$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer File: 9D24A534785E862FF2DAC70BF06847337A2816FB.cer (raw, json) Hash identifier: ZjsiGZNkxRub7oqmqy8rtRoQo53eoB1rBA0VZc8gSvY= Subject key identifier: 9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 445F3A7817AA9CCBB02681654E4F40F3DD2B4746 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft caRepository: rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 13:35:53 +0000 Certificate not after: Fri 06 Mar 2026 13:40:53 +0000 Subordinate resources: AS: 270376 IP: 190.89.160.0/22 IP: 2804:6b14::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 02:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5f:3a:78:17:aa:9c:cb:b0:26:81:65:4e:4f:40:f3:dd:2b:47:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 13:35:53 2025 GMT Not After : Mar 6 13:40:53 2026 GMT Subject: CN=9D24A534785E862FF2DAC70BF06847337A2816FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:ab:97:b4:9e:72:7b:53:a9:4c:34:2f:5f: 4b:45:b0:e2:68:34:0c:e1:48:a5:c2:ee:a9:85:56: ae:cb:4b:32:5f:70:9d:c9:97:4d:d1:d5:22:ca:d6: d8:19:0b:d6:8a:50:c9:5e:0f:69:c0:f7:1b:c7:3a: c9:0f:9f:8a:f6:30:c4:27:e5:dd:b2:3d:9e:9e:57: 08:b6:a7:30:58:58:eb:dc:30:d2:b1:fe:12:e5:06: 43:59:8f:26:43:4b:0d:ba:fa:8a:4e:ec:8b:b8:b2: 00:16:9c:7f:a0:56:62:93:01:fd:23:2e:cf:89:01: 89:ca:5f:03:18:77:a9:c3:b1:76:54:ac:64:e5:0f: 66:ce:fa:0c:6b:38:72:4b:54:67:91:ff:f0:e0:e9: 69:01:dc:bb:9c:6d:9b:16:57:bd:82:9c:7a:38:4d: ed:13:99:18:8f:fb:72:bb:38:70:ff:80:da:f3:ed: 6f:44:70:22:58:92:f2:5c:e1:f7:78:6c:74:92:4f: ea:d2:c8:19:7f:74:17:1a:09:3f:67:a8:7a:b8:45: d2:0f:8c:61:5d:16:a2:26:ed:a8:a2:ee:b0:56:e0: 5a:d9:4e:79:34:a9:8e:f5:ef:ba:c6:c8:70:20:f7: 50:11:e0:c1:ed:28:98:30:95:f5:cf:e7:de:06:48: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.89.160.0/22 IPv6: 2804:6b14::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270376 Signature Algorithm: sha256WithRSAEncryption c6:f8:16:d8:75:98:28:3d:41:4e:09:e8:d0:94:b9:ca:21:69: 28:66:4e:cb:42:f0:86:9f:7a:57:8a:5e:bb:9f:28:8b:41:61: 28:a1:32:2a:72:bc:b3:28:40:8b:ca:23:38:0d:d9:92:43:0e: 23:e8:90:46:78:ae:be:bf:46:b9:c5:2a:58:d3:c9:70:e5:2b: 56:b0:f8:89:cb:d7:20:fb:88:c6:da:51:fb:ff:9f:7c:24:0e: 4a:5b:1d:8c:23:c4:4b:f8:ab:65:37:ca:e8:d1:02:57:04:18: eb:48:89:46:49:97:25:91:90:44:58:6e:c2:b5:78:4a:33:65: f6:1b:ae:46:d7:e3:ba:62:d7:3f:1d:70:b8:6d:eb:16:68:bc: 63:46:89:70:ac:76:aa:77:34:a0:1a:ae:18:43:85:d2:b8:3d: 69:69:29:af:d0:37:c6:3d:37:dc:cf:dc:4e:27:dc:c4:57:10: 2a:b8:5e:80:44:b7:24:b5:32:37:bb:5a:f0:8b:97:4d:7b:81: 59:af:a2:9f:30:32:05:1d:ce:86:8e:b0:0d:77:d0:7e:66:a7: 00:d3:96:45:5b:bb:4d:de:cf:dd:41:ca:3a:89:34:f6:24:d8: 34:b1:dc:53:2d:af:77:e1:7a:53:3a:8e:86:9a:9e:33:6d:9a: d8:f2:4b:91 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURF86eBeqnMuwJoFlTk9A890rR0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMzM1NTNaFw0yNjAzMDYxMzQwNTNaMDMxMTAvBgNV BAMTKDlEMjRBNTM0Nzg1RTg2MkZGMkRBQzcwQkYwNjg0NzMzN0EyODE2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMauXtJ5ye1OpTDQvX0tFsOJo NAzhSKXC7qmFVq7LSzJfcJ3Jl03R1SLK1tgZC9aKUMleD2nA9xvHOskPn4r2MMQn 5d2yPZ6eVwi2pzBYWOvcMNKx/hLlBkNZjyZDSw26+opO7Iu4sgAWnH+gVmKTAf0j Ls+JAYnKXwMYd6nDsXZUrGTlD2bO+gxrOHJLVGeR//Dg6WkB3LucbZsWV72CnHo4 Te0TmRiP+3K7OHD/gNrz7W9EcCJYkvJc4fd4bHSST+rSyBl/dBcaCT9nqHq4RdIP jGFdFqIm7aii7rBW4FrZTnk0qY7177rGyHAg91AR4MHtKJgwlfXP594GSPHbAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdJKU0eF6GL/La xwvwaEczeigW+zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkJY bWdwbmQ2ZXh5WjhHajM5a1RkYTRnYndiSmdKSHpZdVV6NXU4VjZEYncvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkJY bWdwbmQ2ZXh5WjhHajM5a1RkYTRnYndiSmdKSHpZdVV6NXU4VjZEYncvMS85RDI0 QTUzNDc4NUU4NjJGRjJEQUM3MEJGMDY4NDczMzdBMjgxNkZCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK+WaAwDQQCAAIwBwMFACgEaxQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCAoMA0GCSqGSIb3DQEBCwUAA4IBAQDG+BbYdZgoPUFOCejQ lLnKIWkoZk7LQvCGn3pXil67nyiLQWEooTIqcryzKECLyiM4DdmSQw4j6JBGeK6+ v0a5xSpY08lw5StWsPiJy9cg+4jG2lH7/598JA5KWx2MI8RL+KtlN8ro0QJXBBjr SIlGSZclkZBEWG7CtXhKM2X2G65G1+O6Ytc/HXC4besWaLxjRolwrHaqdzSgGq4Y Q4XSuD1paSmv0DfGPTfcz9xOJ9zEVxAquF6ARLcktTI3u1rwi5dNe4FZr6KfMDIF Hc6GjrANd9B+ZqcA05ZFW7tN3s/dQco6iTT2JNg0sdxTLa934XpTOo6Gmp4zbZrY 8kuR -----END CERTIFICATE-----Generated at Wed Apr 9 01:00:16 2025 by rpki-client