$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer File: F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.cer (raw, json) Hash identifier: kA+7oPTDAo7MlXJ2MIpnknyIFQEEQCSH0BYpIccwwzE= Subject key identifier: F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5B55FEE4C5906EB4A95DBB85CF6B1F2495823C50 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft caRepository: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 02:57:44 +0000 Certificate not after: Thu 05 Mar 2026 03:02:44 +0000 Subordinate resources: AS: 268668 IP: 45.164.220.0/22 IP: 2804:54c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:55:fe:e4:c5:90:6e:b4:a9:5d:bb:85:cf:6b:1f:24:95:82:3c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 02:57:44 2025 GMT Not After : Mar 5 03:02:44 2026 GMT Subject: CN=F2738956AE39E8B7EBBDAEF909D996F13EDA7B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:8d:9e:4e:8b:63:fe:61:fb:65:93:53:d9: 1b:e8:1d:37:d4:57:69:5f:97:28:2a:7b:a7:af:bc: 65:1f:1e:7f:20:b1:90:2d:64:35:bb:27:c0:2b:6d: 63:a3:f6:4d:89:bc:ed:6f:c9:3d:79:c0:11:5e:bc: 27:76:7a:48:c4:a6:46:36:f8:d6:7f:55:9e:2b:bb: c1:10:d9:39:37:25:db:47:7c:f8:4a:b4:6e:33:44: 8a:78:bf:62:29:d5:00:48:56:c3:39:c4:66:35:ad: c2:39:52:6a:31:02:60:cb:90:56:56:5d:c3:16:2a: c5:fe:45:0c:c2:63:52:df:92:20:6d:6d:38:c4:77: 58:8d:d5:03:55:fe:09:1c:bf:77:e0:7b:1b:50:a5: 65:4c:4d:2b:25:72:53:2a:0f:4b:34:ab:0b:d7:db: 2e:52:71:8a:3d:52:ca:57:93:fa:22:9a:d6:6b:81: 66:cb:b8:84:81:3a:e3:c2:6a:91:ed:a1:1f:fc:91: ac:e9:f4:ac:7e:37:98:c0:4a:b6:f2:7c:5c:fc:2e: 30:26:c7:76:d3:bf:5e:1b:02:78:e9:f5:7f:03:ff: 4c:de:f2:a3:2b:aa:ed:15:06:d7:b3:70:1f:ff:59: 42:a1:11:65:8b:1b:9a:09:cc:62:c8:a2:37:84:3f: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:73:89:56:AE:39:E8:B7:EB:BD:AE:F9:09:D9:96:F1:3E:DA:7B:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/1/F2738956AE39E8B7EBBDAEF909D996F13EDA7B48.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.220.0/22 IPv6: 2804:54c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268668 Signature Algorithm: sha256WithRSAEncryption 8b:0c:d4:f2:b1:71:68:38:9a:ad:3e:cb:a4:39:f5:ee:3f:31: 28:de:9a:f8:6d:9d:f4:9c:cc:96:4e:b5:b2:56:db:57:18:2d: 52:ab:a2:0b:7f:87:34:92:57:10:2a:bd:0a:e0:d0:58:bc:f2: 64:10:d8:83:88:8f:84:12:f7:cc:84:8a:ab:d9:7c:11:9f:1d: ee:18:7e:23:af:50:4c:e5:85:ec:3d:ff:93:b2:7b:a1:46:5d: f8:0a:1b:29:60:66:b1:6b:77:20:9f:03:36:db:1f:eb:80:67: f6:3c:58:71:36:1a:5e:1d:f4:ea:e7:bc:7e:54:09:3a:3c:e2: 88:75:fb:41:15:cf:8c:a7:8e:4d:58:f9:09:4d:f5:67:be:84: bd:c0:35:ee:fd:0c:db:f0:64:f1:04:49:95:32:16:86:bb:58: 7d:fd:0a:b4:5e:6a:de:9e:63:82:2a:07:83:04:ce:ce:be:7b: 52:8f:3b:9b:28:84:94:a3:c2:91:0f:61:90:53:21:9d:2f:9c: 80:18:cd:53:e9:7c:76:ab:21:a8:c2:67:26:2d:b1:da:44:2e: b2:c2:18:7f:df:b9:66:e6:66:40:c1:5c:60:af:eb:d2:0e:28: b7:31:52:f1:b3:0e:34:72:65:e9:02:34:5f:f0:4d:0d:2f:70: 63:fd:25:08 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUW1X+5MWQbrSpXbuFz2sfJJWCPFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwMjU3NDRaFw0yNjAzMDUwMzAyNDRaMDMxMTAvBgNV BAMTKEYyNzM4OTU2QUUzOUU4QjdFQkJEQUVGOTA5RDk5NkYxM0VEQTdCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+42eTotj/mH7ZZNT2RvoHTfU V2lflygqe6evvGUfHn8gsZAtZDW7J8ArbWOj9k2JvO1vyT15wBFevCd2ekjEpkY2 +NZ/VZ4ru8EQ2Tk3JdtHfPhKtG4zRIp4v2Ip1QBIVsM5xGY1rcI5UmoxAmDLkFZW XcMWKsX+RQzCY1LfkiBtbTjEd1iN1QNV/gkcv3fgextQpWVMTSslclMqD0s0qwvX 2y5ScYo9UspXk/oimtZrgWbLuISBOuPCapHtoR/8kazp9Kx+N5jASrbyfFz8LjAm x3bTv14bAnjp9X8D/0ze8qMrqu0VBtezcB//WUKhEWWLG5oJzGLIojeEP7/FAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyc4lWrjnot+u9 rvkJ2ZbxPtp7SDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXJq QmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xtQ1kvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vy akJmY2NmSE1yNVROc3E1UUNmNUN3R2JFVmtLZnNKN3BkRnFtZ2tMbUNZLzEvRjI3 Mzg5NTZBRTM5RThCN0VCQkRBRUY5MDlEOTk2RjEzRURBN0I0OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaTcMA0EAgACMAcDBQAoBFTAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZfDANBgkqhkiG9w0BAQsFAAOCAQEAiwzU8rFxaDiarT7L pDn17j8xKN6a+G2d9JzMlk61slbbVxgtUquiC3+HNJJXECq9CuDQWLzyZBDYg4iP hBL3zISKq9l8EZ8d7hh+I69QTOWF7D3/k7J7oUZd+AobKWBmsWt3IJ8DNtsf64Bn 9jxYcTYaXh306ue8flQJOjziiHX7QRXPjKeOTVj5CU31Z76EvcA17v0M2/Bk8QRJ lTIWhrtYff0KtF5q3p5jgioHgwTOzr57Uo87myiElKPCkQ9hkFMhnS+cgBjNU+l8 dqshqMJnJi2x2kQussIYf9+5ZuZmQMFcYK/r0g4otzFS8bMONHJl6QI0X/BNDS9w Y/0lCA== -----END CERTIFICATE-----Generated at Fri Apr 4 19:59:03 2025 by rpki-client