$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD3AEE6D0F6670021EECC39215F89978080B77E0.cer File: AD3AEE6D0F6670021EECC39215F89978080B77E0.cer (raw, json) Hash identifier: zKzxd1iA6Gr8xgwYwuwS+UQ9M3NXfG9J8jjhGEGxfc4= Subject key identifier: AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4009DF82220ACB321B2D454143EE6933FDE2BCA7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft caRepository: rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 13 Mar 2025 16:21:38 +0000 Certificate not after: Thu 12 Mar 2026 16:26:38 +0000 Subordinate resources: AS: 268253 IP: 45.236.248.0/22 IP: 2804:4e50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 23:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:09:df:82:22:0a:cb:32:1b:2d:45:41:43:ee:69:33:fd:e2:bc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 13 16:21:38 2025 GMT Not After : Mar 12 16:26:38 2026 GMT Subject: CN=AD3AEE6D0F6670021EECC39215F89978080B77E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:fd:b1:42:e3:46:b2:80:f3:e3:a1:d6:fc: 37:79:9a:ad:35:53:f5:ad:da:27:29:68:9a:cf:19: 9c:20:94:d6:81:7f:b2:25:c3:52:6e:9b:e2:8b:8b: f4:68:98:79:e3:5c:66:b1:22:15:a2:71:10:68:db: 35:7f:b0:78:db:6b:81:5c:e9:a5:54:0e:2f:51:c4: 9b:e5:5b:13:7c:36:eb:13:dc:31:d7:b0:e7:73:18: 16:6e:93:df:4c:4d:4a:13:b1:be:fc:e4:3f:5f:d6: d8:f1:92:e0:27:ff:48:cc:64:18:8f:3a:bf:e1:d9: 02:f3:b7:e9:e3:b0:6e:a5:c1:83:dd:d1:88:b7:0a: 09:9e:de:46:32:2b:f2:b6:bb:6e:85:e1:2d:d0:cf: d4:f6:9d:90:04:dd:c3:f4:98:0a:f8:e7:2a:cb:65: b5:51:a5:c6:a7:59:49:8c:2c:29:a0:87:b5:3a:8c: fc:75:3f:49:f9:39:c6:19:72:e7:b6:08:6f:ce:2b: e3:5a:df:85:8c:4c:3f:8b:07:a6:97:83:81:ba:a6: c2:93:69:f7:96:9c:6b:34:ad:cc:9a:e8:c7:1c:e3: 71:a5:77:21:2a:17:2a:bc:14:e7:d1:1b:21:ba:48: 29:01:f9:15:b0:b7:a2:30:d5:43:0c:82:5a:41:68: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:3A:EE:6D:0F:66:70:02:1E:EC:C3:92:15:F8:99:78:08:0B:77:E0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EBHrjzAxHoFrHYDVxYpezvBfjYgHS4WFSpkfDf83YGpo/0/AD3AEE6D0F6670021EECC39215F89978080B77E0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.248.0/22 IPv6: 2804:4e50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268253 Signature Algorithm: sha256WithRSAEncryption 6f:b9:47:1c:58:35:87:12:c1:23:1f:14:b7:63:1f:3e:68:c5: 68:d0:8d:ec:65:47:22:ee:f0:ac:51:d0:45:79:08:96:4d:21: a1:1e:6d:4f:77:de:9e:12:bc:d0:a9:77:99:3c:97:81:05:14: 7c:81:4d:ba:e8:6a:4e:04:32:6c:69:2d:c8:db:76:67:cb:9c: 77:dd:d0:bd:2f:68:b6:c5:68:77:59:08:f9:dc:9f:b5:93:e2: c2:6a:ba:8a:7f:56:2a:c4:f0:7f:e3:ea:a2:a6:01:fe:3c:85: c3:6a:d9:1e:d8:bd:91:35:78:74:26:55:8f:e1:aa:07:fe:6a: cf:7d:95:d2:a1:db:b2:8d:70:c1:48:0e:e6:f3:6b:76:d7:59: 00:31:4c:85:b3:94:9e:8e:d9:23:19:90:c7:1c:c6:f1:bd:9b: ba:da:91:3a:51:46:da:c6:38:3f:99:ba:c0:36:3f:23:05:61: 22:dc:fa:81:04:08:20:2b:d2:6a:8e:ce:19:8b:b6:8c:21:41: cc:8d:e1:cf:13:6b:a1:3b:0d:2b:cc:79:a7:c3:20:5f:d6:fb: 8a:5f:7e:69:bd:bd:6d:ef:79:f9:9a:50:2c:30:e9:fe:95:61: 7f:ad:45:04:9e:35:74:d1:49:2e:9a:3b:26:fe:52:84:d7:66: 4e:92:0d:99 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQAnfgiIKyzIbLUVBQ+5pM/3ivKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTMxNjIxMzhaFw0yNjAzMTIxNjI2MzhaMDMxMTAvBgNV BAMTKEFEM0FFRTZEMEY2NjcwMDIxRUVDQzM5MjE1Rjg5OTc4MDgwQjc3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4v2xQuNGsoDz46HW/Dd5mq01 U/Wt2icpaJrPGZwglNaBf7Ilw1Jum+KLi/RomHnjXGaxIhWicRBo2zV/sHjba4Fc 6aVUDi9RxJvlWxN8NusT3DHXsOdzGBZuk99MTUoTsb785D9f1tjxkuAn/0jMZBiP Or/h2QLzt+njsG6lwYPd0Yi3Cgme3kYyK/K2u26F4S3Qz9T2nZAE3cP0mAr45yrL ZbVRpcanWUmMLCmgh7U6jPx1P0n5OcYZcue2CG/OK+Na34WMTD+LB6aXg4G6psKT afeWnGs0rcya6Mcc43GldyEqFyq8FOfRGyG6SCkB+RWwt6Iw1UMMglpBaM21AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStOu5tD2ZwAh7s w5IV+Jl4CAt34DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUJI cmp6QXhIb0ZySFlEVnhZcGV6dkJmallnSFM0V0ZTcGtmRGY4M1lHcG8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VC SHJqekF4SG9GckhZRFZ4WXBlenZCZmpZZ0hTNFdGU3BrZkRmODNZR3BvLzAvQUQz QUVFNkQwRjY2NzAwMjFFRUNDMzkyMTVGODk5NzgwODBCNzdFMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLez4MA0EAgACMAcDBQAoBE5QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX3TANBgkqhkiG9w0BAQsFAAOCAQEAb7lHHFg1hxLBIx8U t2MfPmjFaNCN7GVHIu7wrFHQRXkIlk0hoR5tT3fenhK80Kl3mTyXgQUUfIFNuuhq TgQybGktyNt2Z8ucd93QvS9otsVod1kI+dyftZPiwmq6in9WKsTwf+PqoqYB/jyF w2rZHti9kTV4dCZVj+GqB/5qz32V0qHbso1wwUgO5vNrdtdZADFMhbOUno7ZIxmQ xxzG8b2butqROlFG2sY4P5m6wDY/IwVhItz6gQQIICvSao7OGYu2jCFBzI3hzxNr oTsNK8x5p8MgX9b7il9+ab29be95+ZpQLDDp/pVhf61FBJ41dNFJLpo7Jv5ShNdm TpINmQ== -----END CERTIFICATE-----Generated at Sat Apr 5 00:37:48 2025 by rpki-client