$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer File: F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.cer (raw, json) Hash identifier: GX0UtqcxL3cBxI+Y9J1t3uxhj82cWKrqi0vQBFO2PM0= Subject key identifier: F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3F06BB1F415BEED511D2E4F6E2E9862E3ABC908D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft caRepository: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 14 Feb 2025 17:39:11 +0000 Certificate not after: Fri 13 Feb 2026 17:44:11 +0000 Subordinate resources: AS: 273663 IP: 177.8.71.0/24 IP: 2804:8a58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 16:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:06:bb:1f:41:5b:ee:d5:11:d2:e4:f6:e2:e9:86:2e:3a:bc:90:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 14 17:39:11 2025 GMT Not After : Feb 13 17:44:11 2026 GMT Subject: CN=F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:f4:b7:d7:31:b7:8e:44:0c:e2:5f:6c:71: b8:5e:5a:0d:01:6c:53:40:0b:41:f3:51:c3:99:d0: 4f:dc:67:9c:99:30:5c:9f:31:98:2c:a8:c6:4b:57: d2:31:2b:82:ff:8a:7c:af:bb:6a:e3:49:10:d8:66: 7e:75:7b:a0:b4:0e:b1:1f:8a:e3:74:14:ad:9f:b3: 5e:27:7d:ba:8a:47:38:eb:d0:21:a8:6f:f2:b6:13: bb:1a:0b:5e:ca:89:c5:8a:28:93:b9:68:fb:b0:f4: 4e:4a:f9:52:fe:76:76:a8:f3:00:72:0b:6e:db:54: 64:63:10:36:40:95:ac:5c:82:57:5d:54:aa:92:b3: c5:02:11:49:ec:91:8c:db:61:18:96:84:e8:e8:e6: 9c:63:13:0f:13:ad:5f:d8:3b:81:80:4c:38:0d:00: c9:45:0c:b7:83:b9:49:06:ab:f3:e4:0e:15:db:5e: 91:54:7a:d1:22:e3:e4:ad:4d:dd:9f:96:b4:74:f9: c5:5c:6e:7c:2d:65:14:b1:d4:a7:c0:21:4d:08:77: 26:ab:86:b3:e8:a1:2d:29:ad:0f:14:a6:78:c5:cb: 10:ad:b1:9b:5b:59:5c:6d:36:d8:08:39:d3:db:dc: 9b:16:04:19:c8:e4:63:07:6e:c6:e3:db:09:ad:13: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:35:04:90:5C:7D:BB:52:F8:EA:92:D9:E5:D9:C2:24:C5:2A:B8:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F53504905C7DBB52F8EA92D9E5D9C224C52AB8CA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.8.71.0/24 IPv6: 2804:8a58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273663 Signature Algorithm: sha256WithRSAEncryption a0:0f:27:5e:f3:e7:bc:35:54:22:88:13:5b:da:6f:bb:91:08: 0f:3c:55:cd:37:bf:44:ec:3f:6b:6f:bf:55:2e:76:58:6f:59: f4:45:9e:ce:4c:b5:b1:db:de:ca:cc:55:fe:c5:1a:b1:c7:54: d5:e5:53:dc:41:b5:d3:b3:a6:c4:25:30:e8:67:20:86:d0:b0: c8:d4:9b:58:f2:ce:30:d8:1d:1f:90:41:6f:c1:7b:1f:e4:dc: ce:c1:c4:7e:3d:23:be:ef:cf:6b:01:db:c2:15:f4:83:9a:c8: ce:68:fd:bd:29:81:2b:d1:8e:f7:7c:2f:a9:00:d2:73:93:df: a8:dc:5d:85:45:5c:81:5a:72:15:24:b6:e1:23:3c:27:f5:34: 0c:e0:1f:f8:60:ad:cb:0e:de:6a:86:08:16:df:84:52:36:c3: 6a:dd:13:ce:56:b0:88:82:8c:b1:40:6b:81:28:12:c3:7e:5d: d9:41:ae:83:bb:d1:fb:b0:3c:55:1b:5f:4e:cf:6e:09:b1:cd: 3e:a5:3a:87:50:db:67:80:93:87:a6:1e:4e:8d:7d:8a:6d:07: 2d:c1:d1:6c:9d:06:07:dc:38:c6:57:25:39:af:57:2c:de:a1: 25:40:27:bd:b2:71:0a:b9:67:67:2d:f9:91:e2:aa:12:29:f3: 86:fb:98:1d -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUPwa7H0Fb7tUR0uT24umGLjq8kI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTQxNzM5MTFaFw0yNjAyMTMxNzQ0MTFaMDMxMTAvBgNV BAMTKEY1MzUwNDkwNUM3REJCNTJGOEVBOTJEOUU1RDlDMjI0QzUyQUI4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYPS31zG3jkQM4l9scbheWg0B bFNAC0HzUcOZ0E/cZ5yZMFyfMZgsqMZLV9IxK4L/inyvu2rjSRDYZn51e6C0DrEf iuN0FK2fs14nfbqKRzjr0CGob/K2E7saC17KicWKKJO5aPuw9E5K+VL+dnao8wBy C27bVGRjEDZAlaxcglddVKqSs8UCEUnskYzbYRiWhOjo5pxjEw8TrV/YO4GATDgN AMlFDLeDuUkGq/PkDhXbXpFUetEi4+StTd2flrR0+cVcbnwtZRSx1KfAIU0Idyar hrPooS0prQ8UpnjFyxCtsZtbWVxtNtgIOdPb3JsWBBnI5GMHbsbj2wmtEwG/AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1NQSQXH27Uvjq ktnl2cIkxSq4yjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wL0Y1MzUw NDkwNUM3REJCNTJGOEVBOTJEOUU1RDlDMjI0QzUyQUI4Q0EubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEALEIRzANBAIAAjAHAwUAKASKWDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMELP8wDQYJKoZIhvcNAQELBQADggEBAKAPJ17z57w1VCKIE1va b7uRCA88Vc03v0TsP2tvv1UudlhvWfRFns5MtbHb3srMVf7FGrHHVNXlU9xBtdOz psQlMOhnIIbQsMjUm1jyzjDYHR+QQW/Bex/k3M7BxH49I77vz2sB28IV9IOayM5o /b0pgSvRjvd8L6kA0nOT36jcXYVFXIFachUktuEjPCf1NAzgH/hgrcsO3mqGCBbf hFI2w2rdE85WsIiCjLFAa4EoEsN+XdlBroO70fuwPFUbX07PbgmxzT6lOodQ22eA k4emHk6NfYptBy3B0WydBgfcOMZXJTmvVyzeoSVAJ72ycQq5Z2ct+ZHiqhIp84b7 mB0= -----END CERTIFICATE-----Generated at Thu Feb 20 17:37:33 2025 by rpki-client