$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer File: B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.cer (raw, json) Hash identifier: anhqM0eZrTRYf9tzNR16r1CBOyubF6rYNPdYnC98U9s= Subject key identifier: B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D9710E5DB3605AB2D8B003C585FB41867666262 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft caRepository: rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 12:22:50 +0000 Certificate not after: Fri 06 Mar 2026 12:27:50 +0000 Subordinate resources: AS: 272658 IP: 2804:86a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:97:10:e5:db:36:05:ab:2d:8b:00:3c:58:5f:b4:18:67:66:62:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 12:22:50 2025 GMT Not After : Mar 6 12:27:50 2026 GMT Subject: CN=B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:d1:89:d0:ef:d1:8e:ae:c1:52:8f:79:34: b1:74:b2:50:15:03:f7:f4:6e:f0:4e:2c:87:61:13: 71:5d:c5:98:76:bc:96:95:ea:fc:c5:76:80:1f:5b: 70:60:6e:1f:77:b1:84:fb:c6:a6:be:34:ed:e5:10: 05:71:9c:88:2f:38:03:82:45:33:e0:74:7f:72:9f: 63:c3:d4:60:19:c9:9f:72:b1:57:10:a0:e8:ba:9f: e1:d2:30:d2:36:98:41:19:67:fa:93:f2:6d:39:cf: 31:f3:ed:f3:ab:d9:de:61:93:1e:41:f5:e7:bc:11: 89:72:32:70:d6:0e:71:bd:bc:13:85:33:b0:49:5a: bb:1d:3d:d0:2d:69:d6:2b:0b:c8:9f:da:1f:d8:bc: 34:7f:c1:f8:eb:ef:15:81:d2:03:fb:23:49:a0:ae: 57:27:50:22:09:00:45:be:37:2c:55:de:49:fe:e8: 57:fc:62:a7:2a:db:10:19:11:d3:72:f9:88:b2:bc: 1d:1c:38:8a:ba:38:38:11:82:77:70:47:27:6c:1f: 9f:47:be:10:30:a3:b5:41:b3:d6:ba:14:dc:71:ed: b9:10:41:97:bb:23:41:2e:71:12:2c:f3:31:a7:32: 78:58:10:0a:8e:17:4e:67:cc:11:c3:1d:b2:5d:48: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:EF:C8:8C:CA:99:9E:CC:4D:A6:D0:30:45:FF:CE:FF:AF:85:22:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6k2BPqnyyMkf8VynTrqvQUMu8CKpvez19vbeUJ3ggNwv/1/B4EFC88CCA999ECC4DA6D03045FFCEFFAF85221D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:86a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272658 Signature Algorithm: sha256WithRSAEncryption 9d:29:6a:26:ec:d1:ec:70:6e:7f:e4:da:fc:b5:e9:b9:63:0a: 5f:da:7f:f1:93:f8:75:64:a2:b0:ca:0c:2d:0d:a8:e6:7d:e9: 3c:a7:d7:74:05:59:4f:67:66:51:2e:c4:86:e5:98:2e:32:3e: 77:05:05:20:21:ad:a1:14:4c:f2:ad:2b:b4:5e:04:1f:c1:56: 1e:2e:3c:d8:11:ad:9a:93:b1:ad:57:6b:ca:f9:5f:b2:e9:49: 66:47:db:fd:31:da:a6:be:f0:7e:c6:39:66:db:77:28:85:70: f5:2b:f0:b1:cb:9a:d9:37:86:fa:22:05:b7:49:2b:fc:5d:45: bb:8c:76:92:d8:e6:0b:45:46:95:62:35:e9:21:c7:d3:6b:16: 6d:19:d1:71:22:8f:86:3b:a6:30:f6:e7:50:11:0c:8b:f7:a9: 40:88:aa:ae:31:12:14:28:3a:7c:6f:63:93:10:00:7d:8c:ce: ad:e0:3c:78:3b:fd:76:40:f5:e1:70:ca:e2:ee:11:90:2f:8c: e2:07:b1:37:22:d9:6b:60:cf:73:a2:92:ff:8a:4d:29:ad:f1: 2d:f1:0a:1e:69:b9:a2:81:39:6d:20:2e:a0:fe:07:43:bf:e4: 35:38:80:1d:87:66:51:41:bd:0a:00:ff:27:9a:9d:87:aa:31: 27:ad:76:b3 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUPZcQ5ds2BastiwA8WF+0GGdmYmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMjIyNTBaFw0yNjAzMDYxMjI3NTBaMDMxMTAvBgNV BAMTKEI0RUZDODhDQ0E5OTlFQ0M0REE2RDAzMDQ1RkZDRUZGQUY4NTIyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhtGJ0O/Rjq7BUo95NLF0slAV A/f0bvBOLIdhE3FdxZh2vJaV6vzFdoAfW3Bgbh93sYT7xqa+NO3lEAVxnIgvOAOC RTPgdH9yn2PD1GAZyZ9ysVcQoOi6n+HSMNI2mEEZZ/qT8m05zzHz7fOr2d5hkx5B 9ee8EYlyMnDWDnG9vBOFM7BJWrsdPdAtadYrC8if2h/YvDR/wfjr7xWB0gP7I0mg rlcnUCIJAEW+NyxV3kn+6Ff8Yqcq2xAZEdNy+YiyvB0cOIq6ODgRgndwRydsH59H vhAwo7VBs9a6FNxx7bkQQZe7I0EucRIs8zGnMnhYEAqOF05nzBHDHbJdSOZ9AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS078iMypmezE2m 0DBF/87/r4UiHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmsy QlBxbnl5TWtmOFZ5blRycXZRVU11OENLcHZlejE5dmJlVUozZ2dOd3YvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZr MkJQcW55eU1rZjhWeW5UcnF2UVVNdThDS3B2ZXoxOXZiZVVKM2dnTnd2LzEvQjRF RkM4OENDQTk5OUVDQzREQTZEMDMwNDVGRkNFRkZBRjg1MjIxRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASGqDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KRIwDQYJKoZIhvcNAQELBQADggEBAJ0paibs0exwbn/k2vy16bljCl/af/GT+HVk orDKDC0NqOZ96Tyn13QFWU9nZlEuxIblmC4yPncFBSAhraEUTPKtK7ReBB/BVh4u PNgRrZqTsa1Xa8r5X7LpSWZH2/0x2qa+8H7GOWbbdyiFcPUr8LHLmtk3hvoiBbdJ K/xdRbuMdpLY5gtFRpViNekhx9NrFm0Z0XEij4Y7pjD251ARDIv3qUCIqq4xEhQo OnxvY5MQAH2Mzq3gPHg7/XZA9eFwyuLuEZAvjOIHsTci2Wtgz3Oikv+KTSmt8S3x Ch5puaKBOW0gLqD+B0O/5DU4gB2HZlFBvQoA/yeanYeqMSetdrM= -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:09 2025 by rpki-client