$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer File: 8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer (raw, json) Hash identifier: x7DesEgP+dmFymUlKDLvSWC7GHtm1gVslOVHdRJ5YQA= Subject key identifier: 8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 234BDBF0AE09126C236FC6A9DE1B83251F9C8750 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft caRepository: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 16 Mar 2025 23:00:15 +0000 Certificate not after: Sun 15 Mar 2026 23:05:15 +0000 Subordinate resources: AS: 61784 IP: 138.186.184.0/22 IP: 201.55.200.0/22 IP: 2804:1948::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4b:db:f0:ae:09:12:6c:23:6f:c6:a9:de:1b:83:25:1f:9c:87:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 16 23:00:15 2025 GMT Not After : Mar 15 23:05:15 2026 GMT Subject: CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c8:1a:4a:92:36:16:a5:65:0e:c6:48:47:64: 1b:5a:bd:6f:be:20:57:8e:4f:eb:1d:f6:77:e3:15: 57:93:a4:9e:39:35:ff:5a:c0:60:be:a2:92:6f:c9: f9:29:12:a4:87:61:a2:ef:31:b4:d0:fa:cb:3c:b9: a3:3d:10:e0:c1:1c:0e:0b:de:8c:86:9d:96:ea:de: b2:1c:30:5f:f4:32:79:35:ab:a7:c2:94:f0:9c:89: f6:ec:05:22:c1:81:7d:5c:fd:a5:7a:d2:5c:4e:a1: a3:df:ee:92:be:1c:df:87:42:41:3f:5b:70:4c:ee: 35:f5:ba:55:1b:f6:4e:21:b0:45:47:8e:aa:fa:90: da:89:86:a3:b7:5a:d9:fc:ae:98:14:58:5e:49:7e: 05:86:58:26:69:33:a3:6c:66:5e:83:ee:9b:dc:b4: 23:13:4c:12:aa:7a:05:e1:f8:db:31:43:3c:25:a6: 04:c8:8d:fd:d9:9d:fd:fc:20:82:82:3c:8b:65:fd: 11:a0:f5:11:14:f5:62:b8:ba:55:75:ef:12:66:c3: 80:fb:29:17:7e:ed:7b:16:d7:88:c2:f9:7a:f1:fb: ea:cf:47:09:b4:78:80:0a:0d:58:be:a3:1a:3d:81: a5:e3:4b:e0:e0:8e:ef:b3:b0:f3:8d:fc:d8:c6:ec: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.184.0/22 201.55.200.0/22 IPv6: 2804:1948::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61784 Signature Algorithm: sha256WithRSAEncryption 81:81:c6:da:93:63:fa:8c:f7:bf:e0:85:35:b6:9d:e9:75:16: d5:70:87:ed:cb:06:31:c5:88:ab:95:d7:24:69:9d:2b:bf:77: c6:e4:e2:94:2c:46:bb:14:c8:7c:4e:f2:44:eb:d2:33:37:18: 96:65:79:a9:da:8b:64:a4:9b:63:54:94:f3:ba:b4:58:78:2e: c5:0c:c1:88:04:e8:4f:37:91:80:f2:05:76:64:d1:4d:6b:75: 2a:35:41:91:35:d4:ea:fa:75:6a:2d:22:72:13:49:1b:52:99: 43:02:7e:a2:af:9a:29:af:dc:92:22:ce:fe:9c:e8:16:15:8d: 16:8f:cd:6e:73:44:60:a6:cb:7f:27:8c:d9:8f:df:cc:1a:c3: 53:d8:3e:ca:c7:fd:3c:c0:54:e3:3a:06:1d:9d:23:35:1a:72: 29:60:cb:31:a5:3e:24:a8:a0:54:10:21:8a:76:8b:5c:9f:19: da:07:29:ea:0c:93:25:71:f7:d9:fb:1a:3d:ef:c8:2c:c1:c6: 93:6f:67:76:99:3a:fc:dd:2c:ca:19:05:bb:94:36:45:96:7a: 14:b5:6c:ba:46:fd:62:3b:83:bf:c2:9e:9c:fb:25:e1:30:1c: 90:4a:85:d7:3a:83:17:b3:4c:40:20:47:e7:c1:6e:ad:8a:eb: f7:4d:e4:f0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUI0vb8K4JEmwjb8ap3huDJR+ch1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTYyMzAwMTVaFw0yNjAzMTUyMzA1MTVaMDMxMTAvBgNV BAMTKDhEQURGMjYyNUFEQTU4QTFCQkVEOTVBMTA1RjM1MEM3OTk2MkY3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxyBpKkjYWpWUOxkhHZBtavW++ IFeOT+sd9nfjFVeTpJ45Nf9awGC+opJvyfkpEqSHYaLvMbTQ+ss8uaM9EODBHA4L 3oyGnZbq3rIcMF/0Mnk1q6fClPCcifbsBSLBgX1c/aV60lxOoaPf7pK+HN+HQkE/ W3BM7jX1ulUb9k4hsEVHjqr6kNqJhqO3Wtn8rpgUWF5JfgWGWCZpM6NsZl6D7pvc tCMTTBKqegXh+NsxQzwlpgTIjf3Znf38IIKCPItl/RGg9REU9WK4ulV17xJmw4D7 KRd+7XsW14jC+Xrx++rPRwm0eIAKDVi+oxo9gaXjS+Dgju+zsPON/NjG7Bq7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNrfJiWtpYobvt laEF81DHmWL33zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDRF V1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q0 RVdUWFhHVWlvQnBhUzM4YldVR1AzMXcxcEdoRVZMcURkUmJVYloyVFVSLzAvOERB REYyNjI1QURBNThBMUJCRUQ5NUExMDVGMzUwQzc5OTYyRjdERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirq4AwQCyTfIMA0EAgACMAcDBQAoBBlIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxWDANBgkqhkiG9w0BAQsFAAOCAQEAgYHG2pNj +oz3v+CFNbad6XUW1XCH7csGMcWIq5XXJGmdK793xuTilCxGuxTIfE7yROvSMzcY lmV5qdqLZKSbY1SU87q0WHguxQzBiAToTzeRgPIFdmTRTWt1KjVBkTXU6vp1ai0i chNJG1KZQwJ+oq+aKa/ckiLO/pzoFhWNFo/NbnNEYKbLfyeM2Y/fzBrDU9g+ysf9 PMBU4zoGHZ0jNRpyKWDLMaU+JKigVBAhinaLXJ8Z2gcp6gyTJXH32fsaPe/ILMHG k29ndpk6/N0syhkFu5Q2RZZ6FLVsukb9YjuDv8KenPsl4TAckEqF1zqDF7NMQCBH 58FurYrr903k8A== -----END CERTIFICATE-----Generated at Sun Apr 27 12:06:51 2025 by rpki-client