$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.cer File: 8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.cer (raw, json) Hash identifier: sGFE6yHWrY2l0qY471lH6tHdlaFVFQKxOGdwoJ2Bro0= Subject key identifier: 8E:0A:2B:99:A5:84:4E:13:FD:37:9C:4A:BB:D7:4B:4A:E5:16:1A:83 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6F17783FDE1C811C2F8D2B1C6270C37FF28B1ACD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.mft caRepository: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 30 Apr 2025 14:40:43 +0000 Certificate not after: Wed 29 Apr 2026 14:45:43 +0000 Subordinate resources: AS: 264997 IP: 170.84.144.0/22 IP: 177.12.144.0/21 IP: 2804:3128::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 06:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:17:78:3f:de:1c:81:1c:2f:8d:2b:1c:62:70:c3:7f:f2:8b:1a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 14:40:43 2025 GMT Not After : Apr 29 14:45:43 2026 GMT Subject: CN=8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:d0:dc:a9:2e:8e:12:6a:62:4a:9f:89:22: ff:a8:77:7e:d3:64:63:5c:32:29:25:d6:92:f8:e2: 6d:2d:b1:1a:7d:60:4e:8d:3f:4e:54:d0:83:19:69: 07:ae:b4:ba:16:49:f6:af:3b:87:51:c7:fa:f2:44: 33:43:af:6d:33:23:59:87:ff:a2:d6:f8:3c:43:a7: f1:a8:b0:70:2a:7e:ac:c6:ac:d0:52:34:13:41:c4: a5:03:48:19:db:c1:71:e8:d7:4a:ba:7d:be:b9:f9: 76:e6:be:9d:b7:dd:ab:40:3a:e8:aa:8e:83:50:34: 68:a2:ac:f3:ea:47:83:bf:3f:1f:fd:60:ca:d2:a1: 8a:36:12:22:0f:c9:8d:1b:70:2d:1c:a1:1d:fe:53: 5d:23:77:59:d5:80:7c:6a:87:df:cb:8d:69:d8:d1: 50:f5:6e:99:d0:47:da:7e:72:a9:c6:3e:c8:5e:88: e9:a8:de:29:3b:ea:a4:e8:ad:40:0d:20:fa:b4:66: 5f:bf:ea:f9:06:1b:b9:ef:07:72:69:c7:fe:8f:a2: 77:1e:7b:ff:94:ba:1e:42:64:f4:89:d1:4c:c7:bc: 41:c2:ed:97:0e:4c:e8:e3:13:2d:7b:ef:02:0e:f4: fd:bb:ec:4a:52:69:c7:49:0e:6f:cf:42:31:20:09: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:0A:2B:99:A5:84:4E:13:FD:37:9C:4A:BB:D7:4B:4A:E5:16:1A:83 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/8E0A2B99A5844E13FD379C4ABBD74B4AE5161A83.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.144.0/22 177.12.144.0/21 IPv6: 2804:3128::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264997 Signature Algorithm: sha256WithRSAEncryption 2b:49:e9:07:51:26:82:a3:a7:77:74:2a:1d:ef:ac:93:fe:9f: cd:ce:9d:c3:d8:fb:80:44:9b:68:04:75:67:f0:11:b8:2f:79: 29:07:cd:4b:d3:d8:c1:c0:67:e7:5f:5c:a9:b6:ea:58:33:86: 90:a4:78:ce:9a:5f:ca:62:cd:52:a4:db:47:8d:1b:98:43:32: 08:61:01:ea:c5:b0:c8:e2:e4:09:26:d8:ec:4d:9a:60:84:d2: 57:ef:84:65:04:62:cd:bd:7e:a1:e7:ea:57:58:80:f3:b2:7c: e6:1b:0b:8a:ec:dc:5f:2b:02:11:45:b3:48:f3:e6:b3:96:2b: ce:60:52:ae:0f:2d:25:aa:ac:a7:e1:a6:ef:d6:57:97:2b:9c: 01:32:71:83:3a:02:f6:08:52:a0:3b:d7:2c:1e:23:53:0e:22: 61:b4:6c:2c:14:fb:bd:cf:b8:f5:45:ac:84:03:12:7d:f2:4b: 42:a7:1f:d8:d4:d6:02:df:92:d7:18:12:6a:f9:7e:6d:45:0b: 2e:ce:7d:0c:e9:cf:79:da:e0:16:2f:e6:6e:3c:13:9b:15:1a: b4:87:c9:b2:dc:1a:72:be:37:16:78:d0:c8:19:4a:f6:9b:32: 23:6b:ab:74:5a:80:4f:10:7b:cc:2a:27:50:ea:39:f2:7e:ab: c2:59:9c:38 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUbxd4P94cgRwvjSscYnDDf/KLGs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MzAxNDQwNDNaFw0yNjA0MjkxNDQ1NDNaMDMxMTAvBgNV BAMTKDhFMEEyQjk5QTU4NDRFMTNGRDM3OUM0QUJCRDc0QjRBRTUxNjFBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwSdDcqS6OEmpiSp+JIv+od37T ZGNcMikl1pL44m0tsRp9YE6NP05U0IMZaQeutLoWSfavO4dRx/ryRDNDr20zI1mH /6LW+DxDp/GosHAqfqzGrNBSNBNBxKUDSBnbwXHo10q6fb65+Xbmvp233atAOuiq joNQNGiirPPqR4O/Px/9YMrSoYo2EiIPyY0bcC0coR3+U10jd1nVgHxqh9/LjWnY 0VD1bpnQR9p+cqnGPsheiOmo3ik76qTorUANIPq0Zl+/6vkGG7nvB3Jpx/6Ponce e/+Uuh5CZPSJ0UzHvEHC7ZcOTOjjEy177wIO9P277EpSacdJDm/PQjEgCfI1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOCiuZpYROE/03 nEq710tK5RYagzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWlU TTN3YVNRUnV3ZHc0c0RxdnlnR0IyR0Q5N2JNWGh1UDRHc0o1ZXFaTlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp VE0zd2FTUVJ1d2R3NHNEcXZ5Z0dCMkdEOTdiTVhodVA0R3NKNWVxWk5XLzAvOEUw QTJCOTlBNTg0NEUxM0ZEMzc5QzRBQkJENzRCNEFFNTE2MUE4My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlSQAwQDsQyQMA0EAgACMAcDBQAoBDEoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQLJTANBgkqhkiG9w0BAQsFAAOCAQEAK0npB1Em gqOnd3QqHe+sk/6fzc6dw9j7gESbaAR1Z/ARuC95KQfNS9PYwcBn519cqbbqWDOG kKR4zppfymLNUqTbR40bmEMyCGEB6sWwyOLkCSbY7E2aYITSV++EZQRizb1+oefq V1iA87J85hsLiuzcXysCEUWzSPPms5YrzmBSrg8tJaqsp+Gm79ZXlyucATJxgzoC 9ghSoDvXLB4jUw4iYbRsLBT7vc+49UWshAMSffJLQqcf2NTWAt+S1xgSavl+bUUL Ls59DOnPedrgFi/mbjwTmxUatIfJstwacr43FnjQyBlK9psyI2urdFqATxB7zCon UOo58n6rwlmcOA== -----END CERTIFICATE-----Generated at Thu May 8 06:38:42 2025 by rpki-client