$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8227B1004F0E52AEFCA2984DB262B4EED604F8D.cer File: C8227B1004F0E52AEFCA2984DB262B4EED604F8D.cer (raw, json) Hash identifier: 2CSYjhy7M7HN6+GVzJX6WxkS9urPxFPHrlmRQbWinqQ= Subject key identifier: C8:22:7B:10:04:F0:E5:2A:EF:CA:29:84:DB:26:2B:4E:ED:60:4F:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 27896A293EB49763C9F8723ABBC38F4E9E4B9A85 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/C8227B1004F0E52AEFCA2984DB262B4EED604F8D.mft caRepository: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Jan 2025 13:16:11 +0000 Certificate not after: Thu 29 Jan 2026 13:21:11 +0000 Subordinate resources: AS: 262346 IP: 138.97.0.0/22 IP: 143.202.224.0/22 IP: 170.150.100.0/22 IP: 177.125.160.0/21 IP: 177.125.204.0/22 IP: 179.107.56.0/21 IP: 2804:81c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:89:6a:29:3e:b4:97:63:c9:f8:72:3a:bb:c3:8f:4e:9e:4b:9a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 30 13:16:11 2025 GMT Not After : Jan 29 13:21:11 2026 GMT Subject: CN=C8227B1004F0E52AEFCA2984DB262B4EED604F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:41:d7:a6:06:6e:48:b1:bc:16:04:cb:22: 74:06:89:61:8e:92:d0:f0:69:38:76:b1:1f:74:37: db:0d:21:80:ca:50:32:13:70:eb:40:00:50:dd:f2: 42:10:32:ae:96:21:d0:aa:40:26:56:73:22:ac:2e: 48:a0:16:27:c9:b6:e7:55:5a:2c:4f:06:5c:88:fd: d9:b5:0f:71:07:18:a9:30:89:5d:8c:a2:fb:49:d0: 88:b0:5c:65:91:98:b5:af:11:f4:c2:64:b8:c7:cf: a3:1c:99:b4:5a:a9:d8:e7:5f:5a:b5:83:f9:08:9c: 4d:62:c8:d1:55:61:53:1e:8b:af:ad:e7:f5:56:9b: 02:06:3d:f5:d7:5a:f4:40:28:9a:a7:39:48:e5:58: 2a:f5:7f:cf:50:91:21:fe:17:fe:39:88:06:f8:8f: 34:ae:9b:3d:dd:e0:7c:1b:7c:2b:8c:70:7a:69:51: 02:8d:4a:1b:53:47:39:d6:11:91:46:77:fc:92:7e: 9f:1c:b9:aa:02:e2:68:b8:34:db:9e:0d:d1:d4:dd: 09:6c:fb:1b:06:75:99:ce:2b:83:3a:59:95:ee:6d: 65:5d:6e:db:ff:fd:59:20:bd:55:70:7c:a9:b4:8f: 8f:b8:be:cf:c8:2d:fa:17:24:81:30:3d:fc:65:52: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:22:7B:10:04:F0:E5:2A:EF:CA:29:84:DB:26:2B:4E:ED:60:4F:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/C8227B1004F0E52AEFCA2984DB262B4EED604F8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.0.0/22 143.202.224.0/22 170.150.100.0/22 177.125.160.0/21 177.125.204.0/22 179.107.56.0/21 IPv6: 2804:81c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262346 Signature Algorithm: sha256WithRSAEncryption 83:bf:25:a2:be:eb:cf:93:5d:ef:5b:ce:c4:18:7b:6d:be:6c: