$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer File: D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer (raw, json) Hash identifier: TuXcv5/yZwLUfRF/pukQlxmK9xs2y2Byb5Tpo8c/n10= Subject key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 16A223B870031DE2A354EBAA6060FD0B313408FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft caRepository: rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:39 +0000 Certificate not after: Wed 04 Mar 2026 18:41:39 +0000 Subordinate resources: AS: 268446 IP: 45.161.16.0/22 IP: 2804:5158::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a2:23:b8:70:03:1d:e2:a3:54:eb:aa:60:60:fd:0b:31:34:08:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:39 2025 GMT Not After : Mar 4 18:41:39 2026 GMT Subject: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c5:28:33:87:4e:ae:93:f5:aa:a8:f8:9d:62: f1:41:6c:cd:a7:3f:ea:7c:0d:69:49:4c:e3:f8:2f: c1:41:cd:ed:61:48:23:62:ef:94:7b:43:99:6d:92: 9b:55:26:fc:23:c6:3b:57:7a:60:ee:b3:ce:3f:89: 99:94:9a:58:ba:05:21:ca:51:fd:24:1b:c2:c5:cc: 48:7b:82:82:05:b8:a6:0e:c9:b2:c5:7b:60:3a:07: 77:24:5f:53:d5:a1:d5:ed:ac:b5:da:3b:38:29:65: 98:2c:10:ca:cf:bf:4a:00:d4:a8:cb:51:40:a8:b3: 90:e2:eb:d7:6c:cd:d9:7d:2b:8d:4e:3b:16:b8:1d: 02:83:6a:fe:e8:40:44:c8:e5:df:9e:a2:2d:04:f8: 2a:6c:87:65:5c:fd:92:ac:7d:fc:c0:b9:70:5f:cd: c0:3a:c3:3d:60:bc:41:f0:6b:67:68:8b:66:79:36: 5e:8b:37:b5:4f:cf:1d:d6:6b:02:fd:7f:d9:e3:22: 59:54:86:9a:73:e4:a7:7a:c2:b6:ff:63:ee:61:71: e6:5a:85:22:9a:a1:05:17:76:9d:e2:cc:d1:e6:2f: 86:54:2e:52:e3:36:05:75:53:ab:8a:22:f6:8a:c0: 7e:85:b3:79:5d:5a:b8:b0:ae:1a:8e:cd:92:62:a9: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.16.0/22 IPv6: 2804:5158::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268446 Signature Algorithm: sha256WithRSAEncryption 7d:22:06:97:5a:c7:52:72:51:b3:8c:9a:95:ba:3d:db:9e:f7: 19:9a:6e:7b:78:fb:bb:e5:b5:82:8f:af:28:f8:7e:d0:af:68: c7:16:4b:81:7b:a7:53:e4:13:25:56:c0:d4:29:d0:d7:2f:db: 66:0e:69:fc:b0:b4:44:a6:18:8b:97:4b:25:9c:23:04:93:1b: 0f:7c:a9:d6:ca:81:17:a2:e9:d1:7f:ec:4e:63:f6:e8:3e:2e: e3:0b:9a:17:a3:58:38:7b:12:fb:f8:b1:8b:04:28:6a:72:99: 62:3f:b8:c9:18:58:b6:2e:04:08:30:76:1b:26:e1:a4:97:3b: 4f:71:62:10:0b:96:55:b5:bf:fd:71:71:37:67:62:88:2e:d9: b9:eb:c9:13:b4:ce:a5:c4:aa:0f:18:f6:65:99:20:e2:36:24: b1:2e:8e:ea:2b:34:73:51:13:8e:36:b0:aa:29:a3:50:ca:b1: e2:29:d8:cc:2b:a3:a1:d8:10:4a:c0:44:11:18:74:ba:9e:53: 01:7a:7f:1a:b5:21:94:c4:c8:1d:fa:ef:c2:37:4a:4a:eb:23: eb:de:4b:57:02:3d:44:1f:2e:fb:7e:84:7c:62:26:96:f5:82: 10:78:6f:d6:df:34:e2:7e:20:4d:d3:c3:a0:b7:30:89:38:ac: 61:81:c6:79 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUFqIjuHADHeKjVOuqYGD9CzE0CPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2MzlaFw0yNjAzMDQxODQxMzlaMDMxMTAvBgNV BAMTKEQwQTE5MzhBRjUzQ0FCOTE1QUE5RTUyNzFBMUNDMDZCQ0UwRDRGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvxSgzh06uk/WqqPidYvFBbM2n P+p8DWlJTOP4L8FBze1hSCNi75R7Q5ltkptVJvwjxjtXemDus84/iZmUmli6BSHK Uf0kG8LFzEh7goIFuKYOybLFe2A6B3ckX1PVodXtrLXaOzgpZZgsEMrPv0oA1KjL UUCos5Di69dszdl9K41OOxa4HQKDav7oQETI5d+eoi0E+Cpsh2Vc/ZKsffzAuXBf zcA6wz1gvEHwa2doi2Z5Nl6LN7VPzx3WawL9f9njIllUhppz5Kd6wrb/Y+5hceZa hSKaoQUXdp3izNHmL4ZULlLjNgV1U6uKIvaKwH6Fs3ldWriwrhqOzZJiqfafAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQoZOK9TyrkVqp 5ScaHMBrzg1PQDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHUy SENFYUNTSm1xa2VMNkwzOUd6RXJkOG1KNUN6R0RBVHJIQUFGMUM1OFMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHUy SENFYUNTSm1xa2VMNkwzOUd6RXJkOG1KNUN6R0RBVHJIQUFGMUM1OFMvMS9EMEEx OTM4QUY1M0NBQjkxNUFBOUU1MjcxQTFDQzA2QkNFMEQ0RjQwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItoRAwDQQCAAIwBwMFACgEUVgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBieMA0GCSqGSIb3DQEBCwUAA4IBAQB9IgaXWsdSclGzjJqV uj3bnvcZmm57ePu75bWCj68o+H7Qr2jHFkuBe6dT5BMlVsDUKdDXL9tmDmn8sLRE phiLl0slnCMEkxsPfKnWyoEXounRf+xOY/boPi7jC5oXo1g4exL7+LGLBChqcpli P7jJGFi2LgQIMHYbJuGklztPcWIQC5ZVtb/9cXE3Z2KILtm568kTtM6lxKoPGPZl mSDiNiSxLo7qKzRzUROONrCqKaNQyrHiKdjMK6Oh2BBKwEQRGHS6nlMBen8atSGU xMgd+u/CN0pK6yPr3ktXAj1EHy77foR8YiaW9YIQeG/W3zTifiBN08OgtzCJOKxh gcZ5 -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:04 2025 by rpki-client