$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer (raw, json) Hash identifier: Ip/f6l83NEqxXj/286KuygeDVRLT1PgkJF6WKqdqQfM= Subject key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 72F9599F5C9CC070E3E07E2B27D21C51A2A7AD40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft caRepository: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 19:55:24 +0000 Certificate not after: Thu 18 Dec 2025 20:00:24 +0000 Subordinate resources: AS: 268084 IP: 45.168.244.0/22 IP: 2804:57c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f9:59:9f:5c:9c:c0:70:e3:e0:7e:2b:27:d2:1c:51:a2:a7:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 19 19:55:24 2024 GMT Not After : Dec 18 20:00:24 2025 GMT Subject: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5c:a1:6c:3a:ce:67:78:88:04:d5:2e:cf:a8: 8f:4b:a5:cb:0e:72:7a:6b:b2:ae:87:fc:84:04:89: 86:7b:d0:5a:39:a9:54:2f:22:d7:f4:48:b0:a6:2f: ea:0c:bb:84:19:62:43:0c:4a:87:29:25:0c:28:fb: 39:0b:00:bd:ca:68:92:23:0f:93:6c:4b:73:a2:f3: f1:fb:00:83:0f:52:2e:07:bf:33:e4:86:e1:01:99: 6d:4a:15:a2:59:52:78:ed:97:1d:ad:77:70:bc:e5: 4d:67:04:8b:99:82:ef:fe:30:15:56:64:c6:4b:e0: f7:9c:d4:a4:03:00:38:4d:d6:f1:86:24:c9:8b:46: f3:d8:89:6f:76:5f:25:99:5e:4f:28:11:de:4c:4f: 4d:1f:e2:15:32:6c:9a:6d:db:b2:5a:93:0b:56:c2: 31:78:bf:f3:d3:2e:29:37:d5:dd:41:dc:f0:d2:4a: d0:e6:67:a8:18:1c:ea:b2:c6:c5:8d:75:9e:40:bf: d4:c9:cc:2a:49:91:4d:5f:0e:4f:c9:89:7d:1c:fe: f6:87:6e:b6:a7:f6:00:1a:5c:eb:81:53:41:5a:f7: 5f:28:61:ba:e3:82:19:7b:85:3e:e7:35:3d:b6:39: b2:8e:9e:77:86:4f:78:4b:74:be:a0:23:0e:9a:2f: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.244.0/22 IPv6: 2804:57c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268084 Signature Algorithm: sha256WithRSAEncryption 23:68:41:dd:f5:31:4f:a3:da:dc:fb:d0:28:fe:5e:06:3e:0b: 49:16:cd:6d:aa:09:38:46:d8:c5:1f:41:16:bf:46:0b:31:d0: 45:ca:72:f5:19:ad:71:49:40:32:4e:8a:57:23:80:af:75:11: cd:ef:a9:53:47:4e:5e:68:92:8e:9e:c1:99:f8:11:30:45:f6: ad:d6:f5:e2:21:a8:79:fa:88:04:c5:a0:2f:9d:9d:8a:eb:0a: 9d:8e:8f:b0:48:bc:52:60:62:43:03:61:43:0b:be:5c:e5:96: 86:cb:de:15:83:a2:6e:28:32:c9:6b:e9:6d:5d:f3:4c:58:b8: 08:df:0a:22:a3:7b:93:2b:4a:12:fd:0f:4b:86:c1:ba:00:61: 58:e4:06:ef:54:bc:91:64:c9:e9:96:f0:84:36:e6:90:ec:31: 49:4f:d1:8c:88:f5:e3:92:26:75:2d:a7:a2:d7:eb:87:3b:53: cc:f5:0d:7f:c1:f1:dd:16:ca:39:1b:93:d2:6f:00:53:10:ba: 6e:0e:04:de:c3:bb:20:ec:af:e6:e7:87:93:d7:2e:f9:23:87: 8c:37:14:ee:8b:ef:da:e5:7e:59:c9:54:7d:74:5e:c3:0a:d5: 91:0a:eb:75:65:63:8c:35:67:22:69:45:f1:f3:bd:36:2b:1f: 07:3c:0e:95 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcvlZn1ycwHDj4H4rJ9IcUaKnrUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTkxOTU1MjRaFw0yNTEyMTgyMDAwMjRaMDMxMTAvBgNV BAMTKEFBMkJEMzM1MjBFQzBDNzlDRkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrXKFsOs5neIgE1S7PqI9LpcsO cnprsq6H/IQEiYZ70Fo5qVQvItf0SLCmL+oMu4QZYkMMSocpJQwo+zkLAL3KaJIj D5NsS3Oi8/H7AIMPUi4HvzPkhuEBmW1KFaJZUnjtlx2td3C85U1nBIuZgu/+MBVW ZMZL4Pec1KQDADhN1vGGJMmLRvPYiW92XyWZXk8oEd5MT00f4hUybJpt27JakwtW wjF4v/PTLik31d1B3PDSStDmZ6gYHOqyxsWNdZ5Av9TJzCpJkU1fDk/JiX0c/vaH bran9gAaXOuBU0Fa918oYbrjghl7hT7nNT22ObKOnneGT3hLdL6gIw6aL2H1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqK9M1IOwMec/J nEAn/y6vYGJf+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzV3 WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c1 d1htVGJqR1hkQ3NqUGc1OGV6YUNpN1pOV2dOWjk3aWc4OUh6REVwZlRWLzAvQUEy QkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2MDYyNUZGQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaj0MA0EAgACMAcDBQAoBFfAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXNDANBgkqhkiG9w0BAQsFAAOCAQEAI2hB3fUxT6Pa3PvQ KP5eBj4LSRbNbaoJOEbYxR9BFr9GCzHQRcpy9RmtcUlAMk6KVyOAr3URze+pU0dO XmiSjp7BmfgRMEX2rdb14iGoefqIBMWgL52diusKnY6PsEi8UmBiQwNhQwu+XOWW hsveFYOibigyyWvpbV3zTFi4CN8KIqN7kytKEv0PS4bBugBhWOQG71S8kWTJ6Zbw hDbmkOwxSU/RjIj145ImdS2notfrhztTzPUNf8Hx3RbKORuT0m8AUxC6bg4E3sO7 IOyv5ueHk9cu+SOHjDcU7ovv2uV+WclUfXRewwrVkQrrdWVjjDVnImlF8fO9Nisf BzwOlQ== -----END CERTIFICATE-----Generated at Fri Apr 4 19:43:02 2025 by rpki-client