$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.cer File: A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.cer (raw, json) Hash identifier: qTdMwmNX9+kKOagLc9bCAlh1hqcGTBJHNhebMN0+xHk= Subject key identifier: A2:B2:BB:19:5D:72:1F:8E:93:D7:88:6E:DF:97:88:1E:2F:2D:09:F5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12A387895CBAB2A02F982D7C0372FAE450169573 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.mft caRepository: rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 Jan 2025 18:52:32 +0000 Certificate not after: Mon 26 Jan 2026 18:57:32 +0000 Subordinate resources: AS: 271498 IP: 179.0.56.0/22 IP: 2804:7c78::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a3:87:89:5c:ba:b2:a0:2f:98:2d:7c:03:72:fa:e4:50:16:95:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 27 18:52:32 2025 GMT Not After : Jan 26 18:57:32 2026 GMT Subject: CN=A2B2BB195D721F8E93D7886EDF97881E2F2D09F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:15:a9:14:a9:32:a6:6e:5a:10:fc:af:dc:9e: b4:39:9d:36:ba:f5:4d:26:d7:0f:2a:5f:e8:13:bf: 09:c2:89:0e:95:29:e1:1a:66:0d:15:ae:cc:9c:13: ee:e4:db:9b:67:55:1f:19:a7:4b:49:14:1e:8c:c8: db:90:af:2c:0e:ac:4c:9d:20:dc:1c:9a:34:03:5d: e5:a3:90:a1:be:45:1a:a9:37:b0:c8:38:32:a8:ee: db:75:13:6b:fe:a6:26:36:a3:9d:4e:21:6c:e3:dc: 89:f4:a7:98:ca:c1:09:55:eb:93:f9:48:48:44:51: d7:96:25:92:42:4a:38:2e:60:74:c1:d1:39:28:32: 3e:7e:3e:1f:c4:34:f2:c4:64:74:aa:f1:50:91:09: e7:df:ae:7d:49:61:d0:c7:9d:8a:c1:77:e4:8f:55: 8e:82:f8:8f:cb:54:ee:4e:0d:a7:51:ef:02:36:fc: 2b:f8:07:cf:98:8c:a9:82:60:cd:7d:c3:69:cc:34: 57:18:a7:84:d2:2b:d9:82:59:c8:b9:78:57:80:92: 86:96:e9:2a:aa:b1:43:17:af:01:a5:34:bf:b0:2c: de:aa:00:84:c7:98:06:9b:11:54:58:6c:3b:ae:ef: 97:3b:c1:ba:f4:91:98:4a:22:34:73:8a:ff:62:3c: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:B2:BB:19:5D:72:1F:8E:93:D7:88:6E:DF:97:88:1E:2F:2D:09:F5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cc963mLcVFK3DoMYQRqrs7gbmmqszFr6NLqSWtNwrFH6/0/A2B2BB195D721F8E93D7886EDF97881E2F2D09F5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.56.0/22 IPv6: 2804:7c78::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271498 Signature Algorithm: sha256WithRSAEncryption 71:87:11:38:e7:7d:9a:5c:95:c7:32:54:cb:c6:cb:bb:3c:b7: b4:36:5e:f2:1e:17:ab:86:5e:d3:5d:d5:25:3d:40:b9:1c:f2: 35:e6:20:2a:99:b7:c8:dc:3a:c3:89:cd:7c:db:0a:61:72:2f: 9b:af:fc:fc:46:65:97:50:e3:ac:11:d9:cb:58:9f:10:c6:87: 64:d7:15:8e:83:cd:79:15:2a:3e:94:14:c6:9c:49:61:59:76: 95:8d:5b:04:43:d7:b1:b5:92:96:22:a3:f7:da:71:d2:cb:6a: 90:5e:fd:7b:84:64:fa:c7:e4:d8:7f:53:b7:a0:40:a0:00:c2: 0c:06:46:6d:1a:d9:0f:44:ba:ba:63:0f:a2:dd:f2:48:e4:9c: db:eb:49:2c:4c:3f:df:48:4b:4a:7b:86:b1:1c:a5:42:77:47: c6:6f:7e:9a:e0:82:60:3a:ec:d5:55:8e:27:69:18:30:18:3e: 71:91:7f:8c:53:47:e4:00:ec:b8:20:e3:22:03:be:a1:6a:05: bc:37:18:0b:14:a8:a1:5e:aa:bc:99:00:ae:64:cf:a0:3e:b7: 7b:56:06:2c:54:49:61:e8:b1:fd:44:36:ce:8b:1c:64:99:cd: 22:1a:69:ff:ea:a1:0e:e3:24:f3:7f:e3:e9:1c:ff:89:55:8c: 9c:35:77:27 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEqOHiVy6sqAvmC18A3L65FAWlXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjcxODUyMzJaFw0yNjAxMjYxODU3MzJaMDMxMTAvBgNV BAMTKEEyQjJCQjE5NUQ3MjFGOEU5M0Q3ODg2RURGOTc4ODFFMkYyRDA5RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFakUqTKmbloQ/K/cnrQ5nTa6 9U0m1w8qX+gTvwnCiQ6VKeEaZg0VrsycE+7k25tnVR8Zp0tJFB6MyNuQrywOrEyd INwcmjQDXeWjkKG+RRqpN7DIODKo7tt1E2v+piY2o51OIWzj3In0p5jKwQlV65P5 SEhEUdeWJZJCSjguYHTB0TkoMj5+Ph/ENPLEZHSq8VCRCeffrn1JYdDHnYrBd+SP VY6C+I/LVO5ODadR7wI2/Cv4B8+YjKmCYM19w2nMNFcYp4TSK9mCWci5eFeAkoaW 6SqqsUMXrwGlNL+wLN6qAITHmAabEVRYbDuu75c7wbr0kZhKIjRziv9iPM1vAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSisrsZXXIfjpPX iG7fl4geLy0J9TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2M5 NjNtTGNWRkszRG9NWVFScXJzN2dibW1xc3pGcjZOTHFTV3ROd3JGSDYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nj OTYzbUxjVkZLM0RvTVlRUnFyczdnYm1tcXN6RnI2TkxxU1d0TndyRkg2LzAvQTJC MkJCMTk1RDcyMUY4RTkzRDc4ODZFREY5Nzg4MUUyRjJEMDlGNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCswA4MA0EAgACMAcDBQAoBHx4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkijANBgkqhkiG9w0BAQsFAAOCAQEAcYcROOd9mlyVxzJU y8bLuzy3tDZe8h4Xq4Ze013VJT1AuRzyNeYgKpm3yNw6w4nNfNsKYXIvm6/8/EZl l1DjrBHZy1ifEMaHZNcVjoPNeRUqPpQUxpxJYVl2lY1bBEPXsbWSliKj99px0stq kF79e4Rk+sfk2H9Tt6BAoADCDAZGbRrZD0S6umMPot3ySOSc2+tJLEw/30hLSnuG sRylQndHxm9+muCCYDrs1VWOJ2kYMBg+cZF/jFNH5ADsuCDjIgO+oWoFvDcYCxSo oV6qvJkArmTPoD63e1YGLFRJYeix/UQ2zoscZJnNIhpp/+qhDuMk83/j6Rz/iVWM nDV3Jw== -----END CERTIFICATE-----Generated at Sat Apr 5 00:29:01 2025 by rpki-client