$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer File: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer (raw, json) Hash identifier: V2+xoX0PdYZK5Dk/cf0T26pK5dTtpz/9Eqq7ULSJU7w= Subject key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DB89CA4CF6F1F463D2372D6277C3CFEBE4BC468 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft caRepository: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 Jan 2025 14:57:54 +0000 Certificate not after: Mon 19 Jan 2026 15:02:54 +0000 Subordinate resources: AS: 270418 IP: 190.111.168.0/22 IP: 2804:6bb4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b8:9c:a4:cf:6f:1f:46:3d:23:72:d6:27:7c:3c:fe:be:4b:c4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 20 14:57:54 2025 GMT Not After : Jan 19 15:02:54 2026 GMT Subject: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:3e:67:43:1d:86:52:2c:c6:1f:7e:9a:e0: fd:7e:38:b8:41:05:4b:5b:85:9e:26:57:9a:2a:80: 20:cd:05:b6:d1:a3:6d:6e:ac:d6:df:e2:7a:12:45: 3a:64:05:fc:f7:67:19:4b:c8:6a:8f:d1:e1:ee:13: 7a:0a:de:1b:39:33:0d:a3:49:af:e3:d0:bc:17:b4: 24:ce:9b:3b:d3:8f:29:fd:fe:c3:41:7d:3e:fb:3f: 26:28:61:da:94:fb:bf:90:e8:60:8c:d7:70:45:b2: e4:50:01:47:cc:28:90:b4:72:24:32:c9:da:02:3e: f8:46:7f:ed:c9:e1:9a:28:c1:82:52:89:ef:26:32: 63:6c:fd:4e:a5:d1:60:32:ec:ef:aa:bb:f7:a4:26: 12:78:8e:25:37:3e:87:14:93:f3:8c:92:5f:4d:0e: 74:ab:bc:5d:85:6f:5c:a6:45:05:eb:c3:b9:7f:f4: 5c:cc:77:99:c3:07:55:73:ad:8b:46:6b:2e:09:8b: 24:c9:a2:1f:8e:e8:50:30:68:52:9a:86:8f:8a:84: 23:9b:f0:e6:5e:ea:ea:38:7e:ed:30:2f:e2:05:1d: 42:47:91:df:b3:7e:03:1c:5e:ab:a5:2f:da:0c:90: 9d:f3:1c:f8:c4:25:c2:7f:1c:9a:d2:60:92:5e:6e: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.111.168.0/22 IPv6: 2804:6bb4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270418 Signature Algorithm: sha256WithRSAEncryption 9a:01:16:41:56:80:86:ea:b0:7a:d0:74:07:12:85:b2:85:bd: dc:09:a1:56:d4:39:36:39:98:80:7a:ac:77:df:a3:1d:22:06: 55:be:fa:c4:c5:6c:b3:65:15:a9:e0:b2:00:5a:99:d6:ba:f5: 59:f9:75:8e:d5:af:c6:b4:f8:73:58:23:25:37:fb:65:1d:e6: 02:71:4c:ba:fa:96:97:f4:fb:9e:6d:65:17:10:e1:71:34:ca: bc:b5:e4:4a:f5:3c:94:cd:a9:e9:9f:87:6a:30:14:4c:a4:60: 4c:c0:48:b1:c0:3a:07:b9:a3:dc:58:49:e8:fc:5e:81:ed:db: 0d:b8:9a:26:10:d7:81:41:e9:9b:52:a6:03:dc:f7:98:24:5e: 33:f0:f9:37:d3:0f:89:0e:77:d3:18:1d:57:5c:11:5e:26:7e: bf:84:ea:21:d4:89:4c:64:4b:55:5f:3d:90:2e:c9:1b:7e:7e: de:5e:21:aa:06:fa:46:c5:69:51:d9:14:93:b9:94:8a:43:df: 25:bf:18:db:d3:61:21:1b:30:a6:0b:a5:56:70:a3:a4:87:b6: 13:7a:6f:a3:a6:2b:9c:7f:55:ac:7b:8a:22:3a:ef:9b:e1:9a: 1e:5f:2e:95:4e:40:63:11:9b:9a:2f:ef:9b:c9:22:dd:23:a8: af:ed:ef:bf -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHbicpM9vH0Y9I3LWJ3w8/r5LxGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjAxNDU3NTRaFw0yNjAxMTkxNTAyNTRaMDMxMTAvBgNV BAMTKENERUYxRkQ2NjkwRENDRUQ1MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZT5nQx2GUizGH36a4P1+OLhB BUtbhZ4mV5oqgCDNBbbRo21urNbf4noSRTpkBfz3ZxlLyGqP0eHuE3oK3hs5Mw2j Sa/j0LwXtCTOmzvTjyn9/sNBfT77PyYoYdqU+7+Q6GCM13BFsuRQAUfMKJC0ciQy ydoCPvhGf+3J4ZoowYJSie8mMmNs/U6l0WAy7O+qu/ekJhJ4jiU3PocUk/OMkl9N DnSrvF2Fb1ymRQXrw7l/9FzMd5nDB1VzrYtGay4JiyTJoh+O6FAwaFKaho+KhCOb 8OZe6uo4fu0wL+IFHUJHkd+zfgMcXqulL9oMkJ3zHPjEJcJ/HJrSYJJebvArAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTN7x/WaQ3M7VIF M47gvH0OGI3oQjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUsx QjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5YUcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVL MUI1RGlNc2hwQ3R4d3pqV1U5V3hjeVJEWkcyeEo4REpHcnlxQkw2eWFHLzAvQ0RF RjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUxODhERTg0Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvm+oMA0EAgACMAcDBQAoBGu0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgUjANBgkqhkiG9w0BAQsFAAOCAQEAmgEWQVaAhuqwetB0 BxKFsoW93AmhVtQ5NjmYgHqsd9+jHSIGVb76xMVss2UVqeCyAFqZ1rr1Wfl1jtWv xrT4c1gjJTf7ZR3mAnFMuvqWl/T7nm1lFxDhcTTKvLXkSvU8lM2p6Z+HajAUTKRg TMBIscA6B7mj3FhJ6Pxege3bDbiaJhDXgUHpm1KmA9z3mCReM/D5N9MPiQ530xgd V1wRXiZ+v4TqIdSJTGRLVV89kC7JG35+3l4hqgb6RsVpUdkUk7mUikPfJb8Y29Nh IRswpgulVnCjpIe2E3pvo6YrnH9VrHuKIjrvm+GaHl8ulU5AYxGbmi/vm8ki3SOo r+3vvw== -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:44 2025 by rpki-client