$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD474EAA2CD8D52421F339174CBFE8D756A44685.cer File: CD474EAA2CD8D52421F339174CBFE8D756A44685.cer (raw, json) Hash identifier: CyV1dtx/Td8cbSj6xMbHBDWyCd1gLG91WnSLFL4RvLs= Subject key identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 42D2C7F51C3CC28037CD366C6BE11C04C45D1747 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft caRepository: rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Mar 2025 07:25:20 +0000 Certificate not after: Fri 27 Mar 2026 07:30:20 +0000 Subordinate resources: AS: 52999 IP: 168.195.68.0/22 IP: 177.66.32.0/21 IP: 186.216.216.0/21 IP: 186.226.96.0/20 IP: 2804:508::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d2:c7:f5:1c:3c:c2:80:37:cd:36:6c:6b:e1:1c:04:c4:5d:17:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 28 07:25:20 2025 GMT Not After : Mar 27 07:30:20 2026 GMT Subject: CN=CD474EAA2CD8D52421F339174CBFE8D756A44685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:e3:4d:65:25:ef:56:6e:05:86:ca:01:40: 18:a1:9c:7f:03:7a:28:79:6e:b8:14:d3:b5:05:82: b0:53:a2:60:61:14:60:c2:3f:8e:dc:b5:01:e7:00: 42:f8:1a:86:96:f2:97:e8:ab:0d:f9:6a:97:86:35: 82:9a:77:a7:96:a4:6b:1d:7f:36:0b:71:16:11:2c: 15:f7:1b:16:c2:29:9b:9e:c1:cc:f0:94:49:5b:d1: 8f:93:19:73:c9:01:28:6b:e8:fd:f0:80:b4:b1:69: fb:7d:6c:16:2c:3a:6f:46:8c:4b:b9:81:1a:bc:f8: cc:fc:3e:d3:34:73:32:ef:9a:46:cf:e0:6a:05:0a: 07:e7:bc:ac:5e:c1:d4:30:d2:fa:a3:48:d6:14:5d: 06:0c:e2:08:5d:87:33:f6:fc:3b:d9:62:51:65:eb: a4:53:c6:62:ec:63:2b:1d:38:65:b1:fb:7d:35:44: 59:d9:73:69:b9:78:1e:0b:63:39:d2:84:26:b5:b4: 77:49:28:63:f3:16:42:fa:0a:e4:e0:64:7f:b2:99: d4:7f:8c:52:4a:39:45:a4:9b:ed:d9:c6:66:26:36: 45:43:0b:1d:99:3e:6a:98:60:a7:37:96:cd:27:1d: 68:9e:5a:8b:68:d8:df:b2:d9:7b:92:cc:88:fb:f8: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:47:4E:AA:2C:D8:D5:24:21:F3:39:17:4C:BF:E8:D7:56:A4:46:85 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/CD474EAA2CD8D52421F339174CBFE8D756A44685.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.68.0/22 177.66.32.0/21 186.216.216.0/21 186.226.96.0/20 IPv6: 2804:508::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52999 Signature Algorithm: sha256WithRSAEncryption 24:e1:fd:96:66:c9:80:76:f1:7d:09:bb:a4:31:29:0c:ed:f6: 58:f6:85:88:fb:9c:6d:5e:1d:fd:08:70:3f:8a:aa:59:2c:54: 64:ca:20:12:aa:80:27:ee:e6:76:dd:6b:1f:96:48:e3:78:c6: 40:3b:aa:b6:0d:a7:a6:46:90:43:de:48:32:eb:05:3b:f6:31: e6:04:56:57:f1:62:63:ea:5c:ad:51:98:c6:65:85:25:80:64: 41:9e:28:dd:8b:5d:a1:e5:d9:22:28:ae:fe:a5:f3:32:83:ad: 39:47:9a:65:02:41:51:00:17:e9:4b:56:c8:e5:9c:7f:e9:f6: 53:94:a1:6b:37:db:49:59:e8:db:7a:f8:cc:8d:0e:94:b7:fe: b0:85:9c:1b:86:5c:98:6e:2d:5a:f1:3d:77:9d:53:e7:57:05: 9a:20:2b:e9:ce:ee:b0:c4:50:ce:61:e1:73:e4:8f:43:21:e8: 4f:60:ae:17:01:45:07:64:31:1b:fc:8f:b2:81:00:67:7a:f6: 33:ad:d4:36:53:fa:23:4d:52:9f:f7:66:bc:e0:c5:b3:5f:e2: c1:12:ca:29:36:8c:91:33:b4:ef:68:98:cf:f2:f7:36:f5:a9: ee:3d:88:4d:5e:1f:50:1b:0d:73:2d:90:36:7b:47:16:d1:c4: 40:5d:84:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUQtLH9Rw8woA3zTZsa+EcBMRdF0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjgwNzI1MjBaFw0yNjAzMjcwNzMwMjBaMDMxMTAvBgNV BAMTKENENDc0RUFBMkNEOEQ1MjQyMUYzMzkxNzRDQkZFOEQ3NTZBNDQ2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgPeNNZSXvVm4FhsoBQBihnH8D eih5brgU07UFgrBTomBhFGDCP47ctQHnAEL4GoaW8pfoqw35apeGNYKad6eWpGsd fzYLcRYRLBX3GxbCKZuewczwlElb0Y+TGXPJAShr6P3wgLSxaft9bBYsOm9GjEu5 gRq8+Mz8PtM0czLvmkbP4GoFCgfnvKxewdQw0vqjSNYUXQYM4ghdhzP2/DvZYlFl 66RTxmLsYysdOGWx+301RFnZc2m5eB4LYznShCa1tHdJKGPzFkL6CuTgZH+ymdR/ jFJKOUWkm+3ZxmYmNkVDCx2ZPmqYYKc3ls0nHWieWoto2N+y2XuSzIj7+LnLAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNR06qLNjVJCHz ORdMv+jXVqRGhTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTdy bzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pTY3EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk3 cm8yaFF3RW52Nm5VdHlqU0dzQUdRb3RKRzJiVEFqUFVueThGSndKU2NxLzAvQ0Q0 NzRFQUEyQ0Q4RDUyNDIxRjMzOTE3NENCRkU4RDc1NkE0NDY4NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCqMNEAwQDsUIgAwQDutjYAwQEuuJgMA0EAgACMAcD BQAoBAUIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPBzANBgkqhkiG9w0BAQsF AAOCAQEAJOH9lmbJgHbxfQm7pDEpDO32WPaFiPucbV4d/QhwP4qqWSxUZMogEqqA J+7mdt1rH5ZI43jGQDuqtg2npkaQQ95IMusFO/Yx5gRWV/FiY+pcrVGYxmWFJYBk QZ4o3YtdoeXZIiiu/qXzMoOtOUeaZQJBUQAX6UtWyOWcf+n2U5ShazfbSVno23r4 zI0OlLf+sIWcG4ZcmG4tWvE9d51T51cFmiAr6c7usMRQzmHhc+SPQyHoT2CuFwFF B2QxG/yPsoEAZ3r2M63UNlP6I01Sn/dmvODFs1/iwRLKKTaMkTO072iYz/L3NvWp 7j2ITV4fUBsNcy2QNntHFtHEQF2Ecg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:27:40 2025 by rpki-client