$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C5D5C9A5599F77587485119C21214F577AB3947.cer File: 9C5D5C9A5599F77587485119C21214F577AB3947.cer (raw, json) Hash identifier: yuh8HSuqYBcSV0Cj0i5wU1M4Ajg+3kp/J1IbLccXXE4= Subject key identifier: 9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C3D2E37035939E4B855CB94F69657686CCA703F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.mft caRepository: rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:19 +0000 Certificate not after: Wed 04 Mar 2026 18:40:19 +0000 Subordinate resources: AS: 268426 IP: 45.160.172.0/22 IP: 2804:5108::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:3d:2e:37:03:59:39:e4:b8:55:cb:94:f6:96:57:68:6c:ca:70:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:19 2025 GMT Not After : Mar 4 18:40:19 2026 GMT Subject: CN=9C5D5C9A5599F77587485119C21214F577AB3947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:e8:43:db:df:fb:00:61:02:15:a2:45:fc: 07:8e:50:f0:2f:d0:1a:cd:9f:36:e5:8f:fe:19:f8: 84:89:f3:1d:98:fc:09:b5:00:8d:d9:c6:9a:f9:a3: 07:e9:fe:fc:c2:36:b7:cd:ce:89:4d:b8:b3:37:aa: 30:45:08:d8:92:e8:38:be:da:ec:90:99:cf:68:f4: c2:fd:ff:aa:20:87:08:80:92:b3:a1:60:06:e8:f9: c7:e5:b1:3d:d9:fd:73:96:e5:d6:df:62:4e:bb:b7: 3a:08:8a:59:ec:15:70:87:ab:81:40:fe:d5:84:81: 9c:c1:d5:e2:49:73:54:d8:eb:2b:8c:48:13:62:ef: 0d:c6:e4:74:39:77:b7:68:b4:6c:3e:02:84:f0:18: 72:3b:e2:98:1e:81:ca:b6:0d:4a:34:a0:06:0a:2a: c0:38:51:cf:22:e8:a2:96:f8:8a:0f:15:d1:17:3b: 83:09:8a:ae:ea:64:44:5b:47:69:86:d5:0d:b1:a1: a3:9b:b4:87:17:ed:cf:cb:8c:eb:8d:01:4c:0e:ec: 78:e8:c2:0e:12:13:b4:09:b6:f5:89:3f:12:be:3b: 66:64:07:5e:0f:1f:da:a7:72:15:4d:7e:1f:c1:a2: 25:91:51:d6:f1:f9:e5:2e:1c:73:ce:d8:3c:c5:e3: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:5D:5C:9A:55:99:F7:75:87:48:51:19:C2:12:14:F5:77:AB:39:47 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db27b5chpPQ3s2Z55iPS7pxfyaP2nVJombzdB9xywEeT/1/9C5D5C9A5599F77587485119C21214F577AB3947.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.160.172.0/22 IPv6: 2804:5108::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268426 Signature Algorithm: sha256WithRSAEncryption 9b:f7:ab:01:bc:22:19:4b:e0:d0:f1:cf:49:eb:36:33:41:93: b7:37:8c:97:1c:d3:e8:ff:dc:6a:e4:28:50:27:41:c0:44:55: bb:27:5f:73:fc:1a:2f:84:fd:f0:9e:44:46:93:6f:11:35:60: 6d:e1:e9:45:67:93:42:f3:1a:64:52:66:42:b7:76:49:aa:f1: 65:fa:9a:e2:f3:35:36:4d:89:93:17:72:ed:09:ff:f8:b2:86: 97:c5:2b:cf:1c:e2:46:10:fb:a9:fb:0a:1c:e6:8c:c3:13:61: d3:2e:08:40:b2:2a:19:ab:d4:71:47:f7:08:dd:21:55:e3:8a: 2f:4b:51:b3:f4:b7:cf:4d:e3:83:d4:18:40:3b:2f:93:f7:2e: 9f:70:fa:54:02:e7:d1:e4:6f:fa:c8:30:1e:8d:fd:3b:51:44: 88:61:9d:19:a5:0e:8a:9d:32:50:37:67:43:7b:ae:c7:5f:ef: e2:0f:33:19:82:cc:f6:06:50:0a:88:96:1a:15:6d:4b:8b:73: db:b3:c9:fe:33:01:6c:9b:e1:de:91:5c:e0:9b:e1:c5:c5:34: 46:14:18:73:ed:72:02:38:fd:bc:ed:b0:c0:52:33:98:c3:c0: 97:5d:e7:bc:27:3d:24:6b:f2:42:3d:d6:0d:62:60:a6:1f:81: 32:40:68:19 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTD0uNwNZOeS4VcuU9pZXaGzKcD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MTlaFw0yNjAzMDQxODQwMTlaMDMxMTAvBgNV BAMTKDlDNUQ1QzlBNTU5OUY3NzU4NzQ4NTExOUMyMTIxNEY1NzdBQjM5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+B+hD29/7AGECFaJF/AeOUPAv 0BrNnzblj/4Z+ISJ8x2Y/Am1AI3Zxpr5owfp/vzCNrfNzolNuLM3qjBFCNiS6Di+ 2uyQmc9o9ML9/6oghwiAkrOhYAbo+cflsT3Z/XOW5dbfYk67tzoIilnsFXCHq4FA /tWEgZzB1eJJc1TY6yuMSBNi7w3G5HQ5d7dotGw+AoTwGHI74pgegcq2DUo0oAYK KsA4Uc8i6KKW+IoPFdEXO4MJiq7qZERbR2mG1Q2xoaObtIcX7c/LjOuNAUwO7Hjo wg4SE7QJtvWJPxK+O2ZkB14PH9qnchVNfh/BoiWRUdbx+eUuHHPO2DzF47CnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScXVyaVZn3dYdI URnCEhT1d6s5RzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRGIy N2I1Y2hwUFEzczJaNTVpUFM3cHhmeWFQMm5WSm9tYnpkQjl4eXdFZVQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ri MjdiNWNocFBRM3MyWjU1aVBTN3B4ZnlhUDJuVkpvbWJ6ZEI5eHl3RWVULzEvOUM1 RDVDOUE1NTk5Rjc3NTg3NDg1MTE5QzIxMjE0RjU3N0FCMzk0Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaCsMA0EAgACMAcDBQAoBFEIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYijANBgkqhkiG9w0BAQsFAAOCAQEAm/erAbwiGUvg0PHP Ses2M0GTtzeMlxzT6P/cauQoUCdBwERVuydfc/waL4T98J5ERpNvETVgbeHpRWeT QvMaZFJmQrd2SarxZfqa4vM1Nk2Jkxdy7Qn/+LKGl8UrzxziRhD7qfsKHOaMwxNh 0y4IQLIqGavUcUf3CN0hVeOKL0tRs/S3z03jg9QYQDsvk/cun3D6VALn0eRv+sgw Ho39O1FEiGGdGaUOip0yUDdnQ3uux1/v4g8zGYLM9gZQCoiWGhVtS4tz27PJ/jMB bJvh3pFc4JvhxcU0RhQYc+1yAjj9vO2wwFIzmMPAl13nvCc9JGvyQj3WDWJgph+B MkBoGQ== -----END CERTIFICATE-----Generated at Sat Apr 5 00:07:00 2025 by rpki-client