$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer File: D53752ADA92E81931C29CA44ABDEEDDF373E93F7.cer (raw, json) Hash identifier: qi+fhqlc30XP+27AJrokjQ4LA9OLmdSOMO5pK0tuvx0= Subject key identifier: D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4F5E2D8955617AA41F241F0A7B8620CA9B80F288 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.mft caRepository: rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Dec 2024 17:33:20 +0000 Certificate not after: Thu 11 Dec 2025 17:38:20 +0000 Subordinate resources: AS: 267125 IP: 45.228.236.0/22 IP: 2804:4880::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 13:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5e:2d:89:55:61:7a:a4:1f:24:1f:0a:7b:86:20:ca:9b:80:f2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 12 17:33:20 2024 GMT Not After : Dec 11 17:38:20 2025 GMT Subject: CN=D53752ADA92E81931C29CA44ABDEEDDF373E93F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:cb:84:3b:fd:fb:fe:6c:c5:ed:92:03:fc: 6b:d7:63:ac:de:d2:9c:f3:75:c2:57:bd:cc:b1:72: 66:de:8a:a4:d9:d2:3f:77:a2:a1:0b:4c:98:36:ba: 66:cf:51:3f:5e:5a:95:18:62:ed:95:bc:1e:72:b1: 98:84:89:50:fd:d0:b8:ee:17:c6:30:cc:88:19:76: 43:2d:92:52:a7:ec:d3:0a:af:b3:ec:d1:1a:d8:f1: 72:3f:2c:f3:c1:96:f6:0f:c0:fa:42:f3:e5:da:43: 66:5b:bb:00:77:33:77:d7:e3:58:70:26:4b:46:70: bf:8b:b1:d5:27:dc:5a:25:22:39:94:f5:b9:37:97: 8c:16:42:27:85:f5:08:db:6e:23:97:42:fb:5b:51: 4f:e6:a5:be:a8:95:5f:fe:45:0f:8b:eb:2f:c1:ad: 20:3d:c9:36:46:9d:f2:56:74:e4:36:e6:78:19:d5: d2:f0:77:74:db:e4:9a:af:5a:b4:85:a9:88:f5:a5: d3:6b:26:67:17:0e:22:86:ec:be:4d:a0:09:93:cc: 63:ac:1d:25:4f:d8:17:fe:92:a7:38:89:f4:d7:31: ae:f2:64:ca:92:fc:0e:47:6d:81:c0:e1:e6:85:9c: 0d:1e:d1:70:33:66:1c:7f:03:fb:62:04:63:23:5d: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:37:52:AD:A9:2E:81:93:1C:29:CA:44:AB:DE:ED:DF:37:3E:93:F7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BBfUEw79NeQaUeJYNp5H4ffBMCNpKrGXCTooytn92Fvp/1/D53752ADA92E81931C29CA44ABDEEDDF373E93F7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.236.0/22 IPv6: 2804:4880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267125 Signature Algorithm: sha256WithRSAEncryption 34:4a:5b:da:10:73:88:dc:0e:8e:60:6e:14:36:65:43:9f:72: e6:37:48:c9:ea:ed:d7:e3:d2:8c:44:d5:73:ff:99:b1:7c:e5: e5:38:0b:b7:88:71:ea:c6:62:8a:e5:62:fe:9f:ff:9e:7e:6f: a3:65:a8:68:4c:fe:10:e9:5d:7d:97:be:51:39:7a:44:48:53: d7:9b:18:4a:c9:f3:0d:db:8d:ae:48:ba:c6:fe:4a:07:95:76: c1:69:ec:0a:98:83:69:19:a3:00:c4:74:23:f6:e9:80:ec:a1: d6:45:ac:94:82:80:8c:47:97:09:4c:36:56:6b:cd:a4:8c:f0: 6d:a1:93:ff:e8:61:ae:3a:9f:2d:4f:99:78:65:a4:3e:9c:79: 6f:8a:6f:00:7c:e2:b6:4d:64:71:2b:11:c2:01:f3:f9:c3:bc: dd:3c:62:2a:14:b8:ad:de:26:b1:11:a8:6d:02:c7:0f:c6:77: b4:8a:88:f1:2d:18:0b:9f:9b:78:cc:b8:4a:f4:5a:50:da:3c: 38:c8:bd:5b:9b:03:ee:cd:c9:fd:44:46:22:9b:a5:67:fd:83: a9:48:88:50:7d:dc:61:1d:80:eb:3c:f1:4b:68:44:75:22:c3: 4c:f4:ae:18:54:2b:20:0d:7b:73:4e:89:29:32:fe:b2:e0:d9: cd:14:73:63 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUT14tiVVheqQfJB8Ke4YgypuA8ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTIxNzMzMjBaFw0yNTEyMTExNzM4MjBaMDMxMTAvBgNV BAMTKEQ1Mzc1MkFEQTkyRTgxOTMxQzI5Q0E0NEFCREVFRERGMzczRTkzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTj8uEO/37/mzF7ZID/GvXY6ze 0pzzdcJXvcyxcmbeiqTZ0j93oqELTJg2umbPUT9eWpUYYu2VvB5ysZiEiVD90Lju F8YwzIgZdkMtklKn7NMKr7Ps0RrY8XI/LPPBlvYPwPpC8+XaQ2ZbuwB3M3fX41hw JktGcL+LsdUn3FolIjmU9bk3l4wWQieF9QjbbiOXQvtbUU/mpb6olV/+RQ+L6y/B rSA9yTZGnfJWdOQ25ngZ1dLwd3Tb5JqvWrSFqYj1pdNrJmcXDiKG7L5NoAmTzGOs HSVP2Bf+kqc4ifTXMa7yZMqS/A5HbYHA4eaFnA0e0XAzZhx/A/tiBGMjXdC7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVN1KtqS6Bkxwp ykSr3u3fNz6T9zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkJm VUV3NzlOZVFhVWVKWU5wNUg0ZmZCTUNOcEtyR1hDVG9veXRuOTJGdnAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JC ZlVFdzc5TmVRYVVlSllOcDVINGZmQk1DTnBLckdYQ1Rvb3l0bjkyRnZwLzEvRDUz NzUyQURBOTJFODE5MzFDMjlDQTQ0QUJERUVEREYzNzNFOTNGNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeTsMA0EAgACMAcDBQAoBEiAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTdTANBgkqhkiG9w0BAQsFAAOCAQEANEpb2hBziNwOjmBu FDZlQ59y5jdIyert1+PSjETVc/+ZsXzl5TgLt4hx6sZiiuVi/p//nn5vo2WoaEz+ EOldfZe+UTl6REhT15sYSsnzDduNrki6xv5KB5V2wWnsCpiDaRmjAMR0I/bpgOyh 1kWslIKAjEeXCUw2VmvNpIzwbaGT/+hhrjqfLU+ZeGWkPpx5b4pvAHzitk1kcSsR wgHz+cO83TxiKhS4rd4msRGobQLHD8Z3tIqI8S0YC5+beMy4SvRaUNo8OMi9W5sD 7s3J/URGIpulZ/2DqUiIUH3cYR2A6zzxS2hEdSLDTPSuGFQrIA17c06JKTL+suDZ zRRzYw== -----END CERTIFICATE-----Generated at Wed Apr 9 14:01:49 2025 by rpki-client