$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer File: 901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer (raw, json) Hash identifier: IuCWaIvU1MTO7swVCXOl9oxs4Zt9u5Xycg7290kRbqI= Subject key identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6198EBBCE6BA7A2A7816CE7163D35BA24FF425F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft caRepository: rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 05:25:08 +0000 Certificate not after: Thu 05 Mar 2026 05:30:08 +0000 Subordinate resources: AS: 262302 IP: 177.10.204.0/22 IP: 177.87.128.0/21 IP: 2804:ef8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:98:eb:bc:e6:ba:7a:2a:78:16:ce:71:63:d3:5b:a2:4f:f4:25:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 05:25:08 2025 GMT Not After : Mar 5 05:30:08 2026 GMT Subject: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:ec:56:74:07:a6:bc:4a:cc:07:44:89:aa: 77:08:62:ea:99:f8:b7:c1:b3:6c:e6:2a:2d:98:b1: 9b:53:e1:a0:96:32:c7:48:41:55:13:64:98:bc:82: 84:6a:88:a3:c5:67:f7:4d:1f:47:8d:3f:3c:10:9e: a2:61:e4:fb:14:24:01:3b:38:75:8a:6d:8f:9e:cb: cc:eb:14:d7:34:22:ab:26:d0:c6:ab:8a:e8:07:8b: 2c:4b:bf:7d:fe:9a:cb:b3:a7:21:66:c6:2b:6b:b9: 5b:5f:a8:02:c0:fc:7e:7c:22:97:0e:b3:6d:c8:f3: 49:ec:e8:cd:ca:52:63:b1:34:31:85:b8:f1:bc:d5: 58:76:71:19:91:a2:8d:47:22:d4:5d:bb:36:14:6d: 9f:de:98:7c:28:45:92:87:dc:0e:4e:75:8a:ca:8c: 6b:e4:c8:de:79:59:06:14:2b:25:08:50:17:ba:03: 65:b0:73:cd:74:99:e1:60:0a:bd:e4:5c:24:5e:bc: d9:e1:25:44:6c:2b:58:e3:4c:4d:05:bb:7d:fe:06: be:0d:55:d9:c9:8e:b8:a1:90:e6:85:b9:29:36:fd: 84:cd:ff:f4:64:5c:cc:6d:ea:17:81:74:92:67:8e: ee:36:12:ff:af:f9:fe:21:fc:4f:18:74:00:42:06: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.10.204.0/22 177.87.128.0/21 IPv6: 2804:ef8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262302 Signature Algorithm: sha256WithRSAEncryption 21:01:81:6e:c3:7e:8d:51:77:21:e4:a7:37:3b:ce:e9:55:e1: f1:18:48:8a:d6:25:e9:54:8f:fa:53:22:a9:af:70:26:f5:90: 88:42:4b:5f:32:5f:9c:d8:b7:79:ee:c1:01:1b:d7:92:b2:cb: a3:d2:6d:e3:3a:32:7e:64:98:6f:a0:ed:ed:ac:a4:a0:d1:c5: cc:95:6b:e6:55:60:f4:90:bd:2e:fb:72:7e:bd:17:f8:29:5e: c7:f0:1c:b3:30:1d:94:e5:54:56:23:4e:19:7f:6f:ea:c6:05: 03:97:24:af:77:39:11:03:5b:61:a8:ab:f7:21:6c:71:cb:6d: ce:fb:fc:da:59:8b:a7:5d:fc:a1:7f:43:d3:97:23:57:b8:83: 8b:01:3a:97:e9:84:39:ec:2a:9b:8a:99:78:b9:b0:fe:d9:27: 5b:bf:62:a0:d5:4d:89:8b:c1:d0:64:22:f5:c1:2f:63:8c:29: 3f:67:b8:66:1a:3e:ab:cc:12:a7:49:08:3b:0c:a3:6e:a1:a9: 03:01:60:2b:7f:47:92:6e:42:03:c3:2a:f4:e4:e6:85:d2:92: 99:b5:49:27:a8:cf:26:a7:68:06:fa:4d:32:21:b0:3c:8a:ab: 10:8d:93:5a:12:d3:8b:52:6e:bc:4a:82:cd:d9:37:55:66:f2: 71:e2:46:94 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYZjrvOa6eip4Fs5xY9Nbok/0JfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwNTI1MDhaFw0yNjAzMDUwNTMwMDhaMDMxMTAvBgNV BAMTKDkwMUE2NUUzRTBGRTZFOTIyQTQyQzVDOTdGQkExOENBRDZBMEFGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgTuxWdAemvErMB0SJqncIYuqZ +LfBs2zmKi2YsZtT4aCWMsdIQVUTZJi8goRqiKPFZ/dNH0eNPzwQnqJh5PsUJAE7 OHWKbY+ey8zrFNc0Iqsm0MariugHiyxLv33+msuzpyFmxitruVtfqALA/H58IpcO s23I80ns6M3KUmOxNDGFuPG81Vh2cRmRoo1HItRduzYUbZ/emHwoRZKH3A5OdYrK jGvkyN55WQYUKyUIUBe6A2Wwc810meFgCr3kXCRevNnhJURsK1jjTE0Fu33+Br4N VdnJjrihkOaFuSk2/YTN//RkXMxt6heBdJJnju42Ev+v+f4h/E8YdABCBuGJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQGmXj4P5ukipC xcl/uhjK1qCvTzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXZm N3dvWGV6d0hOQkg1R2JMdWhpaEJSYW9rQml6OTg5Z25XTVlBWUxqb1EvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV2 Zjd3b1hlendITkJINUdiTHVoaWhCUmFva0Jpejk4OWduV01ZQVlMam9RLzEvOTAx QTY1RTNFMEZFNkU5MjJBNDJDNUM5N0ZCQTE4Q0FENkEwQUY0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsQrMAwQDsVeAMA0EAgACMAcDBQAoBA74MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQAnjANBgkqhkiG9w0BAQsFAAOCAQEAIQGBbsN+ jVF3IeSnNzvO6VXh8RhIitYl6VSP+lMiqa9wJvWQiEJLXzJfnNi3ee7BARvXkrLL o9Jt4zoyfmSYb6Dt7aykoNHFzJVr5lVg9JC9Lvtyfr0X+Clex/AcszAdlOVUViNO GX9v6sYFA5ckr3c5EQNbYair9yFsccttzvv82lmLp138oX9D05cjV7iDiwE6l+mE Oewqm4qZeLmw/tknW79ioNVNiYvB0GQi9cEvY4wpP2e4Zho+q8wSp0kIOwyjbqGp AwFgK39Hkm5CA8Mq9OTmhdKSmbVJJ6jPJqdoBvpNMiGwPIqrEI2TWhLTi1JuvEqC zdk3VWbyceJGlA== -----END CERTIFICATE-----Generated at Sun Apr 27 11:22:22 2025 by rpki-client