$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer (raw, json) Hash identifier: B5TMddnx45Oo/p4ZQrTQKyvHipq9bIRbFu+dTv5IOFI= Subject key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29E4F94361D2AAC98DB8E27643074B86A1465DB7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft caRepository: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:13:09 +0000 Certificate not after: Fri 06 Mar 2026 02:18:09 +0000 Subordinate resources: AS: 263083 IP: 179.106.192.0/18 IP: 186.233.12.0/22 IP: 2801:b6::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e4:f9:43:61:d2:aa:c9:8d:b8:e2:76:43:07:4b:86:a1:46:5d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:13:09 2025 GMT Not After : Mar 6 02:18:09 2026 GMT Subject: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:04:fc:f1:47:1b:97:92:ed:09:dc:a9:07: 42:1e:d7:73:be:3e:ca:96:80:64:72:43:de:e6:45: 4e:12:9c:2e:39:fb:f7:b1:8a:26:dd:35:25:df:ed: 60:93:4d:58:1e:2f:f2:18:00:46:1c:b8:a6:1b:4f: a3:e3:1a:c0:22:b0:be:dc:d0:10:32:28:30:13:c4: 33:7f:f7:c4:41:aa:42:e1:ca:b9:de:30:88:4b:b4: 71:3b:f4:a0:ab:24:b1:56:83:2d:15:8d:05:75:d7: 6e:ca:e5:d0:30:0f:48:d7:cb:f3:b2:ca:06:a3:f0: 45:25:b6:11:9f:75:03:1c:87:e7:5a:5d:cf:e1:79: af:21:7e:cd:c0:4b:97:29:f6:5e:17:0e:3c:f1:7a: f6:58:5b:2f:d4:4a:65:e8:fa:c2:b6:d8:6c:e8:26: 0c:2b:77:d6:96:82:22:5d:6a:0b:62:88:24:1c:20: ba:f7:32:cd:79:e9:15:83:53:2d:d8:ba:c8:d5:dd: b9:67:a3:a6:8c:a2:36:ff:86:35:1a:ee:60:b5:e0: 10:ea:d2:12:24:94:4e:70:05:1d:a6:27:c9:c6:68: 84:78:8e:10:58:5b:1f:6f:a1:62:ce:2d:87:af:27: f7:ee:97:63:db:f9:12:bd:14:9d:f4:86:2a:a0:21: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.106.192.0/18 186.233.12.0/22 IPv6: 2801:b6::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263083 Signature Algorithm: sha256WithRSAEncryption b3:65:8a:18:14:66:c7:99:e1:72:39:17:e6:bd:0a:28:7b:11: 2d:2d:74:81:23:31:85:c4:2b:a7:ad:05:0b:fd:91:1b:86:41: 25:5c:bd:df:96:86:7a:9a:39:2d:36:8c:0b:2e:43:e2:be:63: ce:4f:f7:74:aa:23:c2:be:a7:d3:95:68:39:5c:91:81:9f:b1: 07:d0:87:52:cf:43:0f:04:68:f3:24:19:b6:c5:21:48:08:58: 7b:cc:56:16:b9:18:cd:3c:35:58:55:fa:70:8a:67:f9:47:b6: ed:01:dd:24:6d:cb:05:49:b6:6b:c4:d4:20:34:c2:c2:a8:e7: c8:a0:dc:f1:94:55:b9:1d:62:da:ad:63:d4:13:85:bc:ea:d8: 2f:45:8b:fa:44:65:72:7f:af:c9:17:bf:d4:37:2e:1a:58:12: 8d:98:d0:4b:52:f2:36:75:92:03:7f:f9:88:e5:1c:65:e9:80: 4e:43:b4:72:dd:c9:28:be:d6:df:f7:75:39:82:f0:b0:d9:73: 33:51:1c:3b:2c:55:92:1a:37:c9:01:01:07:b6:25:fd:cd:72: ee:4f:07:19:6e:b1:7e:49:d4:13:57:41:9f:9f:cb:cd:6c:69: 8a:58:51:2e:8e:88:c3:9c:73:e0:5a:12:d4:43:4b:cc:81:12: 5a:ff:75:8a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKeT5Q2HSqsmNuOJ2QwdLhqFGXbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjEzMDlaFw0yNjAzMDYwMjE4MDlaMDMxMTAvBgNV BAMTKEYwQTk4Rjc3OUQzQkVGNjU5NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FgT88Ucbl5LtCdypB0Ie13O+ PsqWgGRyQ97mRU4SnC45+/exiibdNSXf7WCTTVgeL/IYAEYcuKYbT6PjGsAisL7c 0BAyKDATxDN/98RBqkLhyrneMIhLtHE79KCrJLFWgy0VjQV1127K5dAwD0jXy/Oy ygaj8EUlthGfdQMch+daXc/hea8hfs3AS5cp9l4XDjzxevZYWy/USmXo+sK22Gzo Jgwrd9aWgiJdagtiiCQcILr3Ms156RWDUy3YusjV3blno6aMojb/hjUa7mC14BDq 0hIklE5wBR2mJ8nGaIR4jhBYWx9voWLOLYevJ/ful2Pb+RK9FJ30hiqgIaCHAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTwqY93nTvvZZWW tksyso62r+jqtTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNE5u WjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRO blo4MmEya0p2Yjlmd2FIZ2pKVm9vYk1WN1duWEs5SEQ0c1B4MVJUbTliLzEvRjBB OThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZBRkU4RUFCNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQGs2rAAwQCuukMMA0EAgACMAcDBQAoAQC2MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDqzANBgkqhkiG9w0BAQsFAAOCAQEAs2WKGBRm x5nhcjkX5r0KKHsRLS10gSMxhcQrp60FC/2RG4ZBJVy935aGepo5LTaMCy5D4r5j zk/3dKojwr6n05VoOVyRgZ+xB9CHUs9DDwRo8yQZtsUhSAhYe8xWFrkYzTw1WFX6 cIpn+Ue27QHdJG3LBUm2a8TUIDTCwqjnyKDc8ZRVuR1i2q1j1BOFvOrYL0WL+kRl cn+vyRe/1DcuGlgSjZjQS1LyNnWSA3/5iOUcZemATkO0ct3JKL7W3/d1OYLwsNlz M1EcOyxVkho3yQEBB7Yl/c1y7k8HGW6xfknUE1dBn5/LzWxpilhRLo6Iw5xz4FoS 1ENLzIESWv91ig== -----END CERTIFICATE-----Generated at Fri Apr 4 19:41:05 2025 by rpki-client