$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer File: D9B8C8035F469EEFCD42A52D48966057264B95C4.cer (raw, json) Hash identifier: aifb0qFb+Ref3tiC7OXaKbN5UIwQF+230OQuE9hvukw= Subject key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0D62EC4B2BD1FE22522FA4AC2FFEEE8936760C43 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft caRepository: rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 16:54:02 +0000 Certificate not after: Thu 05 Mar 2026 16:59:02 +0000 Subordinate resources: AS: 263457 IP: 177.190.152.0/21 IP: 2804:121c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:62:ec:4b:2b:d1:fe:22:52:2f:a4:ac:2f:fe:ee:89:36:76:0c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 16:54:02 2025 GMT Not After : Mar 5 16:59:02 2026 GMT Subject: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:52:f9:ce:98:3d:78:26:f7:05:a8:f8:c2:fd: 76:6c:26:6a:3c:39:5d:20:c7:fb:10:44:e0:a2:8e: ce:bc:bc:38:e0:a6:65:2e:e1:7a:c9:e0:1a:68:bf: e3:55:6d:a8:06:da:2c:52:a7:1c:21:3f:75:c4:66: 39:24:85:93:48:d8:b5:54:e3:27:48:18:5d:f6:c8: ce:f7:14:c2:8a:3c:68:77:da:65:a9:f9:55:3e:80: e9:ae:8f:ad:5e:71:4f:b8:a4:d5:b4:95:a9:a5:1d: 54:82:60:d0:78:f7:43:e4:39:96:50:69:dd:1f:16: 9b:8e:d4:df:f3:91:d9:fd:f9:c3:2e:84:0b:44:07: 1d:a5:7d:05:43:80:74:94:48:d4:33:d9:f0:42:7c: 56:be:ac:f7:76:b8:6e:1f:3e:43:79:65:30:a5:7f: a1:f2:f8:a3:4a:a3:67:a9:d9:83:1e:76:9e:7a:f5: ad:ef:ae:84:72:1f:79:3e:42:bd:bf:01:48:00:69: dc:64:e9:bb:eb:80:4c:76:43:24:74:e0:0b:08:60: 98:85:ed:52:af:8f:a3:bb:8a:be:e5:d2:58:ba:97: 05:03:31:3f:b8:76:77:89:f5:30:1f:0c:4a:d6:c4: 8b:89:51:f0:e9:2b:85:2a:9b:8e:d2:44:01:66:36: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.190.152.0/21 IPv6: 2804:121c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263457 Signature Algorithm: sha256WithRSAEncryption 91:8e:a8:67:97:bd:99:3b:49:39:57:00:18:66:8c:e6:2e:47: e0:11:1c:9f:2f:21:bd:25:59:3b:35:39:95:52:a7:ff:07:f6: 90:6d:c8:0e:e8:53:18:06:77:b3:22:9b:e8:b1:68:f3:c6:73: 7e:c9:49:74:8c:c9:c7:22:7a:5e:ff:5c:5b:e5:b1:09:d9:20: 29:4f:2d:5b:80:70:f5:7f:15:0c:7e:6e:e7:44:8f:5f:f2:50: 09:27:3f:3b:3f:a4:6c:c6:76:ac:a9:11:f7:71:4a:60:cd:53: c6:6b:25:33:cd:f5:0c:57:f0:79:a5:93:ed:3c:69:06:e7:30: b8:15:50:75:9b:2d:a3:ea:3d:2d:09:e1:4b:44:91:f4:13:26: d4:ac:b7:d3:87:a2:26:4a:b9:fe:bb:32:83:59:d0:37:78:75: f8:ad:0c:b8:31:c3:39:79:12:67:52:28:17:f8:80:0c:a1:9f: b7:c7:1f:5c:f5:6f:0e:fa:52:38:5c:80:6c:a5:a3:bd:99:57: 8a:2c:55:9d:1e:da:c9:8c:7c:e7:b3:95:c5:eb:a3:10:87:e8: ee:12:4d:69:5b:d5:3a:2e:66:e2:2a:e7:5f:48:75:38:84:00: 97:cc:6c:b7:54:d1:f6:0e:e1:60:37:c5:7b:8b:cf:7d:5b:3f: a0:4f:5f:51 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDWLsSyvR/iJSL6SsL/7uiTZ2DEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNjU0MDJaFw0yNjAzMDUxNjU5MDJaMDMxMTAvBgNV BAMTKEQ5QjhDODAzNUY0NjlFRUZDRDQyQTUyRDQ4OTY2MDU3MjY0Qjk1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjUvnOmD14JvcFqPjC/XZsJmo8 OV0gx/sQROCijs68vDjgpmUu4XrJ4Bpov+NVbagG2ixSpxwhP3XEZjkkhZNI2LVU 4ydIGF32yM73FMKKPGh32mWp+VU+gOmuj61ecU+4pNW0lamlHVSCYNB490PkOZZQ ad0fFpuO1N/zkdn9+cMuhAtEBx2lfQVDgHSUSNQz2fBCfFa+rPd2uG4fPkN5ZTCl f6Hy+KNKo2ep2YMedp569a3vroRyH3k+Qr2/AUgAadxk6bvrgEx2QyR04AsIYJiF 7VKvj6O7ir7l0li6lwUDMT+4dneJ9TAfDErWxIuJUfDpK4Uqm47SRAFmNj47AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZuMgDX0ae781C pS1IlmBXJkuVxDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTVB U0dzZ3ZHbVdMOGFyYndZZm9wRVUySnlOYWVOU2I5OU1kbjRhOGVxbVgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U1 QVNHc2d2R21XTDhhcmJ3WWZvcEVVMkp5TmFlTlNiOTlNZG40YThlcW1YLzEvRDlC OEM4MDM1RjQ2OUVFRkNENDJBNTJENDg5NjYwNTcyNjRCOTVDNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsb6YMA0EAgACMAcDBQAoBBIcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQFITANBgkqhkiG9w0BAQsFAAOCAQEAkY6oZ5e9mTtJOVcA GGaM5i5H4BEcny8hvSVZOzU5lVKn/wf2kG3IDuhTGAZ3syKb6LFo88ZzfslJdIzJ xyJ6Xv9cW+WxCdkgKU8tW4Bw9X8VDH5u50SPX/JQCSc/Oz+kbMZ2rKkR93FKYM1T xmslM831DFfweaWT7TxpBucwuBVQdZsto+o9LQnhS0SR9BMm1Ky304eiJkq5/rsy g1nQN3h1+K0MuDHDOXkSZ1IoF/iADKGft8cfXPVvDvpSOFyAbKWjvZlXiixVnR7a yYx857OVxeujEIfo7hJNaVvVOi5m4irnX0h1OIQAl8xst1TR9g7hYDfFe4vPfVs/ oE9fUQ== -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:33 2025 by rpki-client