$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer File: 963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer (raw, json) Hash identifier: 71oLyTe9vbvBu6tmBaRAzAMB3AOi7d8rla1K9+QXbCg= Subject key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D4F33453CCF0CB01DE4AB9E6D342C10F80B9B7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft caRepository: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Feb 2025 19:11:50 +0000 Certificate not after: Tue 24 Feb 2026 19:16:50 +0000 Subordinate resources: AS: 265491 IP: 170.78.0.0/22 IP: 2804:34f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4f:33:45:3c:cf:0c:b0:1d:e4:ab:9e:6d:34:2c:10:f8:0b:9b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 25 19:11:50 2025 GMT Not After : Feb 24 19:16:50 2026 GMT Subject: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:5f:b3:1e:8c:3c:79:83:c7:a6:c6:c6:eb: e2:9a:03:58:6e:20:11:95:53:09:88:24:1e:37:62: 7c:9a:97:41:88:63:8c:6e:23:67:b6:50:c0:9b:00: 8e:c6:7d:7a:2b:44:f8:84:4e:e9:b7:78:21:d8:24: a4:98:f2:fc:cf:66:90:f6:b6:15:12:8f:22:13:6f: 38:a4:03:1d:35:65:9b:80:5b:97:81:55:3e:38:a2: 11:4b:78:3a:a0:12:86:f6:16:ea:69:2e:51:fa:ae: be:88:98:b7:9f:91:8b:7d:c9:3e:ce:27:df:f0:f4: 0d:cf:35:90:38:85:b8:21:b8:af:4c:89:72:76:29: 9b:c6:67:cd:40:10:3a:e7:c3:b8:96:17:8b:45:22: 34:64:65:db:2e:26:11:0d:cd:ba:a3:b3:1c:18:2f: 77:d9:58:21:54:97:b7:51:bb:75:e4:59:96:e0:d1: f4:12:fb:b5:bc:3b:a5:8c:a1:3c:01:fe:4e:ce:48: 9c:ca:e0:de:8a:29:13:e5:ea:2b:05:98:b4:f8:d7: 07:25:4d:a2:4a:c1:6e:1e:c3:c2:30:56:19:ff:1b: 95:af:7f:f0:e8:f5:7d:b1:85:25:64:d9:5d:b5:9f: c5:ce:45:a6:97:7a:68:18:52:fa:c9:81:04:4e:d2: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.0.0/22 IPv6: 2804:34f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265491 Signature Algorithm: sha256WithRSAEncryption 00:65:7c:c5:96:ad:21:50:ae:79:f2:a3:fc:b3:36:99:74:8d: 7c:b4:e3:bd:38:7f:55:66:d0:a2:51:78:01:1a:63:5b:5a:22: bd:aa:e4:f4:cd:b4:b3:dd:da:72:21:c5:4b:7a:76:14:cc:47: fb:af:ee:44:e0:bb:0a:8f:1a:d3:09:e5:bc:91:11:ef:4f:69: 10:f4:64:23:ce:3d:26:95:1f:eb:2f:58:d0:5c:6e:aa:e8:68: 07:ab:7e:09:17:9c:67:79:54:b0:67:21:78:ab:e7:a3:7d:eb: 4e:fb:e7:35:60:da:1a:ba:59:f4:70:db:66:26:70:e5:28:da: bf:86:d2:8e:67:34:19:4d:2d:5c:1f:c2:f7:81:41:9b:19:cc: 54:26:01:45:83:8d:a6:45:3e:df:05:f5:ce:78:7d:51:fd:b1: 5b:0a:58:70:61:e7:a6:0b:bb:5f:49:ca:f8:25:71:fa:0b:2c: f1:8a:3f:7e:87:d9:9f:86:5e:17:4e:d8:59:11:8a:94:ae:82: 78:30:43:af:4b:4a:9f:40:dd:db:13:94:62:fe:d4:18:6d:2c: b4:d4:f9:0b:07:50:d1:12:9e:d9:50:66:fc:20:20:f6:15:56: 6a:ed:51:bf:9c:43:23:e9:14:cd:5d:3b:bc:56:76:cd:6a:cb: 47:8e:b6:b1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULU8zRTzPDLAd5KuebTQsEPgLm3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjUxOTExNTBaFw0yNjAyMjQxOTE2NTBaMDMxMTAvBgNV BAMTKDk2M0E1NjRBNDBDRDhDODRFNUQxMUI5OTcwQjUzQkEzQTQ0MUNGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEV+zHow8eYPHpsbG6+KaA1hu IBGVUwmIJB43Ynyal0GIY4xuI2e2UMCbAI7GfXorRPiETum3eCHYJKSY8vzPZpD2 thUSjyITbzikAx01ZZuAW5eBVT44ohFLeDqgEob2FuppLlH6rr6ImLefkYt9yT7O J9/w9A3PNZA4hbghuK9MiXJ2KZvGZ81AEDrnw7iWF4tFIjRkZdsuJhENzbqjsxwY L3fZWCFUl7dRu3XkWZbg0fQS+7W8O6WMoTwB/k7OSJzK4N6KKRPl6isFmLT41wcl TaJKwW4ew8IwVhn/G5Wvf/Do9X2xhSVk2V21n8XORaaXemgYUvrJgQRO0t4XAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWOlZKQM2MhOXR G5lwtTujpEHPRjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFF2 UHg0UHpyTHRac1ZaYUo3RHBLM0Y4UkZWclNiUWpxY3FROXg3MjJldUQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhR dlB4NFB6ckx0WnNWWmFKN0RwSzNGOFJGVnJTYlFqcWNxUTl4NzIyZXVELzAvOTYz QTU2NEE0MENEOEM4NEU1RDExQjk5NzBCNTNCQTNBNDQxQ0Y0Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqk4AMA0EAgACMAcDBQAoBDT0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQNEzANBgkqhkiG9w0BAQsFAAOCAQEAAGV8xZatIVCuefKj /LM2mXSNfLTjvTh/VWbQolF4ARpjW1oivark9M20s93aciHFS3p2FMxH+6/uROC7 Co8a0wnlvJER709pEPRkI849JpUf6y9Y0FxuquhoB6t+CRecZ3lUsGcheKvno33r TvvnNWDaGrpZ9HDbZiZw5Sjav4bSjmc0GU0tXB/C94FBmxnMVCYBRYONpkU+3wX1 znh9Uf2xWwpYcGHnpgu7X0nK+CVx+gss8Yo/fofZn4ZeF07YWRGKlK6CeDBDr0tK n0Dd2xOUYv7UGG0stNT5CwdQ0RKe2VBm/CAg9hVWau1Rv5xDI+kUzV07vFZ2zWrL R462sQ== -----END CERTIFICATE-----Generated at Fri Apr 4 10:20:12 2025 by rpki-client