$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer File: DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer (raw, json) Hash identifier: eUAB5La/bEkOw9g72bYlasc8sw7kDQUzCvi2Hzev7F4= Subject key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E8F59E41C71998E8FC84F08BA90E0C2F73992C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.mft caRepository: rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Feb 2025 17:58:47 +0000 Certificate not after: Mon 09 Feb 2026 18:03:47 +0000 Subordinate resources: AS: 269024 IP: 45.178.100.0/22 IP: 2804:5e4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8f:59:e4:1c:71:99:8e:8f:c8:4f:08:ba:90:e0:c2:f7:39:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 10 17:58:47 2025 GMT Not After : Feb 9 18:03:47 2026 GMT Subject: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:85:1c:e1:45:f7:62:52:05:4d:4c:41:b9: 23:c9:a7:d7:44:f7:6e:a4:ab:c7:17:45:3b:3d:43: 33:2f:07:69:88:22:5f:0c:66:ad:f2:f7:5e:4e:f6: 98:9b:2a:e9:38:89:1c:31:89:bc:b7:18:5d:72:55: 7d:dd:73:e9:a0:79:b6:c8:ed:a3:26:a9:33:e6:05: 64:c6:25:1e:12:4c:c9:b2:60:d0:53:b3:20:6a:b4: ee:ac:84:df:3b:08:d5:0f:65:78:b5:31:23:c8:1f: 2b:71:f8:34:5c:1d:12:7d:fb:38:43:67:24:5e:65: 37:67:35:d4:bd:16:c0:8e:a3:04:45:86:d3:62:51: 3e:c7:bb:fb:61:03:61:5b:ed:8d:83:20:7a:7c:b6: 2a:8d:42:dd:c0:97:26:dd:47:33:19:ca:aa:17:f6: 7f:ec:3e:7e:62:f6:13:f6:46:69:68:7c:d9:90:5f: 3c:84:bc:6d:89:3c:30:1a:3c:d2:f6:47:ba:fb:c9: 51:f1:00:1f:c4:59:f8:40:1f:6e:f7:5a:22:38:ab: 87:fd:58:ec:2c:44:18:1e:5e:25:7c:06:44:40:9d: f6:ae:fa:d3:1f:fa:07:89:90:c4:81:a7:e4:d0:f6: 94:f6:a1:9e:24:16:6a:75:1a:ef:83:ab:f7:6c:c4: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.100.0/22 IPv6: 2804:5e4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269024 Signature Algorithm: sha256WithRSAEncryption 15:08:f8:1f:64:2a:1d:e2:1e:5f:7d:b6:5e:79:57:8f:6d:d2: 4d:53:0b:bd:40:05:34:39:9a:9c:b6:68:d8:00:3e:65:ca:7b: 94:ed:f4:ae:90:ff:60:45:4e:a1:8c:a8:38:15:5d:88:0a:e7: 94:8e:4c:53:c8:ef:c5:74:38:d1:fe:95:a7:e1:29:37:15:bb: c0:b5:87:e2:35:85:b3:4b:00:f0:46:96:69:35:6c:63:74:9c: 35:5e:2a:5d:1c:51:01:3a:d3:86:67:a4:7d:35:5a:e1:04:eb: 95:18:84:21:85:b8:fc:b2:0f:f6:b6:ba:b0:1f:da:ff:d0:9f: 29:c3:00:5f:cd:50:71:b1:49:87:ab:cb:b4:95:fe:f4:99:6a: 10:6b:9e:32:fc:62:fa:f3:84:65:6d:76:a3:57:41:56:df:e8: 29:f4:ac:7f:56:92:62:66:1a:e2:d4:9b:c0:5d:9a:2f:6b:e0: cc:cd:e6:f5:a3:48:f3:03:4d:7c:53:aa:c9:1e:1d:69:6b:81: db:44:09:91:90:69:51:c8:9e:fc:d8:2d:8b:60:62:3b:64:97: cb:7e:20:34:9d:56:a4:f1:ce:9d:26:a0:1e:79:ab:b2:f4:3e: e0:0a:a9:8b:ed:24:95:b5:df:da:19:a4:85:e8:0d:4f:12:bd: b2:98:70:08 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPo9Z5BxxmY6PyE8IupDgwvc5ksAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTAxNzU4NDdaFw0yNjAyMDkxODAzNDdaMDMxMTAvBgNV BAMTKEREQTIyRDZENzU1NDRCRUNDNkU1MzQ4NkZFRDY2MURGMDJCQUZDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDoUc4UX3YlIFTUxBuSPJp9dE 926kq8cXRTs9QzMvB2mIIl8MZq3y915O9pibKuk4iRwxiby3GF1yVX3dc+mgebbI 7aMmqTPmBWTGJR4STMmyYNBTsyBqtO6shN87CNUPZXi1MSPIHytx+DRcHRJ9+zhD ZyReZTdnNdS9FsCOowRFhtNiUT7Hu/thA2Fb7Y2DIHp8tiqNQt3AlybdRzMZyqoX 9n/sPn5i9hP2RmlofNmQXzyEvG2JPDAaPNL2R7r7yVHxAB/EWfhAH273WiI4q4f9 WOwsRBgeXiV8BkRAnfau+tMf+geJkMSBp+TQ9pT2oZ4kFmp1Gu+Dq/dsxM2rAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTdoi1tdVRL7Mbl NIb+1mHfArr8aTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOENj SHNIUlZ3M241MWJIZ051M1lxYzdQNFdGTFM4bVk1NExYYVV2a1lEZFovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhD Y0hzSFJWdzNuNTFiSGdOdTNZcWM3UDRXRkxTOG1ZNTRMWGFVdmtZRGRaLzAvRERB MjJENkQ3NTU0NEJFQ0M2RTUzNDg2RkVENjYxREYwMkJBRkM2OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbJkMA0EAgACMAcDBQAoBF5MMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQa4DANBgkqhkiG9w0BAQsFAAOCAQEAFQj4H2QqHeIeX322 XnlXj23STVMLvUAFNDmanLZo2AA+Zcp7lO30rpD/YEVOoYyoOBVdiArnlI5MU8jv xXQ40f6Vp+EpNxW7wLWH4jWFs0sA8EaWaTVsY3ScNV4qXRxRATrThmekfTVa4QTr lRiEIYW4/LIP9ra6sB/a/9CfKcMAX81QcbFJh6vLtJX+9JlqEGueMvxi+vOEZW12 o1dBVt/oKfSsf1aSYmYa4tSbwF2aL2vgzM3m9aNI8wNNfFOqyR4daWuB20QJkZBp Ucie/Ngti2BiO2SXy34gNJ1WpPHOnSagHnmrsvQ+4Aqpi+0klbXf2hmkhegNTxK9 sphwCA== -----END CERTIFICATE-----Generated at Thu Feb 20 17:31:19 2025 by rpki-client