$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer File: 9BAD7480D68EE59406D3FBBE7F30557285587474.cer (raw, json) Hash identifier: BqD20i7hdkyGq9/IfRaDREjvg09xOyJaBD4HdP7N/kM= Subject key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4AA94E61BDDCD6B237468AAE95645ED914A82527 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft caRepository: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 11:52:52 +0000 Certificate not after: Thu 05 Mar 2026 11:57:52 +0000 Subordinate resources: AS: 264300 IP: 138.121.132.0/22 IP: 170.244.112.0/22 IP: 2804:25c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a9:4e:61:bd:dc:d6:b2:37:46:8a:ae:95:64:5e:d9:14:a8:25:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 11:52:52 2025 GMT Not After : Mar 5 11:57:52 2026 GMT Subject: CN=9BAD7480D68EE59406D3FBBE7F30557285587474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:bc:c4:da:bd:55:71:b6:00:e2:ba:ec:0e: 04:40:28:87:cc:55:57:b1:84:5c:69:62:9e:2a:b9: 8f:2c:a5:3c:6f:f7:e2:8b:56:c5:ae:3e:0d:5b:99: ee:24:e8:8c:be:c9:ca:7c:78:0b:2d:38:5b:04:1e: ab:72:ed:64:09:22:8f:40:b8:39:38:dc:a5:4d:f8: 08:33:0f:27:99:3b:0b:4d:22:7e:1c:d5:7c:c6:bc: e5:70:be:eb:e3:b7:48:a9:58:74:7a:4a:3a:b2:a1: cb:48:17:65:7d:c4:c2:33:90:ee:56:d1:35:5d:f2: 87:5b:b2:f9:fd:ba:41:18:c5:f3:d8:0d:b4:30:d4: 8d:0b:01:22:bb:65:75:e4:cb:91:11:de:2b:75:62: e1:a1:64:cf:f2:12:89:71:3a:d0:37:b4:c2:b2:7f: cb:63:11:e5:69:7b:de:90:58:40:00:3f:a8:cb:a6: 70:ca:75:ae:4b:c8:dd:94:91:ac:12:6e:74:ec:42: 30:f7:97:75:aa:2f:ca:37:12:61:98:b6:16:13:5f: dd:56:11:13:38:e8:59:65:55:34:b4:24:93:7d:43: 03:27:29:5d:e3:32:7c:5c:20:3f:77:7a:b6:58:9d: 0e:00:94:11:70:3d:e5:a7:df:ea:d9:93:f0:52:4d: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.132.0/22 170.244.112.0/22 IPv6: 2804:25c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264300 Signature Algorithm: sha256WithRSAEncryption 25:7a:58:89:81:59:d3:c4:2b:3b:54:e1:63:24:1c:8c:e5:2e: 59:61:51:d7:73:ed:18:4f:c3:15:f5:1e:33:74:e5:51:be:98: 9d:27:cc:54:de:ae:4c:b7:4b:27:87:36:d2:bb:a3:52:02:92: 4c:93:39:6b:96:7d:62:43:71:ff:49:91:30:a2:0b:50:6e:dd: 30:c3:6f:5d:6f:b0:3f:42:4d:30:0a:67:86:ca:c1:99:47:89: 16:0c:51:55:0c:55:63:ac:23:33:6a:07:9e:ef:bd:bf:3d:c8: 5f:be:aa:6b:9f:9f:d8:ac:95:82:05:8e:1c:d7:73:f9:6e:93: 04:1b:41:5d:49:71:80:62:f1:36:11:70:97:e5:2d:9f:a2:bd: 7d:a8:bf:8a:32:4a:c7:40:b2:e8:76:02:68:f8:03:70:83:47: 09:bf:18:b2:d2:bc:92:f3:7c:c7:0f:22:aa:c1:9d:3c:52:1d: a3:dc:cf:15:c0:14:1e:0f:dc:f5:78:aa:44:33:03:a0:f4:84: 9d:da:d0:ce:60:31:47:a4:05:ac:53:9c:96:28:5d:25:e8:12: 28:9e:1b:40:50:54:db:da:2a:1f:31:45:3e:6f:05:86:d3:e8: bc:95:b3:dc:88:0a:65:87:5f:37:96:76:22:ea:7d:88:59:ab: 7d:da:f7:65 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSqlOYb3c1rI3RoqulWRe2RSoJScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxMTUyNTJaFw0yNjAzMDUxMTU3NTJaMDMxMTAvBgNV BAMTKDlCQUQ3NDgwRDY4RUU1OTQwNkQzRkJCRTdGMzA1NTcyODU1ODc0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ibzE2r1VcbYA4rrsDgRAKIfM VVexhFxpYp4quY8spTxv9+KLVsWuPg1bme4k6Iy+ycp8eAstOFsEHqty7WQJIo9A uDk43KVN+AgzDyeZOwtNIn4c1XzGvOVwvuvjt0ipWHR6SjqyoctIF2V9xMIzkO5W 0TVd8odbsvn9ukEYxfPYDbQw1I0LASK7ZXXky5ER3it1YuGhZM/yEolxOtA3tMKy f8tjEeVpe96QWEAAP6jLpnDKda5LyN2UkawSbnTsQjD3l3WqL8o3EmGYthYTX91W ERM46FllVTS0JJN9QwMnKV3jMnxcID93erZYnQ4AlBFwPeWn3+rZk/BSTW0/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbrXSA1o7llAbT +75/MFVyhVh0dDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmIy MzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0RteVQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ji MjM1dnlYVTdmRGlSUWlYeGJXUE1KTFJhaXM1ZlhCazhGSnpkVGdEbXlULzEvOUJB RDc0ODBENjhFRTU5NDA2RDNGQkJFN0YzMDU1NzI4NTU4NzQ3NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinmEAwQCqvRwMA0EAgACMAcDBQAoBCXAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIbDANBgkqhkiG9w0BAQsFAAOCAQEAJXpYiYFZ 08QrO1ThYyQcjOUuWWFR13PtGE/DFfUeM3TlUb6YnSfMVN6uTLdLJ4c20rujUgKS TJM5a5Z9YkNx/0mRMKILUG7dMMNvXW+wP0JNMApnhsrBmUeJFgxRVQxVY6wjM2oH nu+9vz3IX76qa5+f2KyVggWOHNdz+W6TBBtBXUlxgGLxNhFwl+Utn6K9fai/ijJK x0Cy6HYCaPgDcINHCb8YstK8kvN8xw8iqsGdPFIdo9zPFcAUHg/c9XiqRDMDoPSE ndrQzmAxR6QFrFOclihdJegSKJ4bQFBU29oqHzFFPm8FhtPovJWz3IgKZYdfN5Z2 Iup9iFmrfdr3ZQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:42:15 2025 by rpki-client