$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer File: D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer (raw, json) Hash identifier: lY3fE3ZA9YS8qYgQUl1xNiHmKbc4dNTCtd9Di8115R8= Subject key identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6A47086E295394161986B13879CC11AA54C148C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft caRepository: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 07 Apr 2025 18:02:21 +0000 Certificate not after: Mon 06 Apr 2026 18:07:21 +0000 Subordinate resources: AS: 271624 IP: 177.73.128.0/22 IP: 2804:7e70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 01:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:47:08:6e:29:53:94:16:19:86:b1:38:79:cc:11:aa:54:c1:48:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 18:02:21 2025 GMT Not After : Apr 6 18:07:21 2026 GMT Subject: CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:5c:b1:b1:c2:19:eb:6d:c6:fa:29:c8:86: 1f:42:af:ae:65:26:1a:e9:77:7c:33:4e:f9:95:f3: 2c:35:e8:a7:49:2c:a2:96:cd:5f:75:f0:ec:68:cd: 75:ae:7b:4a:bf:81:47:ad:10:be:82:fc:92:4b:33: 1e:33:98:90:a8:fe:fb:ad:fe:a8:ec:a3:53:9d:02: 6d:2e:1c:b4:75:e3:74:b5:1f:02:2c:e7:8a:f0:4d: 1a:27:e4:7a:e7:fc:77:76:b4:3c:b1:52:91:0a:7c: 97:da:0f:ca:56:ac:be:60:f1:46:4f:52:a7:7e:1e: fc:3c:ba:56:48:d7:ae:33:51:87:d8:ca:88:84:6c: 67:12:22:84:ac:84:21:49:18:3c:28:71:22:90:4b: a5:47:96:da:a0:b1:54:be:20:fd:b9:20:e3:ff:3f: d8:07:82:d9:b6:af:22:65:56:a2:35:b6:82:03:f5: 16:44:52:fe:21:99:12:cf:c2:52:7b:12:eb:ce:5c: fa:68:b7:2d:60:c7:3a:2f:bb:d1:5d:95:ad:b5:f9: 59:e1:79:3a:f4:e3:cc:77:9f:09:64:bf:21:fd:8d: 81:f4:c8:28:94:e1:bd:6f:02:ff:37:45:61:b3:f2: ce:3b:21:a5:dd:73:e6:85:4a:b1:78:41:26:cb:14: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.128.0/22 IPv6: 2804:7e70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271624 Signature Algorithm: sha256WithRSAEncryption 9f:02:3a:9d:58:ec:9b:bc:9c:a0:70:02:c3:69:0f:57:33:34: 24:fb:02:f9:b1:9f:72:f9:c0:60:ac:cb:66:89:26:a1:44:76: 2f:e7:44:2c:4a:86:15:af:aa:22:83:c0:f1:3d:35:21:c6:88: dc:c4:af:c8:40:f3:51:c0:b1:f3:1e:43:26:b1:3c:04:78:e5: 90:84:56:99:6d:bf:d1:5c:cb:a2:63:d9:52:a2:f2:7d:5f:7a: a0:24:b9:13:f8:30:b0:33:8b:0a:77:5a:f7:13:9e:c5:43:a1: e5:ce:20:64:61:a4:a8:59:4a:98:64:56:57:35:90:55:00:da: b6:67:3f:38:61:64:f4:43:3c:60:60:f8:7c:68:83:33:5d:79: e6:d8:19:0a:d1:1e:92:40:d8:a0:d9:71:be:c9:dd:1e:87:10: 56:9a:e9:55:f1:b9:ae:0c:b3:a5:9d:7d:72:8c:fa:2f:0b:3e: fc:aa:35:54:2b:96:9a:0e:be:af:5b:79:48:b6:77:9a:13:29: 4e:5e:c4:e0:ca:f9:0f:5f:09:2f:14:a3:0d:8f:0a:1b:87:a9: 63:21:e6:53:f8:c2:6d:65:d6:06:0c:1b:69:03:d2:6a:2f:8a: 98:76:b5:f9:67:20:2b:2b:0e:ce:ef:5f:dc:a5:d7:54:a3:b8: 49:23:bb:7a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUakcIbilTlBYZhrE4ecwRqlTBSMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDcxODAyMjFaFw0yNjA0MDYxODA3MjFaMDMxMTAvBgNV BAMTKEQ1MTU5NzBBOTY4NERBNUNFRTJBOTcwRDIyQzlGNzlBRkE1MDBGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5klyxscIZ623G+inIhh9Cr65l Jhrpd3wzTvmV8yw16KdJLKKWzV918OxozXWue0q/gUetEL6C/JJLMx4zmJCo/vut /qjso1OdAm0uHLR143S1HwIs54rwTRon5Hrn/Hd2tDyxUpEKfJfaD8pWrL5g8UZP Uqd+Hvw8ulZI164zUYfYyoiEbGcSIoSshCFJGDwocSKQS6VHltqgsVS+IP25IOP/ P9gHgtm2ryJlVqI1toID9RZEUv4hmRLPwlJ7EuvOXPpoty1gxzovu9Fdla21+Vnh eTr048x3nwlkvyH9jYH0yCiU4b1vAv83RWGz8s47IaXdc+aFSrF4QSbLFAE/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVFZcKloTaXO4q lw0iyfea+lAPeTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXJu SlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJpN3IvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vy bkpSV2djMmNxNUE3cXJ3TExQV0pVcUpQZlUyOW1CSnpLajI1cVhyaTdyLzAvRDUx NTk3MEE5Njg0REE1Q0VFMkE5NzBEMjJDOUY3OUFGQTUwMEY3OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsUmAMA0EAgACMAcDBQAoBH5wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlCDANBgkqhkiG9w0BAQsFAAOCAQEAnwI6nVjsm7ycoHAC w2kPVzM0JPsC+bGfcvnAYKzLZokmoUR2L+dELEqGFa+qIoPA8T01IcaI3MSvyEDz UcCx8x5DJrE8BHjlkIRWmW2/0VzLomPZUqLyfV96oCS5E/gwsDOLCnda9xOexUOh 5c4gZGGkqFlKmGRWVzWQVQDatmc/OGFk9EM8YGD4fGiDM1155tgZCtEekkDYoNlx vsndHocQVprpVfG5rgyzpZ19coz6Lws+/Ko1VCuWmg6+r1t5SLZ3mhMpTl7E4Mr5 D18JLxSjDY8KG4epYyHmU/jCbWXWBgwbaQPSai+KmHa1+WcgKysOzu9f3KXXVKO4 SSO7eg== -----END CERTIFICATE-----Generated at Tue Apr 8 00:39:22 2025 by rpki-client