$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer File: A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer (raw, json) Hash identifier: 3kAf/deMWeeZo4RpYViJaMdvc3sRKuOfVjHmtAqD6Y8= Subject key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 618969EBE61BEF8BAF407EA6172B868334BA2717 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft caRepository: rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Dec 2024 15:21:09 +0000 Certificate not after: Fri 19 Dec 2025 15:26:09 +0000 Subordinate resources: AS: 262494 IP: 45.163.108.0/22 IP: 45.179.112.0/22 IP: 45.226.88.0/22 IP: 138.185.188.0/22 IP: 168.205.240.0/22 IP: 170.82.124.0/22 IP: 177.66.112.0/21 IP: 177.124.168.0/22 IP: 177.129.60.0/22 IP: 179.125.124.0/22 IP: 179.191.56.0/21 IP: 2804:ad8::/32 IP: 2804:1510::/32 IP: 2804:4678::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:89:69:eb:e6:1b:ef:8b:af:40:7e:a6:17:2b:86:83:34:ba:27:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 20 15:21:09 2024 GMT Not After : Dec 19 15:26:09 2025 GMT Subject: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:77:69:06:4b:01:69:da:44:85:f9:31:e0: 0f:89:a7:23:91:78:b0:dd:59:07:33:d1:c1:b4:a3: 9e:fd:e3:42:f9:1a:f4:ad:08:b8:b0:f0:8d:0f:70: 70:6b:4e:27:40:2c:08:ec:cb:bb:d7:ae:35:6e:01: 3b:6b:51:47:ee:2f:d7:4a:80:2a:41:e7:c6:ea:58: c5:f9:37:62:9f:54:a2:fb:b4:96:43:10:06:16:7d: 94:05:7f:3e:bc:d7:89:16:83:ea:a9:bd:d0:f8:88: f4:01:a7:19:46:81:59:50:50:05:59:de:ac:4b:e0: 27:af:e3:00:c3:e0:92:15:9a:e1:51:bb:90:83:0f: 41:4e:83:6b:d0:ba:01:92:76:e1:75:b4:83:99:eb: b3:f6:2b:e6:73:e5:c8:41:ab:98:b6:a5:e8:2a:92: 9e:58:d4:78:ef:87:72:0b:90:fa:08:f5:06:17:76: 66:d1:7a:cf:21:02:fd:5d:47:1f:8a:cf:ea:31:8f: e4:fc:8c:a3:91:ba:c7:6a:95:01:2c:da:4e:05:9b: e9:2b:e6:3b:14:83:5d:82:6c:23:ca:00:95:58:30: be:b1:03:6c:65:27:92:73:73:15:46:63:95:bb:07: 65:0b:fa:1e:c8:79:5e:db:9d:ad:7a:14:2d:bf:6b: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.108.0/22 45.179.112.0/22 45.226.88.0/22 138.185.188.0/22 168.205.240.0/22 170.82.124.0/22 177.66.112.0/21 177.124.168.0/22 177.129.60.0/22 179.125.124.0/22 179.191.56.0/21 IPv6: 2804:ad8::/32 2804:1510::/32 2804:4678::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262494 Signature Algorithm: sha256WithRSAEncryption 10:56:8c:77:87:c6:c0:41:07:b6:e7:31:2c:57:aa:da:f6:47: 67:6c:3c:a9:7d:d0:bf:38:cf:f7:ad:ac:e9:4e:af:9c:cf:9f: 70:de:f8:79:e9:57:a5:49:7a:e0:46:e8:66:04:78:f0:20:a0: e6:ea:f7:90:82:af:a6:89:c2:ab:75:9b:29:30:2f:0a:25:04: 16:8b:15:5b:3a:a1:9a:c8:b7:45:02:ab:90:34:16:0b:b3:ce: 34:42:72:1c:9b:87:ff:4c:d9:bb:94:71:31:e8:42:5d:7c:1d: 35:66:53:d7:ff:be:6e:8b:d3:68:87:bb:b7:bb:5f:b6:75:d2: de:a7:59:18:00:f2:02:e7:35:1d:0a:36:d9:2e:6b:24:6a:b2: 59:8b:9c:d3:e4:a8:36:b9:11:8b:e5:e3:c7:1c:ce:0d:34:24: 4e:a6:da:9c:f9:67:7c:f8:1c:fd:26:2f:08:11:87:f7:90:7c: 60:15:45:fa:78:be:b2:f9:6b:6c:21:00:f0:b1:8b:70:16:dc: 67:43:30:45:9f:74:a7:5b:31:f3:83:b7:83:21:af:9b:49:1d: db:aa:c0:14:36:e3:0b:25:bb:7f:21:57:50:5c:44:c8:6b:27: 64:3e:f0:21:5f:4f:20:b6:90:a4:58:4b:48:01:7b:d5:32:bf: 7d:70:37:b5 -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUYYlp6+Yb74uvQH6mFyuGgzS6JxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMjAxNTIxMDlaFw0yNTEyMTkxNTI2MDlaMDMxMTAvBgNV BAMTKEExOTkzMDY2RTY3N0E0MkI5OEMzNzg5QTI3QkZDRUE3QTQ4OUUyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQb3dpBksBadpEhfkx4A+JpyOR eLDdWQcz0cG0o57940L5GvStCLiw8I0PcHBrTidALAjsy7vXrjVuATtrUUfuL9dK gCpB58bqWMX5N2KfVKL7tJZDEAYWfZQFfz6814kWg+qpvdD4iPQBpxlGgVlQUAVZ 3qxL4Cev4wDD4JIVmuFRu5CDD0FOg2vQugGSduF1tIOZ67P2K+Zz5chBq5i2pegq kp5Y1Hjvh3ILkPoI9QYXdmbRes8hAv1dRx+Kz+oxj+T8jKORusdqlQEs2k4Fm+kr 5jsUg12CbCPKAJVYML6xA2xlJ5JzcxVGY5W7B2UL+h7IeV7bna16FC2/a9xHAgMB AAGjggOEMIIDgDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShmTBm5nekK5jD eJonv86npIni+zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDdX ZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNFSkMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ3 V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAvQTE5 OTMwNjZFNjc3QTQyQjk4QzM3ODlBMjdCRkNFQTdBNDg5RTJGQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEH AQH/BGkwZzBIBAIAATBCAwQCLaNsAwQCLbNwAwQCLeJYAwQCirm8AwQCqM3wAwQC qlJ8AwQDsUJwAwQCsXyoAwQCsYE8AwQCs318AwQDs784MBsEAgACMBUDBQAoBArY AwUAKAQVEAMFACgERngwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAFeMA0GCSqG SIb3DQEBCwUAA4IBAQAQVox3h8bAQQe25zEsV6ra9kdnbDypfdC/OM/3razpTq+c z59w3vh56VelSXrgRuhmBHjwIKDm6veQgq+micKrdZspMC8KJQQWixVbOqGayLdF AquQNBYLs840QnIcm4f/TNm7lHEx6EJdfB01ZlPX/75ui9Noh7u3u1+2ddLep1kY APIC5zUdCjbZLmskarJZi5zT5Kg2uRGL5ePHHM4NNCROptqc+Wd8+Bz9Ji8IEYf3 kHxgFUX6eL6y+WtsIQDwsYtwFtxnQzBFn3SnWzHzg7eDIa+bSR3bqsAUNuMLJbt/ IVdQXETIaydkPvAhX08gtpCkWEtIAXvVMr99cDe1 -----END CERTIFICATE-----Generated at Sat Apr 5 06:38:26 2025 by rpki-client