d9:42:91:71:64:29:39:d7:bc:28:30:1a:e7:c4:fb:c4:7c:28: 60:53:6b:8d:de:76:16:bd:89:f6:21:4c:59:c0:3d:7f:e5:f1: e7:c4:04:be:8b:28:54:df:52:5b:d1:99:cc:ce:7f:c4:b1:af: 69:78:42:56:6f:f6:4f:02:27:c7:cf:a0:0a:bc:a9:1d:7a:15: 5b:af:4a:7a:e8:bb:29:d5:fb:7c:9b:22:be:22:84:ae:09:8c: 10:82:59:54:0b:a1:22:b7:9e:e5:f9:c3:75:15:21:2a:d5:34: 5a:69:82:aa:fb:bf:a5:a1:5d:c3:35:c2:be:b7:72:7e:74:62: 6b:a6:1b:2a:40:55:6b:a8:d6:ee:bb:c9:09:b1:93:23:61:99: 5d:ac:75:a5:7a:30:69:ef:05:ad:2c:e9:f3:4d:0b:bb:af:53: be:f1:ed:ff:72:f1:47:10:e6:02:d0:0b:e9:52:bb:53:ac:44: 50:2c:67:e6:34:39:b5:94:ae:fa:1e:6f:6e:36:6d:92:eb:e8: 1d:5a:b0:01:17:69:70:28:fc:a5:2e:68:b2:0a:c2:01:d4:02: 2e:05:a0:38:a3:08:51:e6:c0:d3:c5:0a:d2:49:5b:c0:f4:e1: c8:97:a8:dc -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUJ4lqKT60l2PJ+HI6u8OPTp5LmoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMzAxMzE2MTFaFw0yNjAxMjkxMzIxMTFaMDMxMTAvBgNV BAMTKEM4MjI3QjEwMDRGMEU1MkFFRkNBMjk4NERCMjYyQjRFRUQ2MDRGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnkHXpgZuSLG8FgTLInQGiWGO ktDwaTh2sR90N9sNIYDKUDITcOtAAFDd8kIQMq6WIdCqQCZWcyKsLkigFifJtudV WixPBlyI/dm1D3EHGKkwiV2MovtJ0IiwXGWRmLWvEfTCZLjHz6McmbRaqdjnX1q1 g/kInE1iyNFVYVMei6+t5/VWmwIGPfXXWvRAKJqnOUjlWCr1f89QkSH+F/45iAb4 jzSumz3d4HwbfCuMcHppUQKNShtTRznWEZFGd/ySfp8cuaoC4mi4NNueDdHU3Qls +xsGdZnOK4M6WZXubWVdbtv//VkgvVVwfKm0j4+4vs/ILfoXJIEwPfxlUmTbAgMB AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIInsQBPDlKu/K KYTbJitO7WBPjTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkU2 QTROQmJrVldIbmZHY0oxUVJVYWN6OE5oZTkyYnE3QmYxR3NodGNxWlAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZF NkE0TkJia1ZXSG5mR2NKMVFSVWFjejhOaGU5MmJxN0JmMUdzaHRjcVpQLzAvQzgy MjdCMTAwNEYwRTUyQUVGQ0EyOTg0REIyNjJCNEVFRDYwNEY4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEH AQH/BD0wOzAqBAIAATAkAwQCimEAAwQCj8rgAwQCqpZkAwQDsX2gAwQCsX3MAwQD s2s4MA0EAgACMAcDBQAoBAgcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAyjAN BgkqhkiG9w0BAQsFAAOCAQEAg78lor7rz5Nd71vOxBh7bb5s2UKRcWQpOde8KDAa 58T7xHwoYFNrjd52Fr2J9iFMWcA9f+Xx58QEvosoVN9SW9GZzM5/xLGvaXhCVm/2 TwInx8+gCrypHXoVW69Keui7KdX7fJsiviKErgmMEIJZVAuhIree5fnDdRUhKtU0 WmmCqvu/paFdwzXCvrdyfnRia6YbKkBVa6jW7rvJCbGTI2GZXax1pXowae8FrSzp 800Lu69TvvHt/3LxRxDmAtAL6VK7U6xEUCxn5jQ5tZSu+h5vbjZtkuvoHVqwARdp cCj8pS5osgrCAdQCLgWgOKMIUebA08UK0klbwPThyJeo3A== -----END CERTIFICATE-----Generated at Wed Feb 19 22:45:29 2025 by rpki-client