$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer (raw, json) Hash identifier: OYQO37cce0NrU/cgcdSDIfYU8EO5yfOSd0oRbr+CpCM= Subject key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 744FB02B575BD75848D330C8D0D8BEA99615D7B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft caRepository: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 19:54:04 +0000 Certificate not after: Thu 05 Mar 2026 19:59:04 +0000 Subordinate resources: AS: 268281 IP: 45.237.140.0/22 IP: 2804:4ec4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Apr 2025 01:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4f:b0:2b:57:5b:d7:58:48:d3:30:c8:d0:d8:be:a9:96:15:d7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 19:54:04 2025 GMT Not After : Mar 5 19:59:04 2026 GMT Subject: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:75:8f:e0:62:97:e4:f1:e3:0b:90:eb:97: dd:77:a8:41:12:dc:58:ff:98:81:07:ad:b1:58:58: 5f:2c:aa:91:e5:fb:e1:5b:a8:f5:18:97:31:46:20: 27:ca:dd:a9:f4:96:ac:1c:7f:20:6e:27:e7:21:7d: d1:48:9e:5a:1a:c4:d7:ca:ac:3d:95:eb:16:58:bd: 08:84:ce:3b:f2:70:1b:7b:fc:6d:ef:cc:b1:9c:bb: 11:4c:d1:26:2d:1c:c6:38:71:b1:fb:0a:0d:33:7c: cf:00:8e:36:b3:ac:77:78:cb:74:e1:31:d8:f6:b0: 55:c9:cf:a5:f5:c7:64:eb:0a:e1:10:71:1f:9b:bf: 05:8b:ac:a2:73:80:8b:24:a7:04:a4:eb:cb:dc:e1: 46:db:82:4e:b0:6c:0e:81:eb:d8:80:93:0e:03:99: 5b:75:c8:34:ac:48:db:ac:ea:c7:84:5e:0e:5f:b1: 05:7c:c5:06:6a:67:f3:83:b6:af:7b:90:76:f9:ce: 86:73:8c:1e:64:be:b4:36:4a:c0:88:a3:69:61:db: a2:c2:e1:b5:27:fc:37:51:79:37:66:04:97:d5:ae: 3c:df:21:1c:89:80:b3:dc:4e:e6:8d:12:6f:e0:e0: a0:72:c1:f6:26:8e:70:18:59:bf:b8:80:55:07:b2: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.140.0/22 IPv6: 2804:4ec4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268281 Signature Algorithm: sha256WithRSAEncryption 61:19:a2:5a:98:22:4e:94:aa:1f:2e:c7:b6:41:99:e5:6f:c1: e7:85:31:5d:f2:01:64:7f:02:dd:36:7a:a0:b3:bd:3f:25:da: 02:47:b9:cc:aa:1d:00:42:5b:78:5e:10:f0:cb:c9:10:a2:04: 08:ff:15:b3:5a:a2:cc:dd:22:ce:5e:6d:8c:cf:d7:3f:12:42: 5c:cb:21:78:d8:22:09:41:ba:95:4d:d1:4b:a4:c7:38:7a:33: 8c:98:9c:12:b2:c8:98:5d:84:f0:21:b4:23:cb:f1:85:03:1b: 14:d4:f2:49:62:44:41:c3:8a:6f:59:68:e6:04:1d:c6:95:8f: 7c:2f:13:2e:d3:c4:b5:81:0f:22:84:57:83:e5:5d:99:08:d5: 5e:e2:2b:d9:11:94:0e:52:95:ef:95:47:18:26:a2:fe:9f:50: 1d:80:15:e3:6e:ef:87:c2:06:9f:16:aa:d0:44:8d:93:93:51: 77:47:fa:1f:19:16:e2:ab:f4:a1:b2:81:2f:20:db:5d:f3:22: dd:d5:70:24:17:d3:9f:fb:24:4e:ef:1b:e2:13:d5:3f:0c:8f: 32:8e:0b:91:89:76:c2:dc:f2:72:cd:81:e1:41:d4:50:18:25: fb:1e:b6:99:9f:5b:58:fd:26:82:b8:78:9d:79:d7:27:5d:87: a2:6b:d7:38 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUdE+wK1db11hI0zDI0Ni+qZYV17UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxOTU0MDRaFw0yNjAzMDUxOTU5MDRaMDMxMTAvBgNV BAMTKEFBNkY4NkEwNUZEOUY3RDlBQkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+i3WP4GKX5PHjC5Drl913qEES 3Fj/mIEHrbFYWF8sqpHl++FbqPUYlzFGICfK3an0lqwcfyBuJ+chfdFInloaxNfK rD2V6xZYvQiEzjvycBt7/G3vzLGcuxFM0SYtHMY4cbH7Cg0zfM8AjjazrHd4y3Th Mdj2sFXJz6X1x2TrCuEQcR+bvwWLrKJzgIskpwSk68vc4Ubbgk6wbA6B69iAkw4D mVt1yDSsSNus6seEXg5fsQV8xQZqZ/ODtq97kHb5zoZzjB5kvrQ2SsCIo2lh26LC 4bUn/DdReTdmBJfVrjzfIRyJgLPcTuaNEm/g4KBywfYmjnAYWb+4gFUHsscjAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqb4agX9n32avp 6OlbJGpM/iyeGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDg4 VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDg4 VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9BQTZG ODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt7YwwDQQCAAIwBwMFACgETsQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBf5MA0GCSqGSIb3DQEBCwUAA4IBAQBhGaJamCJOlKofLse2 QZnlb8HnhTFd8gFkfwLdNnqgs70/JdoCR7nMqh0AQlt4XhDwy8kQogQI/xWzWqLM 3SLOXm2Mz9c/EkJcyyF42CIJQbqVTdFLpMc4ejOMmJwSssiYXYTwIbQjy/GFAxsU 1PJJYkRBw4pvWWjmBB3GlY98LxMu08S1gQ8ihFeD5V2ZCNVe4ivZEZQOUpXvlUcY JqL+n1AdgBXjbu+HwgafFqrQRI2Tk1F3R/ofGRbiq/ShsoEvINtd8yLd1XAkF9Of +yRO7xviE9U/DI8yjguRiXbC3PJyzYHhQdRQGCX7HraZn1tY/SaCuHidedcnXYei a9c4 -----END CERTIFICATE-----Generated at Wed Apr 23 06:36:15 2025 by rpki-client