$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer File: E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer (raw, json) Hash identifier: OPZ9ahAkh5r8OcuSnvluHJ7p5mWMjKfvnBR56RQiiI4= Subject key identifier: E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4743E40E34549782FE5C492DA003CAD283F38A26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.mft caRepository: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 05:06:33 +0000 Certificate not after: Fri 06 Mar 2026 05:11:33 +0000 Subordinate resources: AS: 265356 IP: 168.181.124.0/22 IP: 2804:2ea0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 13:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:43:e4:0e:34:54:97:82:fe:5c:49:2d:a0:03:ca:d2:83:f3:8a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 05:06:33 2025 GMT Not After : Mar 6 05:11:33 2026 GMT Subject: CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:c5:16:ce:f8:61:b0:f4:18:04:90:6e:cf: e3:03:a6:29:4f:10:dc:f3:b2:ef:d0:1f:57:ce:35: 7a:3f:52:36:e4:fa:e4:e1:68:cf:a5:79:a5:5c:0a: 37:8d:0a:f2:2b:cd:88:0a:73:1c:f2:b5:c0:61:7d: a9:6c:47:cf:91:f7:45:1b:2e:bb:af:09:8f:6d:f8: 36:4d:e4:1c:36:5b:50:ac:50:13:c1:40:ac:eb:84: d7:49:b2:db:d5:5f:14:8e:89:47:6f:3a:91:a5:e2: af:7e:5c:0d:b7:93:e7:a1:e7:df:e6:c4:0a:c1:37: 18:e8:0e:cd:87:ec:63:66:f8:b8:7f:34:02:8e:e8: b3:33:90:d2:02:49:f6:5c:46:f5:33:70:e1:a6:ce: 7c:0b:84:e0:c0:22:94:27:ab:2e:7a:69:a0:d5:36: 93:3f:87:f0:e8:d6:5c:6b:f3:54:5e:89:1b:8a:62: 83:77:31:89:0b:7f:eb:84:00:04:78:d9:41:4b:f0: 91:72:cf:32:fe:fd:de:a8:d1:24:8d:f3:22:68:28: e9:c1:08:09:34:33:e3:6b:58:56:9b:93:eb:fd:5c: 55:cf:b2:4c:06:70:5f:1e:81:a3:35:20:d5:44:9d: 41:29:90:4b:55:36:8e:6f:fa:a9:3a:15:75:aa:04: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.181.124.0/22 IPv6: 2804:2ea0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265356 Signature Algorithm: sha256WithRSAEncryption 65:a5:8f:3b:b6:ed:d0:d1:89:7a:53:e5:79:62:e0:ec:4b:9e: 62:9a:6c:d6:d1:ca:5b:69:38:5b:e2:cc:8c:eb:53:49:cb:cd: 7f:13:34:f3:fe:a7:83:43:95:ee:6c:af:19:d2:a8:da:f4:09: 91:c4:3e:c3:29:ac:79:61:6d:b7:6e:d5:f5:0e:fa:34:d1:e1: ff:b7:19:41:69:cd:8e:2a:cd:df:3a:ea:dc:26:ca:e1:12:b4: bd:6d:c6:44:da:17:07:98:2c:22:6a:f1:c6:a4:da:13:96:d6: cb:40:a0:68:1a:b2:b1:a9:54:29:3f:da:e4:6f:9b:cc:7b:b1: 60:cc:93:3c:95:43:1c:bb:cd:c9:b4:ab:cb:ac:ed:16:34:0f: f4:2a:3e:95:f5:1c:e6:b7:01:ed:10:d1:5a:b5:49:30:39:1a: d7:aa:94:06:71:1e:9e:4f:50:48:df:0a:f5:03:5b:77:76:1c: 5b:64:2b:07:78:eb:84:7d:58:41:c6:15:1c:8e:db:a6:22:89: 3d:62:34:85:e5:21:14:33:d0:be:02:ea:e0:c3:e3:46:11:02: 1f:df:4f:03:45:11:ac:ef:bf:7f:71:25:be:ba:80:3f:95:06: c0:27:7c:78:e7:94:f9:6e:f0:94:c4:e3:c1:8e:10:5c:3f:aa: be:20:4a:ba -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUR0PkDjRUl4L+XEktoAPK0oPziiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNTA2MzNaFw0yNjAzMDYwNTExMzNaMDMxMTAvBgNV BAMTKEUzRkQzQUFFQjQyMkZDRDlCQjQyOUNFQTA0RkIwNkI1Nzc4RUM4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VMUWzvhhsPQYBJBuz+MDpilP ENzzsu/QH1fONXo/Ujbk+uThaM+leaVcCjeNCvIrzYgKcxzytcBhfalsR8+R90Ub LruvCY9t+DZN5Bw2W1CsUBPBQKzrhNdJstvVXxSOiUdvOpGl4q9+XA23k+eh59/m xArBNxjoDs2H7GNm+Lh/NAKO6LMzkNICSfZcRvUzcOGmznwLhODAIpQnqy56aaDV NpM/h/Do1lxr81ReiRuKYoN3MYkLf+uEAAR42UFL8JFyzzL+/d6o0SSN8yJoKOnB CAk0M+NrWFabk+v9XFXPskwGcF8egaM1INVEnUEpkEtVNo5v+qk6FXWqBIvJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTj/TqutCL82btC nOoE+wa1d47IvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjJl SFo0ZlNLNnZOUUdkTndOWGliWk1SWEthVW1aVmZFbXQxRXJUdVRXRXovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzYy ZUhaNGZTSzZ2TlFHZE53TlhpYlpNUlhLYVVtWlZmRW10MUVyVHVUV0V6LzEvRTNG RDNBQUVCNDIyRkNEOUJCNDI5Q0VBMDRGQjA2QjU3NzhFQzhCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqLV8MA0EAgACMAcDBQAoBC6gMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMjDANBgkqhkiG9w0BAQsFAAOCAQEAZaWPO7bt0NGJelPl eWLg7EueYpps1tHKW2k4W+LMjOtTScvNfxM08/6ng0OV7myvGdKo2vQJkcQ+wyms eWFtt27V9Q76NNHh/7cZQWnNjirN3zrq3CbK4RK0vW3GRNoXB5gsImrxxqTaE5bW y0CgaBqysalUKT/a5G+bzHuxYMyTPJVDHLvNybSry6ztFjQP9Co+lfUc5rcB7RDR WrVJMDka16qUBnEenk9QSN8K9QNbd3YcW2QrB3jrhH1YQcYVHI7bpiKJPWI0heUh FDPQvgLq4MPjRhECH99PA0URrO+/f3ElvrqAP5UGwCd8eOeU+W7wlMTjwY4QXD+q viBKug== -----END CERTIFICATE-----Generated at Tue Apr 8 14:20:02 2025 by rpki-client