$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer File: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer (raw, json) Hash identifier: bPTGX+R1QUTMMLhmv1uFjYv9eYapNzpxn+ua6IXu97w= Subject key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1A696299101318D5851FEBA5901294862D3A8149 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft caRepository: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 04 Jan 2025 12:22:57 +0000 Certificate not after: Sat 03 Jan 2026 12:27:57 +0000 Subordinate resources: AS: 270860 IP: 190.124.244.0/22 IP: 2804:728c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:69:62:99:10:13:18:d5:85:1f:eb:a5:90:12:94:86:2d:3a:81:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 4 12:22:57 2025 GMT Not After : Jan 3 12:27:57 2026 GMT Subject: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:b7:b1:50:21:0f:f5:59:81:b2:ea:a4:d7: 20:1f:7f:75:35:b0:8c:92:9c:3f:e2:ae:c2:33:c4: 6f:a4:f0:7f:b6:96:d9:88:e1:5d:f0:16:17:c6:c3: a3:dd:c7:5e:57:6c:68:8a:3b:7e:34:9d:8f:fd:a7: 81:40:76:a1:07:00:76:c1:5c:47:ab:2e:a1:e2:63: 74:3a:a6:6e:95:79:da:3a:1a:50:58:ca:ac:35:8b: 37:1b:e7:2a:a1:a8:c8:92:42:7d:9e:03:ba:55:34: 43:76:23:48:84:51:6d:84:f3:94:cb:e7:47:ce:52: 74:23:8d:9a:66:25:56:6c:b0:1e:48:7d:d8:49:26: 65:17:22:e9:48:82:bb:ae:a8:ff:bc:4c:47:cc:99: e9:b0:69:85:e8:1f:b2:b5:4b:7c:1d:7b:ae:04:a3: 2f:12:40:88:e6:3b:e2:e7:ba:8a:88:54:e2:d1:0c: 95:95:c6:d3:01:48:2f:07:36:03:46:6a:1d:08:d3: 7f:08:ba:34:45:76:b3:94:1f:ab:40:cb:4d:84:c6: 8f:3d:af:bd:3d:ff:29:34:fe:22:b7:c8:df:79:24: ed:f3:84:30:52:91:d8:36:01:48:46:87:66:8a:17: 89:0c:54:d4:46:79:07:36:65:75:21:d6:f3:e5:d5: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.124.244.0/22 IPv6: 2804:728c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270860 Signature Algorithm: sha256WithRSAEncryption dc:2b:2b:b0:a6:88:0e:1b:3c:03:7e:12:8a:2b:6d:c5:e4:bc: 90:0d:f0:67:ed:6d:40:60:79:b3:7b:61:9d:c1:93:3e:5f:ce: ed:6a:52:d5:82:00:14:83:a8:e1:1d:cb:e5:d4:fa:28:c8:49: 44:59:cf:44:5e:53:ae:2f:d7:ba:ff:45:d7:00:9e:3c:16:07: b4:22:fd:55:1d:38:59:33:47:bd:f7:de:6e:c6:3e:e7:ce:34: f5:64:37:65:fe:6c:d4:f5:45:d9:64:c4:15:12:4e:64:1b:e4: 38:19:be:73:c8:5f:95:cb:c8:20:c6:fb:f5:56:0a:17:05:b1: 7e:93:f6:7b:08:45:18:73:1e:dd:d2:6d:53:07:77:34:e7:34: 58:32:3d:6d:ba:14:5e:1a:08:05:9b:06:fc:fa:32:47:9b:8c: 2e:ec:42:75:2e:a3:dd:1b:af:62:7d:22:c6:2e:28:3d:49:59: f0:fa:dd:34:d3:ad:eb:68:4d:93:1a:8c:da:4c:87:09:29:59: 0f:81:35:f8:27:8f:30:7c:5e:e2:2e:c2:be:76:ff:c1:e7:ae: 73:8f:b7:5b:c6:d0:e2:eb:8f:37:6f:3e:0f:d5:61:a2:a8:06: 0e:6d:79:fc:89:0e:0a:ce:5a:8d:22:e1:97:0d:7f:84:b6:5c: 33:91:dd:1d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGmlimRATGNWFH+ulkBKUhi06gUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDQxMjIyNTdaFw0yNjAxMDMxMjI3NTdaMDMxMTAvBgNV BAMTKDkxQ0IwRDQ2RjM4QTE3QzBGM0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9LexUCEP9VmBsuqk1yAff3U1 sIySnD/irsIzxG+k8H+2ltmI4V3wFhfGw6Pdx15XbGiKO340nY/9p4FAdqEHAHbB XEerLqHiY3Q6pm6Vedo6GlBYyqw1izcb5yqhqMiSQn2eA7pVNEN2I0iEUW2E85TL 50fOUnQjjZpmJVZssB5IfdhJJmUXIulIgruuqP+8TEfMmemwaYXoH7K1S3wde64E oy8SQIjmO+LnuoqIVOLRDJWVxtMBSC8HNgNGah0I038IujRFdrOUH6tAy02Exo89 r709/yk0/iK3yN95JO3zhDBSkdg2AUhGh2aKF4kMVNRGeQc2ZXUh1vPl1TZPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSRyw1G84oXwPOr xJ2Ulq/LYOzFwDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2JO SjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hOQkwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNi TkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAvOTFD QjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2MEVDQzVDMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvnz0MA0EAgACMAcDBQAoBHKMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiDDANBgkqhkiG9w0BAQsFAAOCAQEA3CsrsKaIDhs8A34S iittxeS8kA3wZ+1tQGB5s3thncGTPl/O7WpS1YIAFIOo4R3L5dT6KMhJRFnPRF5T ri/Xuv9F1wCePBYHtCL9VR04WTNHvffebsY+58409WQ3Zf5s1PVF2WTEFRJOZBvk OBm+c8hflcvIIMb79VYKFwWxfpP2ewhFGHMe3dJtUwd3NOc0WDI9bboUXhoIBZsG /PoyR5uMLuxCdS6j3RuvYn0ixi4oPUlZ8PrdNNOt62hNkxqM2kyHCSlZD4E1+CeP MHxe4i7Cvnb/weeuc4+3W8bQ4uuPN28+D9VhoqgGDm15/IkOCs5ajSLhlw1/hLZc M5HdHQ== -----END CERTIFICATE-----Generated at Wed Feb 19 22:27:59 2025 by rpki-client