$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer File: D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.cer (raw, json) Hash identifier: OnE5K6WlPFVbHB5JGl6E62ADjj+XXPOftlDpWIHsUR0= Subject key identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29794C91BE6CECFF274CC47BC508072C4F3059E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft caRepository: rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 14 Feb 2025 00:40:39 +0000 Certificate not after: Fri 13 Feb 2026 00:45:39 +0000 Subordinate resources: AS: 269265 IP: 45.182.32.0/22 IP: 2804:61ec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:79:4c:91:be:6c:ec:ff:27:4c:c4:7b:c5:08:07:2c:4f:30:59:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 14 00:40:39 2025 GMT Not After : Feb 13 00:45:39 2026 GMT Subject: CN=D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:a0:e9:ef:02:71:57:f2:cd:7b:9a:56:13: 0b:0b:82:b7:4f:e5:56:61:46:da:d8:11:66:da:ab: 78:3b:3e:4e:4a:70:8a:6c:68:24:4e:6b:78:f6:7c: e6:ff:78:6c:be:2e:77:86:7b:43:0c:f7:89:0d:14: 5e:a8:73:a9:25:89:06:3c:e3:99:cd:40:f1:02:03: 9f:0d:52:85:4a:c2:62:18:ac:49:a3:07:d0:bd:b7: fa:0d:93:9b:e1:d0:ca:c3:bd:23:9e:18:73:c2:94: 38:51:ab:43:51:a6:fb:43:8c:78:71:e6:3f:15:a8: 37:ba:91:58:e6:0f:e1:80:14:db:e5:9e:ae:6a:b2: 4f:a5:17:82:90:ff:0b:64:e6:3a:e2:74:27:a3:88: bb:b7:5b:23:a9:9b:d5:9c:98:e7:12:d7:06:13:a6: b9:5c:13:62:c5:55:7a:7d:4b:f0:98:b1:d7:9a:87: f3:93:42:df:32:98:7a:19:5e:2e:8a:1c:2f:12:5b: d7:c8:f7:64:a7:7f:78:a6:3a:6e:f7:86:40:04:e5: 5c:4e:02:04:a6:68:16:d3:0c:2e:77:e4:b6:51:65: 44:3d:c8:39:fa:f8:95:06:da:21:78:59:ce:a3:80: 3b:2d:a3:d6:57:09:af:b4:32:9c:bb:0d:7b:ca:2c: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:8D:F1:FE:AB:79:19:2D:7C:5A:DF:07:EF:5B:AE:24:A8:67:D0:5C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJVHQ6GpmMA4PdwacCWJEokxhU1VQzkypcyX6Q9E66JF/0/D38DF1FEAB79192D7C5ADF07EF5BAE24A867D05C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.182.32.0/22 IPv6: 2804:61ec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269265 Signature Algorithm: sha256WithRSAEncryption 1f:73:6f:7f:d2:2e:9a:a1:37:5e:0c:ac:fa:9c:98:41:f5:c1: 29:e5:56:2b:f1:8a:a4:b7:63:f7:01:83:0e:99:d8:fe:e5:10: d0:61:c0:36:3c:40:2f:83:b3:35:b6:84:22:1a:b7:2b:14:a2: fc:fd:b9:3b:bd:76:ea:25:a3:20:37:f3:b5:12:ea:50:ea:5f: f0:16:b3:2a:66:b6:67:14:d1:a6:0e:a8:e4:1c:8d:ed:de:5c: b8:24:bd:b3:e8:15:73:92:2f:60:b9:22:44:e2:b6:cd:6a:35: 5f:71:a6:f2:65:b8:ff:fa:94:08:3d:27:b4:a7:43:d2:e5:f4: 32:0b:b2:79:27:65:d3:e4:4e:b1:e8:c3:10:e6:ac:7f:7d:ab: 77:e4:8d:c5:66:f5:e7:71:c7:40:5c:c6:2e:69:cf:eb:eb:ff: d4:b1:fc:26:80:91:28:07:69:c7:b2:a9:51:69:6e:4c:b5:c3: 28:ca:f7:4b:90:3c:8d:43:3f:2e:99:8f:95:53:c2:c6:c6:85: 50:eb:6e:f7:8a:9c:43:a9:ee:e4:46:5e:7f:a6:c4:4f:ba:4c: c5:9a:a1:b9:59:aa:27:db:33:73:5f:f7:d5:fb:d9:61:d9:b6: 36:88:18:54:92:98:55:2b:f2:b1:d8:95:19:65:b1:56:5d:71: bb:9a:92:0b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKXlMkb5s7P8nTMR7xQgHLE8wWeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTQwMDQwMzlaFw0yNjAyMTMwMDQ1MzlaMDMxMTAvBgNV BAMTKEQzOERGMUZFQUI3OTE5MkQ3QzVBREYwN0VGNUJBRTI0QTg2N0QwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyB6Dp7wJxV/LNe5pWEwsLgrdP 5VZhRtrYEWbaq3g7Pk5KcIpsaCROa3j2fOb/eGy+LneGe0MM94kNFF6oc6kliQY8 45nNQPECA58NUoVKwmIYrEmjB9C9t/oNk5vh0MrDvSOeGHPClDhRq0NRpvtDjHhx 5j8VqDe6kVjmD+GAFNvlnq5qsk+lF4KQ/wtk5jridCejiLu3WyOpm9WcmOcS1wYT prlcE2LFVXp9S/CYsdeah/OTQt8ymHoZXi6KHC8SW9fI92Snf3imOm73hkAE5VxO AgSmaBbTDC535LZRZUQ9yDn6+JUG2iF4Wc6jgDsto9ZXCa+0Mpy7DXvKLDSpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTjfH+q3kZLXxa 3wfvW64kqGfQXDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUpW SFE2R3BtTUE0UGR3YWNDV0pFb2t4aFUxVlF6a3lwY3lYNlE5RTY2SkYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VK VkhRNkdwbU1BNFBkd2FjQ1dKRW9reGhVMVZRemt5cGN5WDZROUU2NkpGLzAvRDM4 REYxRkVBQjc5MTkyRDdDNUFERjA3RUY1QkFFMjRBODY3RDA1Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbYgMA0EAgACMAcDBQAoBGHsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQb0TANBgkqhkiG9w0BAQsFAAOCAQEAH3Nvf9IumqE3Xgys +pyYQfXBKeVWK/GKpLdj9wGDDpnY/uUQ0GHANjxAL4OzNbaEIhq3KxSi/P25O712 6iWjIDfztRLqUOpf8BazKma2ZxTRpg6o5ByN7d5cuCS9s+gVc5IvYLkiROK2zWo1 X3Gm8mW4//qUCD0ntKdD0uX0MguyeSdl0+ROsejDEOasf32rd+SNxWb153HHQFzG LmnP6+v/1LH8JoCRKAdpx7KpUWluTLXDKMr3S5A8jUM/LpmPlVPCxsaFUOtu94qc Q6nu5EZef6bET7pMxZqhuVmqJ9szc1/31fvZYdm2NogYVJKYVSvysdiVGWWxVl1x u5qSCw== -----END CERTIFICATE-----Generated at Tue Apr 15 07:52:49 2025 by rpki-client