$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer File: CBED8B77145C146C6E2002637F70D52E41B65B78.cer (raw, json) Hash identifier: mWJcRLu+2lZMtxjXm/eVavgI3DJ9p7c0d8c/klp4JzE= Subject key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A7CBB9AE016D4570CA0BF117A6A51EB3EF146B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft caRepository: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 10:24:22 +0000 Certificate not after: Thu 05 Mar 2026 10:29:22 +0000 Subordinate resources: AS: 272626 IP: 2804:862c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7c:bb:9a:e0:16:d4:57:0c:a0:bf:11:7a:6a:51:eb:3e:f1:46:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 10:24:22 2025 GMT Not After : Mar 5 10:29:22 2026 GMT Subject: CN=CBED8B77145C146C6E2002637F70D52E41B65B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:e7:ab:6f:21:6e:07:66:14:22:6a:ec:f8: c1:b5:64:02:a8:b5:58:b3:79:07:af:31:7d:bf:cd: 47:2b:6e:42:c1:8a:5e:f3:68:a3:28:e3:66:51:12: 54:c9:1b:64:a6:fd:45:7d:b7:44:c0:19:fa:45:24: 03:f0:08:1a:0b:cf:89:4b:e1:2c:41:e5:c4:6a:c9: d3:7e:ce:92:26:5d:29:2d:aa:cb:2b:93:63:d0:b7: 8d:71:c4:69:87:f7:d7:a2:1c:fa:44:e2:5d:87:91: 9f:27:90:48:8d:d9:23:2f:51:43:cb:e7:0f:f5:03: 07:b6:32:4f:6d:1a:11:58:bf:31:4b:7c:6c:07:55: da:d6:44:fd:1e:75:74:f0:81:a8:b0:66:92:2b:29: 96:cb:d4:37:92:af:64:8d:88:0a:51:89:a3:cc:be: 4c:f5:5b:36:2f:ab:f7:b2:c9:d5:45:c1:6b:c6:56: c5:51:7b:65:50:17:79:94:44:d2:ee:31:3f:34:ab: 97:54:23:db:6c:8a:13:77:a7:8a:0f:f1:9a:41:97: f8:31:34:17:e4:a0:40:69:8a:99:70:1d:2e:52:c3: 9e:90:38:51:8f:cd:8c:13:ca:82:c8:bb:2e:66:c7: 60:ce:47:ce:28:a5:d3:1c:bb:bb:2b:e3:7a:ab:59: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:862c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272626 Signature Algorithm: sha256WithRSAEncryption 89:41:a5:ce:7c:c2:7b:45:5f:3f:5c:f7:f9:af:e0:53:68:43: 7e:ca:9a:27:57:cc:5d:82:ad:1e:1c:d4:9e:1e:7e:ba:41:14: 85:b8:6e:aa:f3:60:f1:b4:e8:50:56:29:e5:f0:c7:05:7d:a9: 70:e8:5b:12:8d:32:fd:80:98:ec:ed:3a:7b:a3:f9:47:83:fa: 40:35:aa:1c:27:72:4f:4f:60:cf:3e:aa:24:0f:e5:2e:64:3d: 7d:55:50:8d:06:e8:11:f5:1c:ac:e8:cc:3c:60:cc:aa:05:e6: 25:bd:18:c3:40:63:cd:69:9e:89:67:d7:60:89:4c:4c:04:38: bb:9d:c8:68:1e:c4:79:88:f0:09:67:0f:57:0b:c1:62:af:34: 42:a2:3f:04:e1:ae:a9:fa:de:5a:4a:1b:1e:36:8e:35:8a:e3: c3:74:69:17:06:0c:ef:a3:ef:dc:a3:48:b4:9b:8a:cd:f8:24: f1:15:e8:af:5c:e0:a3:04:e1:d0:ae:cf:c1:4b:dd:f2:25:cf: 37:c8:a4:a3:c6:33:bc:be:69:54:05:3b:31:aa:14:58:95:16: e3:73:4e:52:2d:31:37:57:46:f9:a6:7e:18:df:00:84:00:03: 77:ba:75:8b:dc:5d:4b:fc:55:cd:dd:ec:ab:88:af:58:b8:b2: 37:04:d7:c5 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUWny7muAW1FcMoL8RempR6z7xRrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxMDI0MjJaFw0yNjAzMDUxMDI5MjJaMDMxMTAvBgNV BAMTKENCRUQ4Qjc3MTQ1QzE0NkM2RTIwMDI2MzdGNzBENTJFNDFCNjVCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YuerbyFuB2YUImrs+MG1ZAKo tVizeQevMX2/zUcrbkLBil7zaKMo42ZRElTJG2Sm/UV9t0TAGfpFJAPwCBoLz4lL 4SxB5cRqydN+zpImXSktqssrk2PQt41xxGmH99eiHPpE4l2HkZ8nkEiN2SMvUUPL 5w/1Awe2Mk9tGhFYvzFLfGwHVdrWRP0edXTwgaiwZpIrKZbL1DeSr2SNiApRiaPM vkz1WzYvq/eyydVFwWvGVsVRe2VQF3mURNLuMT80q5dUI9tsihN3p4oP8ZpBl/gx NBfkoEBpiplwHS5Sw56QOFGPzYwTyoLIuy5mx2DOR84opdMcu7sr43qrWUorAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTL7Yt3FFwUbG4g AmN/cNUuQbZbeDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzJF VmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allrWXIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0cy RVZqQTU3UVlEVGhUWk13d0dwa21aRXhyZnU0clZCWXd1UWF1dGpZa1lyLzEvQ0JF RDhCNzcxNDVDMTQ2QzZFMjAwMjYzN0Y3MEQ1MkU0MUI2NUI3OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASGLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KPIwDQYJKoZIhvcNAQELBQADggEBAIlBpc58wntFXz9c9/mv4FNoQ37KmidXzF2C rR4c1J4efrpBFIW4bqrzYPG06FBWKeXwxwV9qXDoWxKNMv2AmOztOnuj+UeD+kA1 qhwnck9PYM8+qiQP5S5kPX1VUI0G6BH1HKzozDxgzKoF5iW9GMNAY81pnoln12CJ TEwEOLudyGgexHmI8AlnD1cLwWKvNEKiPwThrqn63lpKGx42jjWK48N0aRcGDO+j 79yjSLSbis34JPEV6K9c4KME4dCuz8FL3fIlzzfIpKPGM7y+aVQFOzGqFFiVFuNz TlItMTdXRvmmfhjfAIQAA3e6dYvcXUv8Vc3d7KuIr1i4sjcE18U= -----END CERTIFICATE-----Generated at Fri Apr 4 20:02:00 2025 by rpki-client