$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer File: F3C1884EB710220FE356655B73CBC129A38E910B.cer (raw, json) Hash identifier: TRXUGYxQoYsnVFVskVi6FIr2B2sC2xpIvZSIobMSruQ= Subject key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2152FC9FEA34FBF02EFDE2262C93362AF6D805AB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft caRepository: rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 09:32:38 +0000 Certificate not after: Fri 06 Mar 2026 09:37:38 +0000 Subordinate resources: AS: 265207 IP: 167.250.160.0/22 IP: 179.0.68.0/22 IP: 2804:2c44::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 21:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:52:fc:9f:ea:34:fb:f0:2e:fd:e2:26:2c:93:36:2a:f6:d8:05:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 09:32:38 2025 GMT Not After : Mar 6 09:37:38 2026 GMT Subject: CN=F3C1884EB710220FE356655B73CBC129A38E910B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:f3:11:49:2a:e0:53:da:cb:fd:0e:74:ea: 30:27:b3:dc:ae:d2:09:78:d7:b0:33:f0:38:22:4b: a0:4b:79:fe:ec:a9:eb:0e:5a:83:6e:17:33:c8:45: c7:65:dc:1b:8e:06:99:ac:78:89:dc:de:7f:27:55: a9:90:f8:88:6c:ab:f3:ca:0d:c1:de:75:2a:ac:6f: ec:ff:7d:a3:83:cd:76:43:41:dd:5c:40:ae:02:4a: 4a:71:ce:77:fe:2d:18:6e:70:ea:15:2d:ce:d0:4b: a1:e8:d7:6b:af:9f:eb:3c:3f:34:d9:56:02:e1:19: 44:05:99:8f:fc:b1:4c:7a:c1:e2:f9:22:d3:cb:96: 1b:98:62:fd:69:8e:16:7b:b1:41:d1:89:58:06:f5: 20:c1:11:d6:cd:9a:2d:29:27:c5:8a:e7:1c:92:96: e6:4c:df:e6:ef:2c:55:74:e8:7f:87:8a:92:66:b4: 64:62:66:0b:dc:77:c9:95:64:8f:45:3f:30:98:89: 13:00:2e:7e:89:f2:94:7d:70:a2:f6:d5:7a:6c:e9: 76:87:fa:5c:d9:c9:4f:9d:09:50:a0:3d:d9:eb:66: 1e:2e:46:39:b6:ed:cd:a6:83:9f:d4:c6:21:4a:5b: f4:b0:42:aa:46:d1:4c:f3:0e:fa:59:fe:e4:80:24: 05:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.250.160.0/22 179.0.68.0/22 IPv6: 2804:2c44::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265207 Signature Algorithm: sha256WithRSAEncryption 07:f0:c3:00:3e:95:cb:7d:f5:e5:53:8a:51:96:b0:a5:38:49: 10:cb:38:21:e6:ce:f4:3b:98:b9:d0:20:9b:bc:3a:03:f8:af: 82:c8:c4:af:81:01:e7:ec:d4:0d:aa:12:9e:a1:a3:dd:2e:bf: a0:2d:11:e6:21:7e:f1:1f:1e:63:43:1e:92:40:2a:ff:44:23: 53:a6:d2:45:89:a5:0e:ac:3d:ac:ba:f1:8e:be:9f:a3:e1:19: 92:ee:49:ed:0f:4b:0c:e3:54:53:54:15:62:57:14:a5:e6:f5: 82:7b:d1:29:83:44:8e:58:05:4b:00:28:9d:59:f7:b3:8d:e6: 02:85:2c:ec:34:94:16:67:3d:a1:b1:14:9f:33:ee:00:03:08: 0d:3d:0b:1c:2f:b9:b5:3a:48:d5:69:41:73:ae:be:96:60:8c: b9:a4:b6:00:b9:5a:04:aa:7b:b5:8d:c8:f6:ca:f3:19:36:c4: 6f:33:9f:f9:99:3f:b9:1d:50:6d:16:a5:00:ba:51:1d:ca:b8: 81:b3:5c:6a:61:38:5e:62:71:f7:78:fb:1d:97:88:f5:6b:7f: a7:ee:92:9f:6a:7c:52:c6:c7:ac:d9:77:1a:92:05:e6:8a:e9: ef:bf:92:04:e0:b3:17:2b:e5:9d:76:2a:fc:92:6e:be:8d:ae: 3d:d4:46:9a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIVL8n+o0+/Au/eImLJM2KvbYBaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwOTMyMzhaFw0yNjAzMDYwOTM3MzhaMDMxMTAvBgNV BAMTKEYzQzE4ODRFQjcxMDIyMEZFMzU2NjU1QjczQ0JDMTI5QTM4RTkxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUgvMRSSrgU9rL/Q506jAns9yu 0gl417Az8DgiS6BLef7sqesOWoNuFzPIRcdl3BuOBpmseInc3n8nVamQ+Ihsq/PK DcHedSqsb+z/faODzXZDQd1cQK4CSkpxznf+LRhucOoVLc7QS6Ho12uvn+s8PzTZ VgLhGUQFmY/8sUx6weL5ItPLlhuYYv1pjhZ7sUHRiVgG9SDBEdbNmi0pJ8WK5xyS luZM3+bvLFV06H+HipJmtGRiZgvcd8mVZI9FPzCYiRMALn6J8pR9cKL21Xps6XaH +lzZyU+dCVCgPdnrZh4uRjm27c2mg5/UxiFKW/SwQqpG0UzzDvpZ/uSAJAX7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzwYhOtxAiD+NW ZVtzy8Epo46RCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFBw emtveng3RFZVa2NlTnkzY000NHE2WnNHQWhQVU4ySzFURjJTY1ZXalIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RQ cHprb3p4N0RWVWtjZU55M2NNNDRxNlpzR0FoUFVOMksxVEYyU2NWV2pSLzEvRjND MTg4NEVCNzEwMjIwRkUzNTY2NTVCNzNDQkMxMjlBMzhFOTEwQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCp/qgAwQCswBEMA0EAgACMAcDBQAoBCxEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQL9zANBgkqhkiG9w0BAQsFAAOCAQEAB/DDAD6V y3315VOKUZawpThJEMs4IebO9DuYudAgm7w6A/ivgsjEr4EB5+zUDaoSnqGj3S6/ oC0R5iF+8R8eY0MekkAq/0QjU6bSRYmlDqw9rLrxjr6fo+EZku5J7Q9LDONUU1QV YlcUpeb1gnvRKYNEjlgFSwAonVn3s43mAoUs7DSUFmc9obEUnzPuAAMIDT0LHC+5 tTpI1WlBc66+lmCMuaS2ALlaBKp7tY3I9srzGTbEbzOf+Zk/uR1QbRalALpRHcq4 gbNcamE4XmJx93j7HZeI9Wt/p+6Sn2p8UsbHrNl3GpIF5orp77+SBOCzFyvlnXYq /JJuvo2uPdRGmg== -----END CERTIFICATE-----Generated at Tue Apr 8 23:44:07 2025 by rpki-client