8sZ1zF5McP6h/MSq6Q9w+gpMNYlLpgsqpOAh dJt8ugEIL3Q3AjdN8bqO3gKw3wglYx2iXFjj0L9ypizzipoNs28k3Xewv5dTAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOhP+RIdklc3bX d6CSUz2M7bnunjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lE elE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3dVcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lE elE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3dVcvMS84RTg0 RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItBlwDBAEtpTYwDQQCAAIwBwMFACgEOxgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBA+RMA0GCSqGSIb3DQEBCwUAA4IBAQCLbDRRnsOS fzxE3aeS7G5Rxz3goQqjQpcHJ7QEQxD0LcahxLNLjl8Y1xvRZskJL9HgrVVQ98zb FyUbj4QnJAWerIN1gZfdDIxxZfVywXthB8iGla+nEAWwnNosmzLZCDYKLGYuB6PS QbLKmT7n2++0tMHwcYAcw9HcBuApFz5HpVtkb1ZcLt7TPTzXaboRePiu+KoTU45b coboc9hicRz3jreBL+X/VMf2N1l+AhfZUG9LesyuDHp189rhu1kxCUzgZb71iyI/ 3LekENyJBaQ6NQNAKsqNLLwo3WpdH9itEYFx3xPpP3T9RVwvx9J0orzQVZ914jIP 8LWcSds1jayB -----END CERTIFICATE-----Generated at Sat Apr 5 00:37:46 2025 by rpki-client