$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer (raw, json) Hash identifier: Q/dvxIlsx1DaaekB5vOOia8E1wFnUZSYcb4tV0NaNQI= Subject key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A31A1B04A50E1EB04875DC047523C2BC53DB1E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft caRepository: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 07:06:57 +0000 Certificate not after: Fri 06 Mar 2026 07:11:57 +0000 Subordinate resources: AS: 61830 IP: 201.140.240.0/22 IP: 2804:19fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:31:a1:b0:4a:50:e1:eb:04:87:5d:c0:47:52:3c:2b:c5:3d:b1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 07:06:57 2025 GMT Not After : Mar 6 07:11:57 2026 GMT Subject: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:3e:63:25:f4:02:1b:a3:8d:e1:18:a6:b9: 21:0b:33:a9:60:d2:d0:27:60:68:76:09:31:7e:74: 47:2f:6f:ca:2b:d0:66:c7:97:84:36:0e:14:0a:e2: a8:22:1e:5d:ff:d1:a3:d4:58:2c:2b:ba:e3:06:fc: 06:1a:7a:6c:78:e5:43:a8:35:96:26:14:61:cd:3b: de:a6:b3:76:61:27:2f:63:c8:a9:fa:f8:1d:82:60: 42:f2:9a:31:75:bf:51:9f:aa:4b:98:35:75:f8:49: 88:aa:61:7f:df:e8:77:b2:8a:a2:aa:d3:43:0d:ce: b3:ed:6a:00:35:cb:8d:81:3f:d9:98:45:f5:15:0c: a4:dd:5c:6c:2a:2e:59:10:ee:9b:69:ee:7d:db:bb: 75:64:72:82:a3:8d:6c:63:04:46:98:c1:7a:ab:91: 28:44:48:3e:f8:e4:99:2b:4b:a6:8a:6f:32:33:9c: 50:86:a3:6b:5a:23:b3:51:bc:a9:74:08:b3:d7:36: 2d:92:76:88:2a:4e:f4:37:e2:a0:a2:a7:e4:9c:50: dd:11:3c:58:21:c2:b8:da:c6:fc:35:a8:0d:38:2c: e7:15:8b:17:f8:fb:a6:e1:6a:86:62:24:6b:d0:ea: 56:12:0e:93:71:93:4c:74:4e:d5:06:b6:99:17:bc: 6e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.140.240.0/22 IPv6: 2804:19fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61830 Signature Algorithm: sha256WithRSAEncryption 5b:67:42:fe:98:f5:81:9b:c1:5c:f5:60:d5:3f:08:cc:77:8f: 0c:a1:5f:47:6b:32:4d:7a:e7:2e:c4:1d:f8:ac:a2:d7:98:cd: 8b:6a:62:92:f9:03:1a:ef:28:fd:6c:d4:4a:f1:3a:f2:4b:50: 0e:5a:ab:60:aa:4d:43:b1:f3:f9:f9:17:13:d6:3b:0a:6b:ec: ff:3f:b4:cf:c3:32:f5:31:d0:ee:4f:2d:30:ce:bd:a9:09:79: 1a:2e:b6:6d:31:06:e1:f9:9d:b6:b9:14:76:6e:b2:3a:38:d4: ce:9a:76:83:80:27:56:54:11:5a:51:21:11:0d:8c:79:83:37: 25:5c:54:c0:90:cd:53:29:57:cb:12:9e:1d:7c:aa:64:a4:25: 88:36:47:5f:31:5b:7d:c4:dc:c4:d7:3f:24:cc:79:c1:6b:97: 59:0b:6d:6c:47:52:95:d8:b1:8d:c4:4a:1b:8d:60:a7:f7:8e: a4:3a:16:36:f3:87:9f:39:a8:17:f9:4d:23:15:37:04:a0:f0: c3:b3:fc:3f:b3:1f:29:a4:4c:2e:13:8a:79:03:c8:a4:f4:5c: f9:38:71:40:ed:a0:a6:67:44:20:9d:30:5a:3c:a1:00:c0:e9: 63:da:90:db:12:96:61:99:40:ba:1c:2c:93:6d:b1:d0:2f:41: 6e:93:cf:50 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCjGhsEpQ4esEh13AR1I8K8U9sekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNzA2NTdaFw0yNjAzMDYwNzExNTdaMDMxMTAvBgNV BAMTKEEyMUMwM0REMDlDREMyQzAwOTk3NTk0QzIwOTgzNDczRUY1QURBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Bz5jJfQCG6ON4RimuSELM6lg 0tAnYGh2CTF+dEcvb8or0GbHl4Q2DhQK4qgiHl3/0aPUWCwruuMG/AYaemx45UOo NZYmFGHNO96ms3ZhJy9jyKn6+B2CYELymjF1v1GfqkuYNXX4SYiqYX/f6HeyiqKq 00MNzrPtagA1y42BP9mYRfUVDKTdXGwqLlkQ7ptp7n3bu3VkcoKjjWxjBEaYwXqr kShESD745JkrS6aKbzIznFCGo2taI7NRvKl0CLPXNi2SdogqTvQ34qCip+ScUN0R PFghwrjaxvw1qA04LOcVixf4+6bhaoZiJGvQ6lYSDpNxk0x0TtUGtpkXvG5RAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiHAPdCc3CwAmX WUwgmDRz71ra/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1NK N0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNT SjdDTG43N1Y4b1VMTXNmQXp1SDM0YlFBTlZrazVNd1BGbmc1azlGNm5LLzIvQTIx QzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNFRjVBREFGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyYzwMA0EAgACMAcDBQAoBBn8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxhjANBgkqhkiG9w0BAQsFAAOCAQEAW2dC/pj1gZvBXPVg 1T8IzHePDKFfR2syTXrnLsQd+Kyi15jNi2pikvkDGu8o/WzUSvE68ktQDlqrYKpN Q7Hz+fkXE9Y7Cmvs/z+0z8My9THQ7k8tMM69qQl5Gi62bTEG4fmdtrkUdm6yOjjU zpp2g4AnVlQRWlEhEQ2MeYM3JVxUwJDNUylXyxKeHXyqZKQliDZHXzFbfcTcxNc/ JMx5wWuXWQttbEdSldixjcRKG41gp/eOpDoWNvOHnzmoF/lNIxU3BKDww7P8P7Mf KaRMLhOKeQPIpPRc+ThxQO2gpmdEIJ0wWjyhAMDpY9qQ2xKWYZlAuhwsk22x0C9B bpPPUA== -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:48 2025 by rpki-client