$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF003B615CAAD618C94E1EB995B64B55082F0C0C.cer File: CF003B615CAAD618C94E1EB995B64B55082F0C0C.cer (raw, json) Hash identifier: E+SEgdGE1aK0WIgWl4dRbLzisrPMX8dcwD75qgUNLBc= Subject key identifier: CF:00:3B:61:5C:AA:D6:18:C9:4E:1E:B9:95:B6:4B:55:08:2F:0C:0C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66DDD9358582DD2223530C612A5E2CFAF8AC81BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/CF003B615CAAD618C94E1EB995B64B55082F0C0C.mft caRepository: rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 15:22:14 +0000 Certificate not after: Tue 24 Mar 2026 15:27:14 +0000 Subordinate resources: AS: 267330 IP: 45.233.224.0/22 IP: 2804:4bcc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:dd:d9:35:85:82:dd:22:23:53:0c:61:2a:5e:2c:fa:f8:ac:81:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 15:22:14 2025 GMT Not After : Mar 24 15:27:14 2026 GMT Subject: CN=CF003B615CAAD618C94E1EB995B64B55082F0C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dc:af:7d:a1:8f:9b:88:36:a8:11:02:f0:ab: 3c:cf:53:a9:88:46:b9:8b:9b:d4:1e:dd:94:08:01: 8f:23:b1:e7:ea:a9:9e:25:9a:f5:6e:e1:94:79:29: 46:35:94:2c:dc:a4:1e:4d:e4:8c:47:56:f5:66:47: be:67:03:e7:26:de:ce:8d:5c:e4:1b:86:8b:ca:16: d0:32:a0:ee:f9:43:20:c1:94:9f:44:c7:23:73:f0: 26:fc:32:06:ad:ec:41:70:3b:c9:58:54:9b:d9:dd: de:84:1d:6c:cd:51:d5:1b:63:79:65:f5:34:90:25: 61:da:bc:4e:ab:72:8b:ab:56:bc:c7:02:0e:2b:1c: 02:4d:85:30:66:b8:15:7d:f8:79:88:a3:25:d1:dd: b4:0f:b3:91:7a:fe:31:9c:8b:0f:c7:d5:35:8e:6e: ad:03:c3:cf:03:2e:48:a0:ca:a2:8b:ed:61:d0:aa: 24:5a:c2:29:d9:da:ee:8c:7e:e8:90:91:4c:83:10: 3f:ce:64:85:eb:15:8c:54:41:16:f3:56:58:ba:ca: 01:3e:5c:e8:75:a4:3b:11:f0:27:c4:ef:09:f4:56: 72:05:7f:2b:84:12:dc:9e:a8:a6:e2:3f:d2:66:b1: 73:93:19:50:15:0d:33:c6:10:54:1b:2a:42:25:a8: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:00:3B:61:5C:AA:D6:18:C9:4E:1E:B9:95:B6:4B:55:08:2F:0C:0C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/0/CF003B615CAAD618C94E1EB995B64B55082F0C0C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.224.0/22 IPv6: 2804:4bcc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267330 Signature Algorithm: sha256WithRSAEncryption 49:0a:44:dc:d6:0c:95:4f:84:f7:b0:f9:86:12:37:d4:f2:ff: 36:94:df:b7:24:25:b4:cc:2b:0b:49:d5:58:f9:4b:8c:1d:8e: 95:df:d3:46:ea:93:e4:fe:2f:93:5a:a9:1c:da:5b:5c:0f:34: 2f:68:94:c0:49:9d:5c:19:48:91:e2:ee:b9:44:13:74:e4:f4: a9:7a:16:7d:67:39:68:48:51:a7:84:bb:e0:cb:f1:de:30:26: 1c:92:d7:7f:8f:d2:32:75:ed:6d:84:db:56:42:d8:57:03:2c: 8d:c2:d2:be:44:59:d3:dc:de:41:87:ce:f3:70:c3:6e:c3:72: c6:1d:89:95:6c:f7:d5:b2:b7:be:6a:e6:7c:2b:59:44:73:a4: 2d:74:d3:48:b7:cc:d4:5f:4e:84:95:ff:ec:a0:0d:9f:ff:8e: b1:c4:e3:07:7d:75:6c:73:a0:68:1c:d3:01:41:52:69:e6:20: bc:7b:6e:29:55:e8:5c:e4:77:d4:5b:b4:34:61:7b:6a:76:c4: a2:46:70:ac:50:4d:8c:0e:df:c2:27:c7:0e:b8:ea:bf:28:3f: 0c:73:0f:41:08:2c:c1:e5:c8:37:a0:1c:7a:1a:18:fb:f0:68: eb:29:17:ea:82:cd:61:40:ba:0d:e1:7f:1c:8e:66:eb:ed:d2: 9f:fd:ed:08 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZt3ZNYWC3SIjUwxhKl4s+visgbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjUxNTIyMTRaFw0yNjAzMjQxNTI3MTRaMDMxMTAvBgNV BAMTKENGMDAzQjYxNUNBQUQ2MThDOTRFMUVCOTk1QjY0QjU1MDgyRjBDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx3K99oY+biDaoEQLwqzzPU6mI RrmLm9Qe3ZQIAY8jsefqqZ4lmvVu4ZR5KUY1lCzcpB5N5IxHVvVmR75nA+cm3s6N XOQbhovKFtAyoO75QyDBlJ9ExyNz8Cb8Mgat7EFwO8lYVJvZ3d6EHWzNUdUbY3ll 9TSQJWHavE6rcourVrzHAg4rHAJNhTBmuBV9+HmIoyXR3bQPs5F6/jGciw/H1TWO bq0Dw88DLkigyqKL7WHQqiRawinZ2u6MfuiQkUyDED/OZIXrFYxUQRbzVli6ygE+ XOh1pDsR8CfE7wn0VnIFfyuEEtyeqKbiP9JmsXOTGVAVDTPGEFQbKkIlqKAjAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPADthXKrWGMlO HrmVtktVCC8MDDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFEx c3ZMYW9vQXpvb0Rua2dwc2ozSjM4Rkx2dXhwa3JFdTZieXdzOFpDTGgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RR MXN2TGFvb0F6b29EbmtncHNqM0ozOEZMdnV4cGtyRXU2Ynl3czhaQ0xoLzAvQ0Yw MDNCNjE1Q0FBRDYxOEM5NEUxRUI5OTVCNjRCNTUwODJGMEMwQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLengMA0EAgACMAcDBQAoBEvMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUQjANBgkqhkiG9w0BAQsFAAOCAQEASQpE3NYMlU+E97D5 hhI31PL/NpTftyQltMwrC0nVWPlLjB2Old/TRuqT5P4vk1qpHNpbXA80L2iUwEmd XBlIkeLuuUQTdOT0qXoWfWc5aEhRp4S74Mvx3jAmHJLXf4/SMnXtbYTbVkLYVwMs jcLSvkRZ09zeQYfO83DDbsNyxh2JlWz31bK3vmrmfCtZRHOkLXTTSLfM1F9OhJX/ 7KANn/+OscTjB311bHOgaBzTAUFSaeYgvHtuKVXoXOR31Fu0NGF7anbEokZwrFBN jA7fwifHDrjqvyg/DHMPQQgsweXIN6AcehoY+/Bo6ykX6oLNYUC6DeF/HI5m6+3S n/3tCA== -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:44 2025 by rpki-client