$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer File: D54C376960A26972A0B767BDA084048DFFE3673E.cer (raw, json) Hash identifier: PbakAUeg7FQHG1F1aP2imYMb6W2TUb50UhB9tmSIV44= Subject key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A2ED242ABEADAA47DE012349C5304693877B979 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft caRepository: rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:37 +0000 Certificate not after: Wed 04 Mar 2026 18:40:37 +0000 Subordinate resources: AS: 2716 AS: 19200 IP: 143.54.0.0/16 IP: 168.228.252.0/22 IP: 168.232.236.0/22 IP: 200.17.80.0/20 IP: 200.17.160.0/20 IP: 200.18.64.0/20 IP: 200.19.0.0/21 IP: 200.19.240.0/20 IP: 200.128.240.0/20 IP: 200.132.0.0/16 IP: 2804::/32 IP: 2804:1f20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2e:d2:42:ab:ea:da:a4:7d:e0:12:34:9c:53:04:69:38:77:b9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:37 2025 GMT Not After : Mar 4 18:40:37 2026 GMT Subject: CN=D54C376960A26972A0B767BDA084048DFFE3673E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:83:4c:c3:d3:6f:30:59:07:4a:73:9b:29:ab: c1:c7:aa:15:ca:16:53:21:2b:95:3e:db:8d:76:a5: 0d:8a:5e:8a:0d:d1:70:ed:c2:92:af:f4:f0:ca:ab: 28:cf:78:38:2d:86:79:2e:ab:e6:6c:5e:84:a5:b7: de:e1:49:27:84:25:26:9b:08:b7:b5:8d:4c:70:5e: c1:53:cd:55:9a:9c:dd:80:eb:3c:52:66:7a:fe:f9: c9:da:76:49:07:4c:28:81:47:2e:e5:42:95:99:75: f3:33:18:9d:c9:c1:43:04:dd:75:b9:d6:01:d3:bf: ae:a1:5b:ed:76:f5:51:98:59:e8:c3:d2:cb:e4:9d: 51:8f:f5:d0:7c:e6:a8:b2:8a:4d:b2:0f:d0:25:8c: b9:db:1a:06:82:6b:ea:f2:de:44:fa:20:75:38:0b: 36:7c:42:e6:75:f2:d8:ce:1b:49:08:5c:f3:d6:08: c5:27:96:9a:66:39:8e:66:ea:b4:46:dd:87:0e:c8: 20:65:90:3b:27:bb:12:b1:ca:6c:87:2d:fe:fb:1d: 81:08:4d:8c:fe:46:a0:0b:d6:18:16:f1:f9:b2:bc: d6:b9:b3:e2:2a:e3:c1:60:4e:76:d4:1b:5a:a1:7e: c7:87:ec:d8:15:bd:cd:0b:c5:8e:c4:b0:a7:b6:a1: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.54.0.0/16 168.228.252.0/22 168.232.236.0/22 200.17.80.0/20 200.17.160.0/20 200.18.64.0/20 200.19.0.0/21 200.19.240.0/20 200.128.240.0/20 200.132.0.0/16 IPv6: 2804::/32 2804:1f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2716 19200 Signature Algorithm: sha256WithRSAEncryption bb:e6:96:5a:ab:bd:31:13:7a:93:39:35:4f:71:e0:b8:78:bb: a4:32:a1:49:02:71:3b:c3:3c:d5:3e:b6:1e:f6:7f:90:42:f3: 7a:93:23:82:8d:58:8c:72:e1:26:6c:34:6a:e5:d9:b6:4d:27: 5c:10:7f:c6:85:c8:db:fd:30:81:49:19:8c:2e:77:d4:bb:38: de:b1:ea:29:bb:44:7c:03:0c:7b:e3:35:67:79:c8:34:01:be: 25:c0:f1:07:92:ba:a2:be:aa:c6:79:9d:71:53:0d:ee:fe:2d: 0f:40:8b:4e:54:5e:c7:fa:82:e1:2a:81:0e:b1:ee:bc:b0:9c: ab:7f:f7:37:88:af:00:ae:01:d1:c5:89:b9:db:dc:c4:1e:1e: 6c:51:6e:d7:cf:f1:6d:bd:da:09:90:c8:c7:91:7e:e7:07:ec: 4e:12:ba:ff:10:c7:e3:42:93:d5:8d:90:53:71:79:7c:d7:88: e8:d4:81:02:e4:36:42:bd:0b:31:47:b1:2f:ae:a7:c3:d4:e6: 80:59:5f:26:e8:59:31:c4:03:da:87:68:04:e3:ad:d6:2e:f4: fd:8f:c2:bd:6c:0b:32:11:9a:1c:34:3a:03:3f:0e:50:04:72: 6f:c0:e7:ff:bd:f0:97:ca:c3:21:ed:3c:b6:35:44:76:bb:81: e8:01:d5:80 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUWi7SQqvq2qR94BI0nFMEaTh3uXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzdaFw0yNjAzMDQxODQwMzdaMDMxMTAvBgNV BAMTKEQ1NEMzNzY5NjBBMjY5NzJBMEI3NjdCREEwODQwNDhERkZFMzY3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKg0zD028wWQdKc5spq8HHqhXK FlMhK5U+2412pQ2KXooN0XDtwpKv9PDKqyjPeDgthnkuq+ZsXoSlt97hSSeEJSab CLe1jUxwXsFTzVWanN2A6zxSZnr++cnadkkHTCiBRy7lQpWZdfMzGJ3JwUME3XW5 1gHTv66hW+129VGYWejD0svknVGP9dB85qiyik2yD9AljLnbGgaCa+ry3kT6IHU4 CzZ8QuZ18tjOG0kIXPPWCMUnlppmOY5m6rRG3YcOyCBlkDsnuxKxymyHLf77HYEI TYz+RqAL1hgW8fmyvNa5s+Iq48FgTnbUG1qhfseH7NgVvc0LxY7EsKe2oVRXAgMB AAGjggN3MIIDczAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVTDdpYKJpcqC3 Z72ghASN/+NnPjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVi NEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFTd2EvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVi NEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFTd2EvMS9ENTRD Mzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2NzNFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwaQYIKwYBBQUHAQcB Af8EWjBYMEAEAgABMDoDAwCPNgMEAqjk/AMEAqjo7AMEBMgRUAMEBMgRoAMEBMgS QAMEA8gTAAMEBMgT8AMEBMiA8AMDAMiEMBQEAgACMA4DBQAoBAAAAwUAKAQfIDAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgIKnAICSwAwDQYJKoZIhvcNAQELBQADggEB ALvmllqrvTETepM5NU9x4Lh4u6QyoUkCcTvDPNU+th72f5BC83qTI4KNWIxy4SZs NGrl2bZNJ1wQf8aFyNv9MIFJGYwud9S7ON6x6im7RHwDDHvjNWd5yDQBviXA8QeS uqK+qsZ5nXFTDe7+LQ9Ai05UXsf6guEqgQ6x7rywnKt/9zeIrwCuAdHFibnb3MQe HmxRbtfP8W292gmQyMeRfucH7E4Suv8Qx+NCk9WNkFNxeXzXiOjUgQLkNkK9CzFH sS+up8PU5oBZXyboWTHEA9qHaATjrdYu9P2Pwr1sCzIRmhw0OgM/DlAEcm/A5/+9 8JfKwyHtPLY1RHa7gegB1YA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:18 2025 by rpki-client