$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer (raw, json) Hash identifier: jcYxrEGaLeuCmeskTE8yCvwGdrsjviRPY5pEL1bUQ2k= Subject key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F01C21DE21B206F7174E4650A8D45304DE85E27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft caRepository: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 05:49:51 +0000 Certificate not after: Fri 06 Mar 2026 05:54:51 +0000 Subordinate resources: AS: 61616 IP: 2804:8ec8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:01:c2:1d:e2:1b:20:6f:71:74:e4:65:0a:8d:45:30:4d:e8:5e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 05:49:51 2025 GMT Not After : Mar 6 05:54:51 2026 GMT Subject: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cb:e1:7c:99:bb:46:56:a7:1b:84:f8:99:b6: c2:b5:4f:1d:49:99:c4:97:9b:84:d8:62:c9:be:88: d7:ac:77:6a:9f:77:da:88:38:93:68:e3:aa:9a:fa: 5e:db:15:6e:e9:71:80:22:e7:a7:40:46:5d:36:86: dd:04:7e:e4:29:d7:41:58:74:8f:79:31:9e:10:3c: 38:4a:f8:08:87:11:7a:af:84:b5:04:06:3f:f2:0f: 58:40:e8:f3:09:e0:b7:d4:7e:4e:65:29:51:8e:e1: 6b:d6:79:15:98:16:bb:10:05:8f:b2:b4:d5:9b:be: 3c:1c:c4:48:61:15:67:08:ad:63:fb:11:8c:a2:de: b0:1e:9c:00:ea:04:3e:f7:02:82:c7:16:e7:f8:cd: ed:87:de:cd:39:f3:97:2e:60:49:ca:d2:29:a5:eb: a7:2f:60:73:01:f2:da:80:c9:c7:b6:f6:65:2e:b5: c2:4d:2a:4f:9b:66:a9:d9:c1:aa:6c:8f:24:ed:ce: b3:37:cb:a1:7d:42:31:89:47:0c:bb:20:09:e8:87: bc:03:f5:24:f0:5b:cc:da:a2:9e:65:75:0d:ae:66: 36:7d:fe:ca:3f:b1:a5:0d:08:a4:24:b5:01:35:46: 62:20:3d:b0:fb:49:7c:c5:8f:f8:ee:50:f5:59:a5: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8ec8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61616 Signature Algorithm: sha256WithRSAEncryption 4b:bd:4f:25:58:40:bd:15:4e:40:99:0f:40:7c:54:d1:ec:33: 83:e7:57:8c:81:f9:7a:a6:f7:5d:34:73:4b:5b:6c:ee:77:43: c7:40:8c:5b:96:17:a8:c3:29:0e:d6:c7:52:12:a7:6b:e3:0b: a9:bf:de:7a:4c:ac:80:bf:fb:5a:7c:a0:1d:dc:d0:f9:2c:e7: d6:26:a3:7e:c8:58:9c:b9:ff:18:96:eb:c7:88:32:c6:95:10: 43:42:14:f9:f9:77:22:e4:34:f2:64:67:f9:58:a9:29:4b:80: a5:09:dc:a9:c5:45:50:97:88:34:1e:d9:a1:ce:f4:db:87:9f: db:76:68:75:13:00:36:ea:a0:d2:89:3b:7c:61:92:82:e3:8e: cf:61:d3:b5:03:a1:32:f2:e1:61:7a:1b:85:0b:ac:a4:19:5b: 25:8e:c9:d6:e6:22:da:5c:43:ce:fd:10:c7:f0:45:da:b8:6f: b5:af:ae:4d:9a:d9:21:22:e2:1c:04:28:2b:70:3c:29:b6:e1: d9:ab:31:39:a4:35:d7:37:e4:b0:6b:a9:b3:39:c7:6d:a0:5a: 30:c6:29:9b:50:d6:33:47:44:1d:4d:06:2f:02:38:03:59:3f: 80:a8:57:4f:97:a6:c0:8a:cd:00:74:71:ce:82:ff:a8:55:c9: 05:f6:88:91 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUHwHCHeIbIG9xdORlCo1FME3oXicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNTQ5NTFaFw0yNjAzMDYwNTU0NTFaMDMxMTAvBgNV BAMTKDM2MjVBNUUxNjU4RUU0QjM3OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuy+F8mbtGVqcbhPiZtsK1Tx1J mcSXm4TYYsm+iNesd2qfd9qIOJNo46qa+l7bFW7pcYAi56dARl02ht0EfuQp10FY dI95MZ4QPDhK+AiHEXqvhLUEBj/yD1hA6PMJ4LfUfk5lKVGO4WvWeRWYFrsQBY+y tNWbvjwcxEhhFWcIrWP7EYyi3rAenADqBD73AoLHFuf4ze2H3s0585cuYEnK0iml 66cvYHMB8tqAyce29mUutcJNKk+bZqnZwapsjyTtzrM3y6F9QjGJRwy7IAnoh7wD 9STwW8zaop5ldQ2uZjZ9/so/saUNCKQktQE1RmIgPbD7SXzFj/juUPVZpYUFAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ2JaXhZY7ks3k6 usAZJKM+V8P8ITAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkFC ZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JB QmZmYkFSdW1qVDFTRTNDOHNralNKUmZKUFV3UXhCQW1ZcFI0RmQxTlBXLzEvMzYy NUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1N0MzRkMyMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASOyDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA 8LAwDQYJKoZIhvcNAQELBQADggEBAEu9TyVYQL0VTkCZD0B8VNHsM4PnV4yB+Xqm 9100c0tbbO53Q8dAjFuWF6jDKQ7Wx1ISp2vjC6m/3npMrIC/+1p8oB3c0Pks59Ym o37IWJy5/xiW68eIMsaVEENCFPn5dyLkNPJkZ/lYqSlLgKUJ3KnFRVCXiDQe2aHO 9NuHn9t2aHUTADbqoNKJO3xhkoLjjs9h07UDoTLy4WF6G4ULrKQZWyWOydbmItpc Q879EMfwRdq4b7Wvrk2a2SEi4hwEKCtwPCm24dmrMTmkNdc35LBrqbM5x22gWjDG KZtQ1jNHRB1NBi8COANZP4CoV0+XpsCKzQB0cc6C/6hVyQX2iJE= -----END CERTIFICATE-----Generated at Sun Apr 27 01:21:35 2025 by rpki-client