$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer File: 5F3969BC85188372D2CAFFD020E8133C1D23E4DD.cer (raw, json) Hash identifier: MaqZbXe31+e73iR70tPDu86yhJXdABRnfnbTjKb86KE= Subject key identifier: 5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 25647322CF493146DA88C3EF5D7FC280644E1444 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.mft caRepository: rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 22:11:06 +0000 Certificate not after: Fri 20 Mar 2026 22:16:06 +0000 Subordinate resources: AS: 265029 IP: 170.84.24.0/22 IP: 2804:31a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 13:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:64:73:22:cf:49:31:46:da:88:c3:ef:5d:7f:c2:80:64:4e:14:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 21 22:11:06 2025 GMT Not After : Mar 20 22:16:06 2026 GMT Subject: CN=5F3969BC85188372D2CAFFD020E8133C1D23E4DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:36:4e:8f:24:c1:9d:0a:56:83:af:4e:13: 69:2b:d9:a1:6c:64:ec:2a:42:0d:44:7d:d8:11:02: e3:74:e1:5b:dc:3f:ed:e2:27:31:45:8d:8f:b3:93: 99:be:9e:27:7d:a0:08:f1:9e:44:0e:10:82:cc:3f: 6d:47:67:cf:37:d4:d0:f1:f1:f9:ec:3d:7a:12:e8: 21:a6:de:bc:9e:83:0c:41:35:a7:d1:95:0f:e7:de: c1:47:32:08:72:ea:62:7b:d5:04:ab:d3:c9:cb:a4: 62:82:7b:5c:e7:ef:d6:d9:69:93:93:67:18:2a:f1: 5b:52:19:98:ef:1e:ab:db:c6:00:4b:69:34:da:2b: ca:1d:3e:93:ea:4d:20:6b:ea:83:72:b1:af:9c:9f: 4d:98:e6:e7:01:77:76:8c:fe:84:f9:dc:6b:95:81: de:88:53:14:12:de:f1:47:71:97:94:81:7e:db:3e: a3:de:d5:98:9a:cc:0e:95:5c:5a:93:00:69:cf:5f: b8:91:92:30:54:fc:61:89:08:5e:fd:d1:07:f6:92: f1:ed:95:97:e2:d9:34:58:f3:84:68:39:da:eb:8d: 86:78:89:7b:46:8e:e0:5c:45:f5:95:cc:d1:14:48: 7f:bf:82:68:7b:4f:b2:7e:08:00:b0:9d:7e:2d:ef: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:39:69:BC:85:18:83:72:D2:CA:FF:D0:20:E8:13:3C:1D:23:E4:DD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/5F3969BC85188372D2CAFFD020E8133C1D23E4DD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.24.0/22 IPv6: 2804:31a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265029 Signature Algorithm: sha256WithRSAEncryption 64:3c:c7:02:35:f0:6e:9f:8a:d7:0c:bc:e6:67:88:4e:09:9a: 08:bc:ab:30:53:f5:ce:d9:97:5b:92:27:e6:03:d7:41:ad:ff: 57:f9:62:32:c1:04:b7:ca:cb:5e:f5:ec:00:9d:cd:f7:ba:9b: 5c:65:f8:8d:6e:ba:b5:a8:ab:6e:19:7b:31:7b:0b:0b:10:39: e8:bc:ab:ca:51:27:c4:ca:e4:8f:9d:ef:33:b9:b0:ef:31:b5: 40:d0:b2:0b:c2:52:cc:3e:af:94:ff:58:e9:7a:42:13:78:46: 52:6d:4a:6f:8d:e1:0c:e5:90:76:5e:d8:5e:a9:94:c1:2f:01: 3c:4b:e7:e6:0d:4b:52:59:3a:24:b9:61:08:06:26:eb:33:98: ef:d2:94:50:f4:d3:0f:50:a3:98:31:ad:f7:ee:ef:2f:29:ce: c4:85:03:4b:a7:4d:96:c1:67:17:a5:76:25:52:ff:0f:71:3f: 17:8f:73:c6:20:2e:76:fe:5f:99:b6:4a:8c:63:9c:45:b3:7f: 77:d8:8e:43:38:75:93:e8:f8:85:9b:5e:19:ba:6c:ed:d7:64: ce:eb:40:07:c8:d8:f9:ae:cf:6c:ea:59:26:40:11:e7:d3:18: d0:d4:3d:f0:16:e2:6b:01:3d:c2:96:f4:ca:7d:f7:ab:ce:d2: a7:0f:c1:19 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJWRzIs9JMUbaiMPvXX/CgGROFEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjEyMjExMDZaFw0yNjAzMjAyMjE2MDZaMDMxMTAvBgNV BAMTKDVGMzk2OUJDODUxODgzNzJEMkNBRkZEMDIwRTgxMzNDMUQyM0U0REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlTZOjyTBnQpWg69OE2kr2aFs ZOwqQg1EfdgRAuN04VvcP+3iJzFFjY+zk5m+nid9oAjxnkQOEILMP21HZ8831NDx 8fnsPXoS6CGm3ryegwxBNafRlQ/n3sFHMghy6mJ71QSr08nLpGKCe1zn79bZaZOT Zxgq8VtSGZjvHqvbxgBLaTTaK8odPpPqTSBr6oNysa+cn02Y5ucBd3aM/oT53GuV gd6IUxQS3vFHcZeUgX7bPqPe1ZiazA6VXFqTAGnPX7iRkjBU/GGJCF790Qf2kvHt lZfi2TRY84RoOdrrjYZ4iXtGjuBcRfWVzNEUSH+/gmh7T7J+CACwnX4t7/shAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRfOWm8hRiDctLK /9Ag6BM8HSPk3TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Fn RkZ4NzRZR3RQR3FvOFJTM0Z0eTFDalR4ZXBpUFIxeVlKNnN2cXFlVEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dx Z0ZGeDc0WUd0UEdxbzhSUzNGdHkxQ2pUeGVwaVBSMXlZSjZzdnFxZVRKLzAvNUYz OTY5QkM4NTE4ODM3MkQyQ0FGRkQwMjBFODEzM0MxRDIzRTRERC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlQYMA0EAgACMAcDBQAoBDGoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLRTANBgkqhkiG9w0BAQsFAAOCAQEAZDzHAjXwbp+K1wy8 5meITgmaCLyrMFP1ztmXW5In5gPXQa3/V/liMsEEt8rLXvXsAJ3N97qbXGX4jW66 tairbhl7MXsLCxA56LyrylEnxMrkj53vM7mw7zG1QNCyC8JSzD6vlP9Y6XpCE3hG Um1Kb43hDOWQdl7YXqmUwS8BPEvn5g1LUlk6JLlhCAYm6zOY79KUUPTTD1CjmDGt 9+7vLynOxIUDS6dNlsFnF6V2JVL/D3E/F49zxiAudv5fmbZKjGOcRbN/d9iOQzh1 k+j4hZteGbps7ddkzutAB8jY+a7PbOpZJkAR59MY0NQ98BbiawE9wpb0yn33q87S pw/BGQ== -----END CERTIFICATE-----Generated at Wed Apr 30 15:55:10 2025 by rpki-client