$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer File: B8BF37906635F24C2D247EFC8F28584994678276.cer (raw, json) Hash identifier: Qdm2rc1ohCVICP1UNLBr5IjvDTs2l9kwxcvXRzhlPGU= Subject key identifier: B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6F0517196B951F2A4B9E34650219D4827CA3B432 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft caRepository: rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 11 Mar 2025 17:11:16 +0000 Certificate not after: Tue 10 Mar 2026 17:16:16 +0000 Subordinate resources: AS: 270963 IP: 189.50.60.0/22 IP: 2804:742c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:05:17:19:6b:95:1f:2a:4b:9e:34:65:02:19:d4:82:7c:a3:b4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 11 17:11:16 2025 GMT Not After : Mar 10 17:16:16 2026 GMT Subject: CN=B8BF37906635F24C2D247EFC8F28584994678276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:3f:7b:f8:78:ab:d6:da:52:a2:c8:f8:14: 62:d5:bd:c0:b6:32:bf:03:f5:62:42:a3:dd:78:25: e6:78:6d:89:97:09:09:d4:19:02:34:6b:d5:98:8f: 2c:9f:b2:ed:ad:cd:2e:87:c5:39:0e:af:07:9b:76: 17:3a:05:62:96:01:4c:29:13:27:d0:66:05:e9:82: a8:22:d1:15:68:fb:4b:1a:9c:54:30:e7:13:8f:b0: fd:48:26:c1:a7:8d:a4:fb:b4:4f:02:5f:15:01:c7: 17:db:82:29:c7:73:02:e9:61:67:37:29:44:7e:fa: f0:8e:94:8a:16:f2:b7:58:35:0a:20:c3:69:c5:f4: bd:a8:0f:56:96:fe:0a:ce:97:0b:9f:12:08:04:ea: 54:09:d3:b5:68:4b:7f:a4:23:d3:e7:32:cf:8e:3b: 7a:5f:c4:4c:52:c6:c9:f8:3b:35:5a:b4:c4:f5:1d: 26:14:2e:8e:65:fa:75:a0:8e:97:80:d9:77:4e:18: e0:0d:b5:91:22:8c:6f:e8:fa:9d:ee:c0:46:64:8b: f9:b9:e5:50:c1:58:8a:1a:2e:91:c8:52:5c:9e:05: f0:cb:e6:59:18:4e:9f:07:09:05:9a:ba:9e:8a:2c: 45:da:65:95:1b:03:fd:de:80:8e:d3:2a:4c:6d:1f: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.50.60.0/22 IPv6: 2804:742c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270963 Signature Algorithm: sha256WithRSAEncryption 97:f8:bf:29:b7:f0:47:4b:35:db:7b:69:d7:38:1b:1a:81:80: 6f:6f:70:28:6c:a6:bf:8e:d4:3c:65:ee:22:81:f3:75:04:a1: 03:5d:61:d4:be:38:de:20:62:75:ed:1e:cb:25:78:3c:6c:00: f4:84:30:9f:bc:0b:44:9e:62:e2:97:55:22:9d:33:98:51:9b: eb:33:75:0a:72:fa:f1:03:f6:4e:ed:d7:4a:87:9d:5c:1b:d2: 2a:dd:dd:10:82:11:2c:ee:8c:fc:63:fc:14:4f:19:b0:39:b9: 00:af:e7:14:45:33:48:5a:c0:ad:a7:43:30:a4:32:49:f7:87: 58:95:22:e9:12:d2:af:47:29:ef:31:b1:f1:fb:63:50:7b:26: 94:d4:f2:59:0c:4d:24:2b:46:b7:d2:6a:fa:d0:cb:42:06:94: 69:b9:d1:af:0d:61:ba:64:f9:31:9a:f9:e7:28:4f:60:47:0b: 2c:5b:f3:c0:7c:d6:4d:14:2a:d1:b4:09:3a:47:5f:32:38:2b: 39:39:b5:18:03:36:53:0a:34:9b:c2:5e:f9:34:3a:6f:ae:73: 0b:5a:e4:d2:6d:59:a6:bc:00:bd:f4:3f:24:16:34:3e:70:8b: 9d:7f:ae:d6:bd:ef:da:f9:79:2a:45:e4:53:c3:70:67:6b:b2: 0d:ea:e9:26 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUbwUXGWuVHypLnjRlAhnUgnyjtDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTExNzExMTZaFw0yNjAzMTAxNzE2MTZaMDMxMTAvBgNV BAMTKEI4QkYzNzkwNjYzNUYyNEMyRDI0N0VGQzhGMjg1ODQ5OTQ2NzgyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDT97+Hir1tpSosj4FGLVvcC2 Mr8D9WJCo914JeZ4bYmXCQnUGQI0a9WYjyyfsu2tzS6HxTkOrwebdhc6BWKWAUwp EyfQZgXpgqgi0RVo+0sanFQw5xOPsP1IJsGnjaT7tE8CXxUBxxfbginHcwLpYWc3 KUR++vCOlIoW8rdYNQogw2nF9L2oD1aW/grOlwufEggE6lQJ07VoS3+kI9PnMs+O O3pfxExSxsn4OzVatMT1HSYULo5l+nWgjpeA2XdOGOANtZEijG/o+p3uwEZki/m5 5VDBWIoaLpHIUlyeBfDL5lkYTp8HCQWaup6KLEXaZZUbA/3egI7TKkxtH9HHAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4vzeQZjXyTC0k fvyPKFhJlGeCdjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUpv emRmYnExWVZQUWlmOXMxYmlqNlVRdXYxRjVqRm8xTW4yREJlREVDWXQvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUpv emRmYnExWVZQUWlmOXMxYmlqNlVRdXYxRjVqRm8xTW4yREJlREVDWXQvMi9COEJG Mzc5MDY2MzVGMjRDMkQyNDdFRkM4RjI4NTg0OTk0Njc4Mjc2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK9MjwwDQQCAAIwBwMFACgEdCwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCJzMA0GCSqGSIb3DQEBCwUAA4IBAQCX+L8pt/BHSzXbe2nX OBsagYBvb3AobKa/jtQ8Ze4igfN1BKEDXWHUvjjeIGJ17R7LJXg8bAD0hDCfvAtE nmLil1UinTOYUZvrM3UKcvrxA/ZO7ddKh51cG9Iq3d0QghEs7oz8Y/wUTxmwObkA r+cURTNIWsCtp0MwpDJJ94dYlSLpEtKvRynvMbHx+2NQeyaU1PJZDE0kK0a30mr6 0MtCBpRpudGvDWG6ZPkxmvnnKE9gRwssW/PAfNZNFCrRtAk6R18yOCs5ObUYAzZT CjSbwl75NDpvrnMLWuTSbVmmvAC99D8kFjQ+cIudf67Wve/a+XkqReRTw3Bna7IN 6ukm -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:56 2025 by rpki-client