$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer File: DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer (raw, json) Hash identifier: 8K+lXI6L60a2chDzhl/kRYCs9Y3S5r7dg6kt5UzzLH8= Subject key identifier: DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 279605641FD63FD910FB96E508B31A318A3E027D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft caRepository: rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 23:11:28 +0000 Certificate not after: Thu 05 Mar 2026 23:16:28 +0000 Subordinate resources: AS: 61823 IP: 201.222.24.0/22 IP: 2804:19dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:96:05:64:1f:d6:3f:d9:10:fb:96:e5:08:b3:1a:31:8a:3e:02:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 23:11:28 2025 GMT Not After : Mar 5 23:16:28 2026 GMT Subject: CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:07:53:b7:01:8d:49:f7:ad:ed:d4:0d:46: 7c:a8:e4:65:0d:83:da:fa:3a:21:5c:42:c9:92:1f: 41:0d:8d:79:cf:d3:8c:26:44:82:fb:bd:34:76:7c: f2:0e:f0:73:7c:20:2c:73:c2:81:10:38:11:56:6b: b9:60:50:5a:7f:cd:d9:aa:a8:39:6f:54:36:1d:5c: 88:e5:25:8d:2f:13:1c:f5:f6:57:a4:92:ea:81:0c: b4:b8:a0:79:53:06:4b:65:41:80:ff:7e:1b:26:07: 6a:ad:a9:29:9c:51:1a:a2:65:8c:5d:fb:93:89:85: eb:f9:56:24:14:5a:0d:d7:8b:e7:c3:45:b9:83:45: dc:1a:84:17:7b:3f:ac:cc:7b:8f:a0:f9:28:3b:ce: c8:89:48:f0:12:31:2a:de:70:14:2c:e0:5d:05:8a: 0c:da:5f:cb:f8:0f:67:61:34:8f:ba:70:3d:e1:fd: f6:f9:eb:43:5e:98:85:f3:5d:4b:7f:39:22:92:00: 96:62:f6:92:54:60:f1:71:59:9e:e0:90:4f:7a:03: 3f:de:54:96:1a:b3:d4:4f:2b:7b:40:f1:26:41:19: 3d:94:39:ee:f8:ef:8c:b1:f3:31:1e:b9:f0:32:f9: 23:8b:fd:45:4b:03:4b:d7:9f:41:6b:a4:e8:9e:3a: f7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.222.24.0/22 IPv6: 2804:19dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61823 Signature Algorithm: sha256WithRSAEncryption 82:09:94:29:40:f5:27:29:40:79:05:b1:0d:54:1a:2f:f8:f7: 87:25:6d:55:03:29:84:f1:48:11:a1:3e:70:c4:af:39:de:e1: 6e:ee:8e:fd:9e:d7:5c:64:1e:02:22:a5:c5:a4:15:9c:0f:23: 77:27:5a:e6:6d:7b:cc:13:10:87:71:09:3c:72:96:8d:76:32: 55:e5:8d:df:01:c5:ce:52:be:e0:9d:1c:70:03:3b:f5:40:c7: 12:8c:8a:34:3c:97:6f:ef:b3:09:e0:d5:49:d8:31:37:ce:3d: 66:e6:0d:44:dd:fc:60:f2:48:d1:3f:3a:6c:90:f8:1d:09:d8: b5:24:7b:90:f5:dd:fa:c1:40:9b:dd:11:10:f7:6e:c0:69:91: 69:08:32:be:15:dc:92:5f:ce:ad:0d:99:d7:75:b8:44:10:50: 26:a3:86:c0:cd:3a:c2:58:8c:d3:6e:9d:a9:73:0a:e7:51:4a: 06:44:3a:13:06:28:b2:96:bc:61:a9:a3:9c:72:52:eb:6d:66: 9b:31:cb:d1:1d:80:c9:1d:8c:db:61:c0:39:46:ab:12:5d:d9: 57:d0:64:a4:6b:e0:59:4f:77:4a:9f:55:db:5d:bc:d3:4e:43: f2:68:4f:93:bb:6a:7e:39:29:11:7c:5d:44:16:3b:46:df:b3: 57:5b:0b:18 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJ5YFZB/WP9kQ+5blCLMaMYo+An0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMzExMjhaFw0yNjAzMDUyMzE2MjhaMDMxMTAvBgNV BAMTKERGMTE5NURBMkFBMzgzNUFDRUI2QzAzMTQyNDgyMTJGRDkwQTBGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETgdTtwGNSfet7dQNRnyo5GUN g9r6OiFcQsmSH0ENjXnP04wmRIL7vTR2fPIO8HN8ICxzwoEQOBFWa7lgUFp/zdmq qDlvVDYdXIjlJY0vExz19lekkuqBDLS4oHlTBktlQYD/fhsmB2qtqSmcURqiZYxd +5OJhev5ViQUWg3Xi+fDRbmDRdwahBd7P6zMe4+g+Sg7zsiJSPASMSrecBQs4F0F igzaX8v4D2dhNI+6cD3h/fb560NemIXzXUt/OSKSAJZi9pJUYPFxWZ7gkE96Az/e VJYas9RPK3tA8SZBGT2UOe7474yx8zEeufAy+SOL/UVLA0vXn0FrpOieOvfNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfEZXaKqODWs62 wDFCSCEv2QoPgzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEM0 M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNYalovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hD NDNQVmllem4zdldSZFAxNmtGelJMMnRjenFISjFTUFJIOFFQV05jWGpaLzIvREYx MTk1REEyQUEzODM1QUNFQjZDMDMxNDI0ODIxMkZEOTBBMEY4My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyd4YMA0EAgACMAcDBQAoBBncMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxfzANBgkqhkiG9w0BAQsFAAOCAQEAggmUKUD1JylAeQWx DVQaL/j3hyVtVQMphPFIEaE+cMSvOd7hbu6O/Z7XXGQeAiKlxaQVnA8jdyda5m17 zBMQh3EJPHKWjXYyVeWN3wHFzlK+4J0ccAM79UDHEoyKNDyXb++zCeDVSdgxN849 ZuYNRN38YPJI0T86bJD4HQnYtSR7kPXd+sFAm90REPduwGmRaQgyvhXckl/OrQ2Z 13W4RBBQJqOGwM06wliM026dqXMK51FKBkQ6EwYospa8YamjnHJS621mmzHL0R2A yR2M22HAOUarEl3ZV9BkpGvgWU93Sp9V2128005D8mhPk7tqfjkpEXxdRBY7Rt+z V1sLGA== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:06 2025 by rpki-client