$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.cer File: AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.cer (raw, json) Hash identifier: WnAl9mbNdwvVBPMNtk5FHFf2qJsf0yIlKfy3ppAmrBI= Subject key identifier: AF:2F:E0:67:9E:3D:F8:72:1A:DE:EA:98:24:3A:B2:7A:45:65:F9:F5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6034BA144388FA03F35D1BA48CD6990A0C52E017 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft caRepository: rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 23 Jan 2025 14:36:12 +0000 Certificate not after: Thu 22 Jan 2026 14:41:12 +0000 Subordinate resources: AS: 271580 IP: 179.63.60.0/22 IP: 2804:7dc0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:34:ba:14:43:88:fa:03:f3:5d:1b:a4:8c:d6:99:0a:0c:52:e0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 23 14:36:12 2025 GMT Not After : Jan 22 14:41:12 2026 GMT Subject: CN=AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:6d:3d:61:e5:15:45:d8:5d:7a:b7:05:9c: 7b:ec:bf:7b:fe:3d:71:5a:4f:61:aa:87:f0:d5:9f: 03:91:49:d4:d4:f6:9d:40:e4:7d:95:41:d7:93:13: 6e:19:f8:a5:93:6f:61:e7:73:c9:97:2c:88:12:d9: 39:76:a0:d3:36:24:41:8c:08:de:9d:dc:53:0a:de: e2:7c:af:e8:00:01:e5:ff:07:5f:41:f6:ea:dd:cf: 0a:33:f8:af:59:0c:f0:aa:2c:9b:46:65:08:b2:9e: a4:cd:f9:04:ab:c7:5a:2b:2f:0a:d1:6b:c1:72:77: 07:1c:d6:99:24:61:36:60:d4:66:98:71:f7:15:4b: 86:19:49:b3:74:50:73:e3:59:01:68:4c:bc:7c:79: 95:e8:ae:fe:4e:01:b9:c5:e8:8d:fa:70:bf:b0:6f: 3c:62:ed:fc:93:4d:0b:1f:4f:0d:6e:a2:e7:f1:63: 02:b4:b3:cf:55:e1:69:4d:63:3b:a6:f8:2f:33:94: fe:ac:0d:9d:aa:8a:9f:04:32:92:eb:40:15:f0:b0: f9:61:41:09:10:2d:73:16:68:04:71:e5:42:56:b9: 90:d4:eb:dd:de:fe:49:6a:16:e4:93:4c:86:f1:1c: 9b:1b:35:58:a6:4d:47:cb:5a:35:74:bd:60:16:b6: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:2F:E0:67:9E:3D:F8:72:1A:DE:EA:98:24:3A:B2:7A:45:65:F9:F5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/AF2FE0679E3DF8721ADEEA98243AB27A4565F9F5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.63.60.0/22 IPv6: 2804:7dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271580 Signature Algorithm: sha256WithRSAEncryption 06:45:03:9d:90:4f:9c:b8:a7:5a:ef:b1:60:27:cb:ec:bc:51: ea:27:39:32:3e:91:62:d3:b8:83:9f:99:2e:2d:bd:9d:bf:1b: 1c:a7:45:15:46:31:62:e5:43:6e:64:c6:71:30:20:0f:e1:f8: 80:42:a9:6f:22:35:95:d7:9d:0e:46:67:7f:1f:a0:da:57:21: b0:67:6c:7c:1c:d4:a9:e4:0b:43:59:94:4b:b5:18:ed:aa:7e: 80:8a:33:0a:e2:cc:cd:2a:d3:56:6c:66:9a:48:f0:48:72:34: bc:02:b8:f1:79:e3:d2:2d:7c:40:eb:7c:49:e3:0f:5c:da:ea: 41:f2:31:9b:f9:de:c1:9b:3d:07:be:8e:42:b3:29:55:c1:4a: a9:4f:f1:07:b1:6b:3e:29:b3:60:cc:e7:e3:11:1a:1d:b9:f4: ac:7c:cb:df:17:6b:12:eb:0c:61:99:23:4d:11:f7:e0:d4:3b: 04:a9:5c:f3:54:be:c3:7f:93:73:21:b7:fb:62:77:ff:38:11: da:d6:3a:40:0b:d9:c6:83:6e:81:9d:12:83:0c:ec:9a:58:34: b8:e9:99:c6:b0:e9:19:07:b4:9c:01:4d:c0:79:ad:f9:8e:b9: 3c:bf:af:29:e2:01:03:5e:14:ea:27:f8:95:2c:08:de:f8:06: 93:18:70:98 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUYDS6FEOI+gPzXRukjNaZCgxS4BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjMxNDM2MTJaFw0yNjAxMjIxNDQxMTJaMDMxMTAvBgNV BAMTKEFGMkZFMDY3OUUzREY4NzIxQURFRUE5ODI0M0FCMjdBNDU2NUY5RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2W09YeUVRdhdercFnHvsv3v+ PXFaT2Gqh/DVnwORSdTU9p1A5H2VQdeTE24Z+KWTb2Hnc8mXLIgS2Tl2oNM2JEGM CN6d3FMK3uJ8r+gAAeX/B19B9urdzwoz+K9ZDPCqLJtGZQiynqTN+QSrx1orLwrR a8Fydwcc1pkkYTZg1GaYcfcVS4YZSbN0UHPjWQFoTLx8eZXorv5OAbnF6I36cL+w bzxi7fyTTQsfTw1uoufxYwK0s89V4WlNYzum+C8zlP6sDZ2qip8EMpLrQBXwsPlh QQkQLXMWaARx5UJWuZDU693e/klqFuSTTIbxHJsbNVimTUfLWjV0vWAWttULAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvL+Bnnj34chre 6pgkOrJ6RWX59TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0xM VnBZRXdEVlpmRGh5ZHZva2NtdTRtOWVHTVFLcGVkaWFua0NEcmc2RUgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNM TFZwWUV3RFZaZkRoeWR2b2tjbXU0bTllR01RS3BlZGlhbmtDRHJnNkVILzAvQUYy RkUwNjc5RTNERjg3MjFBREVFQTk4MjQzQUIyN0E0NTY1RjlGNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsz88MA0EAgACMAcDBQAoBH3AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQk3DANBgkqhkiG9w0BAQsFAAOCAQEABkUDnZBPnLinWu+x YCfL7LxR6ic5Mj6RYtO4g5+ZLi29nb8bHKdFFUYxYuVDbmTGcTAgD+H4gEKpbyI1 ldedDkZnfx+g2lchsGdsfBzUqeQLQ1mUS7UY7ap+gIozCuLMzSrTVmxmmkjwSHI0 vAK48Xnj0i18QOt8SeMPXNrqQfIxm/newZs9B76OQrMpVcFKqU/xB7FrPimzYMzn 4xEaHbn0rHzL3xdrEusMYZkjTRH34NQ7BKlc81S+w3+TcyG3+2J3/zgR2tY6QAvZ xoNugZ0Sgwzsmlg0uOmZxrDpGQe0nAFNwHmt+Y65PL+vKeIBA14U6if4lSwI3vgG kxhwmA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:28:07 2025 by rpki-client