$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer File: 9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer (raw, json) Hash identifier: g4k0Vfzk4Te01YHi6EfFQ8R2t5ymk+IoeW9IAG6948Q= Subject key identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0117CDDAE5961ABA4B3EE78D6B36DBC1C212044A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft caRepository: rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 16:28:09 +0000 Certificate not after: Fri 06 Mar 2026 16:33:09 +0000 Subordinate resources: AS: 264150 IP: 138.99.12.0/22 IP: 170.247.104.0/22 IP: 2804:233c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:17:cd:da:e5:96:1a:ba:4b:3e:e7:8d:6b:36:db:c1:c2:12:04:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 16:28:09 2025 GMT Not After : Mar 6 16:33:09 2026 GMT Subject: CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:ab:e5:5d:f0:25:1b:eb:7e:44:39:08:95: ae:c5:98:73:a5:33:76:14:7d:c0:b8:cc:9e:12:17: 0f:40:73:fd:ed:82:da:1f:61:9b:d2:46:49:6a:fa: a6:88:14:36:41:e2:0a:0c:d9:a8:3f:d9:12:bd:d6: 19:99:f5:04:9d:e0:20:e3:17:08:62:17:74:71:5b: 36:9d:65:5e:2c:70:11:04:66:aa:40:df:6d:0f:ca: 8b:a9:3a:ae:16:92:c7:37:9e:bd:06:28:c4:6e:b1: 3d:2d:d9:23:cf:e9:fc:61:01:d7:b6:bd:33:f7:53: dd:e2:e8:e6:7d:1e:2b:d7:ca:f5:da:84:f4:92:3f: 96:2a:1c:a0:0a:ef:ef:b5:f4:c5:5a:e7:2d:ba:61: aa:31:9e:47:d3:d0:6d:61:08:f5:a0:ce:c4:2d:fa: e9:42:dc:90:25:7e:8c:c6:19:c6:8d:a1:64:77:82: 80:3b:f2:51:70:f1:b4:d3:d0:a5:0b:93:67:5b:90: 94:15:ca:8b:29:6a:ad:bd:30:77:73:bc:a8:74:ec: 27:63:98:d6:8a:5c:f0:f5:79:7a:43:ae:48:a2:6d: 75:8a:ee:64:23:69:70:78:3d:83:a6:d7:85:30:b9: 86:3a:af:7a:5d:13:d5:5e:f0:b2:b3:c4:52:51:06: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.12.0/22 170.247.104.0/22 IPv6: 2804:233c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264150 Signature Algorithm: sha256WithRSAEncryption 72:60:02:fd:ce:cf:13:0b:b4:30:d5:54:f3:88:4c:79:e1:09: 7b:2f:ed:c6:03:fe:47:33:af:a6:2d:01:58:62:e3:b9:73:d7: c5:da:1c:81:a0:46:ae:39:1e:da:26:01:56:96:43:3d:4f:c2: 96:52:e7:aa:d5:08:39:bc:a9:f1:d8:4b:35:47:c1:e0:5c:92: af:71:3a:1d:41:99:78:41:4e:a0:ce:d6:b5:2d:9c:21:e4:e7: bf:83:67:03:bf:45:d7:19:e0:8a:3a:9f:c1:ea:b4:25:af:6e: 0d:02:46:ee:06:b4:15:c2:ea:73:e1:31:5d:af:ec:23:ce:1f: 81:af:8c:a0:06:94:cc:27:e5:2f:62:f8:bb:20:98:0b:f5:c1: 43:36:4a:e1:65:e2:d0:a3:81:3b:28:29:a5:c8:dc:32:11:fa: 3b:4a:48:b3:d4:94:de:44:8c:d1:9b:66:a6:0e:6f:4b:6a:51: 68:e9:f5:58:fa:c8:5b:d6:9d:37:bc:42:de:67:cf:09:97:27: 40:16:b0:35:2b:a9:84:99:80:7b:cb:45:e5:0d:8c:9e:0a:f7: 5e:f6:87:ba:38:42:24:5e:4b:76:e9:6c:3a:62:32:bb:9f:64: cc:1b:56:82:55:8e:50:e2:bd:8d:92:be:4f:8d:06:d8:07:54: 77:0f:0b:3f -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUARfN2uWWGrpLPueNazbbwcISBEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNjI4MDlaFw0yNjAzMDYxNjMzMDlaMDMxMTAvBgNV BAMTKDk5MjdDMTRFQTM1QkNFOUYyQjczNkFERENDMERFMEIxQTA3QzlFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeo6vlXfAlG+t+RDkIla7FmHOl M3YUfcC4zJ4SFw9Ac/3tgtofYZvSRklq+qaIFDZB4goM2ag/2RK91hmZ9QSd4CDj FwhiF3RxWzadZV4scBEEZqpA320PyoupOq4Wksc3nr0GKMRusT0t2SPP6fxhAde2 vTP3U93i6OZ9HivXyvXahPSSP5YqHKAK7++19MVa5y26YaoxnkfT0G1hCPWgzsQt +ulC3JAlfozGGcaNoWR3goA78lFw8bTT0KULk2dbkJQVyospaq29MHdzvKh07Cdj mNaKXPD1eXpDrkiibXWK7mQjaXB4PYOm14UwuYY6r3pdE9Ve8LKzxFJRBhLNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZJ8FOo1vOnytz at3MDeCxoHyeFzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTl2 RlNlS1RQcTE3UFpRNEhtQlFSVUZzZ1h1TFAyNlRYeDUxNHduRnhHczEvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTl2 RlNlS1RQcTE3UFpRNEhtQlFSVUZzZ1h1TFAyNlRYeDUxNHduRnhHczEvMi85OTI3 QzE0RUEzNUJDRTlGMkI3MzZBRERDQzBERTBCMUEwN0M5RTE3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKKYwwDBAKq92gwDQQCAAIwBwMFACgEIzwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAfWMA0GCSqGSIb3DQEBCwUAA4IBAQByYAL9zs8T C7Qw1VTziEx54Ql7L+3GA/5HM6+mLQFYYuO5c9fF2hyBoEauOR7aJgFWlkM9T8KW Uueq1Qg5vKnx2Es1R8HgXJKvcTodQZl4QU6gzta1LZwh5Oe/g2cDv0XXGeCKOp/B 6rQlr24NAkbuBrQVwupz4TFdr+wjzh+Br4ygBpTMJ+UvYvi7IJgL9cFDNkrhZeLQ o4E7KCmlyNwyEfo7Skiz1JTeRIzRm2amDm9LalFo6fVY+shb1p03vELeZ88JlydA FrA1K6mEmYB7y0XlDYyeCvde9oe6OEIkXkt26Ww6YjK7n2TMG1aCVY5Q4r2Nkr5P jQbYB1R3Dws/ -----END CERTIFICATE-----Generated at Fri Apr 4 20:20:54 2025 by rpki-client