$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer File: E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer (raw, json) Hash identifier: vh6OauDAVtJuFgWYDedM/0KJPuFhWgsFK0sqKudFe9c= Subject key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2BFBC2166F6B24158E65B27AAACAFA216E40A076 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft caRepository: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 14:45:23 +0000 Certificate not after: Fri 24 Apr 2026 14:50:23 +0000 Subordinate resources: AS: 52721 AS: 264088 IP: 138.185.108.0/22 IP: 143.208.4.0/22 IP: 170.246.96.0/22 IP: 177.84.108.0/22 IP: 2804:2664::/32 IP: 2804:2aa8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fb:c2:16:6f:6b:24:15:8e:65:b2:7a:aa:ca:fa:21:6e:40:a0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 25 14:45:23 2025 GMT Not After : Apr 24 14:50:23 2026 GMT Subject: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:db:5f:c6:26:a1:26:14:07:9e:18:96:ed: 89:2b:83:16:ab:60:4d:43:b4:8f:e1:18:e6:76:56: e3:cf:c4:63:96:5d:20:bc:8d:27:b7:ca:d7:79:f2: 94:71:67:76:50:c4:61:08:bd:a1:0e:97:1f:e7:c4: 2f:97:be:38:5d:5c:07:b8:1b:58:3f:32:d3:7b:b6: b1:d2:31:de:68:f3:86:19:71:ad:28:ed:a8:11:7f: e7:13:42:60:c8:c6:4a:d3:c8:30:42:27:84:31:12: 75:58:96:a9:a3:d6:0d:90:a5:79:a3:69:78:e8:d2: 75:dd:44:a3:d7:a9:41:59:27:32:7e:55:82:67:8b: 66:ea:6f:f7:9d:71:20:5a:e9:8f:85:3f:4e:77:09: 18:fa:e7:b3:6f:3c:a1:3d:06:33:f4:70:1d:53:f6: a2:58:b0:42:2b:22:c4:83:14:a4:ec:fc:fd:3b:27: 17:0c:a4:82:52:22:57:1d:35:e2:1d:3a:94:98:59: 02:09:8b:d3:d0:f7:83:b4:af:d3:e3:07:9d:98:38: 30:fb:e3:dd:c4:8a:54:3d:db:43:df:f2:1a:24:35: aa:8e:33:ad:d5:7d:10:54:17:66:af:bb:99:f5:c2: 50:c4:3b:11:73:bb:bd:07:2f:d7:34:3c:8e:1e:d0: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.108.0/22 143.208.4.0/22 170.246.96.0/22 177.84.108.0/22 IPv6: 2804:2664::/32 2804:2aa8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52721 264088 Signature Algorithm: sha256WithRSAEncryption 04:78:9e:33:4e:b1:ba:db:92:d5:8c:5c:4d:b3:48:f6:83:c8: 82:3e:15:6e:6a:bc:7a:06:f0:63:e4:72:66:e8:b6:a5:e5:9c: fe:6f:96:37:a8:b7:31:bd:88:00:da:2c:0e:92:bc:1e:49:e8: a5:db:d7:a9:91:40:48:22:de:03:32:f2:4a:68:30:12:8b:8d: 46:36:c8:7f:ba:b3:ae:7d:02:56:cc:ae:e9:b9:c3:b7:cd:96: cc:26:07:5b:c6:53:e1:a4:30:34:b4:f9:b3:90:4b:17:ed:c0: 0a:61:b2:a2:b7:7e:75:b9:df:12:14:4d:ba:c7:2d:e4:dc:8f: ef:f3:da:e6:8e:0f:24:53:8c:78:6b:80:a1:ff:4c:9e:14:0d: fe:98:23:00:ee:97:d3:08:7e:1c:15:0e:71:f2:6e:e1:6b:83: ad:0f:32:28:97:b4:12:b7:8f:bc:a1:03:2c:93:61:60:1a:49: f3:8a:1d:33:cb:f4:2b:be:db:4c:2f:24:d2:0a:8e:0e:b3:ca: e7:c2:77:b2:ef:06:e9:d6:f3:6a:ce:bd:ce:43:55:41:c2:48: 8a:01:fc:65:33:1b:d7:f9:16:d3:0f:8c:44:27:6c:03:86:9d: 94:0f:5c:35:e8:6d:84:32:22:67:eb:dd:db:ab:0a:47:ac:0b: f8:07:dd:70 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUK/vCFm9rJBWOZbJ6qsr6IW5AoHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjUxNDQ1MjNaFw0yNjA0MjQxNDUwMjNaMDMxMTAvBgNV BAMTKEUzRjE3MkI0QzY5MkFBQTk1OEE5M0YwQzdENTc3QTVBRThENzA4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeMdtfxiahJhQHnhiW7Ykrgxar YE1DtI/hGOZ2VuPPxGOWXSC8jSe3ytd58pRxZ3ZQxGEIvaEOlx/nxC+XvjhdXAe4 G1g/MtN7trHSMd5o84YZca0o7agRf+cTQmDIxkrTyDBCJ4QxEnVYlqmj1g2QpXmj aXjo0nXdRKPXqUFZJzJ+VYJni2bqb/edcSBa6Y+FP053CRj657NvPKE9BjP0cB1T 9qJYsEIrIsSDFKTs/P07JxcMpIJSIlcdNeIdOpSYWQIJi9PQ94O0r9PjB52YODD7 493EilQ920Pf8hokNaqOM63VfRBUF2avu5n1wlDEOxFzu70HL9c0PI4e0D4lAgMB AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTj8XK0xpKqqVip Pwx9V3pa6NcILzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlJS elB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZcWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJS UnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAvRTNG MTcyQjRDNjkyQUFBOTU4QTkzRjBDN0Q1NzdBNUFFOEQ3MDgyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEH AQH/BDgwNjAeBAIAATAYAwQCirlsAwQCj9AEAwQCqvZgAwQCsVRsMBQEAgACMA4D BQAoBCZkAwUAKAQqqDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAzfECAwQHmDAN BgkqhkiG9w0BAQsFAAOCAQEABHieM06xutuS1YxcTbNI9oPIgj4Vbmq8egbwY+Ry Zui2peWc/m+WN6i3Mb2IANosDpK8HknopdvXqZFASCLeAzLySmgwEouNRjbIf7qz rn0CVsyu6bnDt82WzCYHW8ZT4aQwNLT5s5BLF+3ACmGyord+dbnfEhRNusct5NyP 7/Pa5o4PJFOMeGuAof9MnhQN/pgjAO6X0wh+HBUOcfJu4WuDrQ8yKJe0ErePvKED LJNhYBpJ84odM8v0K77bTC8k0gqODrPK58J3su8G6dbzas69zkNVQcJIigH8ZTMb 1/kW0w+MRCdsA4adlA9cNehthDIiZ+vd26sKR6wL+AfdcA== -----END CERTIFICATE-----Generated at Sun Apr 27 01:09:09 2025 by rpki-client