$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer File: A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer (raw, json) Hash identifier: Q8F6VCVCsbWhkUUakwgQUSQtD2mKW/CCbkPOeXy/ork= Subject key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3EF0A655D6F29455A79009D493DBA12653BF00D5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft caRepository: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:42 +0000 Certificate not after: Wed 04 Mar 2026 18:40:42 +0000 Subordinate resources: AS: 61614 IP: 45.232.212.0/22 IP: 168.227.208.0/22 IP: 2804:4afc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 00:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f0:a6:55:d6:f2:94:55:a7:90:09:d4:93:db:a1:26:53:bf:00:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:42 2025 GMT Not After : Mar 4 18:40:42 2026 GMT Subject: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:23:82:22:ba:29:39:75:9d:b4:11:5f:53: 0a:c4:38:01:42:ae:93:74:9a:f3:94:37:55:27:43: 15:09:db:89:60:21:1a:08:78:1a:37:4e:92:f7:37: 8c:35:35:5a:91:e9:47:f5:b7:19:02:a0:df:4b:f4: c6:05:77:24:18:cf:b5:fe:16:b1:83:9a:a8:d6:1d: 76:b2:fd:61:93:fb:5d:05:11:c0:ed:3a:0e:44:a0: d5:cd:88:52:9b:cd:3e:0e:f6:45:0e:e2:9b:ea:28: 2b:1b:31:01:12:2f:30:93:cd:8e:10:1b:a3:0e:44: 47:b2:f4:19:d7:ab:5f:3b:07:fe:67:02:b2:8d:76: 25:c0:bc:f1:9a:d2:3f:cd:3d:9b:c8:69:f4:04:8a: 91:a9:06:b6:e5:a7:51:dc:71:1f:c0:8c:28:a5:3e: 01:a5:ab:95:4f:bd:32:b4:c3:8b:a8:9b:6f:74:74: 79:3b:f6:4a:e3:a6:98:58:97:2e:45:93:e5:29:d5: b9:af:1a:af:c3:68:02:94:50:7f:c4:b1:dd:0a:9e: c1:d3:ec:17:65:83:c3:2d:0e:fd:76:ed:f7:4f:c8: 4d:b0:3a:1e:45:6b:61:60:c1:8d:a7:97:86:b4:b2: 38:a8:82:20:fc:a9:6f:94:66:3f:81:0c:94:26:fe: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.212.0/22 168.227.208.0/22 IPv6: 2804:4afc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61614 Signature Algorithm: sha256WithRSAEncryption 3b:4f:28:90:88:47:c3:8f:69:ca:07:2b:aa:6f:62:0f:77:d5: ad:6f:7c:85:12:eb:7d:41:7d:df:5c:5c:6b:06:8f:4a:1e:ec: 0a:5d:c7:d8:4b:f3:79:a0:b0:eb:99:58:00:ed:b4:59:8e:3c: 8d:68:a2:6a:25:b1:8f:64:82:2f:e6:7b:86:02:87:9a:e2:34: d4:b4:e0:e9:73:ab:4d:59:1e:aa:e4:d0:3a:73:2a:98:1c:12: 3f:4f:55:5b:1a:40:09:a6:c5:3b:cf:7e:d9:65:39:d9:d0:02: f5:6f:2b:e3:69:02:71:49:c5:fd:b5:b5:c4:5f:42:b1:2a:e4: 2e:19:3b:5b:34:38:e1:e2:fd:4a:db:c6:96:46:1a:71:38:99: b6:f6:60:31:73:6e:06:ea:cc:70:54:d8:b5:24:4f:86:14:09: d9:3d:4c:5b:10:c2:aa:79:3a:b3:c8:1f:79:fc:ef:8a:fb:bf: b0:17:a1:17:68:62:6c:51:24:73:dc:1f:0f:6d:19:d1:d6:f8: f6:94:63:de:b2:05:e0:e2:6e:41:3e:78:13:db:5c:75:2a:65: ec:33:cc:e7:ef:ea:e0:94:b3:2a:e1:47:ee:51:18:d7:56:ed: 0f:2e:65:28:64:4a:55:8e:9a:15:84:14:46:66:f0:e6:1d:63: 75:82:d2:aa -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUPvCmVdbylFWnkAnUk9uhJlO/ANUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NDJaFw0yNjAzMDQxODQwNDJaMDMxMTAvBgNV BAMTKEE5RTAxMUIzOEIzQTY4MTBDMTBERTI4NUZEOEQyNTZGQUJDRURCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJiOCIropOXWdtBFfUwrEOAFC rpN0mvOUN1UnQxUJ24lgIRoIeBo3TpL3N4w1NVqR6Uf1txkCoN9L9MYFdyQYz7X+ FrGDmqjWHXay/WGT+10FEcDtOg5EoNXNiFKbzT4O9kUO4pvqKCsbMQESLzCTzY4Q G6MOREey9BnXq187B/5nArKNdiXAvPGa0j/NPZvIafQEipGpBrblp1HccR/AjCil PgGlq5VPvTK0w4uom290dHk79krjpphYly5Fk+Up1bmvGq/DaAKUUH/Esd0KnsHT 7Bdlg8MtDv127fdPyE2wOh5Fa2FgwY2nl4a0sjiogiD8qW+UZj+BDJQm/ieJAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSp4BGzizpoEMEN 4oX9jSVvq87brzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5o OWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5o OWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMS9BOUUw MTFCMzhCM0E2ODEwQzEwREUyODVGRDhEMjU2RkFCQ0VEQkFGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIt6NQDBAKo49AwDQQCAAIwBwMFACgESvwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAPCuMA0GCSqGSIb3DQEBCwUAA4IBAQA7TyiQiEfD j2nKByuqb2IPd9Wtb3yFEut9QX3fXFxrBo9KHuwKXcfYS/N5oLDrmVgA7bRZjjyN aKJqJbGPZIIv5nuGAoea4jTUtODpc6tNWR6q5NA6cyqYHBI/T1VbGkAJpsU7z37Z ZTnZ0AL1byvjaQJxScX9tbXEX0KxKuQuGTtbNDjh4v1K28aWRhpxOJm29mAxc24G 6sxwVNi1JE+GFAnZPUxbEMKqeTqzyB95/O+K+7+wF6EXaGJsUSRz3B8PbRnR1vj2 lGPesgXg4m5BPngT21x1KmXsM8zn7+rglLMq4UfuURjXVu0PLmUoZEpVjpoVhBRG ZvDmHWN1gtKq -----END CERTIFICATE-----Generated at Thu Apr 10 01:41:08 2025 by rpki-client