$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer File: FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer (raw, json) Hash identifier: wbvrivDZuMRD+jebUJgbN4NzyavpBOym9Ec+Ew5hS+Y= Subject key identifier: FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 768983E56CEC5F1C5C6F5052F43FE0D97E4FAE7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft caRepository: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 23 Jan 2025 12:52:19 +0000 Certificate not after: Thu 22 Jan 2026 12:57:19 +0000 Subordinate resources: AS: 267323 IP: 45.233.120.0/22 IP: 2804:4bac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Apr 2025 14:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:89:83:e5:6c:ec:5f:1c:5c:6f:50:52:f4:3f:e0:d9:7e:4f:ae:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 23 12:52:19 2025 GMT Not After : Jan 22 12:57:19 2026 GMT Subject: CN=FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:7c:74:49:63:14:f5:88:b3:f9:dd:37:e4: 50:ff:2d:8c:61:e0:46:75:56:18:9a:98:e5:15:92: 62:69:50:ce:d4:48:15:83:dc:87:5c:6d:d2:e9:3c: 49:af:0a:85:94:10:13:a5:85:71:e9:fc:79:18:d1: f0:70:c9:41:8f:92:e8:29:39:46:f6:c2:28:2d:f9: f5:4a:3a:50:39:86:e8:4b:f7:97:8d:1d:b8:6e:66: 41:59:3d:d4:57:8a:58:84:91:08:07:21:cf:69:1d: 4e:3b:a2:aa:4a:98:39:79:07:dd:f4:de:db:f0:47: 6d:0a:05:13:64:ab:0e:9d:4c:c2:e1:7c:0e:cd:8d: 64:b4:c0:16:9d:90:57:22:78:07:8c:8b:00:15:96: d5:01:6c:4a:b4:af:01:fc:23:89:9c:87:21:b4:4b: 8a:8b:24:eb:9e:dd:e0:59:40:75:dd:cd:88:c3:36: c4:58:b1:bd:38:09:16:0d:d1:6a:b6:ea:52:39:98: 56:94:7c:db:93:85:02:24:c5:b0:d5:06:4f:df:8b: 73:fd:7b:ef:13:2a:cc:9a:dc:60:f1:60:97:4a:7e: 7c:99:7e:ba:66:21:1b:86:f3:aa:3b:68:94:ec:ba: ea:5b:9d:90:45:66:7f:cb:25:96:c2:e0:ed:e1:07: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.120.0/22 IPv6: 2804:4bac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267323 Signature Algorithm: sha256WithRSAEncryption 49:6b:f9:3b:f8:e2:86:2f:74:e1:50:7a:ac:d4:a7:1b:7e:9a: fe:53:6c:ef:9c:cf:55:12:3a:bf:0c:18:a0:a6:a8:cd:cd:ae: 3e:7a:9d:fb:83:18:7a:40:33:ea:cd:6b:69:67:52:0d:4d:ce: a7:df:5e:0a:f8:24:2c:4c:e2:9c:c9:67:c7:c7:56:f9:ec:04: 21:0d:09:89:e3:54:72:c2:28:d4:6e:78:1d:1f:96:0e:7c:59: d0:f9:4e:c1:de:ba:ef:36:5f:4c:31:75:c8:a2:62:59:13:9a: 0e:e6:bf:1f:b8:b6:76:23:35:4f:54:9b:36:ea:3c:46:25:a4: 8b:f6:b3:cf:d8:2b:ff:73:e4:48:c8:1d:6b:61:36:3e:cb:f5: 3f:25:60:19:83:ee:31:24:5f:8b:9a:9b:5e:09:e1:24:75:42: b1:3f:01:52:c2:ae:94:65:1a:7d:a9:d4:37:89:56:00:3c:4c: 42:e2:19:e3:01:8f:75:43:32:a9:b5:f9:17:3b:21:87:a3:b9: 54:d9:99:99:42:be:f2:1f:c9:10:a5:9f:39:5b:17:51:30:d9: f3:b4:68:52:28:f3:eb:89:30:9c:63:d9:41:8d:c5:ea:a1:86: e0:5b:1d:ae:72:0c:93:04:76:3b:5e:0b:92:73:21:40:69:11: b8:04:f4:d5 -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIUdomD5WzsXxxcb1BS9D/g2X5Prn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjMxMjUyMTlaFw0yNjAxMjIxMjU3MTlaMDMxMTAvBgNV BAMTKEZEOEQzMEU4NkY1QkIzNDIzNDY4NzY5Q0EwRENBNkJFNjlGQ0IxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Pnx0SWMU9Yiz+d035FD/LYxh 4EZ1VhiamOUVkmJpUM7USBWD3IdcbdLpPEmvCoWUEBOlhXHp/HkY0fBwyUGPkugp OUb2wigt+fVKOlA5huhL95eNHbhuZkFZPdRXiliEkQgHIc9pHU47oqpKmDl5B930 3tvwR20KBRNkqw6dTMLhfA7NjWS0wBadkFcieAeMiwAVltUBbEq0rwH8I4mchyG0 S4qLJOue3eBZQHXdzYjDNsRYsb04CRYN0Wq26lI5mFaUfNuThQIkxbDVBk/fi3P9 e+8TKsya3GDxYJdKfnyZfrpmIRuG86o7aJTsuupbnZBFZn/LJZbC4O3hB7xLAgMB AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9jTDob1uzQjRo dpyg3Ka+afyx4DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWWJ1 TTZpNUdRTkxpN0JiRUVxUFExVTRUS0ZiSlhLekNVUzJzYlhneGY3Vy8wMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ZYnVN Nmk1R1FOTGk3QmJFRXFQUTFVNFRLRmJKWEt6Q1VTMnNiWGd4ZjdXLzAvRkQ4RDMw RTg2RjVCQjM0MjM0Njg3NjlDQTBEQ0E2QkU2OUZDQjFFMC5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCLel4MA0EAgACMAcDBQAoBEusMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQUOzANBgkqhkiG9w0BAQsFAAOCAQEASWv5O/jihi904VB6rNSn G36a/lNs75zPVRI6vwwYoKaozc2uPnqd+4MYekAz6s1raWdSDU3Op99eCvgkLEzi nMlnx8dW+ewEIQ0JieNUcsIo1G54HR+WDnxZ0PlOwd667zZfTDF1yKJiWROaDua/ H7i2diM1T1SbNuo8RiWki/azz9gr/3PkSMgda2E2Psv1PyVgGYPuMSRfi5qbXgnh JHVCsT8BUsKulGUafanUN4lWADxMQuIZ4wGPdUMyqbX5Fzshh6O5VNmZmUK+8h/J EKWfOVsXUTDZ87RoUijz64kwnGPZQY3F6qGG4FsdrnIMkwR2O14LknMhQGkRuAT0 1Q== -----END CERTIFICATE-----Generated at Fri Apr 4 10:50:42 2025 by rpki-client