$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer File: D05E9D7E25FDD9255E0A8745221B447549A33F95.cer (raw, json) Hash identifier: Qd2vOQ50uRMSYP+lIKPCRZJxBxaWVeOod69p1t5suwQ= Subject key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 04EB671D6FBC71AE05326052E8FF79D23C7CFFB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft caRepository: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 12:01:06 +0000 Certificate not after: Tue 03 Feb 2026 12:06:06 +0000 Subordinate resources: AS: 28352 IP: 187.0.48.0/20 IP: 189.51.192.0/20 IP: 2804:ae0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:eb:67:1d:6f:bc:71:ae:05:32:60:52:e8:ff:79:d2:3c:7c:ff:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 4 12:01:06 2025 GMT Not After : Feb 3 12:06:06 2026 GMT Subject: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:7f:b5:91:88:6e:a3:d0:17:ab:83:f4:49: a9:92:fd:50:04:7c:c1:e7:b2:d6:d2:a3:d6:b3:46: 12:54:59:9f:2f:e4:ad:94:18:99:8f:e9:a1:6c:eb: 85:d9:ab:47:a1:a1:ef:25:8c:d6:8c:9f:2d:89:b7: ca:be:6d:a9:ce:61:64:3d:db:5a:69:5f:fd:c0:4a: 76:2e:91:a4:17:44:06:9f:d6:0f:d7:4f:06:14:27: 9f:12:99:83:c7:74:a4:65:cf:59:d9:fb:58:71:0b: b3:a5:52:10:3d:fd:c0:f7:b8:4d:08:5b:86:39:68: 85:3b:a6:b4:49:9d:2a:49:56:db:ab:5e:cc:6b:ca: 92:4d:4b:25:02:6c:a3:ed:8c:6f:c3:0d:bc:c2:64: 71:ef:63:35:8c:82:33:15:45:70:a0:ea:8f:ea:75: e9:2d:ad:82:3e:11:d6:f7:1d:32:7a:3f:97:08:b3: 75:22:30:89:54:ea:9b:58:d3:8f:ef:77:c5:a4:f3: cb:03:4f:da:fd:fc:68:a8:d4:3e:5e:ee:d1:f1:5c: 5b:45:4b:97:3a:cc:58:ce:15:ce:f0:4f:c3:1f:a2: 60:43:95:5b:88:bd:df:e0:6a:e6:a9:c5:c4:32:75: 07:3a:a7:4f:68:17:c0:4c:8e:6d:8d:70:7f:67:ae: ba:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.0.48.0/20 189.51.192.0/20 IPv6: 2804:ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28352 Signature Algorithm: sha256WithRSAEncryption 52:94:5d:c0:15:fc:5a:35:45:80:48:c9:c0:99:df:f9:12:6f: 72:6a:20:b7:80:3b:f0:5c:28:8d:52:1e:0f:3d:3a:52:df:97: b5:a3:ad:ed:7e:46:8b:f8:c2:49:8f:b1:97:1e:aa:b7:b3:ba: 42:3c:0c:e9:31:86:fb:2a:5b:b5:33:91:16:6d:82:c4:37:b2: 42:0b:ea:73:a6:40:99:1f:89:3b:d2:69:a5:c9:81:13:5c:e9: 94:76:6c:05:88:5a:67:ab:8a:a9:49:98:0e:ca:40:83:a0:07: ab:fa:75:b1:c4:48:23:f4:05:f5:3e:5d:7c:ff:9b:50:ee:36: 90:46:83:a9:f0:5d:3e:64:c3:82:02:26:13:d1:13:66:ea:a6: 5b:2a:8f:19:25:1e:9b:aa:e9:fd:4d:e9:b2:b6:14:09:b5:1a: c7:c9:eb:a8:14:24:75:9e:63:ee:9a:cd:3b:8b:be:c0:b8:30: e3:9f:b8:29:49:69:af:cb:93:ce:09:ba:cd:b3:00:22:60:ec: ef:55:97:7f:6f:25:7a:40:cb:c9:b8:eb:5d:9b:ab:3c:42:15: d2:b5:9c:3c:02:94:b4:49:10:04:45:9e:7a:48:99:d1:44:5f: 97:f9:52:bd:a9:80:c4:89:bf:05:cc:27:85:a3:75:b5:db:0c: 62:f2:ce:00 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUBOtnHW+8ca4FMmBS6P950jx8/7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMDQxMjAxMDZaFw0yNjAyMDMxMjA2MDZaMDMxMTAvBgNV BAMTKEQwNUU5RDdFMjVGREQ5MjU1RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwX+1kYhuo9AXq4P0SamS/VAE fMHnstbSo9azRhJUWZ8v5K2UGJmP6aFs64XZq0ehoe8ljNaMny2Jt8q+banOYWQ9 21ppX/3ASnYukaQXRAaf1g/XTwYUJ58SmYPHdKRlz1nZ+1hxC7OlUhA9/cD3uE0I W4Y5aIU7prRJnSpJVturXsxrypJNSyUCbKPtjG/DDbzCZHHvYzWMgjMVRXCg6o/q dektrYI+Edb3HTJ6P5cIs3UiMIlU6ptY04/vd8Wk88sDT9r9/Gio1D5e7tHxXFtF S5c6zFjOFc7wT8MfomBDlVuIvd/gauapxcQydQc6p09oF8BMjm2NcH9nrrrxAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQXp1+Jf3ZJV4K h0UiG0R1SaM/lTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGk2 ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9lSHMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhp Njg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAvRDA1 RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0OUEzM0Y5NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEuwAwAwQEvTPAMA0EAgACMAcDBQAoBArgMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm7AMA0GCSqGSIb3DQEBCwUAA4IBAQBSlF3AFfxa NUWASMnAmd/5Em9yaiC3gDvwXCiNUh4PPTpS35e1o63tfkaL+MJJj7GXHqq3s7pC PAzpMYb7Klu1M5EWbYLEN7JCC+pzpkCZH4k70mmlyYETXOmUdmwFiFpnq4qpSZgO ykCDoAer+nWxxEgj9AX1Pl18/5tQ7jaQRoOp8F0+ZMOCAiYT0RNm6qZbKo8ZJR6b qun9TemythQJtRrHyeuoFCR1nmPums07i77AuDDjn7gpSWmvy5POCbrNswAiYOzv VZd/byV6QMvJuOtdm6s8QhXStZw8ApS0SRAERZ56SJnRRF+X+VK9qYDEib8FzCeF o3W12wxi8s4A -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:16 2025 by rpki-client