$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer File: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer (raw, json) Hash identifier: rHkKcN0bD5V9EbBvOCLW6Th/aS0TK6DmTabZnEyfVzQ= Subject key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4F1A8F19B624FA2339923DFD267B117E59551E26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft caRepository: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 18:41:10 +0000 Certificate not after: Fri 06 Mar 2026 18:46:10 +0000 Subordinate resources: AS: 273366 IP: 2804:8d94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1a:8f:19:b6:24:fa:23:39:92:3d:fd:26:7b:11:7e:59:55:1e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 18:41:10 2025 GMT Not After : Mar 6 18:46:10 2026 GMT Subject: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:80:f2:31:0d:b3:8a:6f:47:7a:5a:2e:27:7b: e9:fe:2e:db:24:88:4a:ae:96:75:ee:0c:1d:4f:ff: 89:c2:5a:7a:28:4c:2b:97:ff:d2:b6:b6:d7:ea:61: 05:2d:20:83:ef:e5:80:cf:28:ef:bd:fe:95:b2:1e: c7:00:1a:44:43:77:1b:8f:d9:eb:c5:e2:68:c7:4e: 6d:fb:6c:6f:a7:ec:f2:35:cd:2f:bd:30:4d:d1:06: 61:be:07:79:3e:86:6c:81:eb:31:71:af:8b:20:34: f0:93:43:35:cb:5c:9b:37:e2:ce:97:61:10:07:c6: b3:71:b4:5c:38:e4:e7:1e:84:6c:71:78:f8:f0:9f: c9:21:9c:1d:65:af:da:ae:cf:92:10:c9:0e:29:c2: 30:3b:1f:2e:ec:4b:8f:8a:55:2c:90:56:a8:3e:31: f0:8f:97:54:17:68:c6:11:58:3e:b0:b3:b9:65:34: 43:df:31:e4:3d:89:4a:93:b4:bf:9f:7e:4b:48:e9: 2f:0b:ba:95:23:47:62:4b:35:f4:5a:0c:74:93:b5: 7b:17:f7:da:f6:7e:b4:a4:bd:f2:d3:68:fc:e7:65: 53:43:6d:bc:47:13:9f:04:60:94:df:43:fd:52:d7: b4:8d:a5:6b:54:12:8d:67:57:0f:6a:c1:80:11:70: bf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8d94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273366 Signature Algorithm: sha256WithRSAEncryption d4:24:dd:61:28:59:bd:ae:f4:29:00:2a:09:d0:ea:52:0d:e3: 52:7c:ea:de:f9:2e:c5:6a:69:a2:c1:a4:be:d6:b8:65:63:19: 07:a1:74:76:1e:37:b8:96:9f:71:58:ec:9b:c5:30:2a:d7:19: 6b:c9:0a:f2:b3:72:a5:07:42:c2:91:ae:ec:e6:ae:64:af:4a: 36:a5:cf:3a:85:2a:7d:8f:ec:84:be:bd:20:fc:5d:ad:8d:3a: b6:9f:df:1c:d2:fc:5d:45:84:e8:36:0d:ac:18:2a:0a:62:11: 50:35:2c:ea:ae:db:93:17:02:15:99:d5:a6:a5:6e:83:56:18: f3:7e:be:39:bc:5d:da:69:a0:92:13:57:54:be:16:81:e3:24: 38:66:40:90:36:1a:a3:64:54:9d:ee:57:5e:d9:4d:ae:d2:c5: 50:01:05:9d:c9:8f:99:4b:e0:a9:1c:c4:db:0d:9a:6b:e4:1f: a3:16:04:e2:30:5d:9f:29:f6:3b:70:31:18:05:a3:3e:14:63: 07:10:62:f1:0e:58:fe:0b:52:72:bb:a5:d6:b1:2c:41:2f:7e: f0:ac:45:0c:de:62:6c:5b:b9:6e:9d:83:f1:ca:53:8a:a1:8c: b2:75:d7:9b:4c:1c:d0:c7:b3:de:07:e1:56:e5:2d:96:c1:a4: a4:b1:1c:38 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUTxqPGbYk+iM5kj39JnsRfllVHiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxODQxMTBaFw0yNjAzMDYxODQ2MTBaMDMxMTAvBgNV BAMTKEMyRjg0QjI5MzRBMjRGNkNGREJFQzMxMjQ0QjNGQTBDN0E4NTJCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwgPIxDbOKb0d6Wi4ne+n+Ltsk iEqulnXuDB1P/4nCWnooTCuX/9K2ttfqYQUtIIPv5YDPKO+9/pWyHscAGkRDdxuP 2evF4mjHTm37bG+n7PI1zS+9ME3RBmG+B3k+hmyB6zFxr4sgNPCTQzXLXJs34s6X YRAHxrNxtFw45OcehGxxePjwn8khnB1lr9quz5IQyQ4pwjA7Hy7sS4+KVSyQVqg+ MfCPl1QXaMYRWD6ws7llNEPfMeQ9iUqTtL+ffktI6S8LupUjR2JLNfRaDHSTtXsX 99r2frSkvfLTaPznZVNDbbxHE58EYJTfQ/1S17SNpWtUEo1nVw9qwYARcL/XAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTC+EspNKJPbP2+ wxJEs/oMeoUr+zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXB4 UkptOERXR0FjNWlxQ295c2VtV0VwY0RIY0Zjd0h5aTh4NTR2YnhZQjUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVw eFJKbThEV0dBYzVpcUNveXNlbVdFcGNESGNGY3dIeWk4eDU0dmJ4WUI1LzEvQzJG ODRCMjkzNEEyNEY2Q0ZEQkVDMzEyNDRCM0ZBMEM3QTg1MkJGQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASNlDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME K9YwDQYJKoZIhvcNAQELBQADggEBANQk3WEoWb2u9CkAKgnQ6lIN41J86t75LsVq aaLBpL7WuGVjGQehdHYeN7iWn3FY7JvFMCrXGWvJCvKzcqUHQsKRruzmrmSvSjal zzqFKn2P7IS+vSD8Xa2NOraf3xzS/F1FhOg2DawYKgpiEVA1LOqu25MXAhWZ1aal boNWGPN+vjm8XdppoJITV1S+FoHjJDhmQJA2GqNkVJ3uV17ZTa7SxVABBZ3Jj5lL 4KkcxNsNmmvkH6MWBOIwXZ8p9jtwMRgFoz4UYwcQYvEOWP4LUnK7pdaxLEEvfvCs RQzeYmxbuW6dg/HKU4qhjLJ115tMHNDHs94H4VblLZbBpKSxHDg= -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:26 2025 by rpki-client