$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C017887352A2924D60F38A3D4763E5B9C86D1BB5.cer File: C017887352A2924D60F38A3D4763E5B9C86D1BB5.cer (raw, json) Hash identifier: 7laM0+qa3shANHIbkH7afXr3jVca1eIOZJg9wd/V5gw= Subject key identifier: C0:17:88:73:52:A2:92:4D:60:F3:8A:3D:47:63:E5:B9:C8:6D:1B:B5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0511F5325145489C281D4638F7421F9053A51452 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/C017887352A2924D60F38A3D4763E5B9C86D1BB5.mft caRepository: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 Jan 2025 16:52:51 +0000 Certificate not after: Mon 26 Jan 2026 16:57:51 +0000 Subordinate resources: AS: 264999 IP: 170.84.76.0/22 IP: 2804:3130::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 05:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:11:f5:32:51:45:48:9c:28:1d:46:38:f7:42:1f:90:53:a5:14:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 27 16:52:51 2025 GMT Not After : Jan 26 16:57:51 2026 GMT Subject: CN=C017887352A2924D60F38A3D4763E5B9C86D1BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:ed:fd:6c:03:2c:2a:f2:3e:16:7c:1f:b4: 5f:bb:6f:0c:70:a9:23:76:cc:23:fe:18:7c:e0:2a: 1f:1e:32:58:6a:a0:9d:8f:55:ef:79:17:1d:43:e9: 80:2f:9a:23:28:ce:ff:32:42:00:87:9c:8c:f4:15: 27:1a:fa:6b:4a:b6:50:da:2b:fc:9f:41:42:a3:4c: 2b:b1:e6:ca:9b:35:36:39:34:25:3b:a1:a5:3d:7e: 93:d7:61:90:1e:58:d6:11:df:13:53:87:eb:eb:37: 31:f6:dc:02:5c:58:ef:77:fc:80:48:e1:4a:66:f3: cc:96:e5:c3:b1:88:40:11:aa:cb:a5:62:20:a4:1c: 50:87:b6:72:17:38:00:b1:72:f1:60:f6:bc:93:c3: cf:f4:4b:6d:69:ac:2d:d9:f5:ae:8e:9a:ce:87:f4: fd:c9:82:2e:44:9c:b6:b4:7c:9a:40:db:11:0f:55: 47:ed:10:db:c6:64:51:98:02:89:52:d9:52:d6:c8: e9:01:87:f7:ea:33:5b:5e:2d:ce:2e:b1:f1:86:62: dc:db:42:3c:7f:0b:7d:a2:c9:37:ce:65:1c:20:42: 2c:0b:d1:34:6e:88:e1:dc:c4:54:ce:2c:49:0b:b0: 73:54:ad:f1:0b:fe:94:b5:2c:6a:f5:9b:04:ce:07: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:17:88:73:52:A2:92:4D:60:F3:8A:3D:47:63:E5:B9:C8:6D:1B:B5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/C017887352A2924D60F38A3D4763E5B9C86D1BB5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.76.0/22 IPv6: 2804:3130::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264999 Signature Algorithm: sha256WithRSAEncryption 60:46:8b:74:6f:f4:d4:8e:5e:cd:1f:d8:bd:fc:3a:1f:5f:67: 5a:27:85:aa:7a:98:93:32:4a:94:0a:ee:4a:19:50:61:ad:18: 82:2f:a6:dc:df:94:6d:5c:5c:2e:23:fa:bb:23:1d:69:16:0c: 8c:df:8c:69:89:77:d8:95:73:d1:48:ee:9c:bb:40:6f:7c:db: bb:4e:ee:7d:d2:6c:77:70:88:e1:16:45:ed:62:4d:a4:a6:ae: c4:ce:5b:66:e0:00:cb:b4:8d:e9:42:96:71:93:53:7b:7d:92: 5e:23:ee:ea:e8:d5:12:ed:df:b2:53:17:f9:a8:e5:0c:ba:42: 77:36:ea:1c:ec:5d:c4:6f:17:17:5b:0b:9a:cb:22:c0:c9:40: 50:bc:2d:9f:db:b1:50:5a:b8:37:98:a2:cb:60:44:68:05:96: 45:08:2c:11:5c:c2:d9:2f:24:ad:7c:4a:a5:87:20:29:60:1a: f9:de:9d:e4:e0:dc:f7:06:53:e7:d5:d2:06:74:fd:2b:ed:5d: 3a:ad:be:57:3f:6d:8e:59:a7:07:e3:b2:f1:6a:4c:63:77:ee: 3e:d3:fe:ca:15:59:46:d1:7c:05:1d:27:a6:50:22:f4:88:72: 93:bf:95:f0:d2:3f:ad:e2:27:d2:22:98:84:8c:84:d5:fa:ce: 1c:2e:69:b6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBRH1MlFFSJwoHUY490IfkFOlFFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjcxNjUyNTFaFw0yNjAxMjYxNjU3NTFaMDMxMTAvBgNV BAMTKEMwMTc4ODczNTJBMjkyNEQ2MEYzOEEzRDQ3NjNFNUI5Qzg2RDFCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjO39bAMsKvI+FnwftF+7bwxw qSN2zCP+GHzgKh8eMlhqoJ2PVe95Fx1D6YAvmiMozv8yQgCHnIz0FSca+mtKtlDa K/yfQUKjTCux5sqbNTY5NCU7oaU9fpPXYZAeWNYR3xNTh+vrNzH23AJcWO93/IBI 4Upm88yW5cOxiEARqsulYiCkHFCHtnIXOACxcvFg9ryTw8/0S21prC3Z9a6Oms6H 9P3Jgi5EnLa0fJpA2xEPVUftENvGZFGYAolS2VLWyOkBh/fqM1teLc4usfGGYtzb Qjx/C32iyTfOZRwgQiwL0TRuiOHcxFTOLEkLsHNUrfEL/pS1LGr1mwTOByk7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAF4hzUqKSTWDz ij1HY+W5yG0btTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWcx amdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZNeE4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vn MWpnSzJFWjV6eG9Hc0ZNWkRrbWVSZW9hYWlZd0VucXg1cndQQVF2TXhOLzAvQzAx Nzg4NzM1MkEyOTI0RDYwRjM4QTNENDc2M0U1QjlDODZEMUJCNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlRMMA0EAgACMAcDBQAoBDEwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLJzANBgkqhkiG9w0BAQsFAAOCAQEAYEaLdG/01I5ezR/Y vfw6H19nWieFqnqYkzJKlAruShlQYa0Ygi+m3N+UbVxcLiP6uyMdaRYMjN+MaYl3 2JVz0UjunLtAb3zbu07ufdJsd3CI4RZF7WJNpKauxM5bZuAAy7SN6UKWcZNTe32S XiPu6ujVEu3fslMX+ajlDLpCdzbqHOxdxG8XF1sLmssiwMlAULwtn9uxUFq4N5ii y2BEaAWWRQgsEVzC2S8krXxKpYcgKWAa+d6d5ODc9wZT59XSBnT9K+1dOq2+Vz9t jlmnB+Oy8WpMY3fuPtP+yhVZRtF8BR0nplAi9Ihyk7+V8NI/reIn0iKYhIyE1frO HC5ptg== -----END CERTIFICATE-----Generated at Sat Apr 5 07:38:47 2025 by rpki-client