$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer File: B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer (raw, json) Hash identifier: WUZ32ceehpykTPLqNHc+FNKhbanBMnN/x1ur4jIowW0= Subject key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 14CE012688C5C3EDD0AD20A445FCA598C06C8EEE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft caRepository: rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:54 +0000 Certificate not after: Wed 04 Mar 2026 18:40:54 +0000 Subordinate resources: AS: 28338 IP: 177.87.24.0/22 IP: 189.45.0.0/20 IP: 189.84.224.0/20 IP: 2804:74::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ce:01:26:88:c5:c3:ed:d0:ad:20:a4:45:fc:a5:98:c0:6c:8e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:54 2025 GMT Not After : Mar 4 18:40:54 2026 GMT Subject: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:f3:e2:18:25:76:3e:d1:47:41:3b:2c:76: a5:86:32:00:65:66:5b:28:ba:97:eb:ca:9e:28:01: 04:66:46:01:c8:9d:51:b7:ae:b2:1e:45:46:76:8a: 96:7e:d4:f7:82:60:1a:f5:26:37:4b:1c:69:c1:e7: 93:33:21:59:2d:2f:28:4f:b2:60:09:a1:8d:df:14: 69:84:f6:41:ea:cd:42:11:01:05:d7:73:db:03:d5: 49:8e:b0:43:71:d3:39:82:1f:d1:ae:41:1c:3d:36: f4:0b:dd:fd:dd:80:2f:20:3d:25:f7:73:21:17:fe: 4a:4e:96:70:a2:fe:02:79:7e:9d:78:d1:15:b6:d0: d5:31:a3:fb:50:9a:0c:d0:3b:c4:78:9e:bb:d4:ce: e8:63:f1:22:88:f8:aa:a6:55:68:10:88:a0:2d:bb: 06:a9:b5:84:eb:c7:44:b0:56:43:4d:df:cf:22:27: fd:7c:8b:f7:3f:54:0a:e0:75:a5:d0:fc:c3:ae:04: dc:31:cf:a3:dd:c7:8c:97:20:27:da:3a:6a:b1:22: 80:a3:d6:b1:cf:f0:9a:b3:10:e5:a0:b2:68:19:f1: 59:f1:09:ed:1d:f6:f3:1c:3f:79:11:bd:45:de:9b: 83:f8:2c:b8:5d:e8:cf:f9:f5:bb:c9:3c:f4:77:81: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.24.0/22 189.45.0.0/20 189.84.224.0/20 IPv6: 2804:74::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28338 Signature Algorithm: sha256WithRSAEncryption 90:f1:bd:80:a1:0f:2b:f7:8e:16:8c:b0:34:ff:69:25:71:91: 24:7a:b1:d0:a7:bb:6b:b6:81:74:53:03:4d:e5:51:5a:09:54: 50:51:c7:99:94:d3:97:2b:d1:b6:fa:d7:89:f7:36:cc:84:46: b1:5e:9d:d3:c4:fc:e9:44:10:65:af:d7:e0:2b:98:46:3e:f3: fc:9e:7a:4c:1d:dc:7f:2f:82:e9:a9:2c:ff:bf:43:31:5d:2f: 52:3f:d6:22:a0:42:98:c5:97:8c:71:43:41:d5:1f:e1:b0:36: 44:a7:14:98:b9:26:a1:64:56:e1:7c:03:05:22:e7:8e:30:b1: 7d:8d:5a:ff:06:95:3a:83:54:49:58:94:1d:52:37:ec:33:f6: 96:12:bb:4b:1d:84:bf:6a:02:2d:13:9a:27:c5:8a:60:74:c4: bf:75:9b:5f:57:b0:6f:48:0a:c8:aa:10:71:52:3e:c2:28:00: b5:57:1f:42:07:ed:a1:5b:6b:d2:ef:cf:f3:b4:b9:5a:1e:15: af:3c:e2:e2:23:ac:c0:f2:39:23:73:2a:b6:2e:a0:9a:c7:62: 9a:31:b4:b8:12:1b:58:1f:ec:25:80:8d:39:26:40:a5:e5:2c: aa:d9:3b:56:40:12:b9:88:68:bb:24:2a:8f:21:d9:0b:f0:1a: 29:7f:ee:ec -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUFM4BJojFw+3QrSCkRfylmMBsju4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NTRaFw0yNjAzMDQxODQwNTRaMDMxMTAvBgNV BAMTKEI3RjYyRDU1REM3NTg4NzVCNDlBRENBMEZDRDExNTgwN0IyRjFERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+t/PiGCV2PtFHQTssdqWGMgBl Zlsoupfryp4oAQRmRgHInVG3rrIeRUZ2ipZ+1PeCYBr1JjdLHGnB55MzIVktLyhP smAJoY3fFGmE9kHqzUIRAQXXc9sD1UmOsENx0zmCH9GuQRw9NvQL3f3dgC8gPSX3 cyEX/kpOlnCi/gJ5fp140RW20NUxo/tQmgzQO8R4nrvUzuhj8SKI+KqmVWgQiKAt uwaptYTrx0SwVkNN388iJ/18i/c/VArgdaXQ/MOuBNwxz6Pdx4yXICfaOmqxIoCj 1rHP8JqzEOWgsmgZ8VnxCe0d9vMcP3kRvUXem4P4LLhd6M/59bvJPPR3gfvFAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS39i1V3HWIdbSa 3KD80RWAey8d0TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEJ4 ODhGWGU4bjVSNzQ5cFdncmtBUzNkZXlyNW1keXlmeEJOaVd6NXl2dk0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRC eDg4RlhlOG41Ujc0OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdG NjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCsVcYAwQEvS0AAwQEvVTgMA0EAgACMAcDBQAoBAB0 MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm6yMA0GCSqGSIb3DQEBCwUAA4IBAQCQ 8b2AoQ8r944WjLA0/2klcZEkerHQp7trtoF0UwNN5VFaCVRQUceZlNOXK9G2+teJ 9zbMhEaxXp3TxPzpRBBlr9fgK5hGPvP8nnpMHdx/L4LpqSz/v0MxXS9SP9YioEKY xZeMcUNB1R/hsDZEpxSYuSahZFbhfAMFIueOMLF9jVr/BpU6g1RJWJQdUjfsM/aW ErtLHYS/agItE5onxYpgdMS/dZtfV7BvSArIqhBxUj7CKAC1Vx9CB+2hW2vS78/z tLlaHhWvPOLiI6zA8jkjcyq2LqCax2KaMbS4EhtYH+wlgI05JkCl5Syq2TtWQBK5 iGi7JCqPIdkL8Bopf+7s -----END CERTIFICATE-----Generated at Sat Apr 5 00:03:20 2025 by rpki-client