$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer File: FF895C82F573BE0E4DF3849A121D8783AC6AE22C.cer (raw, json) Hash identifier: VrA0lKeWP0E5Xqox3C+LoROS1UygwRL4wQZOguIaspU= Subject key identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1FD0A6C4984C0C0E0827FC003F1EE28DDF7D8E00 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft caRepository: rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:33 +0000 Certificate not after: Wed 04 Mar 2026 18:40:33 +0000 Subordinate resources: AS: 268144 AS: 268568 IP: 45.163.144.0/22 IP: 45.168.200.0/22 IP: 2804:532c::/32 IP: 2804:58b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d0:a6:c4:98:4c:0c:0e:08:27:fc:00:3f:1e:e2:8d:df:7d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:33 2025 GMT Not After : Mar 4 18:40:33 2026 GMT Subject: CN=FF895C82F573BE0E4DF3849A121D8783AC6AE22C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:01:c8:cb:d4:fe:ba:e9:17:b0:91:09:16:3e: ef:d4:44:c0:8d:6d:9a:ca:75:eb:4d:b6:5a:07:67: b8:66:ef:78:d9:d7:38:a0:95:6a:29:cf:9b:cc:54: 94:4c:77:e9:54:37:71:57:42:69:47:13:56:43:d1: fe:b1:f8:d6:66:bc:51:32:cf:d0:d9:3c:a9:0d:cf: b6:47:50:07:2f:36:f6:d7:eb:62:80:f2:2a:e6:38: 37:49:3d:b2:a3:e5:27:62:5e:1c:07:47:57:5a:3e: dc:e1:78:c3:0f:1f:9b:8f:13:76:a5:13:61:78:fb: 84:df:52:18:93:3b:97:b1:45:1e:f1:24:61:ea:fb: 85:b6:50:d7:1a:de:0c:03:30:c8:05:2c:62:79:d4: f5:1c:13:c9:e3:62:42:04:c2:3d:c1:ed:7e:28:cb: f9:96:6d:d7:79:ad:21:f1:da:4d:2a:8c:b5:88:60: 2a:de:73:84:f5:84:d9:2c:df:3f:e1:48:fe:f0:cd: 79:b8:ec:2f:7f:7e:c6:69:9f:bf:81:12:a5:95:28: 18:c5:7f:90:d2:f4:40:88:87:cc:a9:89:05:c6:1b: 13:c0:a5:b7:31:1a:22:eb:23:64:81:18:49:19:6d: 8f:52:e7:d8:e7:9b:b6:03:71:e9:13:23:27:5a:de: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:89:5C:82:F5:73:BE:0E:4D:F3:84:9A:12:1D:87:83:AC:6A:E2:2C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/1/FF895C82F573BE0E4DF3849A121D8783AC6AE22C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.144.0/22 45.168.200.0/22 IPv6: 2804:532c::/32 2804:58b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268144 268568 Signature Algorithm: sha256WithRSAEncryption 7c:98:b6:8a:36:96:84:bd:40:67:23:d7:08:7a:c3:ca:17:21: 44:e7:26:d9:7e:4d:77:41:7a:0c:44:9c:40:e5:57:7e:6a:bc: 88:b3:cb:50:cf:0f:69:0b:83:83:d4:55:ab:87:f1:80:04:d4: bc:5f:a5:ee:1b:0f:97:cf:ca:8e:1e:0f:1c:14:47:d1:04:80: b3:a7:23:43:fd:52:f7:51:90:fa:7a:ef:51:85:2f:6d:d4:14: b9:43:0a:39:c8:83:94:45:d3:ef:66:24:e9:c5:e3:ee:c4:a0: 6f:f6:9b:f3:a2:c5:54:16:ef:c1:ac:6e:3c:03:a6:f7:ff:0c: cc:d7:83:3e:18:dc:1d:35:69:d1:71:0f:97:56:fd:d3:d0:79: 54:c0:b1:fc:28:61:99:2a:91:10:c3:fe:16:c7:78:ae:bf:e9: 31:d7:49:bb:50:40:93:8d:e8:ad:a4:d8:90:fb:25:a2:2f:94: 1d:db:af:68:a8:94:ff:52:a4:94:8a:55:72:94:1d:f1:66:93: 23:1d:88:3b:c1:0f:dd:f3:7a:f9:fd:ee:bb:29:78:ab:d2:70: 70:8d:df:1e:f2:ed:02:75:ad:0f:bc:2a:98:ba:2b:64:42:82: e2:cf:1b:13:45:30:64:79:0b:38:c9:23:23:03:08:a3:b1:63: f9:75:2e:1a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUH9CmxJhMDA4IJ/wAPx7ijd99jgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzNaFw0yNjAzMDQxODQwMzNaMDMxMTAvBgNV BAMTKEZGODk1QzgyRjU3M0JFMEU0REYzODQ5QTEyMUQ4NzgzQUM2QUUyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhAcjL1P666RewkQkWPu/URMCN bZrKdetNtloHZ7hm73jZ1ziglWopz5vMVJRMd+lUN3FXQmlHE1ZD0f6x+NZmvFEy z9DZPKkNz7ZHUAcvNvbX62KA8irmODdJPbKj5SdiXhwHR1daPtzheMMPH5uPE3al E2F4+4TfUhiTO5exRR7xJGHq+4W2UNca3gwDMMgFLGJ51PUcE8njYkIEwj3B7X4o y/mWbdd5rSHx2k0qjLWIYCrec4T1hNks3z/hSP7wzXm47C9/fsZpn7+BEqWVKBjF f5DS9ECIh8ypiQXGGxPApbcxGiLrI2SBGEkZbY9S59jnm7YDcekTIyda3hjrAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/iVyC9XO+Dk3z hJoSHYeDrGriLDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUhq dGc5ZHZEVTdTSFJpS3RvdTdzOHM5eWJDVk5OaTNKdEN4V0NHekFZem4vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlI anRnOWR2RFU3U0hSaUt0b3U3czhzOXliQ1ZOTmkzSnRDeFdDR3pBWXpuLzEvRkY4 OTVDODJGNTczQkUwRTRERjM4NDlBMTIxRDg3ODNBQzZBRTIyQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjASBAIAATAMAwQCLaOQAwQCLajIMBQEAgACMA4DBQAoBFMsAwUAKARY sDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMEF3ACAwQZGDANBgkqhkiG9w0BAQsF AAOCAQEAfJi2ijaWhL1AZyPXCHrDyhchROcm2X5Nd0F6DEScQOVXfmq8iLPLUM8P aQuDg9RVq4fxgATUvF+l7hsPl8/Kjh4PHBRH0QSAs6cjQ/1S91GQ+nrvUYUvbdQU uUMKOciDlEXT72Yk6cXj7sSgb/ab86LFVBbvwaxuPAOm9/8MzNeDPhjcHTVp0XEP l1b909B5VMCx/ChhmSqREMP+Fsd4rr/pMddJu1BAk43oraTYkPsloi+UHduvaKiU /1KklIpVcpQd8WaTIx2IO8EP3fN6+f3uuyl4q9JwcI3fHvLtAnWtD7wqmLorZEKC 4s8bE0UwZHkLOMkjIwMIo7Fj+XUuGg== -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:42 2025 by rpki-client