$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.cer File: F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.cer (raw, json) Hash identifier: yBRa4YFYUycfjsAaIRwA1U5SxZM+NBrxkjuxr74oIVA= Subject key identifier: F9:F4:1A:62:53:E1:A1:77:16:D9:8D:5D:A2:EF:1A:E9:61:D9:82:AC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 342904A48E22C9C818E10DC2F1B36AFBC7AA4D9A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.mft caRepository: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Mar 2025 21:51:14 +0000 Certificate not after: Thu 26 Mar 2026 21:56:14 +0000 Subordinate resources: AS: 266304 IP: 170.79.200.0/22 IP: 2804:35c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 08:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:04:a4:8e:22:c9:c8:18:e1:0d:c2:f1:b3:6a:fb:c7:aa:4d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 21:51:14 2025 GMT Not After : Mar 26 21:56:14 2026 GMT Subject: CN=F9F41A6253E1A17716D98D5DA2EF1AE961D982AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:56:fa:d6:f2:a3:2d:0d:8d:39:69:6b:e3: 9a:1a:b8:ca:9d:c5:b6:79:79:24:40:bf:72:a2:da: 71:b6:15:f6:44:2f:1d:80:4b:c4:b9:19:34:bd:65: 89:23:de:2b:01:58:e4:5c:7d:b8:15:23:f0:b6:c5: 60:ed:e0:88:72:63:8a:8d:1f:54:20:be:99:10:89: 29:10:e4:25:67:e6:65:39:1b:f9:83:d9:8f:b8:dc: 32:2c:c7:27:a2:9a:7f:87:b4:46:6a:10:d9:d6:0a: d0:43:ee:d0:b8:54:25:7b:3e:96:66:35:8b:82:03: 8e:46:ae:5c:93:c4:1f:d8:5c:89:32:58:70:6e:08: 3f:cb:78:07:55:79:2a:f7:69:51:30:80:c3:fb:e3: 58:fe:f9:fc:e1:a1:6c:07:36:32:9c:ad:9e:d0:3b: 99:ff:7d:59:a7:89:a6:16:26:a4:e8:d2:99:c7:dc: 8d:b0:ae:00:fb:46:66:40:7e:c2:ec:91:a3:7f:8f: f6:cc:a4:36:cd:83:46:08:91:a3:83:8e:c8:66:24: 5e:bd:70:ee:5b:41:f4:c3:ef:59:42:1a:f9:a8:56: 01:48:7e:42:74:c8:12:cd:37:c5:8c:9d:67:0d:58: e2:a2:66:75:f8:7e:c6:b6:27:c6:06:49:2e:ba:02: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:F4:1A:62:53:E1:A1:77:16:D9:8D:5D:A2:EF:1A:E9:61:D9:82:AC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/F9F41A6253E1A17716D98D5DA2EF1AE961D982AC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.200.0/22 IPv6: 2804:35c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266304 Signature Algorithm: sha256WithRSAEncryption 8a:1c:d5:09:d5:46:23:cc:d7:be:ae:1e:c8:c6:32:2c:50:d6: ba:a7:1c:b6:ac:6e:78:e1:20:72:35:43:a3:5e:f1:68:17:7f: 67:59:43:43:53:27:8e:6f:d2:2d:c8:be:69:c5:0a:29:e6:de: 0a:ce:67:bf:24:a9:b6:a0:09:fe:22:1e:55:bd:b6:77:71:9b: 56:4d:1d:44:73:47:ab:59:6d:dc:c3:bb:a1:5b:0e:ca:ce:9f: 12:8c:d6:bf:9d:b9:0c:26:b0:3f:cf:fa:fb:6c:69:a1:d2:3b: 05:cb:66:f6:2e:f3:65:98:49:2b:85:2d:96:bd:7c:0d:69:1f: d2:1b:b4:2a:71:58:d0:19:e5:d9:75:c0:9b:30:7c:3c:40:6f: 09:e1:e7:53:00:d3:31:4c:80:0d:2a:47:36:ef:43:70:52:46: 8c:74:b8:37:a2:15:4e:39:b1:a9:4d:44:6d:1b:72:f2:f2:9a: ad:b8:f9:de:38:10:e0:89:8a:ae:29:81:b2:65:f1:65:ef:57: ca:20:72:2c:2f:99:4a:96:f1:df:2c:74:ae:8b:93:1e:f4:9c: a1:79:92:ec:30:e0:2f:e9:24:a4:66:7a:a8:75:74:8c:6c:9c: 28:ed:9f:5c:30:ef:ea:50:b3:54:f0:df:35:fe:5c:d0:cf:c9: 58:2d:b3:f8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNCkEpI4iycgY4Q3C8bNq+8eqTZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjcyMTUxMTRaFw0yNjAzMjYyMTU2MTRaMDMxMTAvBgNV BAMTKEY5RjQxQTYyNTNFMUExNzcxNkQ5OEQ1REEyRUYxQUU5NjFEOTgyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckFb61vKjLQ2NOWlr45oauMqd xbZ5eSRAv3Ki2nG2FfZELx2AS8S5GTS9ZYkj3isBWORcfbgVI/C2xWDt4IhyY4qN H1QgvpkQiSkQ5CVn5mU5G/mD2Y+43DIsxyeimn+HtEZqENnWCtBD7tC4VCV7PpZm NYuCA45GrlyTxB/YXIkyWHBuCD/LeAdVeSr3aVEwgMP741j++fzhoWwHNjKcrZ7Q O5n/fVmniaYWJqTo0pnH3I2wrgD7RmZAfsLskaN/j/bMpDbNg0YIkaODjshmJF69 cO5bQfTD71lCGvmoVgFIfkJ0yBLNN8WMnWcNWOKiZnX4fsa2J8YGSS66AmvhAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT59BpiU+GhdxbZ jV2i7xrpYdmCrDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRI aXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0 SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAvRjlG NDFBNjI1M0UxQTE3NzE2RDk4RDVEQTJFRjFBRTk2MUQ5ODJBQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqk/IMA0EAgACMAcDBQAoBDXAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQQDANBgkqhkiG9w0BAQsFAAOCAQEAihzVCdVGI8zXvq4e yMYyLFDWuqcctqxueOEgcjVDo17xaBd/Z1lDQ1Mnjm/SLci+acUKKebeCs5nvySp tqAJ/iIeVb22d3GbVk0dRHNHq1lt3MO7oVsOys6fEozWv525DCawP8/6+2xpodI7 Bctm9i7zZZhJK4Utlr18DWkf0hu0KnFY0Bnl2XXAmzB8PEBvCeHnUwDTMUyADSpH Nu9DcFJGjHS4N6IVTjmxqU1EbRty8vKarbj53jgQ4ImKrimBsmXxZe9XyiByLC+Z Spbx3yx0rouTHvScoXmS7DDgL+kkpGZ6qHV0jGycKO2fXDDv6lCzVPDfNf5c0M/J WC2z+A== -----END CERTIFICATE-----Generated at Wed Apr 9 06:34:49 2025 by rpki-client