$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99B8055C0E1571E458C85ADC0655D744D588871C.cer File: 99B8055C0E1571E458C85ADC0655D744D588871C.cer (raw, json) Hash identifier: tAIqjtGYGGuD9Q71NEqT39JgjA8IfuTHyDB0kGIrc+g= Subject key identifier: 99:B8:05:5C:0E:15:71:E4:58:C8:5A:DC:06:55:D7:44:D5:88:87:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71DB17337459246BFEC0B87A2B3C82AF0478D3D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.mft caRepository: rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 08 Mar 2025 16:03:17 +0000 Certificate not after: Sat 07 Mar 2026 16:08:17 +0000 Subordinate resources: AS: 264428 IP: 131.221.124.0/22 IP: 143.0.4.0/22 IP: 2804:1e6c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 14:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:db:17:33:74:59:24:6b:fe:c0:b8:7a:2b:3c:82:af:04:78:d3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 8 16:03:17 2025 GMT Not After : Mar 7 16:08:17 2026 GMT Subject: CN=99B8055C0E1571E458C85ADC0655D744D588871C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:34:df:5d:d4:84:bd:4b:c8:92:43:e8:b0: 34:f4:cb:ad:7b:a7:ab:12:f5:37:2e:8e:26:45:1c: 44:b7:c0:05:84:22:dd:ee:9b:b8:c8:94:97:fa:45: 21:06:84:6c:74:53:53:67:46:8d:f3:4b:64:e0:ac: f3:40:7f:21:1b:4c:c3:24:e2:a0:ff:47:8f:11:a7: f0:4a:e4:59:f2:dd:18:42:29:75:b2:87:86:b1:d4: 32:0b:a5:78:ab:1b:ba:60:a8:98:20:81:45:15:cc: a4:3c:25:26:35:9b:70:91:1a:ef:ab:f7:58:78:fd: 84:8b:e5:0a:e0:d1:eb:b4:2f:5e:b1:ec:20:7f:52: 1b:52:9c:29:d3:13:3a:a0:f5:44:a7:1f:6a:f3:35: 05:ce:27:b8:92:94:6c:7a:d3:82:db:68:cf:c2:4d: 6c:e2:dd:47:3b:af:90:0e:6f:e0:15:c7:77:5e:77: c7:f2:c4:09:c2:35:3d:04:e0:28:88:8b:de:4b:d8: 52:cc:7f:cf:ff:17:ac:39:66:de:ca:df:f7:7e:3b: db:a9:0b:8b:6f:b9:1a:f5:c7:52:f6:8d:bd:ef:b5: a0:30:34:e1:5c:38:84:94:30:f8:c4:e7:48:ec:51: 35:ee:65:1a:bc:09:72:b8:16:79:2f:75:6d:d7:2e: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:B8:05:5C:0E:15:71:E4:58:C8:5A:DC:06:55:D7:44:D5:88:87:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.221.124.0/22 143.0.4.0/22 IPv6: 2804:1e6c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264428 Signature Algorithm: sha256WithRSAEncryption a5:e1:0f:bb:3c:da:07:4b:f0:20:e1:06:7c:5f:0d:7c:bb:3d: dd:76:60:0b:28:90:7f:03:fa:6f:12:aa:a9:d2:1c:71:e4:f3: da:ad:2c:f3:40:d0:d7:82:d0:0a:08:97:dc:60:fb:cf:0d:b5: 10:12:a0:61:9a:77:c3:8d:e3:66:11:d3:4e:1e:88:aa:85:bc: 10:dd:a2:c1:57:b3:15:f6:ec:32:29:7c:11:c9:11:c4:a3:4e: 7b:2a:d0:52:50:5b:88:ec:8b:fc:0f:05:fb:f8:df:9e:9f:a0: 63:d2:be:37:f1:9c:38:25:19:1f:ce:34:7d:cb:e7:38:fc:58: fa:5b:78:67:d2:30:e8:62:b2:65:c5:ad:e1:6f:53:97:cf:1f: 5f:ef:2f:82:b8:cb:ec:93:ba:97:49:13:ac:2b:5e:e7:45:91: ff:c8:d3:fa:61:64:ff:84:27:0d:30:b8:ce:68:ae:0b:f3:89: 33:39:f5:80:9f:3f:ae:16:f9:4a:2a:12:c0:99:a0:35:58:e1: bd:4a:5d:66:e7:39:c5:59:ee:3c:9b:63:a5:bf:6e:69:c1:c2: c1:43:62:f6:b2:b7:7d:e2:5d:ea:c5:1d:62:54:54:bd:d4:ce: 69:3a:91:8f:02:00:22:05:62:c8:86:c3:8b:cf:63:20:d9:2a: 44:52:b2:45 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUcdsXM3RZJGv+wLh6KzyCrwR409AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDgxNjAzMTdaFw0yNjAzMDcxNjA4MTdaMDMxMTAvBgNV BAMTKDk5QjgwNTVDMEUxNTcxRTQ1OEM4NUFEQzA2NTVENzQ0RDU4ODg3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FzTfXdSEvUvIkkPosDT0y617 p6sS9TcujiZFHES3wAWEIt3um7jIlJf6RSEGhGx0U1NnRo3zS2TgrPNAfyEbTMMk 4qD/R48Rp/BK5Fny3RhCKXWyh4ax1DILpXirG7pgqJgggUUVzKQ8JSY1m3CRGu+r 91h4/YSL5Qrg0eu0L16x7CB/UhtSnCnTEzqg9USnH2rzNQXOJ7iSlGx604LbaM/C TWzi3Uc7r5AOb+AVx3ded8fyxAnCNT0E4CiIi95L2FLMf8//F6w5Zt7K3/d+O9up C4tvuRr1x1L2jb3vtaAwNOFcOISUMPjE50jsUTXuZRq8CXK4FnkvdW3XLlslAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZuAVcDhVx5FjI WtwGVddE1YiHHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWJ1 ZnVSTmNnaVZobWhITUw1Sm43d1d2N1RwVGNodk5oYmJLU0dYeHhXQnovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fi dWZ1Uk5jZ2lWaG1oSE1MNUpuN3dXdjdUcFRjaHZOaGJiS1NHWHh4V0J6LzAvOTlC ODA1NUMwRTE1NzFFNDU4Qzg1QURDMDY1NUQ3NDRENTg4ODcxQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg918AwQCjwAEMA0EAgACMAcDBQAoBB5sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQI7DANBgkqhkiG9w0BAQsFAAOCAQEApeEPuzza B0vwIOEGfF8NfLs93XZgCyiQfwP6bxKqqdIcceTz2q0s80DQ14LQCgiX3GD7zw21 EBKgYZp3w43jZhHTTh6IqoW8EN2iwVezFfbsMil8EckRxKNOeyrQUlBbiOyL/A8F +/jfnp+gY9K+N/GcOCUZH840fcvnOPxY+lt4Z9Iw6GKyZcWt4W9Tl88fX+8vgrjL 7JO6l0kTrCte50WR/8jT+mFk/4QnDTC4zmiuC/OJMzn1gJ8/rhb5SioSwJmgNVjh vUpdZuc5xVnuPJtjpb9uacHCwUNi9rK3feJd6sUdYlRUvdTOaTqRjwIAIgViyIbD i89jINkqRFKyRQ== -----END CERTIFICATE-----Generated at Wed Apr 9 12:51:17 2025 by rpki-client