$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/968A30C4F91D45691AD58B655CB6D13DE53B4770.cer File: 968A30C4F91D45691AD58B655CB6D13DE53B4770.cer (raw, json) Hash identifier: GhWzXthPT27bIZsiHTLgztIJsA+J2Wc/3ktfppjrI/8= Subject key identifier: 96:8A:30:C4:F9:1D:45:69:1A:D5:8B:65:5C:B6:D1:3D:E5:3B:47:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 783F26E4DC5842F9E0C8773899B0588D0DA28F85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/968A30C4F91D45691AD58B655CB6D13DE53B4770.mft caRepository: rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Jan 2025 18:07:21 +0000 Certificate not after: Fri 23 Jan 2026 18:12:21 +0000 Subordinate resources: AS: 264930 IP: 168.228.212.0/22 IP: 2804:301c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:3f:26:e4:dc:58:42:f9:e0:c8:77:38:99:b0:58:8d:0d:a2:8f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 24 18:07:21 2025 GMT Not After : Jan 23 18:12:21 2026 GMT Subject: CN=968A30C4F91D45691AD58B655CB6D13DE53B4770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:5a:3c:e6:03:8d:8c:8f:0f:77:75:23:9c: 3b:18:fb:2b:64:91:c4:0e:e0:fe:d3:1b:3c:52:0a: 83:50:9a:6d:b7:e7:df:27:cf:78:a0:b8:19:c6:85: c2:da:a7:cd:75:33:07:c2:b7:54:5f:b5:f5:79:f4: 1e:d1:a9:2f:45:f7:74:0d:8a:01:91:3a:69:cf:06: 99:a7:06:f9:40:eb:82:dc:09:63:7c:4c:e7:02:05: 77:8b:ca:bf:6d:5b:7c:5b:7f:37:cd:ec:b7:5c:0f: 7b:dc:07:09:b7:be:cb:bd:49:87:e0:f4:8b:2c:d7: 19:b3:a4:e6:aa:ce:1a:71:40:8c:a0:b7:fd:77:f9: 95:a4:6e:82:21:2b:5c:2a:08:74:0b:4d:d0:1c:d0: 03:c1:de:0a:c1:2b:fb:8a:80:b2:e3:c2:f7:40:80: 9e:f8:b8:8b:66:ef:9f:77:29:f2:e9:ea:b1:ab:7a: b5:29:04:68:41:8d:90:6c:5b:ee:51:ac:4e:0a:f0: 12:a9:11:de:00:e6:b1:5c:b7:77:28:32:f2:f4:4a: 21:e6:50:16:26:ef:b6:83:6d:40:f8:50:49:40:40: 57:31:e9:30:49:43:f0:3b:2c:c0:9d:ac:23:04:bc: 0b:af:dc:d8:6b:7a:3e:33:5d:ed:c7:f3:17:da:6f: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:8A:30:C4:F9:1D:45:69:1A:D5:8B:65:5C:B6:D1:3D:E5:3B:47:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/968A30C4F91D45691AD58B655CB6D13DE53B4770.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.212.0/22 IPv6: 2804:301c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264930 Signature Algorithm: sha256WithRSAEncryption 55:bd:95:76:f1:bd:79:02:58:f9:fa:8b:58:34:7d:28:74:e5: 62:5a:67:46:44:50:8b:b4:7a:be:5f:14:9c:a8:e9:02:60:19: 1a:aa:18:31:41:de:d4:44:a0:85:8c:13:d6:58:5f:d4:ca:eb: e7:14:a8:29:e8:e4:25:a3:34:71:51:58:a6:0a:7e:8c:58:58: e5:02:39:49:62:95:f2:b4:7f:3d:65:0b:30:a7:f2:36:a8:32: ba:c2:83:d1:6c:91:8a:fb:24:f0:72:27:b8:8b:84:94:20:30: 46:c8:f5:da:5c:5b:9a:04:dd:d4:b7:dc:47:ec:c7:e6:58:71: a4:4b:4d:86:54:59:13:69:34:6f:19:f5:6b:bf:fb:b5:40:a9: d3:bb:25:7a:5f:c9:46:91:5c:8e:3a:ab:73:43:3d:f0:df:70: 38:db:60:f9:d2:1c:6c:05:be:09:5b:cc:d9:49:01:36:20:9f: e6:20:4a:a2:f9:6f:c1:3c:ef:c2:7c:90:04:3e:11:a3:b5:ae: be:93:94:ec:f1:bd:f2:04:0d:6a:17:e2:8f:6d:49:3c:b5:34: eb:7c:41:a8:67:8a:a9:41:fe:57:47:9b:7b:77:a1:61:df:60: 77:7b:59:52:3a:df:ba:77:dd:38:56:1a:08:80:d2:91:79:f7: 51:b8:50:cd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUeD8m5NxYQvngyHc4mbBYjQ2ij4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjQxODA3MjFaFw0yNjAxMjMxODEyMjFaMDMxMTAvBgNV BAMTKDk2OEEzMEM0RjkxRDQ1NjkxQUQ1OEI2NTVDQjZEMTNERTUzQjQ3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1klo85gONjI8Pd3UjnDsY+ytk kcQO4P7TGzxSCoNQmm23598nz3iguBnGhcLap811MwfCt1RftfV59B7RqS9F93QN igGROmnPBpmnBvlA64LcCWN8TOcCBXeLyr9tW3xbfzfN7LdcD3vcBwm3vsu9SYfg 9Iss1xmzpOaqzhpxQIygt/13+ZWkboIhK1wqCHQLTdAc0APB3grBK/uKgLLjwvdA gJ74uItm7593KfLp6rGrerUpBGhBjZBsW+5RrE4K8BKpEd4A5rFct3coMvL0SiHm UBYm77aDbUD4UElAQFcx6TBJQ/A7LMCdrCMEvAuv3Nhrej4zXe3H8xfab5b7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSWijDE+R1FaRrV i2VcttE95TtHcDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHl1 WWZHTEFXUjM0Z0t3d3A0WnZqb0tiQ05ZQm1nQ21jdlpMdHpOa3h6aVkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h5 dVlmR0xBV1IzNGdLd3dwNFp2am9LYkNOWUJtZ0NtY3ZaTHR6Tmt4emlZLzAvOTY4 QTMwQzRGOTFENDU2OTFBRDU4QjY1NUNCNkQxM0RFNTNCNDc3MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqOTUMA0EAgACMAcDBQAoBDAcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQK4jANBgkqhkiG9w0BAQsFAAOCAQEAVb2VdvG9eQJY+fqL WDR9KHTlYlpnRkRQi7R6vl8UnKjpAmAZGqoYMUHe1ESghYwT1lhf1Mrr5xSoKejk JaM0cVFYpgp+jFhY5QI5SWKV8rR/PWULMKfyNqgyusKD0WyRivsk8HInuIuElCAw Rsj12lxbmgTd1LfcR+zH5lhxpEtNhlRZE2k0bxn1a7/7tUCp07slel/JRpFcjjqr c0M98N9wONtg+dIcbAW+CVvM2UkBNiCf5iBKovlvwTzvwnyQBD4Ro7WuvpOU7PG9 8gQNahfij21JPLU063xBqGeKqUH+V0ebe3ehYd9gd3tZUjrfunfdOFYaCIDSkXn3 UbhQzQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:48 2025 by rpki-client