$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer (raw, json) Hash identifier: /b6K+jBQuDz3wkVzAZ+KEjo82EcDQH+BB2JoenccRVc= Subject key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F88011843C0A43391688E89EA88FE5F310E3D3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft caRepository: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 31 Jan 2025 18:42:00 +0000 Certificate not after: Fri 30 Jan 2026 18:47:00 +0000 Subordinate resources: AS: 265062 IP: 170.231.156.0/22 IP: 2804:3234::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:88:01:18:43:c0:a4:33:91:68:8e:89:ea:88:fe:5f:31:0e:3d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 31 18:42:00 2025 GMT Not After : Jan 30 18:47:00 2026 GMT Subject: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9a:fd:81:5d:81:aa:5c:12:0e:4d:81:30:aa: 1d:03:2d:0c:44:31:5e:09:16:3b:12:d4:76:74:da: b4:b0:b7:74:de:3b:9c:24:41:0b:a0:f6:6e:23:ff: 39:42:ae:8c:3b:ac:0c:b4:9e:ff:82:bf:5f:87:01: a6:eb:6d:db:6a:b8:54:fb:d4:ab:73:a3:b0:8e:8c: 47:73:d5:4c:7d:78:18:ef:53:21:06:60:71:e9:ab: 90:fa:07:e9:43:63:ec:63:19:32:1a:b7:bc:4f:de: 50:14:fe:b6:0c:ca:f6:01:e0:d6:a9:90:14:79:7f: fa:14:01:9a:b2:f9:24:dd:f1:0a:5d:8b:02:00:6e: f9:c0:e1:e5:23:fb:d6:b0:ee:89:ef:95:3a:5a:45: 04:b8:ac:d3:a6:18:19:34:e8:4f:11:77:5d:11:10: 1b:b8:f0:06:45:f4:63:3e:e5:fa:3d:b3:92:10:fc: 89:c1:89:29:35:39:d8:58:54:80:bf:8a:c1:47:c5: c8:f7:80:e7:49:e1:3c:a8:ad:a5:4e:d7:4d:dd:0f: a7:34:da:0d:d4:77:fa:c7:40:ad:32:89:30:92:69: 84:76:26:6c:60:c6:d4:68:82:06:f4:7a:03:59:39: 51:79:a4:9e:f0:f1:36:ff:86:a2:67:4b:20:f2:cd: 65:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.156.0/22 IPv6: 2804:3234::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265062 Signature Algorithm: sha256WithRSAEncryption d6:5b:28:82:06:48:7d:a9:2f:16:a7:cf:31:82:4b:42:3d:d2: 5a:0d:48:d3:bf:5e:9d:59:15:05:ea:53:17:7c:9b:08:68:34: 59:73:01:b6:7c:47:e4:d1:eb:3f:e1:7a:37:b9:8d:68:cd:72: b0:22:41:96:41:99:75:ed:da:89:c4:84:d9:e0:92:96:2c:e9: 8c:92:7e:31:88:51:ca:d4:8c:03:97:e9:66:6b:5c:3e:d5:b3: fc:9f:cc:a2:17:c2:c1:83:03:28:2a:b5:a8:38:6a:b4:19:78: 77:b2:42:23:fc:e0:e8:02:98:88:f8:a2:07:71:3f:80:20:d1: 39:96:87:82:f5:09:e1:42:26:87:ed:4c:67:b0:45:f8:5e:4a: 45:25:60:ab:c5:0a:36:e9:a8:d2:aa:12:e8:b9:5a:99:c7:74: af:b5:77:4f:7a:a3:07:15:b6:bd:c4:53:30:30:44:a1:1f:99: c2:6c:cf:1f:23:b6:91:06:17:4a:4b:dd:b2:88:2e:08:0e:92: 6f:63:1a:c7:b3:67:19:3f:ba:5e:d9:65:6e:43:32:76:9f:1a: 2c:90:32:a5:55:4d:65:b4:f5:45:a5:a5:3a:c2:09:d4:45:a5: b2:c0:f4:e3:dc:28:c0:67:dc:92:c0:b5:6c:db:8c:f1:25:de: c9:8b:8a:50 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUX4gBGEPApDORaI6J6oj+XzEOPT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMzExODQyMDBaFw0yNjAxMzAxODQ3MDBaMDMxMTAvBgNV BAMTKDNGQjVBNEQ5RTY3RTlBNTlGQzU2NDJCMDIzQzNFMkUwMkIwQzkxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmv2BXYGqXBIOTYEwqh0DLQxE MV4JFjsS1HZ02rSwt3TeO5wkQQug9m4j/zlCrow7rAy0nv+Cv1+HAabrbdtquFT7 1Ktzo7COjEdz1Ux9eBjvUyEGYHHpq5D6B+lDY+xjGTIat7xP3lAU/rYMyvYB4Nap kBR5f/oUAZqy+STd8QpdiwIAbvnA4eUj+9aw7onvlTpaRQS4rNOmGBk06E8Rd10R EBu48AZF9GM+5fo9s5IQ/InBiSk1OdhYVIC/isFHxcj3gOdJ4TyoraVO103dD6c0 2g3Ud/rHQK0yiTCSaYR2JmxgxtRoggb0egNZOVF5pJ7w8Tb/hqJnSyDyzWW7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/taTZ5n6aWfxW QrAjw+LgKwyRyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0pB ZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NK QWZDVDk4UDZrUkV1bXVWUldjZnVFMVF6R0FDR0xIQ0NMUXR5MXJxcFo0LzAvM0ZC NUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAyQjBDOTFDOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCquecMA0EAgACMAcDBQAoBDI0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLZjANBgkqhkiG9w0BAQsFAAOCAQEA1lsoggZIfakvFqfP MYJLQj3SWg1I079enVkVBepTF3ybCGg0WXMBtnxH5NHrP+F6N7mNaM1ysCJBlkGZ de3aicSE2eCSlizpjJJ+MYhRytSMA5fpZmtcPtWz/J/MohfCwYMDKCq1qDhqtBl4 d7JCI/zg6AKYiPiiB3E/gCDROZaHgvUJ4UImh+1MZ7BF+F5KRSVgq8UKNumo0qoS 6Llamcd0r7V3T3qjBxW2vcRTMDBEoR+ZwmzPHyO2kQYXSkvdsoguCA6Sb2Max7Nn GT+6XtllbkMydp8aLJAypVVNZbT1RaWlOsIJ1EWlssD049wowGfcksC1bNuM8SXe yYuKUA== -----END CERTIFICATE-----Generated at Sat Apr 26 23:39:20 2025 by rpki-client