$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer File: EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer (raw, json) Hash identifier: 5DPBVN6BKaup82CgQttAZB+AjBRsBb8cy47ufEri+Mw= Subject key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7CC9D0236B3AE881172A5ACD7C0CEC8A88C380C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft caRepository: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 16:36:06 +0000 Certificate not after: Thu 05 Mar 2026 16:41:06 +0000 Subordinate resources: AS: 52916 IP: 143.255.16.0/22 IP: 177.10.20.0/22 IP: 2804:2b10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c9:d0:23:6b:3a:e8:81:17:2a:5a:cd:7c:0c:ec:8a:88:c3:80:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 16:36:06 2025 GMT Not After : Mar 5 16:41:06 2026 GMT Subject: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:bd:33:f2:58:ec:88:44:61:93:15:50:66: be:1e:55:29:9d:19:3b:c9:ff:af:cc:18:31:a9:d2: d5:80:8d:f2:d8:24:4a:d5:ca:59:fa:d6:68:df:59: 41:5a:98:79:a8:4b:70:fa:4d:94:c1:6f:34:ac:3f: 9c:06:f6:42:f6:24:93:e9:95:e8:7b:82:61:2b:5b: 6b:20:bc:01:77:c0:eb:22:e1:0e:ab:98:36:8b:5b: 7a:39:24:47:89:a7:75:0d:db:51:40:9c:64:e2:fa: 5b:de:27:ae:13:18:89:5c:49:e5:88:ae:ba:5e:b9: bf:5c:c2:6a:16:ba:9b:a9:2f:51:34:52:79:80:db: 7a:f1:77:e3:b6:23:a9:cd:a0:20:4d:3a:dc:93:2e: 3e:fe:9d:1d:49:e0:6e:6b:ca:74:6f:54:de:80:55: b0:c5:6c:07:29:56:76:d8:5b:7e:49:e5:17:a9:f4: db:05:83:03:c1:83:e2:76:c0:33:a5:d1:ab:3c:05: 23:42:4f:e4:27:5a:a6:a3:a3:b6:d0:d7:b0:9a:09: 42:e2:a8:66:3d:a2:25:7a:6b:a1:77:45:74:be:c4: ca:9c:5d:ad:7a:7c:63:c9:cd:7a:e8:fb:c1:30:70: 22:d8:64:d7:d4:1d:12:80:5d:d3:cc:bf:f1:32:8b: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.16.0/22 177.10.20.0/22 IPv6: 2804:2b10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52916 Signature Algorithm: sha256WithRSAEncryption 09:ea:0a:fa:c6:97:3e:a5:b7:a0:e3:9a:31:31:28:84:1f:1c: b4:7e:93:a3:e2:e4:78:c1:01:70:97:7a:e6:40:d7:ea:69:d5: 0c:67:0c:07:d1:5f:89:bb:e5:ff:4b:a2:0f:af:c1:99:5e:a3: 83:1a:70:17:7d:30:b1:9f:9e:ef:6d:d5:90:01:10:57:63:8b: 55:5f:2a:b5:c4:36:c0:f3:d0:17:53:34:4a:c4:6b:22:1a:a1: 5b:5e:11:ac:05:e7:c7:8d:42:a2:9c:b3:a0:93:16:df:39:f2: 46:74:c5:ef:8a:7d:1d:15:20:74:36:b0:56:04:cf:af:41:c9: c7:1d:8a:4b:cc:29:c5:99:f3:18:77:c2:de:de:5a:5a:0b:5d: f3:b8:2f:36:37:8f:a3:8f:13:eb:17:79:1a:cf:5f:76:f8:f3: cc:51:78:8b:5a:75:b9:61:99:f1:bb:e6:41:b4:ca:6d:ba:7b: a5:07:d2:1e:4d:49:50:1f:ed:56:05:ef:bc:9b:ef:f3:75:fd: fa:8a:31:9b:c4:45:2c:22:df:22:fc:09:bd:55:8d:c1:92:25: 30:29:9f:8f:c2:f9:01:c2:0e:d4:b7:b5:b6:14:02:25:6b:e2: c8:bf:5c:a5:9f:29:bd:ba:2a:f4:ea:75:9b:d4:5e:70:19:9b: f5:c6:a5:fb -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUfMnQI2s66IEXKlrNfAzsiojDgMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNjM2MDZaFw0yNjAzMDUxNjQxMDZaMDMxMTAvBgNV BAMTKEVGOTA4QTE3N0ZBRjNFREVFQUYzOUVGMUJDM0IyMDgyMjUzMDJFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQb0z8ljsiERhkxVQZr4eVSmd GTvJ/6/MGDGp0tWAjfLYJErVyln61mjfWUFamHmoS3D6TZTBbzSsP5wG9kL2JJPp leh7gmErW2sgvAF3wOsi4Q6rmDaLW3o5JEeJp3UN21FAnGTi+lveJ64TGIlcSeWI rrpeub9cwmoWupupL1E0UnmA23rxd+O2I6nNoCBNOtyTLj7+nR1J4G5rynRvVN6A VbDFbAcpVnbYW35J5Rep9NsFgwPBg+J2wDOl0as8BSNCT+QnWqajo7bQ17CaCULi qGY9oiV6a6F3RXS+xMqcXa16fGPJzXro+8EwcCLYZNfUHRKAXdPMv/EyixcNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvkIoXf68+3urz nvG8OyCCJTAudzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTFW OWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3VoNGovMS9FRjkw OEExNzdGQUYzRURFRUFGMzlFRjFCQzNCMjA4MjI1MzAyRTc3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP/xADBAKxChQwDQQCAAIwBwMFACgEKxAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM60MA0GCSqGSIb3DQEBCwUAA4IBAQAJ6gr6xpc+ pbeg45oxMSiEHxy0fpOj4uR4wQFwl3rmQNfqadUMZwwH0V+Ju+X/S6IPr8GZXqOD GnAXfTCxn57vbdWQARBXY4tVXyq1xDbA89AXUzRKxGsiGqFbXhGsBefHjUKinLOg kxbfOfJGdMXvin0dFSB0NrBWBM+vQcnHHYpLzCnFmfMYd8Le3lpaC13zuC82N4+j jxPrF3kaz192+PPMUXiLWnW5YZnxu+ZBtMptunulB9IeTUlQH+1WBe+8m+/zdf36 ijGbxEUsIt8i/Am9VY3BkiUwKZ+PwvkBwg7Ut7W2FAIla+LIv1ylnym9uir06nWb 1F5wGZv1xqX7 -----END CERTIFICATE-----Generated at Sat Apr 5 03:04:28 2025 by rpki-client