$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer File: 939B31761D811EC12BDF8456C574E6874A3AAD78.cer (raw, json) Hash identifier: LTNoALg5zChHOWsoKIbs1pyMU4kVP9zmgKCn1lBbI4s= Subject key identifier: 93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18AB128293062A9259527E02A5DC59E945778862 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft caRepository: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Feb 2025 20:45:52 +0000 Certificate not after: Mon 09 Feb 2026 20:50:52 +0000 Subordinate resources: AS: 269163 IP: 45.181.24.0/24 IP: 45.181.27.0/24 IP: 2804:6060::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ab:12:82:93:06:2a:92:59:52:7e:02:a5:dc:59:e9:45:77:88:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 10 20:45:52 2025 GMT Not After : Feb 9 20:50:52 2026 GMT Subject: CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:da:31:16:9f:52:43:cc:4e:49:8d:31:70:77: 20:16:6a:23:5c:e7:1a:a5:cd:ba:c4:75:1d:c7:75: 71:61:ed:75:ac:1d:cf:d3:13:df:ae:79:fd:99:64: f0:4d:d0:9f:3c:09:41:73:bb:df:96:01:9b:c3:64: f2:b9:3a:af:6d:8c:a4:bb:a0:7c:2d:20:5d:e4:73: f5:06:ff:01:3f:e3:f0:8e:95:84:bb:82:ed:cb:37: 21:bb:0c:dc:90:73:4c:d8:35:8d:4d:0e:0e:70:d7: 95:df:07:87:31:05:85:14:65:a1:d6:8e:5a:de:35: 48:ab:7e:04:14:e8:3e:76:b6:d4:d0:37:7b:37:c5: e8:6f:47:76:33:88:bb:62:82:83:b3:1b:bb:19:2e: 9a:c2:91:45:6d:cb:17:74:e1:ec:65:5f:2a:32:69: 53:f8:09:21:88:e9:38:f8:d5:a4:a0:20:f0:ca:f9: de:77:a2:49:f0:eb:79:0f:27:ed:ac:b4:5e:59:10: 9c:a8:63:7b:17:0e:c9:25:03:8a:e1:67:37:80:4c: c7:f6:ce:b6:a9:95:77:12:a6:d0:f1:f8:65:9d:0e: a5:88:2a:2e:28:c8:c9:e0:3b:22:63:d9:62:a4:1d: 4b:0e:5a:a1:64:1e:1c:dd:70:64:2f:73:a2:47:9e: 82:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.181.24.0/24 45.181.27.0/24 IPv6: 2804:6060::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269163 Signature Algorithm: sha256WithRSAEncryption 92:fc:f8:30:97:71:28:7c:a8:a9:9e:ba:58:9a:28:ce:83:dd: 05:ee:e4:ad:c7:74:b0:79:24:97:fa:2e:d6:3c:d7:a4:f6:f6: 80:0f:98:fe:87:5b:2b:2c:02:ec:77:78:d1:5e:49:c0:44:b1: 3e:51:6f:be:86:b0:65:59:35:95:87:0c:03:39:37:d7:e4:73: 21:a3:36:28:24:8f:7c:78:40:55:b5:8f:1a:02:ed:a8:06:a9: bd:93:7d:e4:fe:29:9b:0e:fc:b3:87:b8:ea:8c:9c:99:18:55: e5:6d:6c:1f:e6:44:e8:25:ee:5b:69:26:0a:95:db:11:e8:e5: 73:3f:f4:5e:b8:63:86:72:f6:28:72:75:63:44:10:44:a8:f6: 02:47:ea:41:06:a0:05:83:a4:a1:00:4f:1c:aa:e3:4e:83:ef: 43:d7:d1:ca:1f:ac:0b:04:43:f9:18:de:f0:9a:94:f4:38:f0: 1c:0a:a4:36:de:83:df:c2:73:c5:9b:ae:77:e7:01:e3:c9:98: 52:2f:f6:03:73:ea:32:f3:8e:32:0c:39:ff:43:d9:4f:3e:e9: 85:47:14:c2:9c:f7:b4:f8:c0:6f:d3:d9:8c:6e:b6:d8:2a:47: 3c:54:f5:eb:50:42:4b:f7:fe:58:62:9e:2a:89:db:ef:43:6b: a0:b8:a2:9d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGKsSgpMGKpJZUn4CpdxZ6UV3iGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTAyMDQ1NTJaFw0yNjAyMDkyMDUwNTJaMDMxMTAvBgNV BAMTKDkzOUIzMTc2MUQ4MTFFQzEyQkRGODQ1NkM1NzRFNjg3NEEzQUFENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ2jEWn1JDzE5JjTFwdyAWaiNc 5xqlzbrEdR3HdXFh7XWsHc/TE9+uef2ZZPBN0J88CUFzu9+WAZvDZPK5Oq9tjKS7 oHwtIF3kc/UG/wE/4/COlYS7gu3LNyG7DNyQc0zYNY1NDg5w15XfB4cxBYUUZaHW jlreNUirfgQU6D52ttTQN3s3xehvR3YziLtigoOzG7sZLprCkUVtyxd04exlXyoy aVP4CSGI6Tj41aSgIPDK+d53oknw63kPJ+2stF5ZEJyoY3sXDsklA4rhZzeATMf2 zraplXcSptDx+GWdDqWIKi4oyMngOyJj2WKkHUsOWqFkHhzdcGQvc6JHnoLLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTmzF2HYEewSvf hFbFdOaHSjqteDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNE43 TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhxM3ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRO N05pUUFNVjFneXhyeXpreUwxNzk0WG9XeEhxaFppY1ZnelQ3bWI4cTN6LzAvOTM5 QjMxNzYxRDgxMUVDMTJCREY4NDU2QzU3NEU2ODc0QTNBQUQ3OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQALbUYAwQALbUbMA0EAgACMAcDBQAoBGBgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQbazANBgkqhkiG9w0BAQsFAAOCAQEAkvz4MJdx KHyoqZ66WJoozoPdBe7krcd0sHkkl/ou1jzXpPb2gA+Y/odbKywC7Hd40V5JwESx PlFvvoawZVk1lYcMAzk31+RzIaM2KCSPfHhAVbWPGgLtqAapvZN95P4pmw78s4e4 6oycmRhV5W1sH+ZE6CXuW2kmCpXbEejlcz/0XrhjhnL2KHJ1Y0QQRKj2AkfqQQag BYOkoQBPHKrjToPvQ9fRyh+sCwRD+Rje8JqU9DjwHAqkNt6D38JzxZuud+cB48mY Ui/2A3PqMvOOMgw5/0PZTz7phUcUwpz3tPjAb9PZjG622CpHPFT161BCS/f+WGKe Konb70NroLiinQ== -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:07 2025 by rpki-client