$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer File: A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer (raw, json) Hash identifier: UY1f6EbEB3F9WQCjXE7Em/Rw14SM29v8m6jgVLgYL5s= Subject key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5231B1AF4C5B00D1E762ADFAC85274E26D907CB4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft caRepository: rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 18 Dec 2024 12:34:30 +0000 Certificate not after: Wed 17 Dec 2025 12:39:30 +0000 Subordinate resources: AS: 61750 IP: 131.72.184.0/22 IP: 143.208.240.0/22 IP: 2804:1bc8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:31:b1:af:4c:5b:00:d1:e7:62:ad:fa:c8:52:74:e2:6d:90:7c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 18 12:34:30 2024 GMT Not After : Dec 17 12:39:30 2025 GMT Subject: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:8b:4f:fb:c5:ac:14:a2:f3:86:57:15:c5: 6a:18:d6:df:50:47:df:50:6d:6e:65:b4:15:10:19: d1:c7:b3:20:a0:47:47:ab:54:9b:b6:56:e3:04:12: d7:5b:9c:a9:96:d9:77:f2:2f:b0:e6:91:a6:1a:2a: 62:c6:b7:9f:e1:b9:63:f9:d3:cd:65:0a:38:50:c8: b5:93:b7:6a:96:67:6d:35:aa:e1:23:b4:66:ed:d6: f0:45:73:2e:86:05:91:8e:1b:cf:eb:55:20:b8:31: 18:68:b7:54:d7:e3:97:0b:a7:dc:6a:d1:35:ab:d2: 65:fa:88:ac:3a:cd:a5:69:56:7d:33:1e:b8:6e:66: ae:d4:28:36:db:e3:4d:66:28:e8:8d:d4:8e:ea:b3: 0b:04:83:5e:61:9a:57:a4:0c:9d:ae:96:15:a2:88: 4c:d9:ab:b9:ba:5d:61:a9:de:14:dc:75:60:e8:a2: 70:2a:f0:b5:78:1e:52:bc:f5:3c:ba:d0:27:12:4f: f8:30:ec:0b:ec:a3:77:12:1a:c1:03:ee:f2:c1:01: cd:b6:a9:2d:7d:f6:6a:0e:a6:ca:82:ef:61:39:66: 0e:e8:60:59:35:67:47:d0:4a:10:bc:08:ba:a8:cb: 26:12:c3:2f:fa:6b:0c:27:74:c2:d3:e4:71:c0:72: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.184.0/22 143.208.240.0/22 IPv6: 2804:1bc8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61750 Signature Algorithm: sha256WithRSAEncryption 30:7c:f9:c2:36:60:a8:aa:5c:8e:82:a2:6a:22:76:6b:9c:1d: 74:89:5a:54:ed:d9:eb:f9:b8:f9:9f:57:24:f2:8f:5c:e8:70: 07:b2:6e:f6:e7:f9:51:d8:2d:a2:81:cd:44:06:67:47:1d:07: cf:05:de:e3:eb:f0:1f:66:37:1d:2a:c9:56:63:77:eb:f8:5e: ef:c6:48:dc:93:f5:21:c3:23:46:fd:42:5b:bf:ac:73:9e:c9: 8f:58:8c:b3:a1:a0:6c:92:64:2f:a2:2d:e6:ee:fa:34:ba:d5: 6b:ee:7b:a5:3f:96:42:aa:d6:1e:ab:16:39:9f:c4:12:b4:15: 74:51:db:cb:4f:db:63:e7:6f:1b:c6:a3:41:3b:f4:20:73:ad: 25:01:5a:ba:da:ee:24:cb:78:34:e6:5f:21:b7:50:ff:e1:ac: a5:02:a0:4a:8d:b1:03:23:b6:e3:41:86:76:4a:a0:e6:61:f3: 6f:c2:aa:97:ae:b1:52:8d:1b:ef:2e:d2:ab:27:48:ed:5a:f0: 05:34:c7:9c:60:5d:7a:73:ee:90:6d:8a:33:af:35:ff:a6:e4: e1:7d:c2:6a:ac:98:e7:4f:c8:0a:6b:9b:f8:fc:57:b4:12:f5: b2:e9:04:02:a2:ae:83:db:c0:49:f1:76:89:5f:00:a0:f6:71: 83:03:f0:73 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUUjGxr0xbANHnYq36yFJ04m2QfLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTgxMjM0MzBaFw0yNTEyMTcxMjM5MzBaMDMxMTAvBgNV BAMTKEEwMThCMkNBQTZEMEQ1MEE5NkI4NTU2MDFBQzNCOTlENUJCOUNGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcOotP+8WsFKLzhlcVxWoY1t9Q R99QbW5ltBUQGdHHsyCgR0erVJu2VuMEEtdbnKmW2XfyL7DmkaYaKmLGt5/huWP5 081lCjhQyLWTt2qWZ201quEjtGbt1vBFcy6GBZGOG8/rVSC4MRhot1TX45cLp9xq 0TWr0mX6iKw6zaVpVn0zHrhuZq7UKDbb401mKOiN1I7qswsEg15hmlekDJ2ulhWi iEzZq7m6XWGp3hTcdWDoonAq8LV4HlK89Ty60CcST/gw7Avso3cSGsED7vLBAc22 qS199moOpsqC72E5Zg7oYFk1Z0fQShC8CLqoyyYSwy/6awwndMLT5HHAcvKPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgGLLKptDVCpa4 VWAaw7mdW7nP+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFFp eDRFZk5nYXBuWWtLM3V2cVlHREpQQ3Z1Vmd6WWhINnB4YVdKUHdXOFUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hR aXg0RWZOZ2FwbllrSzN1dnFZR0RKUEN2dVZnelloSDZweGFXSlB3VzhVLzAvQTAx OEIyQ0FBNkQwRDUwQTk2Qjg1NTYwMUFDM0I5OUQ1QkI5Q0ZGQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg0i4AwQCj9DwMA0EAgACMAcDBQAoBBvIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxNjANBgkqhkiG9w0BAQsFAAOCAQEAMHz5wjZg qKpcjoKiaiJ2a5wddIlaVO3Z6/m4+Z9XJPKPXOhwB7Ju9uf5UdgtooHNRAZnRx0H zwXe4+vwH2Y3HSrJVmN36/he78ZI3JP1IcMjRv1CW7+sc57Jj1iMs6GgbJJkL6It 5u76NLrVa+57pT+WQqrWHqsWOZ/EErQVdFHby0/bY+dvG8ajQTv0IHOtJQFautru JMt4NOZfIbdQ/+GspQKgSo2xAyO240GGdkqg5mHzb8Kql66xUo0b7y7SqydI7Vrw BTTHnGBdenPukG2KM681/6bk4X3CaqyY50/ICmub+PxXtBL1sukEAqKug9vASfF2 iV8AoPZxgwPwcw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:28:11 2025 by rpki-client