$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer File: AC9C321F62E4F984FA376FC446EDB27A235860FC.cer (raw, json) Hash identifier: sdnyIz+CZc4RpUct/u8san7JfO6FTEyYTPIU1ZCATVg= Subject key identifier: AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0938098682BEFA71D9C49B330D1AD020F98760C3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft caRepository: rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 06 Jan 2025 18:51:11 +0000 Certificate not after: Mon 05 Jan 2026 18:56:11 +0000 Subordinate resources: AS: 272601 IP: 2804:85cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:09:86:82:be:fa:71:d9:c4:9b:33:0d:1a:d0:20:f9:87:60:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 6 18:51:11 2025 GMT Not After : Jan 5 18:56:11 2026 GMT Subject: CN=AC9C321F62E4F984FA376FC446EDB27A235860FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:c5:d5:c7:3a:b4:52:54:54:cb:11:da:20: 5e:d4:47:4d:33:f7:d9:e0:c6:7d:ab:fa:e4:25:28: b3:d5:cb:52:93:af:68:58:0f:b3:6b:05:69:6c:90: 46:14:8d:3f:09:47:9b:9d:bb:d8:85:5a:41:27:9f: a7:6a:1e:2a:f7:f0:78:5c:78:ef:c8:07:ba:e1:c2: b0:68:74:76:8d:82:37:23:77:70:86:a7:eb:23:96: 61:d3:c5:cc:88:a6:a0:b0:dd:bc:2e:80:8e:9d:be: 15:8e:20:21:ca:1b:7a:53:10:fc:17:a5:e9:ba:39: 3f:a4:70:4a:e4:f3:31:4f:b6:0c:20:20:04:55:dc: d9:fe:09:f3:20:f0:bf:05:bd:61:e9:7f:f7:5f:86: 05:a2:b6:51:c0:00:2d:a3:4b:3c:eb:ae:e5:cc:63: 98:b0:d7:22:c8:c8:0f:ba:07:bc:7e:09:df:99:98: 68:e2:31:dc:8b:76:d3:bb:84:ee:88:9a:cc:a6:24: 60:72:c8:dd:f5:45:91:fa:45:ae:d5:09:39:24:9b: cf:e3:20:76:ee:98:dd:6f:92:a6:6e:c9:d2:82:46: 3d:8a:e4:18:d8:71:c2:d6:54:53:fe:f2:35:10:9d: b6:b0:b7:fa:9b:06:de:71:2b:53:71:36:c8:c2:ee: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:85cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272601 Signature Algorithm: sha256WithRSAEncryption a8:a1:ca:bf:6b:49:fd:b7:d8:22:cb:b8:66:26:1f:28:c0:fa: 72:78:23:b7:d0:b9:1b:d3:32:a5:84:c8:a0:25:89:bc:50:e6: ef:2d:cc:39:3a:b2:b4:27:de:ba:28:fc:7d:d1:12:58:4d:b4: e8:0a:6d:25:98:1e:0d:9b:74:96:37:57:b4:31:73:22:4f:f4: 74:87:f9:e0:63:f3:77:2a:63:9c:30:00:d5:c7:eb:34:3d:3e: a6:a9:70:c8:4a:21:ac:e8:a4:0e:3b:ff:42:11:bd:09:86:a3: 25:e8:1f:18:b3:a6:2c:b3:b6:8e:bd:50:05:76:0a:93:ee:6a: 6e:2e:4f:d8:9e:b6:1e:6a:fc:5b:0e:f5:0c:44:d6:42:dd:4f: 8f:42:64:1c:dc:82:85:6a:5c:bd:15:00:df:98:12:30:46:7c: 5f:72:a5:ab:1d:88:18:e7:65:19:5a:27:14:27:3b:1f:a8:d8: 43:a1:b5:c4:dc:51:39:4e:a0:c2:58:e4:bf:e7:88:4d:35:cc: dd:c4:d7:50:3c:ba:37:be:84:32:72:99:5b:63:0a:d7:40:fa: 74:a5:74:0b:ac:95:83:a0:c8:23:b6:bf:a7:50:cd:76:bf:80: fe:b9:45:c0:a3:95:36:d1:48:3e:14:c6:80:fd:95:5c:fe:94: 6a:cb:05:2f -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUCTgJhoK++nHZxJszDRrQIPmHYMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDYxODUxMTFaFw0yNjAxMDUxODU2MTFaMDMxMTAvBgNV BAMTKEFDOUMzMjFGNjJFNEY5ODRGQTM3NkZDNDQ2RURCMjdBMjM1ODYwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkMXVxzq0UlRUyxHaIF7UR00z 99ngxn2r+uQlKLPVy1KTr2hYD7NrBWlskEYUjT8JR5udu9iFWkEnn6dqHir38Hhc eO/IB7rhwrBodHaNgjcjd3CGp+sjlmHTxcyIpqCw3bwugI6dvhWOICHKG3pTEPwX pem6OT+kcErk8zFPtgwgIARV3Nn+CfMg8L8FvWHpf/dfhgWitlHAAC2jSzzrruXM Y5iw1yLIyA+6B7x+Cd+ZmGjiMdyLdtO7hO6ImsymJGByyN31RZH6Ra7VCTkkm8/j IHbumN1vkqZuydKCRj2K5BjYccLWVFP+8jUQnbawt/qbBt5xK1NxNsjC7mQVAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsnDIfYuT5hPo3 b8RG7bJ6I1hg/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmtC YzZGRTRUZUI4aTZVc0w2cmd5V0o3SE4yQzcxRnBaVWtSNkZ4OTh1cXIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJr QmM2RkU0VGVCOGk2VXNMNnJneVdKN0hOMkM3MUZwWlVrUjZGeDk4dXFyLzAvQUM5 QzMyMUY2MkU0Rjk4NEZBMzc2RkM0NDZFREIyN0EyMzU4NjBGQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASFzDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KNkwDQYJKoZIhvcNAQELBQADggEBAKihyr9rSf232CLLuGYmHyjA+nJ4I7fQuRvT MqWEyKAlibxQ5u8tzDk6srQn3roo/H3RElhNtOgKbSWYHg2bdJY3V7QxcyJP9HSH +eBj83cqY5wwANXH6zQ9PqapcMhKIazopA47/0IRvQmGoyXoHxizpiyzto69UAV2 CpPuam4uT9ieth5q/FsO9QxE1kLdT49CZBzcgoVqXL0VAN+YEjBGfF9ypasdiBjn ZRlaJxQnOx+o2EOhtcTcUTlOoMJY5L/niE01zN3E11A8uje+hDJymVtjCtdA+nSl dAuslYOgyCO2v6dQzXa/gP65RcCjlTbRSD4UxoD9lVz+lGrLBS8= -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:47 2025 by rpki-client