$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer File: 94BE3C088C5997DF6AA8B56878A0239FF601A352.cer (raw, json) Hash identifier: nog1Z+1we1ya69x8xEsY134oarMDBo1uZC0hlJMcUBU= Subject key identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6DD75835714789D4E5C02BE0D5A6C7F1057FD3A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft caRepository: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 15:00:06 +0000 Certificate not after: Thu 05 Mar 2026 15:05:06 +0000 Subordinate resources: AS: 268120 IP: 45.169.56.0/22 IP: 2804:584c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d7:58:35:71:47:89:d4:e5:c0:2b:e0:d5:a6:c7:f1:05:7f:d3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 15:00:06 2025 GMT Not After : Mar 5 15:05:06 2026 GMT Subject: CN=94BE3C088C5997DF6AA8B56878A0239FF601A352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:15:59:8f:86:5c:01:72:7a:19:95:49:6e: 6d:c1:20:54:b9:fa:33:1d:62:a2:c6:21:be:a8:df: 7d:1f:30:d7:03:bb:3a:a1:9f:02:ba:8f:d0:e5:64: a5:b6:74:7a:58:29:df:46:4a:d3:53:7c:27:7f:d6: b8:69:2d:c4:44:e0:23:ca:71:92:b5:97:25:10:94: 64:d5:60:bc:b2:02:0e:e3:dd:f3:40:32:85:9e:5c: 6c:0d:07:37:82:08:6b:b8:ca:87:91:10:b6:63:eb: 95:21:9a:ed:03:6e:40:7c:39:b7:ac:65:09:b9:88: 40:76:a5:38:ed:fc:99:a8:78:75:22:ab:43:2b:af: e3:29:79:2a:bc:30:65:e0:c1:53:9f:06:03:d9:ea: f8:ff:ee:20:29:d5:06:0b:11:2d:fd:83:31:01:a3: a4:64:a9:ec:af:39:58:e8:73:a4:d7:00:2d:ed:6f: e5:a4:fd:40:54:ef:5f:54:65:de:32:e9:3f:8f:f2: 15:e8:35:68:ee:af:f5:69:dc:02:4f:76:09:03:bc: 98:03:17:b1:48:f1:16:de:38:d5:d0:89:b4:3a:39: 44:78:6f:cb:83:02:32:82:3e:8f:64:f5:d5:b4:a3: 85:d8:00:d0:a3:0e:4c:bd:c8:c3:07:a7:cb:7f:fd: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.56.0/22 IPv6: 2804:584c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268120 Signature Algorithm: sha256WithRSAEncryption 60:4e:70:d6:fe:43:15:cd:84:2d:04:da:8d:86:d1:83:19:63: 15:9b:46:6e:63:90:d1:ed:5b:5c:68:1c:fa:ee:0f:f9:4b:49: a3:68:95:4d:04:ce:aa:85:ce:de:da:0e:41:51:bf:2e:7e:38: 52:9a:f2:1e:42:7a:af:d1:20:63:92:e8:07:17:6f:cf:8a:05: ea:36:b9:4c:7a:a5:a1:26:60:5d:e8:95:81:c6:46:2a:d6:e6: e3:e4:4b:5c:40:9a:fc:6d:fb:e3:0c:19:39:78:fa:14:c3:54: d0:81:0b:82:8d:5f:42:ab:b5:0e:be:a4:71:d1:27:81:e0:60: 34:90:86:b3:f7:ad:5c:bf:b0:65:d4:50:b8:c1:07:32:05:5b: 0f:8e:33:4c:14:61:60:b5:82:56:9e:3f:38:e7:72:d5:ef:29: 75:74:7d:09:2b:e1:4d:1d:0f:85:e6:bc:64:2d:5a:ff:1b:98: cf:6a:00:cf:5d:28:d9:80:74:6d:b2:5d:b2:0f:66:a3:fa:df: bb:37:11:8a:0d:05:4f:5d:35:bc:49:2c:e9:18:33:9a:6a:a0: 6d:4a:23:a8:8c:a8:63:34:55:58:46:62:ce:f4:7d:f4:a1:a8: a7:70:bd:ba:b0:b8:ce:15:59:d9:57:db:89:5e:50:e8:9b:65: a8:35:fb:3f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbddYNXFHidTlwCvg1abH8QV/06QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNTAwMDZaFw0yNjAzMDUxNTA1MDZaMDMxMTAvBgNV BAMTKDk0QkUzQzA4OEM1OTk3REY2QUE4QjU2ODc4QTAyMzlGRjYwMUEzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozRVZj4ZcAXJ6GZVJbm3BIFS5 +jMdYqLGIb6o330fMNcDuzqhnwK6j9DlZKW2dHpYKd9GStNTfCd/1rhpLcRE4CPK cZK1lyUQlGTVYLyyAg7j3fNAMoWeXGwNBzeCCGu4yoeRELZj65Uhmu0DbkB8Obes ZQm5iEB2pTjt/JmoeHUiq0Mrr+MpeSq8MGXgwVOfBgPZ6vj/7iAp1QYLES39gzEB o6RkqeyvOVjoc6TXAC3tb+Wk/UBU719UZd4y6T+P8hXoNWjur/Vp3AJPdgkDvJgD F7FI8RbeONXQibQ6OUR4b8uDAjKCPo9k9dW0o4XYANCjDky9yMMHp8t//ftlAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSUvjwIjFmX32qo tWh4oCOf9gGjUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnZr ZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VUSFovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ2 a2RkNTJiRGRkcmpiRm1xOENYd3BNTjRKZFhydDdYUzJUalBldEdVVEhaLzEvOTRC RTNDMDg4QzU5OTdERjZBQThCNTY4NzhBMDIzOUZGNjAxQTM1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLak4MA0EAgACMAcDBQAoBFhMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXWDANBgkqhkiG9w0BAQsFAAOCAQEAYE5w1v5DFc2ELQTa jYbRgxljFZtGbmOQ0e1bXGgc+u4P+UtJo2iVTQTOqoXO3toOQVG/Ln44UpryHkJ6 r9EgY5LoBxdvz4oF6ja5THqloSZgXeiVgcZGKtbm4+RLXECa/G374wwZOXj6FMNU 0IELgo1fQqu1Dr6kcdEngeBgNJCGs/etXL+wZdRQuMEHMgVbD44zTBRhYLWCVp4/ OOdy1e8pdXR9CSvhTR0Phea8ZC1a/xuYz2oAz10o2YB0bbJdsg9mo/rfuzcRig0F T101vEks6RgzmmqgbUojqIyoYzRVWEZizvR99KGop3C9urC4zhVZ2VfbiV5Q6Jtl qDX7Pw== -----END CERTIFICATE-----Generated at Sat Apr 5 00:03:26 2025 by rpki-client