$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer File: F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.cer (raw, json) Hash identifier: UCghbU8L0KHbPbLD1u05DXjaEXJVcQH/cGz597ZLg0U= Subject key identifier: F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A27BD823B71A98F5E3C2087BB6801903254715F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.mft caRepository: rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 23:15:15 +0000 Certificate not after: Thu 18 Dec 2025 23:20:15 +0000 Subordinate resources: AS: 263497 IP: 191.243.64.0/21 IP: 2804:12c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:27:bd:82:3b:71:a9:8f:5e:3c:20:87:bb:68:01:90:32:54:71:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 19 23:15:15 2024 GMT Not After : Dec 18 23:20:15 2025 GMT Subject: CN=F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3a:c1:4c:b4:de:12:d5:e6:0f:4f:f7:f1:ca: 86:56:13:15:c3:9a:9c:48:81:5b:21:8a:09:cb:db: 19:72:16:02:37:b2:b0:2f:12:48:74:16:5b:9b:7d: 43:11:7a:9b:22:a5:d6:1f:41:35:c4:4c:21:a1:43: 1a:23:49:a2:c5:f7:4e:55:3a:f9:6c:72:64:a1:af: 5e:82:80:52:54:13:da:57:10:31:4e:c4:da:88:1f: e6:a1:ba:32:59:d1:ab:35:c6:7c:7b:30:14:ea:95: cb:41:8e:21:c7:3c:1a:71:99:3e:14:31:9d:90:37: 18:3f:2c:d2:5f:e7:89:aa:44:73:be:40:be:f9:22: c1:3e:83:14:0e:cf:92:ef:4e:83:5a:fb:66:8e:35: 3d:5c:f9:11:0f:15:c4:77:53:51:c6:e1:20:b3:37: 61:32:cd:d1:f8:53:5c:e1:9c:1f:3d:75:2e:ff:69: 95:dc:62:ea:48:3b:05:8c:19:fe:dc:d4:01:79:ef: 24:0c:ec:bb:22:80:2b:ec:af:7b:b1:60:9e:e3:fc: be:10:e1:a5:26:fd:16:f7:2a:d8:7b:b9:63:6f:ec: 70:32:c6:ec:53:10:10:15:fe:9c:b7:a5:1e:47:89: e6:48:45:d1:65:87:95:bc:f6:75:08:b1:f3:09:f5: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:E3:8B:02:74:44:0B:C8:66:16:FA:3A:AA:7B:E0:FA:8A:4D:EA:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4XgLV7T9jeZTdcaW2ASsT9BUYBe5ygvwrNs9hYGw7dAo/0/F5E38B0274440BC86616FA3AAA7BE0FA8A4DEA2D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.243.64.0/21 IPv6: 2804:12c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263497 Signature Algorithm: sha256WithRSAEncryption b8:11:75:06:ac:6a:be:39:80:d0:94:d5:9c:82:21:9b:6f:03: e1:73:cc:b5:6e:a9:42:77:bc:f0:28:9a:52:78:74:7d:df:0e: 67:d5:c9:06:af:91:58:7c:56:ed:5f:dd:90:8a:03:05:89:0f: c9:7d:e5:32:5a:43:93:22:05:e2:82:bd:ed:bc:fa:b8:89:05: 69:82:6c:29:4a:39:a0:f5:f3:3f:cf:6b:09:59:80:13:91:1e: b5:b1:ea:85:49:7c:d2:71:c2:9b:1b:51:bb:37:0d:45:6c:b1: 6d:a8:d4:c3:64:56:ec:39:c5:8a:91:e1:d6:1e:2f:25:76:6f: 24:79:17:a5:99:48:a7:de:94:4f:a1:32:cb:f2:81:db:31:d4: 7f:c8:44:da:01:c4:c4:be:84:a6:33:26:f6:f7:f8:47:a1:6b: 28:c0:43:f8:27:44:ff:71:83:99:21:ed:12:d1:7f:2e:6d:bf: 1d:c3:f3:a8:ee:57:c3:3f:e7:4f:75:e0:28:9f:14:5c:a6:1c: 7c:72:4b:3d:0a:67:83:6e:95:57:c4:ae:1f:ef:b2:be:4d:f7: 16:72:71:3b:f1:ba:d3:d5:c9:f8:5b:5e:67:80:00:1d:07:86: 30:9a:f7:36:9d:b5:4d:9c:21:3d:00:30:79:18:3b:99:45:bf: 88:83:c5:ac -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCie9gjtxqY9ePCCHu2gBkDJUcV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTkyMzE1MTVaFw0yNTEyMTgyMzIwMTVaMDMxMTAvBgNV BAMTKEY1RTM4QjAyNzQ0NDBCQzg2NjE2RkEzQUFBN0JFMEZBOEE0REVBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsOsFMtN4S1eYPT/fxyoZWExXD mpxIgVshignL2xlyFgI3srAvEkh0FlubfUMRepsipdYfQTXETCGhQxojSaLF905V OvlscmShr16CgFJUE9pXEDFOxNqIH+ahujJZ0as1xnx7MBTqlctBjiHHPBpxmT4U MZ2QNxg/LNJf54mqRHO+QL75IsE+gxQOz5LvToNa+2aONT1c+REPFcR3U1HG4SCz N2EyzdH4U1zhnB89dS7/aZXcYupIOwWMGf7c1AF57yQM7LsigCvsr3uxYJ7j/L4Q 4aUm/Rb3Kth7uWNv7HAyxuxTEBAV/py3pR5HieZIRdFlh5W89nUIsfMJ9SyrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT144sCdEQLyGYW +jqqe+D6ik3qLTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFhn TFY3VDlqZVpUZGNhVzJBU3NUOUJVWUJlNXlndndyTnM5aFlHdzdkQW8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRY Z0xWN1Q5amVaVGRjYVcyQVNzVDlCVVlCZTV5Z3Z3ck5zOWhZR3c3ZEFvLzAvRjVF MzhCMDI3NDQ0MEJDODY2MTZGQTNBQUE3QkUwRkE4QTRERUEyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDv/NAMA0EAgACMAcDBQAoBBLEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQFSTANBgkqhkiG9w0BAQsFAAOCAQEAuBF1BqxqvjmA0JTV nIIhm28D4XPMtW6pQne88CiaUnh0fd8OZ9XJBq+RWHxW7V/dkIoDBYkPyX3lMlpD kyIF4oK97bz6uIkFaYJsKUo5oPXzP89rCVmAE5EetbHqhUl80nHCmxtRuzcNRWyx bajUw2RW7DnFipHh1h4vJXZvJHkXpZlIp96UT6Eyy/KB2zHUf8hE2gHExL6EpjMm 9vf4R6FrKMBD+CdE/3GDmSHtEtF/Lm2/HcPzqO5Xwz/nT3XgKJ8UXKYcfHJLPQpn g26VV8SuH++yvk33FnJxO/G609XJ+FteZ4AAHQeGMJr3Np21TZwhPQAweRg7mUW/ iIPFrA== -----END CERTIFICATE-----Generated at Fri Apr 4 10:20:07 2025 by rpki-client