$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer File: C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.cer (raw, json) Hash identifier: 0h/hdOS2C5DEiwwuhvu7j/B6qPe5ms0OcCvuD6ST0Wk= Subject key identifier: C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6940596E916C1054EBA1A6985A74077645E871F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft caRepository: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Feb 2025 17:28:29 +0000 Certificate not after: Mon 09 Feb 2026 17:33:29 +0000 Subordinate resources: AS: 264169 IP: 45.189.168.0/22 IP: 138.94.200.0/22 IP: 2804:238c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:40:59:6e:91:6c:10:54:eb:a1:a6:98:5a:74:07:76:45:e8:71:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 10 17:28:29 2025 GMT Not After : Feb 9 17:33:29 2026 GMT Subject: CN=C48A7C4E64B4D62C3EEE7B621AF0A31B38755240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:0d:06:44:4d:5f:e2:e7:20:eb:aa:85:b1: f6:3d:d5:03:9f:79:b0:eb:b3:c8:5f:9b:44:f7:1d: e1:eb:4e:73:ff:d8:53:ac:18:af:2b:72:26:8c:3c: d7:f3:e0:5a:cc:de:69:d2:1f:84:c4:b6:9d:43:65: 2b:be:1a:57:a2:ea:83:ac:e1:c7:8b:b6:88:59:0d: 67:7a:37:9f:fc:af:2c:b8:3e:21:9f:ff:89:64:a5: 0f:d5:25:7d:10:c8:d7:49:da:31:56:91:29:0f:77: f8:b1:be:fb:0e:69:2d:2d:62:d1:c9:d4:dd:00:b0: fa:18:b2:66:23:51:52:a0:cb:c5:be:55:57:57:41: f6:11:bc:e8:67:ba:04:8a:28:66:2a:43:3a:f9:61: 01:4d:e3:58:b0:2d:30:78:d2:5a:a8:9b:21:a8:e8: fb:2b:0f:0f:9e:f1:7c:ab:ee:0d:a9:4e:b6:2b:1a: bb:ad:e4:e7:42:df:00:b3:41:63:4d:7b:66:d4:75: 4b:43:28:ff:db:5c:c4:69:11:60:50:b2:d5:90:d1: a0:32:62:0d:68:dd:ac:99:a5:b6:67:f9:fe:2f:1e: bf:03:bc:d9:d4:70:18:ca:b4:b1:03:ac:f8:8b:de: 03:c2:c3:1a:8f:f4:29:ac:0c:5f:28:0e:c7:cd:0a: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:8A:7C:4E:64:B4:D6:2C:3E:EE:7B:62:1A:F0:A3:1B:38:75:52:40 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/C48A7C4E64B4D62C3EEE7B621AF0A31B38755240.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.168.0/22 138.94.200.0/22 IPv6: 2804:238c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264169 Signature Algorithm: sha256WithRSAEncryption 69:89:d6:f8:9d:61:02:41:4e:73:1b:f6:c8:2c:eb:ba:27:85: 1a:0c:4b:4f:9d:16:38:f7:ff:c4:6d:e5:fb:5c:77:00:36:73: 29:ae:be:4d:3c:3d:3c:47:fb:bd:db:8c:f7:55:f1:cb:7e:af: 3f:95:25:2f:c1:91:90:87:2c:47:d8:dd:8b:7e:92:1c:9f:f9: 6e:72:d6:e8:cd:a1:11:06:56:fd:e0:67:67:53:21:4b:15:ab: 74:01:f5:60:c0:cf:9b:70:79:40:1e:1d:36:a0:30:dc:3e:f7: da:42:09:09:6e:23:a5:96:d2:f6:54:c0:49:5d:86:7b:c9:df: 8e:d3:a1:44:54:54:fb:62:a2:a7:e8:fd:fa:e9:c2:4d:56:cd: 30:cf:72:50:56:92:59:72:3c:cb:d6:ea:1e:a0:fe:e8:de:1e: 9e:8e:ac:95:27:02:4f:8f:b7:37:09:dc:34:5e:76:95:51:64: d9:0b:95:fe:3b:0b:34:6c:8b:af:0f:f6:57:ca:a3:3a:35:ae: 22:47:d0:43:d7:74:94:74:c8:7c:84:06:84:b0:50:8f:ea:58: 0d:34:6c:16:db:10:7a:ca:9e:97:bd:ee:8d:2f:dd:6d:c9:a3: 19:e3:51:40:54:c3:b5:bb:22:71:55:12:c2:72:76:08:ba:84: 56:c6:dc:09 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUaUBZbpFsEFTroaaYWnQHdkXocfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTAxNzI4MjlaFw0yNjAyMDkxNzMzMjlaMDMxMTAvBgNV BAMTKEM0OEE3QzRFNjRCNEQ2MkMzRUVFN0I2MjFBRjBBMzFCMzg3NTUyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/w0GRE1f4ucg66qFsfY91QOf ebDrs8hfm0T3HeHrTnP/2FOsGK8rciaMPNfz4FrM3mnSH4TEtp1DZSu+Glei6oOs 4ceLtohZDWd6N5/8ryy4PiGf/4lkpQ/VJX0QyNdJ2jFWkSkPd/ixvvsOaS0tYtHJ 1N0AsPoYsmYjUVKgy8W+VVdXQfYRvOhnugSKKGYqQzr5YQFN41iwLTB40lqomyGo 6PsrDw+e8Xyr7g2pTrYrGrut5OdC3wCzQWNNe2bUdUtDKP/bXMRpEWBQstWQ0aAy Yg1o3ayZpbZn+f4vHr8DvNnUcBjKtLEDrPiL3gPCwxqP9CmsDF8oDsfNCqGnAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEinxOZLTWLD7u e2Ia8KMbOHVSQDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEpz blBtVnFnZHpjODJYb1ZjWHY0ZlRLZjlSUWl6ZER6U1BlcmNITVhuWWgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhK c25QbVZxZ2R6YzgyWG9WY1h2NGZUS2Y5UlFpemREelNQZXJjSE1YblloLzAvQzQ4 QTdDNEU2NEI0RDYyQzNFRUU3QjYyMUFGMEEzMUIzODc1NTI0MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLb2oAwQCil7IMA0EAgACMAcDBQAoBCOMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQH6TANBgkqhkiG9w0BAQsFAAOCAQEAaYnW+J1h AkFOcxv2yCzruieFGgxLT50WOPf/xG3l+1x3ADZzKa6+TTw9PEf7vduM91Xxy36v P5UlL8GRkIcsR9jdi36SHJ/5bnLW6M2hEQZW/eBnZ1MhSxWrdAH1YMDPm3B5QB4d NqAw3D732kIJCW4jpZbS9lTASV2Ge8nfjtOhRFRU+2Kip+j9+unCTVbNMM9yUFaS WXI8y9bqHqD+6N4eno6slScCT4+3NwncNF52lVFk2QuV/jsLNGyLrw/2V8qjOjWu IkfQQ9d0lHTIfIQGhLBQj+pYDTRsFtsQesqel73ujS/dbcmjGeNRQFTDtbsicVUS wnJ2CLqEVsbcCQ== -----END CERTIFICATE-----Generated at Thu Feb 20 01:26:09 2025 by rpki-client