$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer File: EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer (raw, json) Hash identifier: mQIJF2BJIavM2vVv+7+8huAq5JoUEo4ftAygAs3RowU= Subject key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7628447E4AD214D69E1795D3F720E88C571CEA62 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft caRepository: rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 18:28:34 +0000 Certificate not after: Fri 20 Mar 2026 18:33:34 +0000 Subordinate resources: AS: 271573 IP: 200.0.179.0/24 IP: 200.6.134.0/23 IP: 201.131.106.0/24 IP: 2804:7da0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 22:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:28:44:7e:4a:d2:14:d6:9e:17:95:d3:f7:20:e8:8c:57:1c:ea:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 21 18:28:34 2025 GMT Not After : Mar 20 18:33:34 2026 GMT Subject: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:b0:e6:f2:69:b1:c7:cb:76:5c:8d:0c:36: 04:8b:09:17:6d:41:b1:4c:0c:f6:01:af:82:0a:99: f4:cb:12:0f:75:82:62:d6:b8:8d:b5:a5:9e:5d:be: 39:64:09:dc:22:8d:0e:8e:21:71:02:a8:01:1e:e8: c8:f9:b2:f6:71:db:74:47:80:3c:d7:8a:d1:f8:13: 74:db:54:79:d8:cb:25:34:51:50:e7:91:8d:b7:fd: 17:bc:ec:54:7e:2e:35:7a:d0:b4:0b:77:80:59:59: 43:63:c9:16:c8:18:dd:bb:80:7d:d8:08:3c:7a:b7: 8b:27:4a:23:fd:35:4a:30:5f:15:5a:61:7d:05:84: 5f:9a:e2:0a:e6:32:a4:ea:54:6e:1f:98:16:76:da: c7:2c:0a:f9:36:44:a0:f5:e0:c9:fd:ae:05:6b:d5: 8f:cc:e5:ab:3f:b3:cf:26:8c:eb:f9:8a:98:be:04: 0d:af:c2:20:b8:cc:b0:87:c5:5e:6e:2e:46:0e:28: 3c:6d:0c:df:c7:e1:c3:3f:0f:07:19:91:5e:41:51: 96:0e:5c:f2:d1:c7:10:4b:f9:0d:1c:41:f7:87:5d: 6e:c1:5d:38:82:bd:69:29:66:5b:88:61:38:68:7a: 3d:e6:53:a0:0e:72:e8:bd:6c:31:76:75:ce:6e:49: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.0.179.0/24 200.6.134.0/23 201.131.106.0/24 IPv6: 2804:7da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271573 Signature Algorithm: sha256WithRSAEncryption 6a:47:c2:de:d3:0b:a3:7a:4d:a4:4a:a1:d9:d0:a1:ff:ce:1c: 80:23:68:f7:d8:d7:d4:f0:b2:a3:58:76:8d:ab:d6:df:0a:12: 39:7d:4d:b0:a6:b0:c7:a2:ed:c4:4c:49:54:06:e0:cc:3e:d7: 1f:f5:91:f7:b9:d8:39:49:61:c8:f0:f9:57:64:8b:f7:76:b7: fa:e9:fe:84:8e:ed:61:e9:02:ef:d1:1e:ba:47:7a:2e:cd:ef: 00:43:fe:49:ea:dd:58:40:f3:01:db:d3:88:2b:eb:8d:87:a8: e1:8f:29:22:8a:04:ca:ee:bf:f5:9f:8e:e9:e9:a3:3d:8c:91: b9:2b:eb:a3:8d:57:47:7c:cb:ef:9d:b8:aa:1a:9e:8d:5e:e2: bb:b0:94:52:72:1f:70:c8:87:87:87:e0:ff:09:6d:07:19:b4: 32:e2:8b:75:c5:b2:ac:87:02:a3:1e:02:b3:d5:a5:71:a7:69: ce:9f:f1:5e:80:e2:90:71:d3:49:6f:64:d0:a3:28:90:96:3c: 41:a2:1a:55:c0:31:9f:07:59:3b:df:4e:c1:0d:09:c3:7f:fd: 30:6a:77:c1:4d:b2:bc:c9:c6:43:c1:82:4a:2b:df:e7:2d:dc: 5d:c7:60:c8:44:3c:29:93:3e:5e:5c:c9:cc:f3:00:ae:76:82: 11:d2:c9:8b -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUdihEfkrSFNaeF5XT9yDojFcc6mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjExODI4MzRaFw0yNjAzMjAxODMzMzRaMDMxMTAvBgNV BAMTKEVDM0E5QjZDMUY2QTY5NDQ5Q0EyMUZENzgwRjRGODAxRjZDRTZCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcWbDm8mmxx8t2XI0MNgSLCRdt QbFMDPYBr4IKmfTLEg91gmLWuI21pZ5dvjlkCdwijQ6OIXECqAEe6Mj5svZx23RH gDzXitH4E3TbVHnYyyU0UVDnkY23/Re87FR+LjV60LQLd4BZWUNjyRbIGN27gH3Y CDx6t4snSiP9NUowXxVaYX0FhF+a4grmMqTqVG4fmBZ22scsCvk2RKD14Mn9rgVr 1Y/M5as/s88mjOv5ipi+BA2vwiC4zLCHxV5uLkYOKDxtDN/H4cM/DwcZkV5BUZYO XPLRxxBL+Q0cQfeHXW7BXTiCvWkpZluIYThoej3mU6AOcui9bDF2dc5uSWF1AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsOptsH2ppRJyi H9eA9PgB9s5rBjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmhC c3FVVEtVN1ZLemtCY0pRUnBETkNpZ3JUZ2NiVlhacHZXek4zbmE1M3AvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zo QnNxVVRLVTdWS3prQmNKUVJwRE5DaWdyVGdjYlZYWnB2V3pOM25hNTNwLzAvRUMz QTlCNkMxRjZBNjk0NDlDQTIxRkQ3ODBGNEY4MDFGNkNFNkIwNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQAyACzAwQByAaGAwQAyYNqMA0EAgACMAcDBQAoBH2g MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQk1TANBgkqhkiG9w0BAQsFAAOCAQEA akfC3tMLo3pNpEqh2dCh/84cgCNo99jX1PCyo1h2javW3woSOX1NsKawx6LtxExJ VAbgzD7XH/WR97nYOUlhyPD5V2SL93a3+un+hI7tYekC79Eeukd6Ls3vAEP+Serd WEDzAdvTiCvrjYeo4Y8pIooEyu6/9Z+O6emjPYyRuSvro41XR3zL7524qhqejV7i u7CUUnIfcMiHh4fg/wltBxm0MuKLdcWyrIcCox4Cs9Wlcadpzp/xXoDikHHTSW9k 0KMokJY8QaIaVcAxnwdZO99OwQ0Jw3/9MGp3wU2yvMnGQ8GCSivf5y3cXcdgyEQ8 KZM+XlzJzPMArnaCEdLJiw== -----END CERTIFICATE-----Generated at Sat Apr 26 22:54:43 2025 by rpki-client