$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.cer File: 021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.cer (raw, json) Hash identifier: uiY5Ahk/6PVjYmVW1fr0MWjDt0yo8i/PxInBi50A7q8= Subject key identifier: 02:1F:0B:E4:E2:DC:C0:86:6C:95:76:C4:E8:9E:08:71:17:5D:CA:6D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 41616561F3636C62486F1501F38E9866B1F7BE2D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.mft caRepository: rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 15:12:25 +0000 Certificate not after: Fri 24 Apr 2026 15:17:25 +0000 Subordinate resources: AS: 268658 IP: 45.165.60.0/22 IP: 2804:5490::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:61:65:61:f3:63:6c:62:48:6f:15:01:f3:8e:98:66:b1:f7:be:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 15:12:25 2025 GMT Not After : Apr 24 15:17:25 2026 GMT Subject: CN=021F0BE4E2DCC0866C9576C4E89E0871175DCA6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:b0:55:a6:0a:ea:9f:2f:26:ff:ac:7a:99: 4b:64:e2:76:45:8c:96:8d:83:44:19:90:8b:8f:4e: 7c:d8:56:dd:73:fb:99:00:5c:c1:ff:2c:42:0e:86: 5f:af:05:12:2a:42:c7:28:7c:d7:da:72:46:ef:4b: b7:f8:36:47:8b:ec:28:e2:4c:4a:5e:a9:ea:0e:cb: 60:16:2c:91:64:eb:61:06:ab:af:13:f4:77:01:3e: d7:12:fb:f5:3c:8d:3d:af:36:92:08:73:6b:a5:45: ab:a9:83:8d:16:c6:97:71:a1:02:20:bc:b4:fd:55: bb:f6:05:13:df:d8:a2:55:5d:ad:2d:a6:27:17:6c: 30:28:ad:53:a8:7a:90:a2:9b:17:d0:3e:dd:59:6e: d2:c2:93:0a:e4:8d:ef:42:31:cf:cb:3e:0b:a9:5e: f9:93:ef:5e:7f:d3:96:f8:a9:cb:71:d6:ad:af:47: c0:f2:fb:bc:90:71:22:0a:7c:72:62:09:41:e7:14: d1:86:2d:cc:58:b1:d9:e5:f4:05:3a:59:06:bd:a4: 49:3d:1f:e0:3f:5c:4f:ac:13:92:13:86:4c:f2:df: ac:b3:44:96:9c:29:3f:aa:7f:e8:86:4c:d9:b2:68: 11:e4:82:f3:fa:40:80:70:40:bb:63:20:ed:bf:08: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:1F:0B:E4:E2:DC:C0:86:6C:95:76:C4:E8:9E:08:71:17:5D:CA:6D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzJhmsu1wc4MmsuJKsT9VUW4DKHUkZBmDYsFCUKmWaXw/0/021F0BE4E2DCC0866C9576C4E89E0871175DCA6D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.60.0/22 IPv6: 2804:5490::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268658 Signature Algorithm: sha256WithRSAEncryption b8:2d:a6:d1:47:13:ec:45:52:19:8e:71:10:12:3e:f8:b7:db: 55:73:be:b8:4e:86:a0:2d:fb:10:4f:b2:ab:5c:48:71:6c:02: a3:a7:ae:2c:39:af:c9:67:44:48:dd:32:73:b1:7d:c9:07:39: 09:85:bc:93:31:17:56:3d:c6:9a:ae:72:a6:fa:e2:99:fd:16: 40:66:b6:e2:a1:6a:ba:67:ff:d5:6f:b0:92:05:54:7f:b1:0e: 42:37:17:1f:02:77:95:d6:1b:b4:9b:83:9a:d9:64:05:17:aa: db:09:e0:00:7b:eb:ca:8e:cf:8d:47:9d:17:88:51:f4:8b:52: fb:ce:20:f6:47:5f:b6:66:41:ea:72:64:01:31:8e:13:41:49: db:1d:97:ee:80:ad:14:96:81:25:49:27:f2:73:b2:d1:d7:83: ee:9a:4c:4d:fd:dc:0b:55:93:4d:22:7e:40:80:b9:93:5e:85: 6c:f8:28:8f:dd:88:1e:f0:6f:a2:5b:a0:2d:ca:36:7e:ee:6d: 6f:2c:c6:f4:7e:a4:87:3f:36:97:02:f5:93:f9:8b:06:fc:f4: 65:02:25:52:03:a7:8d:b4:2e:85:53:82:e7:24:ba:3b:42:0a: 90:25:2b:f1:9a:89:c5:32:d9:12:4f:06:64:7a:e3:0f:c5:f7: 10:62:f7:06 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQWFlYfNjbGJIbxUB846YZrH3vi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjUxNTEyMjVaFw0yNjA0MjQxNTE3MjVaMDMxMTAvBgNV BAMTKDAyMUYwQkU0RTJEQ0MwODY2Qzk1NzZDNEU4OUUwODcxMTc1RENBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksLBVpgrqny8m/6x6mUtk4nZF jJaNg0QZkIuPTnzYVt1z+5kAXMH/LEIOhl+vBRIqQscofNfackbvS7f4NkeL7Cji TEpeqeoOy2AWLJFk62EGq68T9HcBPtcS+/U8jT2vNpIIc2ulRaupg40WxpdxoQIg vLT9Vbv2BRPf2KJVXa0tpicXbDAorVOoepCimxfQPt1ZbtLCkwrkje9CMc/LPgup XvmT715/05b4qctx1q2vR8Dy+7yQcSIKfHJiCUHnFNGGLcxYsdnl9AU6WQa9pEk9 H+A/XE+sE5IThkzy36yzRJacKT+qf+iGTNmyaBHkgvP6QIBwQLtjIO2/COnjAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCHwvk4tzAhmyV dsTonghxF13KbTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXpK aG1zdTF3YzRNbXN1SktzVDlWVVc0REtIVWtaQm1EWXNGQ1VLbVdhWHcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F6 Smhtc3Uxd2M0TW1zdUpLc1Q5VlVXNERLSFVrWkJtRFlzRkNVS21XYVh3LzAvMDIx RjBCRTRFMkRDQzA4NjZDOTU3NkM0RTg5RTA4NzExNzVEQ0E2RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaU8MA0EAgACMAcDBQAoBFSQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZcjANBgkqhkiG9w0BAQsFAAOCAQEAuC2m0UcT7EVSGY5x EBI++LfbVXO+uE6GoC37EE+yq1xIcWwCo6euLDmvyWdESN0yc7F9yQc5CYW8kzEX Vj3Gmq5ypvrimf0WQGa24qFqumf/1W+wkgVUf7EOQjcXHwJ3ldYbtJuDmtlkBReq 2wngAHvryo7PjUedF4hR9ItS+84g9kdftmZB6nJkATGOE0FJ2x2X7oCtFJaBJUkn 8nOy0deD7ppMTf3cC1WTTSJ+QIC5k16FbPgoj92IHvBvolugLco2fu5tbyzG9H6k hz82lwL1k/mLBvz0ZQIlUgOnjbQuhVOC5yS6O0IKkCUr8ZqJxTLZEk8GZHrjD8X3 EGL3Bg== -----END CERTIFICATE-----Generated at Sun Apr 27 12:11:10 2025 by rpki-client