$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer File: DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.cer (raw, json) Hash identifier: z7x8iUrNerlyZszT6cKIDaS+10IxG7TFEoOB//xhyKQ= Subject key identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 397FA49F0C556562F6600EA3EA1E058B33FE0BD7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft caRepository: rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 04 Apr 2025 19:24:21 +0000 Certificate not after: Fri 03 Apr 2026 19:29:21 +0000 Subordinate resources: AS: 267024 IP: 45.227.112.0/22 IP: 2804:46fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 21:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7f:a4:9f:0c:55:65:62:f6:60:0e:a3:ea:1e:05:8b:33:fe:0b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 19:24:21 2025 GMT Not After : Apr 3 19:29:21 2026 GMT Subject: CN=DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:18:93:58:e7:97:f1:9e:55:64:d7:b5:dd: 6c:f7:00:d2:46:74:2c:cd:e2:d7:35:ec:41:8d:2a: e2:4b:e0:0d:9a:c2:80:6e:d8:44:35:56:67:fd:ab: b3:a6:13:a9:7d:89:38:a7:5a:ed:e2:39:92:6d:9c: 24:6d:6e:f4:d4:d3:13:c6:6b:35:fa:66:88:a3:b8: a5:cc:90:99:b2:8b:62:a0:6f:70:f0:71:ce:68:cb: e2:72:6f:b6:64:ce:86:79:05:3a:e7:53:03:08:dd: 54:33:65:9e:58:13:0a:9f:db:cc:76:5b:9a:6f:3f: 52:0f:2b:eb:4a:07:3b:4d:d5:8e:67:79:97:cf:6c: 71:e6:41:1b:dc:00:ca:65:72:38:0e:66:ef:c3:12: db:c0:ca:6f:8f:c6:df:16:3c:ed:94:97:34:12:77: ba:8e:4a:3f:57:f5:c0:06:f7:0f:45:91:ca:c0:7e: 3c:56:fd:9c:4a:77:02:31:d0:0f:46:96:f6:ea:5e: c3:84:e6:70:1b:03:94:4b:fa:77:15:3c:62:8d:e5: e7:81:f1:39:ad:7c:e3:dd:7c:0d:79:f7:a7:28:5c: 2d:37:a7:f9:fa:5d:40:f8:69:61:33:45:48:0f:d1: a2:bc:91:c7:2a:3f:2f:71:7e:1a:11:54:12:8e:08: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:0C:16:EA:3A:3B:82:65:01:D0:2A:C2:E6:2E:F9:A1:CD:97:12:0C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/1/DC0C16EA3A3B826501D02AC2E62EF9A1CD97120C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.112.0/22 IPv6: 2804:46fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267024 Signature Algorithm: sha256WithRSAEncryption 08:d6:28:9c:57:31:d9:fd:91:18:08:98:9f:7f:aa:f5:bd:d4: 7c:26:86:d3:65:c9:74:ad:a0:5b:87:41:9f:53:69:94:c5:1f: 73:4c:9f:ea:d3:73:d7:d6:ca:e6:82:b9:9c:16:ed:39:49:1b: 36:76:8e:b0:d4:cd:17:91:07:21:b4:2a:e3:42:84:a3:9b:ef: 9d:ab:6b:75:f2:3e:ae:87:cc:40:45:c4:d1:fa:90:33:68:02: d4:72:6e:3c:87:59:02:84:bd:35:b3:98:62:dd:e5:ce:29:4a: d3:04:5a:47:b4:34:73:53:ad:07:a2:4e:9d:c1:63:1c:5a:55: 41:0f:0c:8f:f7:e5:8e:58:c6:09:48:cf:af:ed:0e:70:f4:dd: aa:15:1d:23:ff:c7:a3:5a:de:e5:47:3c:69:ea:0b:9a:0a:1b: e5:07:6a:0e:69:50:be:b6:04:2c:89:19:b1:d8:66:5d:a0:cf: cd:03:f8:22:be:71:03:47:43:22:9e:e6:04:34:ae:a8:6d:b9: d1:4d:b5:e3:42:e1:14:57:c3:16:c4:ae:09:58:9f:b8:fd:a0: 5c:36:be:86:d3:9c:a3:44:da:fe:b2:3b:a5:92:dd:3d:ce:75: 87:f9:c0:0a:dc:9d:ec:c9:ce:24:84:1e:0e:bb:d2:56:a6:47: e5:7a:c9:e1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOX+knwxVZWL2YA6j6h4FizP+C9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDQxOTI0MjFaFw0yNjA0MDMxOTI5MjFaMDMxMTAvBgNV BAMTKERDMEMxNkVBM0EzQjgyNjUwMUQwMkFDMkU2MkVGOUExQ0Q5NzEyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOBiTWOeX8Z5VZNe13Wz3ANJG dCzN4tc17EGNKuJL4A2awoBu2EQ1Vmf9q7OmE6l9iTinWu3iOZJtnCRtbvTU0xPG azX6ZoijuKXMkJmyi2Kgb3Dwcc5oy+Jyb7ZkzoZ5BTrnUwMI3VQzZZ5YEwqf28x2 W5pvP1IPK+tKBztN1Y5neZfPbHHmQRvcAMplcjgOZu/DEtvAym+Pxt8WPO2UlzQS d7qOSj9X9cAG9w9FkcrAfjxW/ZxKdwIx0A9GlvbqXsOE5nAbA5RL+ncVPGKN5eeB 8TmtfOPdfA1596coXC03p/n6XUD4aWEzRUgP0aK8kccqPy9xfhoRVBKOCIltAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTcDBbqOjuCZQHQ KsLmLvmhzZcSDDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEZ3 dEM1b2g0OFpqR2FFS211SFJEUmo0Y05VN3M0U3ZhVXY2dnd0V3VnMU4vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhG d3RDNW9oNDhaakdhRUttdUhSRFJqNGNOVTdzNFN2YVV2NnZ3dFd1ZzFOLzEvREMw QzE2RUEzQTNCODI2NTAxRDAyQUMyRTYyRUY5QTFDRDk3MTIwQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeNwMA0EAgACMAcDBQAoBEb8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTEDANBgkqhkiG9w0BAQsFAAOCAQEACNYonFcx2f2RGAiY n3+q9b3UfCaG02XJdK2gW4dBn1NplMUfc0yf6tNz19bK5oK5nBbtOUkbNnaOsNTN F5EHIbQq40KEo5vvnatrdfI+rofMQEXE0fqQM2gC1HJuPIdZAoS9NbOYYt3lzilK 0wRaR7Q0c1OtB6JOncFjHFpVQQ8Mj/fljljGCUjPr+0OcPTdqhUdI//Ho1re5Uc8 aeoLmgob5QdqDmlQvrYELIkZsdhmXaDPzQP4Ir5xA0dDIp7mBDSuqG250U2140Lh FFfDFsSuCVifuP2gXDa+htOco0Ta/rI7pZLdPc51h/nACtyd7MnOJIQeDrvSVqZH 5XrJ4Q== -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:10 2025 by rpki-client