$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer File: BCD84CFFDA0533E6587050A943123B0F8858F5DB.cer (raw, json) Hash identifier: lmcX3kQYaHJyNxATOzcxenWxaShMt4gfKLvg/ERXowM= Subject key identifier: BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 65A5775B753F1A06621787F1A2C7BAEC89C557A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft caRepository: rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:01:45 +0000 Certificate not after: Fri 06 Mar 2026 14:06:45 +0000 Subordinate resources: AS: 268020 IP: 45.167.8.0/22 IP: 2804:56bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a5:77:5b:75:3f:1a:06:62:17:87:f1:a2:c7:ba:ec:89:c5:57:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:01:45 2025 GMT Not After : Mar 6 14:06:45 2026 GMT Subject: CN=BCD84CFFDA0533E6587050A943123B0F8858F5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:98:58:db:e4:a2:03:36:d1:c3:80:8d:34: 45:d8:04:15:54:83:f4:be:4e:75:41:5c:ee:a9:9c: 20:c3:28:b3:e3:0d:70:29:6f:2f:90:c2:ea:22:e4: 90:0a:d2:ae:f2:61:fa:38:1e:58:cb:f9:2b:e5:e1: 1b:cb:4c:c7:5a:cc:ff:1a:d4:05:27:4d:4c:f0:ed: 58:8d:64:89:7a:9a:6e:97:de:56:13:93:11:21:ec: 59:96:b3:27:db:f9:16:81:89:fc:53:52:38:4e:cd: 51:01:47:3c:05:87:3e:d4:7f:32:80:e7:9c:3d:b2: db:72:66:2d:13:c6:43:cb:c3:63:2f:59:f3:9f:77: f9:e4:6e:ab:8f:43:ae:3e:74:25:c0:ba:07:83:cb: 05:8a:45:c7:d6:60:7d:c4:f6:d8:d7:4a:a2:20:7c: dc:8c:41:6a:72:cd:37:82:2a:a6:2f:3a:28:f1:56: df:6c:e9:43:7b:0f:75:f7:62:01:72:e0:c2:8e:a2: 4a:ff:0f:e6:b7:38:69:39:03:b8:cb:22:e9:0d:44: fb:76:46:13:04:75:a2:42:3a:30:c4:2b:be:21:ae: fe:46:d9:d3:41:ce:c1:e0:13:65:c1:fd:34:f8:b2: 70:d9:bc:92:7e:b7:84:7b:f6:b0:2c:37:db:44:1f: bf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:D8:4C:FF:DA:05:33:E6:58:70:50:A9:43:12:3B:0F:88:58:F5:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/1/BCD84CFFDA0533E6587050A943123B0F8858F5DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.8.0/22 IPv6: 2804:56bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268020 Signature Algorithm: sha256WithRSAEncryption 32:19:5c:9f:04:bd:43:16:ef:af:bb:97:37:c7:15:1c:09:49: 24:a1:38:fa:41:ba:5f:e6:6e:95:a6:52:af:ba:f1:aa:d5:e8: 24:2b:c6:49:4b:69:49:c3:88:61:45:9d:7b:90:a7:31:08:fa: 79:71:3e:2e:eb:c4:e3:09:26:f1:b0:96:0e:57:08:8b:39:47: 08:33:7b:3a:bd:75:45:af:25:a5:29:35:e3:44:88:40:b3:c8: 2b:f4:f5:93:4d:66:e5:5c:11:aa:8f:b9:f7:a7:32:1f:2f:a8: 2f:78:1f:12:67:77:96:60:05:2a:51:75:df:3f:41:ce:d5:36: 80:05:cc:06:97:0c:4c:5f:af:ef:4d:43:ec:9d:63:a9:42:8d: 0e:f4:b4:a6:5c:f0:c9:bc:24:53:e0:5d:b1:6b:14:13:e4:33: ae:4f:b0:57:15:7f:95:19:ff:86:cd:d0:fa:72:34:3e:23:55: 3c:5e:b3:0a:aa:2a:0e:df:78:dd:3d:59:4d:d2:3a:59:d5:e5: b1:82:e3:55:78:f2:f8:7f:eb:fe:fb:f7:cb:3f:d5:bc:2b:5f: aa:ad:19:2a:1b:eb:92:e4:ea:14:8d:2c:fd:70:f4:6a:b6:dd: f1:c3:10:1f:43:41:26:1e:5f:b7:5d:7c:aa:04:f8:f5:0c:30: e6:30:d3:57 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZaV3W3U/GgZiF4fxose67InFV6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDAxNDVaFw0yNjAzMDYxNDA2NDVaMDMxMTAvBgNV BAMTKEJDRDg0Q0ZGREEwNTMzRTY1ODcwNTBBOTQzMTIzQjBGODg1OEY1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBW5hY2+SiAzbRw4CNNEXYBBVU g/S+TnVBXO6pnCDDKLPjDXApby+Qwuoi5JAK0q7yYfo4HljL+Svl4RvLTMdazP8a 1AUnTUzw7ViNZIl6mm6X3lYTkxEh7FmWsyfb+RaBifxTUjhOzVEBRzwFhz7UfzKA 55w9sttyZi0TxkPLw2MvWfOfd/nkbquPQ64+dCXAugeDywWKRcfWYH3E9tjXSqIg fNyMQWpyzTeCKqYvOijxVt9s6UN7D3X3YgFy4MKOokr/D+a3OGk5A7jLIukNRPt2 RhMEdaJCOjDEK74hrv5G2dNBzsHgE2XB/TT4snDZvJJ+t4R79rAsN9tEH787AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS82Ez/2gUz5lhw UKlDEjsPiFj12zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1JL NFVBbVpyMkUxVGhrcjJLVHF0NHA3d3Z6SGR3alpkZVA4dVRYTmVqV2QvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NS SzRVQW1acjJFMVRoa3IyS1RxdDRwN3d2ekhkd2paZGVQOHVUWE5laldkLzEvQkNE ODRDRkZEQTA1MzNFNjU4NzA1MEE5NDMxMjNCMEY4ODU4RjVEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLacIMA0EAgACMAcDBQAoBFa8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQW9DANBgkqhkiG9w0BAQsFAAOCAQEAMhlcnwS9Qxbvr7uX N8cVHAlJJKE4+kG6X+ZulaZSr7rxqtXoJCvGSUtpScOIYUWde5CnMQj6eXE+LuvE 4wkm8bCWDlcIizlHCDN7Or11Ra8lpSk140SIQLPIK/T1k01m5VwRqo+596cyHy+o L3gfEmd3lmAFKlF13z9BztU2gAXMBpcMTF+v701D7J1jqUKNDvS0plzwybwkU+Bd sWsUE+Qzrk+wVxV/lRn/hs3Q+nI0PiNVPF6zCqoqDt943T1ZTdI6WdXlsYLjVXjy +H/r/vv3yz/VvCtfqq0ZKhvrkuTqFI0s/XD0arbd8cMQH0NBJh5ft118qgT49Qww 5jDTVw== -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:17 2025 by rpki-client