$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer (raw, json) Hash identifier: ifjakYkl8MYkupt37tvewkYEYe5ixBELOAn5AsuSK2Y= Subject key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 26A15C39D599958AE451C7F78ED97850853BC25C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft caRepository: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 20:59:02 +0000 Certificate not after: Thu 05 Mar 2026 21:04:02 +0000 Subordinate resources: AS: 266360 IP: 170.239.252.0/22 IP: 2804:36a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 16:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a1:5c:39:d5:99:95:8a:e4:51:c7:f7:8e:d9:78:50:85:3b:c2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 20:59:02 2025 GMT Not After : Mar 5 21:04:02 2026 GMT Subject: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:45:4a:39:e8:d0:c5:ef:83:7d:b0:d6:de: d8:42:da:6f:f3:71:8a:a7:49:9f:9b:27:23:69:a7: 0a:a8:28:b3:b1:cf:f1:38:3d:3a:ff:61:95:c5:17: f0:6a:53:03:de:0d:03:26:5e:e9:b5:b7:4f:db:d7: b8:1c:4b:00:38:e1:4f:bb:17:16:6e:c8:3c:a2:f3: 4d:1f:76:cf:24:0f:4f:14:97:f6:13:c5:21:8c:19: 93:51:d3:89:59:df:80:13:e7:61:cf:b0:ed:a8:b3: 50:54:30:35:96:66:81:b8:3e:a9:47:67:d2:53:94: 63:b4:2f:6f:80:0a:0d:b3:1d:8c:51:42:ec:5c:c3: 70:0f:f2:35:a0:d6:9d:f0:d3:e6:75:54:94:f4:ae: a3:f4:9d:3e:f4:8a:f5:da:91:6e:0a:74:23:12:55: 15:07:10:97:b3:4d:e6:4d:9f:52:0b:8e:34:b8:91: b8:c7:49:d9:fe:e7:2e:a4:ac:60:ff:c8:18:f8:fa: d5:80:a1:26:52:41:9c:1c:6d:ed:1a:ae:02:8b:bc: ae:54:22:d7:76:72:01:57:ca:6e:5e:d8:4a:10:41: 9b:96:bc:be:5f:ad:6f:16:0c:06:41:ad:cf:57:4d: 28:8f:15:e8:30:5e:68:fc:c8:f3:56:66:48:9b:1e: 93:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.239.252.0/22 IPv6: 2804:36a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266360 Signature Algorithm: sha256WithRSAEncryption cf:fb:72:35:15:24:86:a0:44:5e:09:dd:58:cd:a3:37:6a:f5: a5:84:29:eb:2f:b4:e7:2b:10:c5:70:21:96:c8:f2:8f:7e:14: 09:c5:91:c3:ab:40:37:d4:10:58:b9:a9:bc:96:f5:97:50:54: 81:89:0c:50:2d:97:a0:ae:12:ca:4c:18:87:96:5d:89:e1:e0: 95:cb:51:f3:2f:5d:78:17:ef:9f:6e:32:6b:21:62:11:6b:b8: 8e:04:06:32:ac:27:24:cd:54:f2:93:ce:db:1f:6b:d4:75:e6: 1d:0c:24:c6:af:a9:be:47:86:c9:59:97:ee:96:8f:c2:af:0e: 3d:54:e0:10:11:0d:fe:e8:1c:d6:84:1b:96:b0:0d:1e:9b:82: cf:f1:a3:40:bc:9c:96:70:b4:8f:c4:de:33:84:22:d5:2d:6f: f3:a2:45:81:e2:15:31:54:77:9b:17:e8:f8:7c:37:7c:94:58: 6c:24:49:ba:c4:9e:aa:bf:e4:5c:fe:cb:48:bd:2b:9c:54:df: d6:0f:7a:b9:bb:e9:d7:13:28:1e:29:7f:13:fc:96:fd:e2:9e: 14:07:53:89:17:1b:61:1e:9a:0b:1e:ab:b1:32:a0:38:60:3b: 99:d6:9a:3c:76:42:3d:19:c8:26:06:7b:d9:38:43:14:b9:85: bb:c4:3d:68 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJqFcOdWZlYrkUcf3jtl4UIU7wlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMDU5MDJaFw0yNjAzMDUyMTA0MDJaMDMxMTAvBgNV BAMTKENBMUM0QjU0NjIyMkVFMTU2QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IUVKOejQxe+DfbDW3thC2m/z cYqnSZ+bJyNppwqoKLOxz/E4PTr/YZXFF/BqUwPeDQMmXum1t0/b17gcSwA44U+7 FxZuyDyi800fds8kD08Ul/YTxSGMGZNR04lZ34AT52HPsO2os1BUMDWWZoG4PqlH Z9JTlGO0L2+ACg2zHYxRQuxcw3AP8jWg1p3w0+Z1VJT0rqP0nT70ivXakW4KdCMS VRUHEJezTeZNn1ILjjS4kbjHSdn+5y6krGD/yBj4+tWAoSZSQZwcbe0argKLvK5U Itd2cgFXym5e2EoQQZuWvL5frW8WDAZBrc9XTSiPFegwXmj8yPNWZkibHpOHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKHEtUYiLuFWoN Q0jSqwBDvatL6jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEVO WXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRF Tll4VVhFeHVTeXdFOFJhVjZrRGl2SlVSVncySmFwTW5GMUdTWkFwSlNTLzEvQ0Ex QzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNCREFCNEJFQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqu/8MA0EAgACMAcDBQAoBDagMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQeDANBgkqhkiG9w0BAQsFAAOCAQEAz/tyNRUkhqBEXgnd WM2jN2r1pYQp6y+05ysQxXAhlsjyj34UCcWRw6tAN9QQWLmpvJb1l1BUgYkMUC2X oK4SykwYh5ZdieHglctR8y9deBfvn24yayFiEWu4jgQGMqwnJM1U8pPO2x9r1HXm HQwkxq+pvkeGyVmX7paPwq8OPVTgEBEN/ugc1oQblrANHpuCz/GjQLyclnC0j8Te M4Qi1S1v86JFgeIVMVR3mxfo+Hw3fJRYbCRJusSeqr/kXP7LSL0rnFTf1g96ubvp 1xMoHil/E/yW/eKeFAdTiRcbYR6aCx6rsTKgOGA7mdaaPHZCPRnIJgZ72ThDFLmF u8Q9aA== -----END CERTIFICATE-----Generated at Fri Apr 4 16:41:26 2025 by rpki-client