$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer File: C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.cer (raw, json) Hash identifier: 3pFPhZsMSDegtPVbT1hs4QY7HNO8Ir3oUcmeLOvtrgY= Subject key identifier: C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F0156AC24B47F9841FDFCA480792FED39BDF9F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft caRepository: rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 08:20:12 +0000 Certificate not after: Fri 06 Mar 2026 08:25:12 +0000 Subordinate resources: AS: 266267 IP: 45.65.192.0/22 IP: 2804:3d50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 05:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:01:56:ac:24:b4:7f:98:41:fd:fc:a4:80:79:2f:ed:39:bd:f9:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 08:20:12 2025 GMT Not After : Mar 6 08:25:12 2026 GMT Subject: CN=C9DC9B21AB6B082C1ADEA13F07394606D7D42C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:32:35:e3:18:e4:85:d0:da:8f:46:be:fc: 68:4e:c9:1d:55:d7:0e:2b:e5:86:c6:5e:91:cc:6b: 97:42:c4:58:5f:c7:ad:c7:fe:93:71:17:57:8c:2a: 00:08:84:d7:cf:96:68:9f:8c:1a:dc:b6:e3:74:1b: c7:c7:de:4f:85:75:f8:04:c4:eb:2d:38:2b:dd:da: 91:55:cf:86:6a:2f:3c:e3:cf:e4:8a:87:38:67:74: bf:28:a5:bd:4c:f0:c6:43:f5:34:f4:84:63:a6:10: 8d:c5:d9:d0:25:92:2c:cf:24:59:24:fe:c2:5b:ff: 94:76:d4:01:73:04:99:ee:ee:76:58:4f:c6:24:b8: 9a:b4:15:01:4f:89:5c:fe:97:f8:c3:97:1c:28:31: 83:3c:d2:e9:88:b8:a1:7e:b1:a2:5c:07:e2:77:39: e3:88:4d:6d:20:7b:75:09:4f:0b:a5:89:75:75:4e: 4f:ab:13:30:30:7a:19:6f:91:1c:84:ff:fa:dd:29: c2:e0:98:90:52:49:3b:53:ef:28:ad:ea:cd:7a:43: 31:a2:02:a3:52:02:44:4e:a6:a4:cc:84:6e:bc:b4: 47:b8:7c:fd:1e:ac:5b:97:d0:9e:e9:11:fc:a7:7c: 58:b9:a0:b3:df:62:11:a7:b6:05:6b:ec:11:3f:69: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:DC:9B:21:AB:6B:08:2C:1A:DE:A1:3F:07:39:46:06:D7:D4:2C:38 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F7UrDDXgg7RNV6ZDrRxHXWCJwLuHUfjWai6kWWQi5uqT/1/C9DC9B21AB6B082C1ADEA13F07394606D7D42C38.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.192.0/22 IPv6: 2804:3d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266267 Signature Algorithm: sha256WithRSAEncryption 93:06:73:8b:40:81:b6:83:62:3b:4e:81:9a:77:80:d2:87:43: ad:b1:8a:1b:ca:e4:fd:96:6e:dd:1d:d6:f3:48:d5:ca:dc:9a: 2d:93:d8:3a:5a:02:6d:24:96:c3:0d:f7:2c:9e:ed:85:69:d8: 38:9c:fc:7d:0e:c9:2a:d5:d4:b7:fa:fb:36:bc:ab:d7:ca:bb: 71:92:e8:8c:25:dc:21:ad:66:28:f7:1f:9e:81:c5:7c:3c:d4: 0e:87:e7:83:75:6c:26:4b:40:88:55:73:97:45:ce:99:45:98: db:d7:09:9d:14:9d:c9:f1:5a:b0:f5:74:d3:bd:f4:42:db:43: c3:ab:c8:a5:8b:b2:81:61:74:96:11:5a:ab:88:4f:52:e3:25: 3b:83:17:fe:26:f4:4a:18:86:30:1e:8f:55:aa:6d:90:ed:44: e4:24:2e:7a:43:45:79:ad:6c:04:e8:91:d6:3a:74:ef:bd:ee: 37:d6:ed:67:89:a9:cd:f9:67:47:26:2b:4c:f4:a3:8c:c2:9e: de:5f:d8:4a:8a:73:80:7f:99:dc:ed:06:b2:64:5a:04:f1:cc: b1:80:db:37:4a:e8:ad:bf:c1:c1:f7:83:71:7e:08:51:36:23: 94:03:12:27:9c:50:a4:20:7e:96:58:6a:8b:d5:98:e9:11:83: 09:1b:d8:45 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHwFWrCS0f5hB/fykgHkv7Tm9+fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwODIwMTJaFw0yNjAzMDYwODI1MTJaMDMxMTAvBgNV BAMTKEM5REM5QjIxQUI2QjA4MkMxQURFQTEzRjA3Mzk0NjA2RDdENDJDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7DI14xjkhdDaj0a+/GhOyR1V 1w4r5YbGXpHMa5dCxFhfx63H/pNxF1eMKgAIhNfPlmifjBrctuN0G8fH3k+FdfgE xOstOCvd2pFVz4ZqLzzjz+SKhzhndL8opb1M8MZD9TT0hGOmEI3F2dAlkizPJFkk /sJb/5R21AFzBJnu7nZYT8YkuJq0FQFPiVz+l/jDlxwoMYM80umIuKF+saJcB+J3 OeOITW0ge3UJTwuliXV1Tk+rEzAwehlvkRyE//rdKcLgmJBSSTtT7yit6s16QzGi AqNSAkROpqTMhG68tEe4fP0erFuX0J7pEfynfFi5oLPfYhGntgVr7BE/aRXVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTJ3Jshq2sILBre oT8HOUYG19QsODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjdV ckREWGdnN1JOVjZaRHJSeEhYV0NKd0x1SFVmaldhaTZrV1dRaTV1cVQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y3 VXJERFhnZzdSTlY2WkRyUnhIWFdDSndMdUhVZmpXYWk2a1dXUWk1dXFULzEvQzlE QzlCMjFBQjZCMDgyQzFBREVBMTNGMDczOTQ2MDZEN0Q0MkMzOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUHAMA0EAgACMAcDBQAoBD1QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQGzANBgkqhkiG9w0BAQsFAAOCAQEAkwZzi0CBtoNiO06B mneA0odDrbGKG8rk/ZZu3R3W80jVytyaLZPYOloCbSSWww33LJ7thWnYOJz8fQ7J KtXUt/r7Nryr18q7cZLojCXcIa1mKPcfnoHFfDzUDofng3VsJktAiFVzl0XOmUWY 29cJnRSdyfFasPV00730QttDw6vIpYuygWF0lhFaq4hPUuMlO4MX/ib0ShiGMB6P VaptkO1E5CQuekNFea1sBOiR1jp0773uN9btZ4mpzflnRyYrTPSjjMKe3l/YSopz gH+Z3O0GsmRaBPHMsYDbN0rorb/BwfeDcX4IUTYjlAMSJ5xQpCB+llhqi9WY6RGD CRvYRQ== -----END CERTIFICATE-----Generated at Sat Apr 5 07:06:13 2025 by rpki-client