$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer File: EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer (raw, json) Hash identifier: SvqGjfzIvgJpiduSCnckopkEQOsJjm9T457f083O54U= Subject key identifier: EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33AC61CDB3E0F6F2349AC7A4C24E80A7CE405B3F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft caRepository: rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 15 Aug 2024 13:22:13 +0000 Certificate not after: Thu 14 Aug 2025 13:27:13 +0000 Subordinate resources: AS: 268920 IP: 45.175.196.0/22 IP: 2804:5ca0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ac:61:cd:b3:e0:f6:f2:34:9a:c7:a4:c2:4e:80:a7:ce:40:5b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 15 13:22:13 2024 GMT Not After : Aug 14 13:27:13 2025 GMT Subject: CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:0c:75:29:cf:20:86:ad:d2:9c:da:ec:91: 96:ac:7c:1f:3c:45:f8:14:d4:a1:e3:17:b2:4c:86: 77:71:96:94:d1:cd:d1:c9:95:92:46:c5:cc:bf:46: 4b:7e:11:0e:fc:0e:34:aa:45:ea:26:4f:fd:69:93: a2:74:4b:19:24:7b:16:87:1d:0d:bb:7a:14:89:68: 5e:0d:51:8d:d9:07:dd:1a:fd:59:9b:5e:a9:a8:ac: cd:87:53:7b:7f:5f:8e:57:1e:db:fb:d3:69:7c:ae: 83:b9:3b:dc:97:12:2a:8c:fd:6a:b4:a1:a3:f4:48: 68:e1:50:27:45:02:36:8d:37:8d:d6:71:b5:37:f0: 13:d6:1e:df:59:09:b4:24:cb:18:c1:e1:64:63:d7: e7:5f:7f:71:83:85:4c:bb:7b:24:d4:a3:44:00:48: 53:76:e4:57:82:6e:0f:84:78:03:90:a4:35:2e:49: 18:c9:87:66:e0:fa:d8:cf:04:37:e3:66:d0:72:26: 42:ae:77:95:9d:06:36:f4:35:a9:3e:64:72:67:14: 39:c5:bd:e9:fb:b2:8e:e6:ce:5b:dc:66:a4:07:3d: 14:75:a4:2d:e5:f9:da:f5:81:29:80:51:93:a6:cc: 2e:81:d4:70:80:7f:0a:72:45:fe:1f:13:60:7c:16: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.196.0/22 IPv6: 2804:5ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268920 Signature Algorithm: sha256WithRSAEncryption d9:bf:00:e4:69:73:42:a2:47:06:d3:e2:0c:b7:b4:07:07:9a: bf:ca:de:99:6f:69:e4:0a:02:6e:58:6e:63:41:d6:ee:d0:c0: b2:fd:9b:8d:43:33:31:bc:24:a9:51:6a:96:18:9f:f7:bc:0a: 4c:2f:96:35:ae:ee:0e:60:ed:f7:a7:06:19:46:79:b9:56:94: d6:54:dc:cd:76:38:e8:47:58:1f:0b:85:3a:33:73:64:25:d4: 21:c4:ba:ca:cf:29:58:fa:47:c3:b1:67:f9:c1:92:21:cc:f0: 3b:c1:27:1a:fc:55:4b:e7:1f:61:be:68:92:f1:fe:78:fc:4f: ff:88:58:63:b6:02:89:a8:83:de:68:6b:c8:83:76:64:89:4d: 8c:b8:51:e3:ae:81:82:34:fb:97:d5:28:bb:a9:be:39:a2:15: 65:c2:83:9b:71:7a:66:59:38:52:70:6e:92:e2:44:0f:7c:d2: fb:cb:3c:4c:44:8a:7a:97:ad:be:45:38:aa:fd:25:9d:6e:d5: be:0c:70:75:1b:ad:99:48:ab:40:a4:c5:07:d4:31:fe:27:7f: 5f:64:cc:cb:66:3b:17:5c:e0:78:32:4e:57:60:48:dd:9f:79: 94:69:9d:2d:40:f4:c7:ef:7b:12:32:0d:eb:53:cb:15:c7:4f: 6f:65:d3:8a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUM6xhzbPg9vI0msekwk6Ap85AWz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MTUxMzIyMTNaFw0yNTA4MTQxMzI3MTNaMDMxMTAvBgNV BAMTKEVGMjEyNUU1NEZCMUEzOEI1ODAyRUUyQ0Y0OEZDM0VBRTFFMDM2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Awx1Kc8ghq3SnNrskZasfB88 RfgU1KHjF7JMhndxlpTRzdHJlZJGxcy/Rkt+EQ78DjSqReomT/1pk6J0SxkkexaH HQ27ehSJaF4NUY3ZB90a/VmbXqmorM2HU3t/X45XHtv702l8roO5O9yXEiqM/Wq0 oaP0SGjhUCdFAjaNN43WcbU38BPWHt9ZCbQkyxjB4WRj1+dff3GDhUy7eyTUo0QA SFN25FeCbg+EeAOQpDUuSRjJh2bg+tjPBDfjZtByJkKud5WdBjb0Nak+ZHJnFDnF ven7so7mzlvcZqQHPRR1pC3l+dr1gSmAUZOmzC6B1HCAfwpyRf4fE2B8Fu29AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvISXlT7Gji1gC 7iz0j8Pq4eA2XDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFVr VlE5U2Q5aFJGVkppWkU1alBHUEVSOTVycVVlTUQzc1pDb1hwVnpuUUovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hV a1ZROVNkOWhSRlZKaVpFNWpQR1BFUjk1cnFVZU1EM3NaQ29YcFZ6blFKLzAvRUYy MTI1RTU0RkIxQTM4QjU4MDJFRTJDRjQ4RkMzRUFFMUUwMzY1Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa/EMA0EAgACMAcDBQAoBFygMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaeDANBgkqhkiG9w0BAQsFAAOCAQEA2b8A5GlzQqJHBtPi DLe0Bweav8remW9p5AoCblhuY0HW7tDAsv2bjUMzMbwkqVFqlhif97wKTC+WNa7u DmDt96cGGUZ5uVaU1lTczXY46EdYHwuFOjNzZCXUIcS6ys8pWPpHw7Fn+cGSIczw O8EnGvxVS+cfYb5okvH+ePxP/4hYY7YCiaiD3mhryIN2ZIlNjLhR466BgjT7l9Uo u6m+OaIVZcKDm3F6Zlk4UnBukuJED3zS+8s8TESKepetvkU4qv0lnW7VvgxwdRut mUirQKTFB9Qx/id/X2TMy2Y7F1zgeDJOV2BI3Z95lGmdLUD0x+97EjIN61PLFcdP b2XTig== -----END CERTIFICATE-----Generated at Mon Feb 17 08:31:06 2025 by rpki-client