$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer File: F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer (raw, json) Hash identifier: Vbba2jfhjf1ovwQi6FKBSejxYj0kRtJiq4rzpHCHi5Y= Subject key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A3B1C32317356355DFFA093C6168312C33BBCD5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft caRepository: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Feb 2025 18:23:29 +0000 Certificate not after: Mon 09 Feb 2026 18:28:29 +0000 Subordinate resources: AS: 262452 IP: 177.52.216.0/22 IP: 2804:3f94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3b:1c:32:31:73:56:35:5d:ff:a0:93:c6:16:83:12:c3:3b:bc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 10 18:23:29 2025 GMT Not After : Feb 9 18:28:29 2026 GMT Subject: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:a6:23:fa:ba:e7:10:e7:7f:85:ae:1e:81: 21:38:f7:73:61:a5:4a:ab:08:5b:31:85:e0:49:80: 89:1b:fa:75:81:d7:0b:09:b9:80:38:70:e1:d3:8e: e6:1a:02:e4:b3:69:09:be:34:38:92:34:b7:04:8f: 54:dd:96:54:5f:9c:df:0d:80:d0:9b:74:20:3a:e6: 79:f4:e6:5d:92:08:36:0b:2e:47:8a:0b:f3:ba:2a: 52:ae:71:bc:ba:7f:8c:53:32:95:86:66:7e:56:75: d8:b6:24:bb:07:56:54:3a:01:e6:41:18:10:9d:d3: aa:4c:e8:4f:b0:69:e2:23:22:ea:75:9c:b5:ba:0e: 13:7c:67:6b:76:a8:43:aa:e8:ac:6f:a5:cd:d9:c6: cf:36:b8:c5:da:72:bf:31:3e:44:68:40:b5:7e:e9: 22:11:73:ce:c3:fb:71:e1:4a:58:f5:a9:ea:df:b9: e2:90:35:1c:e6:4b:8b:75:c6:af:c8:c8:39:bc:f1: db:06:78:e8:34:b1:b7:9e:46:10:3b:cb:68:d0:c8: e5:35:e4:72:05:e8:b3:ef:84:aa:25:ab:97:2d:e2: 56:82:98:b0:f7:42:fe:50:72:bf:94:ca:9d:fd:6d: 74:2c:df:aa:c7:ab:29:b8:bb:a2:f3:f2:9a:26:9a: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.52.216.0/22 IPv6: 2804:3f94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262452 Signature Algorithm: sha256WithRSAEncryption 0e:a6:bc:cc:8a:24:25:69:44:0c:c1:eb:81:01:42:2c:b3:61: 21:ca:27:6e:c4:6b:50:00:51:28:a7:dc:c3:29:f7:3b:36:54: dc:d9:8d:4f:1b:04:0c:51:a8:3f:cc:a6:6f:21:1f:0e:21:b7: d9:16:f4:2b:fe:5a:b4:c3:fe:8e:53:4a:1e:0f:d2:1e:fb:31: f7:c1:18:34:d4:c9:20:6e:e9:41:40:02:23:81:e2:c0:20:34: 9d:1c:d1:08:48:3d:9e:38:3b:19:43:82:80:3d:1d:33:2a:7a: 6a:d5:3e:d5:ca:44:bb:bc:f8:13:33:46:67:14:f5:c0:3e:16: df:2a:38:30:b9:d8:5d:f7:24:5b:3f:22:58:73:34:e1:26:74: a5:af:c3:0a:0a:3f:dc:f2:76:fa:4f:57:0d:08:10:cc:18:98: 8c:1e:07:af:8e:df:4d:dc:9d:14:eb:c4:11:e1:a5:25:b8:61: c6:7d:ed:b8:0d:0f:37:db:61:46:2f:2a:7d:de:13:39:07:cf: 55:7b:85:21:7e:a6:29:4d:dc:43:03:de:12:44:42:17:86:96: 51:92:b3:ea:11:f9:57:5c:57:ab:90:15:f3:cd:4f:c0:40:d5: a4:df:55:78:be:9a:71:64:39:3a:2b:9c:42:3e:67:82:b5:a8: 95:4d:68:fe -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUejscMjFzVjVd/6CTxhaDEsM7vNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTAxODIzMjlaFw0yNjAyMDkxODI4MjlaMDMxMTAvBgNV BAMTKEY0MzJFMEVEQjY5QkQ2RTI1M0VFMjBGNEMxNTg5QTQ2MjY3QUEyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeaYj+rrnEOd/ha4egSE493Nh pUqrCFsxheBJgIkb+nWB1wsJuYA4cOHTjuYaAuSzaQm+NDiSNLcEj1TdllRfnN8N gNCbdCA65nn05l2SCDYLLkeKC/O6KlKucby6f4xTMpWGZn5Wddi2JLsHVlQ6AeZB GBCd06pM6E+waeIjIup1nLW6DhN8Z2t2qEOq6Kxvpc3Zxs82uMXacr8xPkRoQLV+ 6SIRc87D+3HhSlj1qerfueKQNRzmS4t1xq/IyDm88dsGeOg0sbeeRhA7y2jQyOU1 5HIF6LPvhKolq5ct4laCmLD3Qv5Qcr+Uyp39bXQs36rHqym4u6Lz8pommgAHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT0MuDttpvW4lPu IPTBWJpGJnqiuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWtG N3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNtbWYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVr Rjd1R3NlZ0dFMTMydlZpYTc0SFQ1WmFFQlFRaVpzWXdoZncyTmZjbW1mLzAvRjQz MkUwRURCNjlCRDZFMjUzRUUyMEY0QzE1ODlBNDYyNjdBQTJCOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsTTYMA0EAgACMAcDBQAoBD+UMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQBNDANBgkqhkiG9w0BAQsFAAOCAQEADqa8zIokJWlEDMHr gQFCLLNhIconbsRrUABRKKfcwyn3OzZU3NmNTxsEDFGoP8ymbyEfDiG32Rb0K/5a tMP+jlNKHg/SHvsx98EYNNTJIG7pQUACI4HiwCA0nRzRCEg9njg7GUOCgD0dMyp6 atU+1cpEu7z4EzNGZxT1wD4W3yo4MLnYXfckWz8iWHM04SZ0pa/DCgo/3PJ2+k9X DQgQzBiYjB4Hr47fTdydFOvEEeGlJbhhxn3tuA0PN9thRi8qfd4TOQfPVXuFIX6m KU3cQwPeEkRCF4aWUZKz6hH5V1xXq5AV881PwEDVpN9VeL6acWQ5OiucQj5ngrWo lU1o/g== -----END CERTIFICATE-----Generated at Wed Feb 19 22:38:54 2025 by rpki-client