$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer File: A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer (raw, json) Hash identifier: IEIB3T4A1w+pfm6CL/InTh+5v30vxmqQ7Qx1oZz2D8g= Subject key identifier: A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2986E6FE68DED166CA98F0ACFB2953A5727765C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.mft caRepository: rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 20 Mar 2025 12:28:08 +0000 Certificate not after: Thu 19 Mar 2026 12:33:08 +0000 Subordinate resources: AS: 272252 IP: 2804:844c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:86:e6:fe:68:de:d1:66:ca:98:f0:ac:fb:29:53:a5:72:77:65:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 20 12:28:08 2025 GMT Not After : Mar 19 12:33:08 2026 GMT Subject: CN=A24962CC4C921C7064CF78BB8DF4A9C8638402C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:c8:86:64:20:f0:3e:af:96:a9:4c:34:59: 83:57:5d:99:40:c3:c5:4a:c5:2a:f7:69:95:54:75: ea:76:14:65:4b:48:a4:bc:a4:eb:60:9a:18:79:ff: f6:04:d0:f1:f3:f5:c7:fb:b5:36:8d:ab:b5:e3:0a: 2c:57:fe:be:fa:67:de:a2:a4:b7:85:f9:a2:9d:dd: 5b:9b:59:70:aa:16:27:c9:3f:e2:b4:52:07:29:7b: 1e:81:be:26:f0:4c:f1:38:c3:6e:e8:6d:da:e5:cd: a4:f5:bb:8e:df:7b:b0:84:ed:42:01:5e:7a:28:89: 16:51:2b:6d:bc:02:f0:a8:26:61:55:85:48:69:49: 0e:5b:ad:7c:10:c6:93:5e:aa:9f:6c:e3:a1:68:bc: ff:55:b6:3d:eb:f3:c7:e1:9e:b4:0b:7c:d4:d7:e7: 1e:87:19:ba:f5:97:d7:73:e4:74:d8:92:7c:87:7a: 0f:01:95:5b:69:e7:a5:dd:9b:a0:bb:84:c3:bd:bf: b3:db:37:a0:ea:02:c7:f0:a2:a3:51:42:ed:d2:03: d2:09:7d:4f:14:7d:f9:7e:e5:0a:f1:98:40:fd:98: 1a:dc:dd:84:9c:63:6d:30:b5:0f:19:0d:a1:8b:0b: 22:64:07:bd:74:e6:ee:82:c5:38:d9:d8:85:0d:fe: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:844c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272252 Signature Algorithm: sha256WithRSAEncryption 4f:e6:ea:8a:83:43:b5:a5:14:3d:1a:f7:0a:88:39:4d:69:f6: bf:2d:43:e3:0b:ea:01:94:65:72:42:46:cf:9d:af:b2:7d:5e: 3f:f1:85:dd:ed:81:25:20:5c:17:c6:a9:8b:a6:b0:db:0f:e3: 60:3a:e2:2d:d6:14:65:fc:e5:7e:18:2f:ad:7f:d3:5a:c3:19: da:c0:aa:c2:fd:cb:45:09:64:60:f9:f8:88:f5:5c:63:50:69: 87:f2:5e:2e:ea:8c:69:4f:f4:18:28:92:a1:b8:85:57:22:66: 89:7c:4c:81:fe:26:3b:24:e0:9c:dc:ea:02:d6:6f:11:7a:22: 48:e8:a1:7d:da:fe:ad:02:a5:fc:02:58:51:88:77:df:73:2d: 1d:53:3c:a7:81:bb:f9:25:81:90:14:64:86:d8:ed:04:89:a4: b8:80:79:dd:cb:1a:7a:30:3e:63:d9:d6:b7:86:08:38:57:90: 84:97:1c:d0:87:f7:0c:f4:cf:c7:68:57:0b:d1:ed:29:7d:85: a0:97:8d:4e:e7:40:3b:e9:84:ee:b4:76:b1:25:47:d8:a2:62: bd:c4:8d:99:14:e4:34:b0:55:06:29:be:2d:b0:9f:97:c5:54: 6b:9c:06:06:92:ef:91:74:b7:5a:13:d8:82:ce:cb:c1:22:92: fb:ad:15:d8 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUKYbm/mje0WbKmPCs+ylTpXJ3ZcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjAxMjI4MDhaFw0yNjAzMTkxMjMzMDhaMDMxMTAvBgNV BAMTKEEyNDk2MkNDNEM5MjFDNzA2NENGNzhCQjhERjRBOUM4NjM4NDAyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/siGZCDwPq+WqUw0WYNXXZlA w8VKxSr3aZVUdep2FGVLSKS8pOtgmhh5//YE0PHz9cf7tTaNq7XjCixX/r76Z96i pLeF+aKd3VubWXCqFifJP+K0Ugcpex6BvibwTPE4w27obdrlzaT1u47fe7CE7UIB XnooiRZRK228AvCoJmFVhUhpSQ5brXwQxpNeqp9s46FovP9Vtj3r88fhnrQLfNTX 5x6HGbr1l9dz5HTYknyHeg8BlVtp56Xdm6C7hMO9v7PbN6DqAsfwoqNRQu3SA9IJ fU8Uffl+5QrxmED9mBrc3YScY20wtQ8ZDaGLCyJkB7105u6CxTjZ2IUN/jb3AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiSWLMTJIccGTP eLuN9KnIY4QCxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNTFN WkZKTXM3U3Q4Q1pqM2JKa1c2NmdZcWZ0eFJKM1ZrRkdzMWM3ZVM3NkMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzUx TVpGSk1zN1N0OENaajNiSmtXNjZnWXFmdHhSSjNWa0ZHczFjN2VTNzZDLzAvQTI0 OTYyQ0M0QzkyMUM3MDY0Q0Y3OEJCOERGNEE5Qzg2Mzg0MDJDNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASETDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME J3wwDQYJKoZIhvcNAQELBQADggEBAE/m6oqDQ7WlFD0a9wqIOU1p9r8tQ+ML6gGU ZXJCRs+dr7J9Xj/xhd3tgSUgXBfGqYumsNsP42A64i3WFGX85X4YL61/01rDGdrA qsL9y0UJZGD5+Ij1XGNQaYfyXi7qjGlP9BgokqG4hVciZol8TIH+Jjsk4Jzc6gLW bxF6IkjooX3a/q0CpfwCWFGId99zLR1TPKeBu/klgZAUZIbY7QSJpLiAed3LGnow PmPZ1reGCDhXkISXHNCH9wz0z8doVwvR7Sl9haCXjU7nQDvphO60drElR9iiYr3E jZkU5DSwVQYpvi2wn5fFVGucBgaS75F0t1oT2ILOy8EikvutFdg= -----END CERTIFICATE-----Generated at Fri Apr 4 10:22:05 2025 by rpki-client