$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer File: CA9F7609986EAF1A517249B9120F2B69069A604A.cer (raw, json) Hash identifier: ZfhtzMpLWhj06NiEcLxRE4JOR+E5ZGI60gcvJY7PkCo= Subject key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33E268D6A45264F4207B6FAC7A7DE5B5E12D0CBF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft caRepository: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:52 +0000 Certificate not after: Wed 04 Mar 2026 18:40:52 +0000 Subordinate resources: AS: 266505 IP: 170.244.76.0/22 IP: 2804:38d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e2:68:d6:a4:52:64:f4:20:7b:6f:ac:7a:7d:e5:b5:e1:2d:0c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:52 2025 GMT Not After : Mar 4 18:40:52 2026 GMT Subject: CN=CA9F7609986EAF1A517249B9120F2B69069A604A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:9d:bc:ed:41:32:b8:38:98:06:83:a6:dc: 1b:7a:c8:cc:2d:dd:a9:f7:db:2f:41:6c:0b:fd:12: 7a:45:6d:4b:fc:e8:81:29:0a:4a:70:c2:35:c3:fd: 89:71:c7:fd:18:dd:85:95:82:8c:fc:d7:3a:7c:68: 37:cf:b8:ee:0e:0f:4f:17:f6:e8:2c:f8:18:7d:43: 62:7a:61:79:73:7c:64:50:c2:07:8c:eb:2c:aa:fa: cc:95:07:18:35:68:3e:06:2b:12:67:79:05:62:b3: f0:34:41:ab:29:1c:b2:2f:f5:15:bc:7a:d3:bb:9f: 00:35:4b:ea:f3:af:92:55:cd:ee:db:9f:61:1e:53: fd:54:fa:66:26:bd:ba:b7:45:84:f4:9d:82:51:ce: 51:be:a2:34:cd:e6:1e:df:b5:3a:af:2c:23:08:23: 4b:b1:81:02:7d:03:09:81:21:31:4f:9c:93:93:49: 0e:0c:41:e9:20:b1:a0:d8:cc:c4:94:2c:6b:3c:99: b3:cb:ec:a9:08:a5:e8:b3:96:3d:03:04:04:b9:c5: ad:ad:e2:96:f7:e2:8d:b1:68:9d:bf:ef:bd:b8:80: 75:d5:9d:66:a4:f1:06:d8:83:74:7d:37:e2:14:dc: 4c:89:7f:65:9a:24:9d:b8:0c:59:90:a0:73:f0:8e: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.76.0/22 IPv6: 2804:38d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266505 Signature Algorithm: sha256WithRSAEncryption 07:a1:65:64:81:65:bf:ac:a5:d3:9b:8b:70:85:46:ae:95:cb: 94:a7:c2:3f:7d:76:79:37:4b:cf:ab:08:cd:c6:b1:11:66:33: 85:f8:11:a6:11:60:5f:44:7d:a5:e3:1a:1e:fe:b4:5c:dd:1f: 66:14:da:05:61:81:57:4c:0b:f6:4b:e6:d1:6d:2d:83:4f:d9: b9:4f:1a:8d:f8:f2:e3:7c:9d:36:f7:7b:0c:89:fe:ec:aa:9a: af:e8:d1:58:40:ba:8d:f1:92:d2:37:69:2f:4a:96:8a:8d:ee: ca:49:cc:e6:af:08:38:20:8a:77:75:c0:a9:8e:7e:31:35:01: da:25:67:8a:f3:03:46:2a:e4:5b:65:85:23:e8:22:0f:7e:4c: 31:61:64:48:db:fa:6b:74:dd:95:19:f5:d8:62:9d:40:55:8c: 0b:bf:d4:50:9b:81:a2:fb:2d:4a:86:69:d2:8d:31:5f:7e:a6: d4:d3:d3:49:15:82:ea:c2:61:da:a1:93:d1:55:f2:d5:76:9e: 74:33:95:ea:78:70:ca:9d:74:7b:92:36:64:f7:56:f7:e0:d0: 07:e3:a7:3c:5e:17:44:99:9e:ec:c7:83:34:0c:41:c5:0e:ee: 9c:bf:b7:a6:b9:93:79:4a:75:2f:3a:4b:57:98:7a:58:27:84: 5b:ae:c2:df -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUM+Jo1qRSZPQge2+sen3lteEtDL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NTJaFw0yNjAzMDQxODQwNTJaMDMxMTAvBgNV BAMTKENBOUY3NjA5OTg2RUFGMUE1MTcyNDlCOTEyMEYyQjY5MDY5QTYwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKl5287UEyuDiYBoOm3Bt6yMwt 3an32y9BbAv9EnpFbUv86IEpCkpwwjXD/Ylxx/0Y3YWVgoz81zp8aDfPuO4OD08X 9ugs+Bh9Q2J6YXlzfGRQwgeM6yyq+syVBxg1aD4GKxJneQVis/A0QaspHLIv9RW8 etO7nwA1S+rzr5JVze7bn2EeU/1U+mYmvbq3RYT0nYJRzlG+ojTN5h7ftTqvLCMI I0uxgQJ9AwmBITFPnJOTSQ4MQekgsaDYzMSULGs8mbPL7KkIpeizlj0DBAS5xa2t 4pb34o2xaJ2/7724gHXVnWak8QbYg3R9N+IU3EyJf2WaJJ24DFmQoHPwjhDbAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKn3YJmG6vGlFy SbkSDytpBppgSjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTdB VFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2RGIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTdB VFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2RGIvMS9DQTlG NzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKq9EwwDQQCAAIwBwMFACgEONgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBEJMA0GCSqGSIb3DQEBCwUAA4IBAQAHoWVkgWW/rKXTm4tw hUaulcuUp8I/fXZ5N0vPqwjNxrERZjOF+BGmEWBfRH2l4xoe/rRc3R9mFNoFYYFX TAv2S+bRbS2DT9m5TxqN+PLjfJ0293sMif7sqpqv6NFYQLqN8ZLSN2kvSpaKje7K Sczmrwg4IIp3dcCpjn4xNQHaJWeK8wNGKuRbZYUj6CIPfkwxYWRI2/prdN2VGfXY Yp1AVYwLv9RQm4Gi+y1KhmnSjTFffqbU09NJFYLqwmHaoZPRVfLVdp50M5XqeHDK nXR7kjZk91b34NAH46c8XhdEmZ7sx4M0DEHFDu6cv7emuZN5SnUvOktXmHpYJ4Rb rsLf -----END CERTIFICATE-----Generated at Sat Apr 26 21:39:24 2025 by rpki-client