$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/972A2A66D2C1CE7079ED1703C517510B65A0A37D.cer File: 972A2A66D2C1CE7079ED1703C517510B65A0A37D.cer (raw, json) Hash identifier: DvyEiPAKjuyUje3KdcuMCaMj2ro2pAZc8MaMlCXUGyA= Subject key identifier: 97:2A:2A:66:D2:C1:CE:70:79:ED:17:03:C5:17:51:0B:65:A0:A3:7D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 06B9DD7799C7107AA90122C68F61FECBA1E8DA93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft caRepository: rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Dec 2024 20:49:22 +0000 Certificate not after: Mon 08 Dec 2025 20:54:22 +0000 Subordinate resources: AS: 265984 IP: 181.191.4.0/22 IP: 2804:40d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b9:dd:77:99:c7:10:7a:a9:01:22:c6:8f:61:fe:cb:a1:e8:da:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 9 20:49:22 2024 GMT Not After : Dec 8 20:54:22 2025 GMT Subject: CN=972A2A66D2C1CE7079ED1703C517510B65A0A37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f3:ac:c1:62:5a:b2:47:51:51:09:9d:99:b2: 8d:d1:95:ca:7a:ac:05:b7:10:27:74:ee:04:4c:ba: 81:38:ed:df:a5:5b:d7:5a:82:35:c7:ef:8b:85:bf: d6:54:c7:c8:b3:ee:40:fc:9d:ce:0c:e2:5c:7a:b0: b7:61:52:a1:d7:e6:c8:ba:5b:ab:5b:4f:ff:8a:9a: c1:60:4e:a2:3c:e6:0e:df:95:57:b9:a7:47:bd:11: 8b:00:85:ae:96:b5:4b:fd:9c:d0:0e:3d:ca:7d:12: 51:40:af:18:c2:86:5e:e8:74:40:46:da:45:f8:82: 17:28:89:7a:89:82:86:8c:a3:4d:e7:00:9f:5d:c2: a1:86:74:ec:6e:6f:05:03:9a:89:38:68:8e:c2:8d: 7e:33:98:cf:5d:ad:df:6b:03:af:0e:fa:3c:ed:fa: 1d:aa:bc:0a:38:ba:8c:0b:94:a7:3f:1c:ab:d2:ff: f0:43:2e:67:68:2e:65:25:95:1d:ff:d0:32:db:8d: 9f:37:06:3f:b6:2c:87:b5:54:c5:d7:c4:ac:d1:7c: 28:a1:b9:22:da:03:d3:fe:94:a0:98:04:e7:cf:e5: 56:77:79:e1:f1:13:b1:da:6c:07:f7:f6:2c:66:7f: ea:96:9e:d5:80:78:af:73:9e:a9:6a:33:15:ff:59: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:2A:2A:66:D2:C1:CE:70:79:ED:17:03:C5:17:51:0B:65:A0:A3:7D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FeJxaYQsbKjTY5HhrgGfk6cZzXW3TdeNMuMUhSAwvvqx/0/972A2A66D2C1CE7079ED1703C517510B65A0A37D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.191.4.0/22 IPv6: 2804:40d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265984 Signature Algorithm: sha256WithRSAEncryption ad:7e:6c:24:6d:3a:53:8f:79:5e:aa:d1:aa:4e:7d:e9:ed:34: 52:4b:1a:54:2b:5f:77:d3:e3:39:39:94:bd:63:e4:d1:d8:73: e2:f4:9e:bd:7f:c9:75:29:8f:59:ce:8e:11:0e:a6:da:09:99: 00:11:95:95:4b:98:71:5d:f4:b8:77:59:91:6f:31:f2:5b:91: 29:59:47:a1:2f:60:9a:bd:f7:19:47:6d:1f:ce:c1:a5:12:91: e9:4e:43:c1:5f:27:0b:28:c9:fd:13:67:89:50:1b:d2:7b:d0: 51:1b:d8:20:2c:82:bf:a0:3b:a7:ae:7a:68:b5:ba:93:a0:16: 39:d5:59:06:20:7e:be:f9:3a:dc:ef:c9:49:08:1d:a1:51:57: e1:da:8c:b2:d2:cc:9f:f5:2f:5d:fb:dd:57:5d:28:8d:1d:1c: 02:3b:36:f1:9b:94:0d:b7:c4:79:2a:b4:81:75:80:3a:a7:71: a9:77:ba:f1:05:10:57:44:43:6f:b4:a4:23:61:f3:c2:49:62: b4:2a:e6:cd:d5:8b:e0:e7:68:95:4e:43:80:78:af:55:18:9f: 76:36:d2:a7:c4:32:44:a0:94:de:a8:7e:71:8e:5e:b8:c5:63: d9:e0:09:e8:32:25:30:90:8f:e0:d2:d6:ac:84:01:0f:7c:0c: 81:a5:47:fd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBrndd5nHEHqpASLGj2H+y6Ho2pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMDkyMDQ5MjJaFw0yNTEyMDgyMDU0MjJaMDMxMTAvBgNV BAMTKDk3MkEyQTY2RDJDMUNFNzA3OUVEMTcwM0M1MTc1MTBCNjVBMEEzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk86zBYlqyR1FRCZ2Zso3Rlcp6 rAW3ECd07gRMuoE47d+lW9dagjXH74uFv9ZUx8iz7kD8nc4M4lx6sLdhUqHX5si6 W6tbT/+KmsFgTqI85g7flVe5p0e9EYsAha6WtUv9nNAOPcp9ElFArxjChl7odEBG 2kX4ghcoiXqJgoaMo03nAJ9dwqGGdOxubwUDmok4aI7CjX4zmM9drd9rA68O+jzt +h2qvAo4uowLlKc/HKvS//BDLmdoLmUllR3/0DLbjZ83Bj+2LIe1VMXXxKzRfCih uSLaA9P+lKCYBOfP5VZ3eeHxE7HabAf39ixmf+qWntWAeK9znqlqMxX/WU/DAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXKipm0sHOcHnt FwPFF1ELZaCjfTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmVK eGFZUXNiS2pUWTVIaHJnR2ZrNmNaelhXM1RkZU5NdU1VaFNBd3Z2cXgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zl SnhhWVFzYktqVFk1SGhyZ0dmazZjWnpYVzNUZGVOTXVNVWhTQXd2dnF4LzAvOTcy QTJBNjZEMkMxQ0U3MDc5RUQxNzAzQzUxNzUxMEI2NUEwQTM3RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCtb8EMA0EAgACMAcDBQAoBEDUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPADANBgkqhkiG9w0BAQsFAAOCAQEArX5sJG06U495XqrR qk596e00UksaVCtfd9PjOTmUvWPk0dhz4vSevX/JdSmPWc6OEQ6m2gmZABGVlUuY cV30uHdZkW8x8luRKVlHoS9gmr33GUdtH87BpRKR6U5DwV8nCyjJ/RNniVAb0nvQ URvYICyCv6A7p656aLW6k6AWOdVZBiB+vvk63O/JSQgdoVFX4dqMstLMn/UvXfvd V10ojR0cAjs28ZuUDbfEeSq0gXWAOqdxqXe68QUQV0RDb7SkI2HzwklitCrmzdWL 4OdolU5DgHivVRifdjbSp8QyRKCU3qh+cY5euMVj2eAJ6DIlMJCP4NLWrIQBD3wM gaVH/Q== -----END CERTIFICATE-----Generated at Sun Apr 27 04:32:38 2025 by rpki-client