$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer File: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer (raw, json) Hash identifier: hQ0j4XeWsLWGIMKffQ3AYQoAGiALD3B1g5ODwV0qGUU= Subject key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3EDDC2E6BA8DB23CA97AE8642FC22F9BD01F8D32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft caRepository: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 13:02:04 +0000 Certificate not after: Fri 06 Mar 2026 13:07:04 +0000 Subordinate resources: AS: 265078 IP: 170.233.112.0/22 IP: 2804:3270::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:dd:c2:e6:ba:8d:b2:3c:a9:7a:e8:64:2f:c2:2f:9b:d0:1f:8d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 13:02:04 2025 GMT Not After : Mar 6 13:07:04 2026 GMT Subject: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:6d:6b:7b:e6:01:0a:58:3b:1b:b6:07:e6: 3a:67:4a:41:5a:f5:80:9d:5d:63:23:e8:2f:4b:43: 4e:41:77:cc:8e:a8:31:8a:01:2d:e8:13:d7:4b:dd: e1:f0:5a:e9:96:0f:ec:3a:5e:28:9b:81:d3:ae:75: a4:ef:8f:92:78:2c:0e:01:b2:22:8b:c5:6e:da:3a: e4:11:d4:2b:92:22:88:da:eb:4e:68:2b:f9:14:e5: 18:64:ad:3b:b7:fb:72:18:72:77:b8:22:8a:b9:1b: c7:8b:61:e4:06:0c:cb:02:09:7a:6b:10:d2:dc:79: 7c:73:c5:de:31:a5:11:be:27:63:73:28:70:1c:29: c9:e6:48:68:0e:e3:52:e6:71:f3:8b:04:71:bc:9a: d2:74:e9:f0:9b:ec:4a:b4:22:fe:a2:4b:ee:0c:20: e2:06:0c:eb:a7:9c:6e:da:f9:26:37:01:14:70:d0: 79:b4:aa:ee:d7:10:80:e8:0c:27:d2:3d:06:18:fe: 0a:56:8a:30:fc:03:a4:96:c1:e1:34:be:dd:25:47: 31:f0:3d:a5:a4:c4:09:b1:ec:86:f0:4e:4f:51:fd: bb:12:ae:a0:ba:35:48:f2:0d:7e:0e:51:85:e7:be: 7a:bf:52:6a:31:00:24:09:0b:31:9b:fc:71:75:79: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.112.0/22 IPv6: 2804:3270::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265078 Signature Algorithm: sha256WithRSAEncryption 15:1a:26:91:d8:8e:bf:63:eb:a2:a6:3c:6a:45:67:65:f2:29: 40:8b:f9:07:96:9b:13:09:e4:25:cc:02:b2:6e:87:83:fd:1c: 0c:06:a2:e4:c1:fa:93:15:f8:5c:93:c2:c6:d7:f0:8a:98:ac: 19:82:71:dd:d2:bc:3c:d1:1f:8c:69:45:a2:51:13:2c:8a:69: f7:5e:89:76:b4:aa:14:12:07:eb:c8:49:7e:a8:c6:bb:94:9e: bd:c7:2d:21:24:ce:09:0a:99:9e:7f:46:6c:24:ce:bb:08:2b: 0f:4b:7a:36:98:40:99:98:3a:5c:27:ba:02:35:08:cd:44:fa: ff:19:91:4a:f3:bc:49:66:e7:17:7f:9b:12:ad:66:58:af:a5: 46:37:e7:7f:e6:a1:8f:21:a3:0a:0e:75:15:fd:cb:f2:3b:04: d8:99:5b:d3:5d:3f:fb:a9:d2:24:73:e6:b9:85:ea:22:49:5c: 1d:fb:16:ed:0f:7f:ed:fa:a4:1c:5c:03:bc:c7:5b:fd:8b:bf: 9b:25:91:c1:5e:41:22:60:fe:75:fe:3e:14:85:36:7c:51:0e: 04:81:b9:20:6c:f7:56:7a:d4:3b:b5:4a:84:6c:5a:a3:60:34: 38:51:8c:79:f6:d4:90:ac:62:b6:12:eb:19:ca:fc:b6:59:da: f5:72:5f:5b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPt3C5rqNsjypeuhkL8Ivm9AfjTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMzAyMDRaFw0yNjAzMDYxMzA3MDRaMDMxMTAvBgNV BAMTKENFOUU3RDRGQjY2NEUzQ0YyRkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmm1re+YBClg7G7YH5jpnSkFa 9YCdXWMj6C9LQ05Bd8yOqDGKAS3oE9dL3eHwWumWD+w6XiibgdOudaTvj5J4LA4B siKLxW7aOuQR1CuSIoja605oK/kU5RhkrTu3+3IYcne4Ioq5G8eLYeQGDMsCCXpr ENLceXxzxd4xpRG+J2NzKHAcKcnmSGgO41LmcfOLBHG8mtJ06fCb7Eq0Iv6iS+4M IOIGDOunnG7a+SY3ARRw0Hm0qu7XEIDoDCfSPQYY/gpWijD8A6SWweE0vt0lRzHw PaWkxAmx7IbwTk9R/bsSrqC6NUjyDX4OUYXnvnq/UmoxACQJCzGb/HF1ed8HAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOnn1PtmTjzy/J DpYE+uGYoaMCsjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDZi NXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdzVHYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q2 YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzEvQ0U5 RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThBMUEzMDJCMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqulwMA0EAgACMAcDBQAoBDJwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLdjANBgkqhkiG9w0BAQsFAAOCAQEAFRomkdiOv2ProqY8 akVnZfIpQIv5B5abEwnkJcwCsm6Hg/0cDAai5MH6kxX4XJPCxtfwipisGYJx3dK8 PNEfjGlFolETLIpp916JdrSqFBIH68hJfqjGu5SevcctISTOCQqZnn9GbCTOuwgr D0t6NphAmZg6XCe6AjUIzUT6/xmRSvO8SWbnF3+bEq1mWK+lRjfnf+ahjyGjCg51 Ff3L8jsE2Jlb010/+6nSJHPmuYXqIklcHfsW7Q9/7fqkHFwDvMdb/Yu/myWRwV5B ImD+df4+FIU2fFEOBIG5IGz3VnrUO7VKhGxao2A0OFGMefbUkKxithLrGcr8tlna 9XJfWw== -----END CERTIFICATE-----Generated at Fri Apr 4 01:34:18 2025 by rpki-client