$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.cer File: FD1F02FB13B8A44549F4A7647596B707E14850D0.cer (raw, json) Hash identifier: SKzLpMi/CcGk0dOj4Etil7vu5sfbpxmIlmzHU4RR7aY= Subject key identifier: FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F89E23A52C9B72DE29CF8E2E90D2CB355E408BB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.mft caRepository: rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 14:45:27 +0000 Certificate not after: Thu 05 Mar 2026 14:50:27 +0000 Subordinate resources: AS: 266648 IP: 128.201.204.0/22 IP: 2804:3f40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:89:e2:3a:52:c9:b7:2d:e2:9c:f8:e2:e9:0d:2c:b3:55:e4:08:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 14:45:27 2025 GMT Not After : Mar 5 14:50:27 2026 GMT Subject: CN=FD1F02FB13B8A44549F4A7647596B707E14850D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:8d:c0:22:91:0a:67:1f:ae:54:e9:6b:04: 92:5c:2b:17:22:f4:eb:ed:ce:d0:ff:ab:b4:d0:b2: 6d:73:7e:fc:a4:e7:08:0f:e2:78:19:67:7c:29:50: e6:a1:15:91:63:cb:f1:15:94:79:ab:6e:0f:ef:e9: 08:dc:25:81:f5:cd:f7:1c:1e:e6:1e:82:24:97:e6: 9f:83:b0:5f:d2:b3:ca:7a:3f:fb:62:cd:d0:de:df: b0:bf:74:15:f4:81:67:07:7a:63:78:12:68:25:8d: f8:f4:75:53:f8:6f:d7:b5:63:54:a6:c4:aa:df:bb: 89:54:b2:71:22:18:a2:53:26:6c:8d:88:97:b6:59: 29:8e:a4:a6:82:a3:a0:7a:fa:14:dc:1c:9a:ee:25: be:7a:46:97:6b:a6:5d:a6:de:e6:16:43:9c:a2:04: 22:7a:2b:c3:8f:4d:9d:0b:61:22:37:28:20:4a:0f: 6d:e3:32:89:30:bf:5c:6a:8c:67:51:fa:3d:a6:d6: 77:5f:df:83:92:6c:c4:f9:b3:f5:3a:eb:6e:f9:38: 97:1f:0b:69:8e:19:57:b6:6d:d7:d2:24:be:61:a7: fc:f1:f2:13:88:2c:ba:03:64:63:02:b1:76:08:37: 52:0d:03:59:27:15:d7:b7:3d:c0:92:5f:9a:b1:38: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:1F:02:FB:13:B8:A4:45:49:F4:A7:64:75:96:B7:07:E1:48:50:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8n6ZpAJjqNbEwbWMuCkXFHD4ja1v38KS829WcADpd2pn/1/FD1F02FB13B8A44549F4A7647596B707E14850D0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.204.0/22 IPv6: 2804:3f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266648 Signature Algorithm: sha256WithRSAEncryption a3:3a:bd:67:c0:9f:e1:3c:ac:68:3a:a6:f8:3e:59:43:13:86: 71:d7:59:5b:4d:a0:91:23:e3:e0:89:c8:88:74:5e:7e:85:9f: e4:b6:22:f0:25:5a:b6:ed:04:a5:a2:ef:aa:67:75:73:35:d8: 8a:b0:9a:1d:1e:74:ad:ae:2a:01:ab:7f:e8:b8:fc:10:bb:89: 96:7d:50:0a:7a:f9:ae:64:b0:b1:f7:d9:0e:ad:02:c1:7b:ca: 03:a7:4a:80:4b:61:fd:59:43:9d:ca:49:6b:ee:73:cd:33:37: 28:df:4e:70:d8:35:2a:93:85:cd:da:df:4a:5f:48:28:49:2c: 90:e9:fe:80:94:ba:bb:f4:b0:33:51:93:80:6c:24:1a:95:f5: b8:f7:62:c7:4a:4b:fd:b6:ef:39:04:3c:ab:8c:80:4c:d1:89: 39:d9:b5:24:e2:52:4f:fd:1c:4b:b2:73:53:52:17:ed:58:0c: 6b:bb:60:74:80:19:d7:f5:3b:96:c4:cf:81:82:51:1a:2d:89: ee:da:ab:68:06:3d:f5:5d:40:49:ff:f4:da:79:ca:94:01:6a: 4c:12:ff:62:97:52:8a:7d:23:2c:2d:77:db:76:11:52:9b:62: 5f:d9:bf:ba:d0:d4:a0:66:7f:11:51:df:c1:f1:6a:b4:1b:49: b6:80:fe:da -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUX4niOlLJty3inPji6Q0ss1XkCLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNDQ1MjdaFw0yNjAzMDUxNDUwMjdaMDMxMTAvBgNV BAMTKEZEMUYwMkZCMTNCOEE0NDU0OUY0QTc2NDc1OTZCNzA3RTE0ODUwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZY3AIpEKZx+uVOlrBJJcKxci 9OvtztD/q7TQsm1zfvyk5wgP4ngZZ3wpUOahFZFjy/EVlHmrbg/v6QjcJYH1zfcc HuYegiSX5p+DsF/Ss8p6P/tizdDe37C/dBX0gWcHemN4Emgljfj0dVP4b9e1Y1Sm xKrfu4lUsnEiGKJTJmyNiJe2WSmOpKaCo6B6+hTcHJruJb56Rpdrpl2m3uYWQ5yi BCJ6K8OPTZ0LYSI3KCBKD23jMokwv1xqjGdR+j2m1ndf34OSbMT5s/U66275OJcf C2mOGVe2bdfSJL5hp/zx8hOILLoDZGMCsXYIN1INA1knFde3PcCSX5qxOF75AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9HwL7E7ikRUn0 p2R1lrcH4UhQ0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG42 WnBBSmpxTmJFd2JXTXVDa1hGSEQ0amExdjM4S1M4MjlXY0FEcGQycG4vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu NlpwQUpqcU5iRXdiV011Q2tYRkhENGphMXYzOEtTODI5V2NBRHBkMnBuLzEvRkQx RjAyRkIxM0I4QTQ0NTQ5RjRBNzY0NzU5NkI3MDdFMTQ4NTBEMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgMnMMA0EAgACMAcDBQAoBD9AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRmDANBgkqhkiG9w0BAQsFAAOCAQEAozq9Z8Cf4TysaDqm +D5ZQxOGcddZW02gkSPj4InIiHRefoWf5LYi8CVatu0EpaLvqmd1czXYirCaHR50 ra4qAat/6Lj8ELuJln1QCnr5rmSwsffZDq0CwXvKA6dKgEth/VlDncpJa+5zzTM3 KN9OcNg1KpOFzdrfSl9IKEkskOn+gJS6u/SwM1GTgGwkGpX1uPdix0pL/bbvOQQ8 q4yATNGJOdm1JOJST/0cS7JzU1IX7VgMa7tgdIAZ1/U7lsTPgYJRGi2J7tqraAY9 9V1ASf/02nnKlAFqTBL/YpdSin0jLC1323YRUptiX9m/utDUoGZ/EVHfwfFqtBtJ toD+2g== -----END CERTIFICATE-----Generated at Fri Apr 4 10:20:01 2025 by rpki-client