$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer File: 909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer (raw, json) Hash identifier: W22WfS4OFxg1eIOdE0B557pZ4+PMoP0kNLnKu9+aatU= Subject key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 57EED77D2F0E70959049B4EE43D8217CA9F7B68E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft caRepository: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Mar 2025 14:09:19 +0000 Certificate not after: Fri 27 Mar 2026 14:14:19 +0000 Subordinate resources: AS: 61592 IP: 45.224.216.0/22 IP: 45.232.188.0/22 IP: 45.234.100.0/22 IP: 2804:4c34::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ee:d7:7d:2f:0e:70:95:90:49:b4:ee:43:d8:21:7c:a9:f7:b6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 28 14:09:19 2025 GMT Not After : Mar 27 14:14:19 2026 GMT Subject: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:d2:1b:a6:27:83:75:fd:c2:5e:d0:ed:da: 7e:07:32:48:a7:86:c7:41:21:61:69:02:86:87:f7: 59:f8:ff:eb:71:84:8f:f0:73:1c:32:14:10:ab:c7: 68:d2:30:50:b7:68:b5:82:57:b8:99:49:36:b3:86: e4:5a:47:5a:30:50:f1:77:84:3a:34:28:89:84:e6: 15:4d:9a:9d:ba:61:38:32:48:74:b7:9a:39:23:a4: 02:3b:7d:77:e6:9e:73:f3:04:59:34:19:4d:e5:d2: a5:45:37:cb:f1:b0:7a:47:92:bb:ff:09:67:af:75: eb:d2:ef:4b:13:48:b1:19:2e:1b:40:24:5f:7a:8a: 9a:d9:0c:54:8c:88:76:1f:b1:3c:84:d5:49:31:66: b1:c7:cb:84:8d:f3:de:6e:cf:cd:8e:8e:c7:6c:8d: f3:7f:0c:d5:d5:e0:de:1a:1e:57:d5:c9:3e:19:3d: 95:5d:05:6e:c5:38:ca:b2:b1:da:81:74:e0:89:e4: 76:d8:c0:30:f0:a5:46:f6:61:9e:cf:7d:6f:33:f9: fb:b4:23:c5:21:a1:39:77:d9:98:74:bc:b2:3f:38: 22:1e:77:cd:10:2e:c4:15:92:17:69:d9:8f:e5:d6: 20:e9:fc:8b:d4:e7:cc:1b:56:21:f4:21:e2:63:ce: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.216.0/22 45.232.188.0/22 45.234.100.0/22 IPv6: 2804:4c34::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61592 Signature Algorithm: sha256WithRSAEncryption 48:1d:e7:e6:85:83:82:fe:08:f6:93:9c:6d:66:71:6e:e1:0f: 44:4b:1b:b3:db:4b:e6:df:35:9f:da:29:37:30:f5:ba:0a:08: 1a:06:69:8c:86:28:59:aa:a2:86:a5:30:34:6b:38:b1:e6:48: 0c:26:21:40:a5:5b:09:2d:2e:21:c1:0f:0a:de:fb:45:1f:7b: a1:99:da:a0:91:49:10:5c:69:ac:19:55:45:d8:a5:f5:e2:7b: a3:a2:db:42:a5:c7:51:5e:91:7f:13:c1:cb:94:5f:13:97:0a: 45:89:db:44:00:fa:49:2a:8d:70:63:9d:8b:db:17:66:ee:bd: b5:ec:d5:55:ed:a8:97:ec:1a:2b:75:fa:8e:08:74:6a:0d:50: 1c:27:c8:86:1f:92:bf:72:97:1f:ec:0c:a5:1f:9c:64:bd:90: 25:3a:5b:ed:c4:88:b5:0c:fc:99:ea:9a:f7:e0:ac:08:1a:24: 39:04:d6:99:71:ad:02:85:44:9e:37:81:bf:2f:df:e3:77:c6: 18:10:83:78:f4:84:86:ed:15:3e:62:2e:a4:9c:2a:64:c7:dc: ef:53:6b:e1:fd:bd:77:6a:75:ff:c9:0e:5e:9c:75:f3:3b:ab: 00:a1:cf:39:9b:59:ee:90:93:88:08:b3:68:31:a7:ea:72:bd: f0:d7:54:38 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUV+7XfS8OcJWQSbTuQ9ghfKn3to4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjgxNDA5MTlaFw0yNjAzMjcxNDE0MTlaMDMxMTAvBgNV BAMTKDkwOUU5RkVBNTY2MzIxQkUwNzgyOTgyRDJEOEJBQjNGRTNBOEQyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GtIbpieDdf3CXtDt2n4HMkin hsdBIWFpAoaH91n4/+txhI/wcxwyFBCrx2jSMFC3aLWCV7iZSTazhuRaR1owUPF3 hDo0KImE5hVNmp26YTgySHS3mjkjpAI7fXfmnnPzBFk0GU3l0qVFN8vxsHpHkrv/ CWevdevS70sTSLEZLhtAJF96iprZDFSMiHYfsTyE1UkxZrHHy4SN895uz82Ojsds jfN/DNXV4N4aHlfVyT4ZPZVdBW7FOMqysdqBdOCJ5HbYwDDwpUb2YZ7PfW8z+fu0 I8UhoTl32Zh0vLI/OCIed80QLsQVkhdp2Y/l1iDp/IvU58wbViH0IeJjzpiHAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQnp/qVmMhvgeC mC0ti6s/46jSKzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkVM OW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84bXAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJF TDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzEvOTA5 RTlGRUE1NjYzMjFCRTA3ODI5ODJEMkQ4QkFCM0ZFM0E4RDIyQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCLeDYAwQCLei8AwQCLepkMA0EAgACMAcDBQAoBEw0 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwmDANBgkqhkiG9w0BAQsFAAOCAQEA SB3n5oWDgv4I9pOcbWZxbuEPREsbs9tL5t81n9opNzD1ugoIGgZpjIYoWaqihqUw NGs4seZIDCYhQKVbCS0uIcEPCt77RR97oZnaoJFJEFxprBlVRdil9eJ7o6LbQqXH UV6RfxPBy5RfE5cKRYnbRAD6SSqNcGOdi9sXZu69tezVVe2ol+waK3X6jgh0ag1Q HCfIhh+Sv3KXH+wMpR+cZL2QJTpb7cSItQz8meqa9+CsCBokOQTWmXGtAoVEnjeB vy/f43fGGBCDePSEhu0VPmIupJwqZMfc71Nr4f29d2p1/8kOXpx18zurAKHPOZtZ 7pCTiAizaDGn6nK98NdUOA== -----END CERTIFICATE-----Generated at Fri Apr 4 19:55:02 2025 by rpki-client