$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F350A9A60C94593716E8BF7D10666C1777A7789E.cer File: F350A9A60C94593716E8BF7D10666C1777A7789E.cer (raw, json) Hash identifier: Q0vPPIKgzuZaXEY6yyQWDJ0+EzbkFfdOweGDmWjT7N8= Subject key identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C8D82A60E00BCF3449FF2911E848F9C1E3C2896 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft caRepository: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Jan 2025 01:17:13 +0000 Certificate not after: Wed 21 Jan 2026 01:22:13 +0000 Subordinate resources: AS: 61621 AS: 267420 IP: 45.235.160.0/22 IP: 170.231.208.0/22 IP: 177.23.252.0/22 IP: 186.209.123.0/24 IP: 186.209.222.0/23 IP: 2804:4d3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8d:82:a6:0e:00:bc:f3:44:9f:f2:91:1e:84:8f:9c:1e:3c:28:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 22 01:17:13 2025 GMT Not After : Jan 21 01:22:13 2026 GMT Subject: CN=F350A9A60C94593716E8BF7D10666C1777A7789E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:71:66:cd:b4:55:f7:cc:ea:5b:a7:c9:9f: 1c:37:56:50:11:56:93:33:21:0a:f2:13:25:62:7d: cf:a4:61:f3:59:61:61:08:dd:9e:0f:58:2d:1c:4d: 88:c2:18:17:b5:03:f5:f9:2a:c2:5d:e5:59:e9:6d: f2:41:f7:20:a5:ac:31:73:70:4d:13:aa:a3:e6:86: 9a:3a:63:99:63:de:a2:70:03:2b:aa:80:7a:14:70: bf:29:58:ff:8d:f4:6b:c8:ee:8d:df:be:28:c7:50: 1f:25:b7:ce:8e:53:b2:3d:a7:54:5c:18:68:89:c2: e4:e9:25:0b:fc:80:12:e3:76:6c:44:58:3d:98:1b: 3c:e8:63:c5:34:c2:d7:d4:73:35:21:96:ac:be:96: dd:70:c9:43:52:fe:bb:21:54:88:f9:ff:68:18:7c: e6:a5:b4:72:c2:04:d1:bc:11:ed:d5:64:3c:1c:47: cf:e6:38:d5:79:5d:39:6e:ec:2e:87:b6:0a:28:69: dc:c8:3c:58:17:18:b1:f0:26:0a:cd:d6:bd:24:55: db:41:18:53:97:7d:bf:12:36:b2:aa:f7:df:44:2f: ed:bc:7e:5a:0d:2a:12:14:09:eb:25:19:cc:df:ac: c6:29:e0:7e:4a:46:4a:10:fc:7c:e3:47:b6:12:d4: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:50:A9:A6:0C:94:59:37:16:E8:BF:7D:10:66:6C:17:77:A7:78:9E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/F350A9A60C94593716E8BF7D10666C1777A7789E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.160.0/22 170.231.208.0/22 177.23.252.0/22 186.209.123.0/24 186.209.222.0/23 IPv6: 2804:4d3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61621 267420 Signature Algorithm: sha256WithRSAEncryption 88:77:70:8d:83:9b:80:d2:57:85:a7:76:f8:68:38:57:6d:11: 76:a6:c6:d4:56:67:6a:ba:a1:36:db:d3:c1:1c:a7:57:c8:3e: 00:3a:c6:a5:90:d3:cf:0c:e9:79:6e:6e:fd:cb:61:cb:f6:36: 17:aa:ae:30:d6:98:1c:4a:17:9c:97:fd:aa:0a:64:27:ef:8a: 4e:02:68:b1:be:9b:1d:90:af:f4:5e:2c:3b:40:81:d5:49:18: 45:73:7b:0f:cf:59:4f:02:0c:92:ee:bc:0a:e2:35:7e:b3:5a: a5:fa:72:84:62:84:47:d1:7b:9b:8a:ac:3a:33:af:23:7b:a7: 64:91:27:41:8c:cc:59:61:7e:bd:76:dd:d6:22:3c:ab:76:63: bb:e4:66:96:08:2b:4e:4a:60:be:ac:85:af:62:37:bc:a2:db: 21:3a:69:18:08:77:c2:fb:1c:15:9e:8d:db:de:d4:58:e0:84: 65:0b:72:a3:4c:48:8a:47:18:d9:52:64:32:91:51:7d:f2:1f: ff:45:b1:f5:7c:f9:82:5b:2e:5a:33:ce:9b:7c:51:89:a0:b3: ea:02:9e:84:22:fa:13:c2:3d:99:f8:ad:1e:31:a6:b6:ad:24: f4:a9:03:d7:f8:e5:db:b2:8d:f3:db:5d:07:3f:4e:69:9c:b3: ba:02:f2:dd -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIUPI2Cpg4AvPNEn/KRHoSPnB48KJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjIwMTE3MTNaFw0yNjAxMjEwMTIyMTNaMDMxMTAvBgNV BAMTKEYzNTBBOUE2MEM5NDU5MzcxNkU4QkY3RDEwNjY2QzE3NzdBNzc4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiknFmzbRV98zqW6fJnxw3VlAR VpMzIQryEyVifc+kYfNZYWEI3Z4PWC0cTYjCGBe1A/X5KsJd5VnpbfJB9yClrDFz cE0TqqPmhpo6Y5lj3qJwAyuqgHoUcL8pWP+N9GvI7o3fvijHUB8lt86OU7I9p1Rc GGiJwuTpJQv8gBLjdmxEWD2YGzzoY8U0wtfUczUhlqy+lt1wyUNS/rshVIj5/2gY fOaltHLCBNG8Ee3VZDwcR8/mONV5XTlu7C6HtgooadzIPFgXGLHwJgrN1r0kVdtB GFOXfb8SNrKq999EL+28floNKhIUCeslGczfrMYp4H5KRkoQ/HzjR7YS1B/XAgMB AAGjggNXMIIDUzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzUKmmDJRZNxbo v30QZmwXd6d4njAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHNC OVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5UGcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hz QjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAvRjM1 MEE5QTYwQzk0NTkzNzE2RThCRjdEMTA2NjZDMTc3N0E3Nzg5RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCLeugAwQCqufQAwQCsRf8AwQAutF7AwQButHeMA0E AgACMAcDBQAoBE08MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDwtQIDBBScMA0G CSqGSIb3DQEBCwUAA4IBAQCId3CNg5uA0leFp3b4aDhXbRF2psbUVmdquqE229PB HKdXyD4AOsalkNPPDOl5bm79y2HL9jYXqq4w1pgcShecl/2qCmQn74pOAmixvpsd kK/0Xiw7QIHVSRhFc3sPz1lPAgyS7rwK4jV+s1ql+nKEYoRH0Xubiqw6M68je6dk kSdBjMxZYX69dt3WIjyrdmO75GaWCCtOSmC+rIWvYje8otshOmkYCHfC+xwVno3b 3tRY4IRlC3KjTEiKRxjZUmQykVF98h//RbH1fPmCWy5aM86bfFGJoLPqAp6EIvoT wj2Z+K0eMaa2rST0qQPX+OXbso3z210HP05pnLO6AvLd -----END CERTIFICATE-----Generated at Fri Apr 4 20:13:32 2025 by rpki-client