$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer File: 8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer (raw, json) Hash identifier: I8ODNPUAsnPmH0JxMJsBNR3hf41S8f4E/iN/Gm5m+Xc= Subject key identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 042C2589B839C3A7C1349C74B75DC839ACA62D87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft caRepository: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 24 Apr 2025 22:21:35 +0000 Certificate not after: Thu 23 Apr 2026 22:26:35 +0000 Subordinate resources: AS: 53115 IP: 187.109.192.0/20 IP: 2804:4d48::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2c:25:89:b8:39:c3:a7:c1:34:9c:74:b7:5d:c8:39:ac:a6:2d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 24 22:21:35 2025 GMT Not After : Apr 23 22:26:35 2026 GMT Subject: CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:f9:01:1f:06:20:68:2d:ef:d5:34:c5:10: b6:e8:cf:79:b0:51:86:ee:ed:36:c6:df:c2:2d:34: c8:31:be:43:bd:c6:e4:c8:b2:8a:b9:6e:b0:15:a2: 37:9a:8d:9a:1f:70:09:d4:c8:6d:00:89:a7:56:60: 27:e2:d1:b3:0b:61:e4:20:9e:3a:43:85:8d:96:a1: be:6a:11:17:64:b3:1f:cb:bc:78:2a:00:12:8c:18: 45:4c:a4:68:e2:50:83:c8:f9:5c:8f:49:a8:48:05: 47:35:c4:6b:ad:4c:5d:74:8f:2f:69:ac:23:8c:65: 7d:0f:70:ee:43:fd:75:f0:a0:d0:ec:80:29:2a:96: c3:40:94:ab:10:b5:bf:3f:76:b5:43:28:73:34:c9: ea:f2:18:d8:46:6b:f0:53:a7:72:b4:fb:e4:ed:2b: 4d:db:1f:8c:11:56:f5:1e:9c:16:4e:79:43:59:a1: 62:f6:d2:b5:54:6b:1e:b6:83:45:24:8c:3f:8a:f3: a1:99:f9:39:f1:a9:64:8f:21:bd:64:fa:76:2b:3d: 58:34:4c:36:dd:e6:d7:6c:cf:a2:ea:24:a3:78:25: 59:63:f5:56:35:16:c1:21:71:2d:2f:a8:cc:8e:fc: 3a:b9:5a:e6:68:3d:1b:76:3a:2d:a8:94:b8:23:15: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.109.192.0/20 IPv6: 2804:4d48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53115 Signature Algorithm: sha256WithRSAEncryption 3d:d8:d6:28:29:e5:55:c2:e5:04:92:12:b0:67:70:98:5b:c1: 1e:29:7b:7a:64:42:33:26:b3:ae:44:47:ab:0f:5c:be:88:ae: 8d:52:5d:c3:23:d3:2b:4a:05:bb:27:d9:10:67:5d:01:e3:4f: b5:c3:37:84:a9:39:71:58:a1:a7:85:fd:b9:3c:29:49:c0:f9: 67:d4:f6:3e:d3:1c:c4:09:b0:a3:93:9b:46:6a:e5:13:64:1a: 53:30:8f:80:f3:d9:aa:7b:92:ac:a5:55:63:a4:bc:65:72:57: d4:04:e5:f6:8d:5d:8e:a2:63:af:fe:93:6b:06:24:64:af:ba: a9:63:ad:a3:f3:a6:db:ed:5b:69:a0:e9:13:de:5e:51:fa:ed: 27:b0:b7:f5:56:41:ec:f8:04:81:48:ca:19:69:1b:43:75:b7: 53:e2:9c:2f:f6:f8:55:bd:f9:63:ea:2b:fc:27:45:1d:80:56: 37:2d:e3:05:f0:49:ac:61:14:c1:22:ae:04:dd:49:fd:a8:8e: 6d:ac:a1:94:2a:9e:26:5f:fd:38:72:8e:ca:c3:43:b1:df:1a: 17:9a:28:a4:a9:da:89:07:c7:9a:52:a0:67:93:da:a9:d5:a8: 77:f0:d7:50:90:5c:85:99:35:f5:57:71:a4:c4:06:e4:db:9b: 12:35:17:80 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBCwlibg5w6fBNJx0t13IOaymLYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjQyMjIxMzVaFw0yNjA0MjMyMjI2MzVaMDMxMTAvBgNV BAMTKDgzNzBFOEY1QkU4NkU2MzZCNzRGMkU5QTg3QjVFREU1REVDNEY4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWg/kBHwYgaC3v1TTFELboz3mw UYbu7TbG38ItNMgxvkO9xuTIsoq5brAVojeajZofcAnUyG0AiadWYCfi0bMLYeQg njpDhY2Wob5qERdksx/LvHgqABKMGEVMpGjiUIPI+VyPSahIBUc1xGutTF10jy9p rCOMZX0PcO5D/XXwoNDsgCkqlsNAlKsQtb8/drVDKHM0yeryGNhGa/BTp3K0++Tt K03bH4wRVvUenBZOeUNZoWL20rVUax62g0UkjD+K86GZ+TnxqWSPIb1k+nYrPVg0 TDbd5tdsz6LqJKN4JVlj9VY1FsEhcS0vqMyO/Dq5WuZoPRt2Oi2olLgjFawrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDcOj1vobmNrdP LpqHte3l3sT4ojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVE5 U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2RUQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VR OVNoWWlGSDV5a3NmUVZlbWlxTThURVFVazh1anVndnhMTmJ3Q3VDdkVELzAvODM3 MEU4RjVCRTg2RTYzNkI3NEYyRTlBODdCNUVERTVERUM0RjhBMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEu23AMA0EAgACMAcDBQAoBE1IMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDPezANBgkqhkiG9w0BAQsFAAOCAQEAPdjWKCnlVcLlBJIS sGdwmFvBHil7emRCMyazrkRHqw9cvoiujVJdwyPTK0oFuyfZEGddAeNPtcM3hKk5 cVihp4X9uTwpScD5Z9T2PtMcxAmwo5ObRmrlE2QaUzCPgPPZqnuSrKVVY6S8ZXJX 1ATl9o1djqJjr/6TawYkZK+6qWOto/Om2+1baaDpE95eUfrtJ7C39VZB7PgEgUjK GWkbQ3W3U+KcL/b4Vb35Y+or/CdFHYBWNy3jBfBJrGEUwSKuBN1J/aiObayhlCqe Jl/9OHKOysNDsd8aF5oopKnaiQfHmlKgZ5PaqdWod/DXUJBchZk19VdxpMQG5Nub EjUXgA== -----END CERTIFICATE-----Generated at Sun Apr 27 12:13:23 2025 by rpki-client