$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer File: 0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer (raw, json) Hash identifier: dQRC4O9XExUQjNph3tDa1loxyvLyLax0ViOVt5n3DxU= Subject key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0EC9450B9E4F8838190C820A9B1E869B7932B5E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft caRepository: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 21:22:01 +0000 Certificate not after: Thu 18 Dec 2025 21:27:01 +0000 Subordinate resources: AS: 264453 IP: 132.255.56.0/22 IP: 179.49.152.0/22 IP: 2804:1ee8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c9:45:0b:9e:4f:88:38:19:0c:82:0a:9b:1e:86:9b:79:32:b5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 19 21:22:01 2024 GMT Not After : Dec 18 21:27:01 2025 GMT Subject: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:fd:cc:a5:0f:2d:52:6b:76:ca:8d:53:9b: 4a:c3:0f:a9:ff:2b:64:ad:3b:37:b2:8d:e4:15:d9: bb:92:42:96:46:45:17:55:8c:0f:d7:bc:d3:f8:35: e0:36:e9:0e:2a:86:55:56:12:40:52:2a:00:7c:e5: 50:7e:d2:3a:82:bc:72:e0:e6:75:55:3d:cb:95:e0: 78:17:c7:c1:5d:81:8f:b6:54:65:43:a3:01:4f:ce: 98:1f:bb:e1:49:d1:23:34:68:65:83:6a:fa:79:39: a3:4f:d7:5a:d7:01:3f:f3:53:5a:8b:c8:87:21:9d: fa:28:e7:93:e1:af:c0:73:bd:c8:5f:d2:3e:fb:7b: 6e:98:d7:a8:c2:59:2c:b1:9d:f1:68:76:9a:08:5b: be:57:a5:9b:7b:6b:82:cb:de:e6:df:2b:fc:5a:07: 68:37:99:c5:5f:14:30:7c:77:34:e9:86:90:e1:f1: 9c:23:c7:57:e0:a4:2e:55:7d:c3:0a:d5:b0:fa:ef: 49:86:b6:62:8f:fa:f0:9d:b2:d1:14:c4:af:c3:36: cf:c3:45:fe:2c:21:57:57:66:a9:de:71:95:49:be: 40:c7:ef:1d:b6:cf:bb:fb:4f:91:ae:22:fa:d3:32: 8d:a2:6b:40:0b:67:a5:89:74:60:8d:d6:3d:01:5e: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.56.0/22 179.49.152.0/22 IPv6: 2804:1ee8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264453 Signature Algorithm: sha256WithRSAEncryption 6c:af:c7:55:20:f8:d6:09:bf:6b:13:e7:a5:f1:e3:6a:85:4c: c4:ea:a0:02:aa:45:d3:4e:8f:3d:84:ed:2c:2f:02:72:d4:0d: 0d:32:80:e5:03:52:76:89:f5:e4:0d:7f:52:17:08:87:00:63: 95:7f:b3:c7:bc:9d:56:84:ae:93:81:a0:b8:41:26:ed:ee:de: 3f:13:1a:33:9f:6f:5f:21:d2:90:b9:e1:f7:94:71:83:fd:0f: 37:b4:88:94:1e:4f:5d:86:a5:4b:7c:5a:fc:15:c6:39:d4:64: 77:3f:ed:86:09:89:25:84:7c:cd:85:f9:b1:3d:a0:75:60:b7: cc:bc:67:c3:d4:67:e4:65:87:7c:66:d7:13:9b:e8:5a:b3:f3: de:4d:1a:79:71:10:f8:3c:cc:c7:49:c6:e8:05:15:d4:1d:e8: 22:11:f1:5f:ff:65:8f:82:b9:f5:cd:2d:5b:01:9e:45:7b:7c: 5e:29:5c:87:f2:80:ad:6b:6c:d4:68:57:66:6b:75:dc:3f:bc: 50:1f:82:1e:35:5c:b0:c0:9a:7a:44:8f:24:a9:39:f5:fd:3f: cc:97:68:82:32:83:32:6c:bd:98:fe:5c:ef:52:ef:f6:17:d3: df:ce:07:d3:34:1c:a8:f3:aa:31:8d:5c:df:fd:ab:3d:69:23: c4:5c:3f:8c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDslFC55PiDgZDIIKmx6Gm3kytekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTkyMTIyMDFaFw0yNTEyMTgyMTI3MDFaMDMxMTAvBgNV BAMTKDBDNjVERUI2N0IzMDcwNUEzMTNFRjhGQUQ3QTBENkUyQkUyMkQxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVP3MpQ8tUmt2yo1Tm0rDD6n/ K2StOzeyjeQV2buSQpZGRRdVjA/XvNP4NeA26Q4qhlVWEkBSKgB85VB+0jqCvHLg 5nVVPcuV4HgXx8FdgY+2VGVDowFPzpgfu+FJ0SM0aGWDavp5OaNP11rXAT/zU1qL yIchnfoo55Phr8Bzvchf0j77e26Y16jCWSyxnfFodpoIW75XpZt7a4LL3ubfK/xa B2g3mcVfFDB8dzTphpDh8Zwjx1fgpC5VfcMK1bD670mGtmKP+vCdstEUxK/DNs/D Rf4sIVdXZqnecZVJvkDH7x22z7v7T5GuIvrTMo2ia0ALZ6WJdGCN1j0BXu5JAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMZd62ezBwWjE+ +PrXoNbiviLRhDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGtO M00xdWVRNXdaN212TnR4VU1EcEpKa2Zka1daYUxTYXZRS1dGRGM5Q1ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhr TjNNMXVlUTV3Wjdtdk50eFVNRHBKSmtmZGtXWmFMU2F2UUtXRkRjOUNaLzAvMEM2 NURFQjY3QjMwNzA1QTMxM0VGOEZBRDdBMEQ2RTJCRTIyRDE4NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQChP84AwQCszGYMA0EAgACMAcDBQAoBB7oMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJBTANBgkqhkiG9w0BAQsFAAOCAQEAbK/HVSD4 1gm/axPnpfHjaoVMxOqgAqpF006PPYTtLC8CctQNDTKA5QNSdon15A1/UhcIhwBj lX+zx7ydVoSuk4GguEEm7e7ePxMaM59vXyHSkLnh95Rxg/0PN7SIlB5PXYalS3xa /BXGOdRkdz/thgmJJYR8zYX5sT2gdWC3zLxnw9Rn5GWHfGbXE5voWrPz3k0aeXEQ +DzMx0nG6AUV1B3oIhHxX/9lj4K59c0tWwGeRXt8Xilch/KArWts1GhXZmt13D+8 UB+CHjVcsMCaekSPJKk59f0/zJdogjKDMmy9mP5c71Lv9hfT384H0zQcqPOqMY1c 3/2rPWkjxFw/jA== -----END CERTIFICATE-----Generated at Sun Apr 27 13:10:34 2025 by rpki-client