$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer File: D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer (raw, json) Hash identifier: mgKMf8I8BS/XzRc5N+VICiDY+RuFDg9mmSZ/DEqz1wo= Subject key identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 278DE7BB62090FD521A761F39386FDCACF9A5B12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft caRepository: rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 09 Mar 2025 10:43:54 +0000 Certificate not after: Sun 08 Mar 2026 10:48:54 +0000 Subordinate resources: AS: 271246 IP: 192.231.118.0/23 IP: 2801:80:3e20::/44 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8d:e7:bb:62:09:0f:d5:21:a7:61:f3:93:86:fd:ca:cf:9a:5b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 9 10:43:54 2025 GMT Not After : Mar 8 10:48:54 2026 GMT Subject: CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:71:62:dc:c2:3a:d9:21:53:ea:0c:e8:fd: 88:01:bd:72:7b:52:6c:9e:f1:d3:69:1e:ed:57:26: cd:01:0c:a1:bf:78:09:0a:fd:b5:8d:81:dc:64:bf: 72:af:11:83:86:98:26:eb:04:0d:e1:8b:96:31:15: 66:c3:1e:d0:79:ae:0f:4a:b0:f2:1b:09:3a:2c:2d: 05:cf:19:1c:2b:c7:b1:6c:49:4e:5b:98:dd:56:45: ed:99:9e:30:24:65:d1:1d:b7:0e:df:0c:24:ef:a1: 5e:49:5b:1d:e1:ea:c2:6c:7f:29:50:d1:21:60:03: 59:08:32:53:fa:5b:4d:6b:2d:a2:89:0a:3e:a8:be: f3:a5:6d:73:ac:fa:11:b1:7a:f5:b4:eb:fc:66:70: c8:b7:be:c7:bd:62:11:d9:61:5a:27:80:ad:36:77: e2:39:27:25:9a:f9:a6:0f:b6:4a:ae:0a:fc:89:54: c9:1b:a7:94:31:e3:c8:a8:73:07:fd:2d:2e:1a:ca: 3a:7c:48:37:85:fb:e0:24:6e:1e:d9:69:55:8a:65: fd:80:1b:6b:ae:30:68:45:80:56:3a:33:6e:ce:d6: f2:6d:48:b6:8e:7c:59:70:fe:9a:f8:29:fa:c9:40: dd:cb:b2:73:8f:1d:5c:80:60:16:42:84:76:f7:14: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.231.118.0/23 IPv6: 2801:80:3e20::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271246 Signature Algorithm: sha256WithRSAEncryption b7:81:fd:2a:8c:98:07:9b:71:45:5f:da:a8:b1:0e:7d:c1:4f: 95:5c:05:d6:ab:b7:0f:33:19:ff:88:29:4b:58:9b:da:b0:4a: a6:85:4f:cc:a6:70:70:08:07:e6:35:02:41:7f:df:b8:2f:7c: ae:50:91:66:4b:fa:9c:42:4f:67:a4:1d:6c:7c:5f:71:5a:b8: cb:62:f5:00:f6:bc:ad:80:fc:cf:11:ee:52:01:bd:51:68:6f: 58:0a:2a:0a:eb:e5:60:16:0f:14:5e:39:df:1f:95:aa:ba:e2: 11:f6:33:62:6d:69:1d:40:a2:05:36:ce:77:da:d2:43:02:00: 54:7f:08:cf:0c:06:d6:d8:18:db:2a:96:40:7b:e4:7e:8c:e7: 10:db:ab:0b:ed:b4:03:80:99:d0:83:27:08:f2:92:70:44:ab: 99:eb:e4:c4:e8:2d:67:8c:16:01:0b:bc:b5:63:94:01:e1:e5: fb:06:d0:05:85:a1:53:4c:5b:f8:b5:a2:48:e1:1b:9a:5e:3c: 17:3a:2e:a7:4e:02:be:37:f1:9a:88:19:28:c7:3a:85:c9:08: b5:9b:0e:55:12:aa:db:e6:ea:4d:d6:d2:6b:7c:40:3c:51:8b: 52:a7:b4:af:da:fe:81:18:b3:ef:e4:96:62:72:e6:80:82:42: d3:ef:35:ae -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUJ43nu2IJD9Uhp2Hzk4b9ys+aWxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDkxMDQzNTRaFw0yNjAzMDgxMDQ4NTRaMDMxMTAvBgNV BAMTKEQ2RDk3MzlCNTI4MEQ4MjgyOUFGQUQ1MzFFMzlENUZBODZFMDRBRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPnFi3MI62SFT6gzo/YgBvXJ7 Umye8dNpHu1XJs0BDKG/eAkK/bWNgdxkv3KvEYOGmCbrBA3hi5YxFWbDHtB5rg9K sPIbCTosLQXPGRwrx7FsSU5bmN1WRe2ZnjAkZdEdtw7fDCTvoV5JWx3h6sJsfylQ 0SFgA1kIMlP6W01rLaKJCj6ovvOlbXOs+hGxevW06/xmcMi3vse9YhHZYVongK02 d+I5JyWa+aYPtkquCvyJVMkbp5Qx48iocwf9LS4ayjp8SDeF++Akbh7ZaVWKZf2A G2uuMGhFgFY6M27O1vJtSLaOfFlw/pr4KfrJQN3LsnOPHVyAYBZChHb3FA9TAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTW2XObUoDYKCmv rVMeOdX6huBK0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDVD aFVYRDI0WllvM3g1ZWg4R1M1Z3hINVhMcUVHRG9EQkVqcUEza1U5cG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g1 Q2hVWEQyNFpZbzN4NWVoOEdTNWd4SDVYTHFFR0RvREJFanFBM2tVOXBuLzAvRDZE OTczOUI1MjgwRDgyODI5QUZBRDUzMUUzOUQ1RkE4NkUwNEFEMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQBwOd2MA8EAgACMAkDBwQoAQCAPiAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCOOMA0GCSqGSIb3DQEBCwUAA4IBAQC3gf0qjJgHm3FF X9qosQ59wU+VXAXWq7cPMxn/iClLWJvasEqmhU/MpnBwCAfmNQJBf9+4L3yuUJFm S/qcQk9npB1sfF9xWrjLYvUA9rytgPzPEe5SAb1RaG9YCioK6+VgFg8UXjnfH5Wq uuIR9jNibWkdQKIFNs532tJDAgBUfwjPDAbW2BjbKpZAe+R+jOcQ26sL7bQDgJnQ gycI8pJwRKuZ6+TE6C1njBYBC7y1Y5QB4eX7BtAFhaFTTFv4taJI4RuaXjwXOi6n TgK+N/GaiBkoxzqFyQi1mw5VEqrb5upN1tJrfEA8UYtSp7Sv2v6BGLPv5JZicuaA gkLT7zWu -----END CERTIFICATE-----Generated at Tue Apr 8 12:13:22 2025 by rpki-client