$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer File: 9A8CDCA9443D140D02860AA0070928656A172CE1.cer (raw, json) Hash identifier: Np4a7RR2PUtoxo1eJHHn9da8f+pVyx+/HFe4U1TkaTs= Subject key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 77D19A72A9124E4267D57B7BD3E4FBED15C625E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft caRepository: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:55:18 +0000 Certificate not after: Fri 06 Mar 2026 03:00:18 +0000 Subordinate resources: AS: 266520 IP: 45.177.140.0/22 IP: 170.245.92.0/22 IP: 2804:390c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d1:9a:72:a9:12:4e:42:67:d5:7b:7b:d3:e4:fb:ed:15:c6:25:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:55:18 2025 GMT Not After : Mar 6 03:00:18 2026 GMT Subject: CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:7e:05:94:1a:e2:15:3a:a2:37:d2:7b:a1: f5:e1:3b:2c:3d:f2:69:e0:82:e2:34:6d:d8:88:82: e7:7e:dc:e8:3f:c7:bc:4c:e4:9b:72:16:b5:d4:53: 42:2d:70:75:8e:0f:88:cb:56:ee:ec:d2:78:03:cd: a2:b9:ff:82:e8:07:bc:b3:f8:06:f2:f5:94:88:ad: 59:2b:b1:31:e0:0d:80:cd:99:0f:b5:77:16:43:6f: 5d:a2:ed:e0:10:eb:6f:cd:e7:4b:92:37:2a:a1:19: e5:33:51:e9:43:94:b9:d6:ad:ee:f0:1c:dc:2c:22: 90:b2:77:0e:c6:69:a1:22:e2:01:47:6a:30:bb:12: e9:6a:0a:dc:d1:38:3c:23:66:07:ec:07:9e:ba:9d: 97:56:ee:77:be:3b:bb:30:c4:71:f6:36:0b:cc:bc: 23:76:7b:ee:22:07:85:2b:29:3b:56:ce:f6:7a:4a: c5:5a:fe:d7:83:f1:e4:8e:8e:85:e9:9f:3b:d8:1b: b1:fb:26:89:a9:67:5d:e9:d0:56:e3:bb:3b:47:64: fa:22:c3:3f:58:3e:3a:34:c4:97:80:7e:b4:81:1b: 0b:7b:2c:f8:ea:21:13:eb:bd:4e:ff:a1:70:18:a9: a6:4f:47:e9:c9:36:81:29:8b:8b:b6:8a:04:f6:ba: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.140.0/22 170.245.92.0/22 IPv6: 2804:390c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266520 Signature Algorithm: sha256WithRSAEncryption 70:86:05:51:1b:47:94:7f:ca:7b:b5:21:c1:ec:92:19:dd:a0: 6b:04:54:8b:ab:2e:de:2e:bc:25:f9:23:0a:ba:80:bb:3d:de: e4:25:6e:14:04:83:ab:d0:25:be:39:df:61:7e:8f:cc:d0:fe: 9d:22:3a:7a:72:69:36:06:78:9a:8d:d0:37:c5:2f:f4:0e:e7: 34:b8:66:c7:0b:ed:bd:26:c9:41:98:bc:5b:d9:fe:25:a6:c3: 23:da:65:54:99:c4:1a:2c:a4:2b:13:03:21:d1:55:7b:9c:d1: 0c:14:16:f9:11:5d:3e:7c:fd:2c:bc:f0:b2:1d:ea:4c:67:17: 1e:2e:9a:52:a7:96:a0:8a:7a:f3:0c:b7:b3:52:8b:cb:7d:d6: 45:17:15:9d:d7:32:d1:31:bf:61:82:66:4a:af:7b:bf:13:c0: ae:bf:82:84:e8:d2:5d:53:d8:f6:9c:dd:93:b6:06:4d:7b:53: af:b5:f2:e2:72:f7:59:e6:69:88:d0:32:a2:27:0e:05:7b:00: 71:82:83:6f:fb:bb:2e:5a:f3:17:59:8d:03:0f:3b:f1:13:cc: db:ed:30:77:4a:86:33:64:46:8b:0e:a5:45:30:96:eb:87:87: 55:bf:12:08:a7:f9:ed:60:a4:bd:f4:5d:09:59:6a:4e:b7:56: 07:c9:99:e8 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUd9GacqkSTkJn1Xt70+T77RXGJegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjU1MThaFw0yNjAzMDYwMzAwMThaMDMxMTAvBgNV BAMTKDlBOENEQ0E5NDQzRDE0MEQwMjg2MEFBMDA3MDkyODY1NkExNzJDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6X4FlBriFTqiN9J7ofXhOyw9 8mngguI0bdiIgud+3Og/x7xM5JtyFrXUU0ItcHWOD4jLVu7s0ngDzaK5/4LoB7yz +Aby9ZSIrVkrsTHgDYDNmQ+1dxZDb12i7eAQ62/N50uSNyqhGeUzUelDlLnWre7w HNwsIpCydw7GaaEi4gFHajC7EulqCtzRODwjZgfsB566nZdW7ne+O7swxHH2NgvM vCN2e+4iB4UrKTtWzvZ6SsVa/teD8eSOjoXpnzvYG7H7JompZ13p0FbjuztHZPoi wz9YPjo0xJeAfrSBGwt7LPjqIRPrvU7/oXAYqaZPR+nJNoEpi4u2igT2uve7AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSajNypRD0UDQKG CqAHCShlahcs4TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85QThD RENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItsYwDBAKq9VwwDQQCAAIwBwMFACgEOQwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBEYMA0GCSqGSIb3DQEBCwUAA4IBAQBwhgVRG0eU f8p7tSHB7JIZ3aBrBFSLqy7eLrwl+SMKuoC7Pd7kJW4UBIOr0CW+Od9hfo/M0P6d Ijp6cmk2BniajdA3xS/0Duc0uGbHC+29JslBmLxb2f4lpsMj2mVUmcQaLKQrEwMh 0VV7nNEMFBb5EV0+fP0svPCyHepMZxceLppSp5aginrzDLezUovLfdZFFxWd1zLR Mb9hgmZKr3u/E8Cuv4KE6NJdU9j2nN2TtgZNe1OvtfLicvdZ5mmI0DKiJw4FewBx goNv+7suWvMXWY0DDzvxE8zb7TB3SoYzZEaLDqVFMJbrh4dVvxIIp/ntYKS99F0J WWpOt1YHyZno -----END CERTIFICATE-----Generated at Fri Apr 4 19:42:42 2025 by rpki-client