$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer File: D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer (raw, json) Hash identifier: r0aP/yxaUBX+PCF/fz9qH1t/b90k1siER+ttOmppHH4= Subject key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 555CAE94087FDA6AFA35FB11249C2B523D0CC724 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft caRepository: rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:15 +0000 Certificate not after: Fri 06 Mar 2026 14:42:15 +0000 Subordinate resources: AS: 266498 AS: 269051 IP: 45.178.248.0/22 IP: 170.244.72.0/22 IP: 2804:38bc::/32 IP: 2804:5eb4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 21:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5c:ae:94:08:7f:da:6a:fa:35:fb:11:24:9c:2b:52:3d:0c:c7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:15 2025 GMT Not After : Mar 6 14:42:15 2026 GMT Subject: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:96:6e:20:01:f6:c8:ab:f6:e4:19:92:2b: 93:d1:40:25:0a:90:ca:3a:ef:41:06:4d:44:40:0b: eb:ff:d8:fb:b2:d1:0b:6c:a3:0c:e2:00:4e:a7:37: 91:c9:da:00:2b:12:dd:73:43:01:ed:09:5e:dd:8e: 4a:b0:71:44:db:bb:9f:40:4d:fe:d4:aa:4d:ee:e5: 95:0e:3b:44:e5:ca:b7:e4:e2:a8:76:c4:b5:52:5e: 62:42:37:a7:78:79:8c:73:fc:37:20:b5:77:f2:bc: 40:bb:c0:c0:ae:85:ee:5d:09:6d:08:5e:a5:d1:71: a0:69:59:7f:9c:95:d4:05:1e:73:40:b8:b3:bf:a8: 8e:e1:b4:2a:5b:68:b8:87:8d:63:5a:2d:53:9f:c4: 44:0e:94:3e:77:95:c6:d3:19:1e:79:e9:74:f0:d8: 39:07:9f:95:03:93:a3:a2:f7:2f:78:b7:34:24:7b: a5:9c:77:69:ba:d6:f1:5f:f2:7a:fd:f9:dc:bb:da: 02:14:a5:7d:fe:e7:16:fc:ce:0c:6e:81:01:be:cc: bf:38:31:8c:55:fc:87:cf:44:51:f5:68:32:4e:a7: 33:d2:b1:63:18:f2:94:27:a9:14:00:64:0b:e8:10: 74:f9:c9:1a:6c:b5:a4:cf:d0:19:70:ca:01:7f:1d: 60:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.248.0/22 170.244.72.0/22 IPv6: 2804:38bc::/32 2804:5eb4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266498 269051 Signature Algorithm: sha256WithRSAEncryption a2:d7:92:2a:3d:87:56:65:5e:a8:4d:ab:cc:8e:d3:a5:7e:89: d6:de:76:4e:14:07:2d:ca:08:07:00:4a:9e:5c:75:ec:ec:df: 2f:b0:d4:56:3c:03:28:df:1c:ce:4c:c1:e3:ff:3b:a5:41:eb: fb:b4:85:db:20:0e:19:5c:58:fb:3e:cc:0a:9d:12:e3:30:df: 94:00:49:a9:5a:00:d7:dd:e7:4a:b4:38:7c:c1:7d:52:7f:ff: f1:fa:2e:a5:ea:68:ee:ec:03:51:30:cb:52:c8:2a:ff:6e:7a: 11:1d:97:a5:95:92:cb:aa:29:cf:47:68:74:42:e6:bf:b7:6b: f4:c7:89:6a:27:94:75:a8:ae:e3:1f:a3:4b:1b:54:59:c5:02: 85:00:03:03:23:87:5d:a1:eb:a9:88:20:fe:aa:af:57:cb:20: 29:d5:17:76:c8:cb:51:0f:fb:dd:d3:bd:f8:5e:db:e2:22:80: 58:36:7a:df:af:a4:65:4e:eb:43:82:4d:ba:93:76:9d:2b:29: a2:bf:cd:1e:92:a3:d3:8e:85:a1:6c:24:bd:bb:07:63:22:2e: df:49:3e:ab:92:ab:7d:a6:fd:39:5e:e5:58:88:f3:f5:ce:9e: 66:bd:17:4a:19:6d:09:07:0a:4d:e7:aa:86:6b:bf:4d:a2:11: 41:b7:01:45 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUVVyulAh/2mr6NfsRJJwrUj0MxyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MTVaFw0yNjAzMDYxNDQyMTVaMDMxMTAvBgNV BAMTKEQ5N0VGRkE1ODE4NkVBRTZCNkY3MDExMDBFNEZBQ0M3ODRBQUNCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvpZuIAH2yKv25BmSK5PRQCUK kMo670EGTURAC+v/2Puy0QtsowziAE6nN5HJ2gArEt1zQwHtCV7djkqwcUTbu59A Tf7Uqk3u5ZUOO0Tlyrfk4qh2xLVSXmJCN6d4eYxz/DcgtXfyvEC7wMCuhe5dCW0I XqXRcaBpWX+cldQFHnNAuLO/qI7htCpbaLiHjWNaLVOfxEQOlD53lcbTGR556XTw 2DkHn5UDk6Oi9y94tzQke6Wcd2m61vFf8nr9+dy72gIUpX3+5xb8zgxugQG+zL84 MYxV/IfPRFH1aDJOpzPSsWMY8pQnqRQAZAvoEHT5yRpstaTP0BlwygF/HWDbAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZfv+lgYbq5rb3 ARAOT6zHhKrLQDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlc2 dUNKd1BlakNlSlFTM2ZoTTFoQmI2SkY5bkZTc3I4UDRQQUUyS2R1a3cvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JX NnVDSndQZWpDZUpRUzNmaE0xaEJiNkpGOW5GU3NyOFA0UEFFMktkdWt3LzEvRDk3 RUZGQTU4MTg2RUFFNkI2RjcwMTEwMEU0RkFDQzc4NEFBQ0I0MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjASBAIAATAMAwQCLbL4AwQCqvRIMBQEAgACMA4DBQAoBDi8AwUAKARe tDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEEQICAwQa+zANBgkqhkiG9w0BAQsF AAOCAQEAoteSKj2HVmVeqE2rzI7TpX6J1t52ThQHLcoIBwBKnlx17OzfL7DUVjwD KN8czkzB4/87pUHr+7SF2yAOGVxY+z7MCp0S4zDflABJqVoA193nSrQ4fMF9Un// 8foupepo7uwDUTDLUsgq/256ER2XpZWSy6opz0dodELmv7dr9MeJaieUdaiu4x+j SxtUWcUChQADAyOHXaHrqYgg/qqvV8sgKdUXdsjLUQ/73dO9+F7b4iKAWDZ636+k ZU7rQ4JNupN2nSspor/NHpKj046FoWwkvbsHYyIu30k+q5Krfab9OV7lWIjz9c6e Zr0XShltCQcKTeeqhmu/TaIRQbcBRQ== -----END CERTIFICATE-----Generated at Tue Apr 8 23:38:57 2025 by rpki-client