$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer File: F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer (raw, json) Hash identifier: TNwX6wO/udpq54EsPeb6qJI5Z3XgIuMEtAqza8al8X8= Subject key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 452BE19D54699F9D4E57F78B5A1A773046E9168A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft caRepository: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 May 2025 18:27:23 +0000 Certificate not after: Thu 07 May 2026 18:32:23 +0000 Subordinate resources: AS: 273663 IP: 177.8.71.0/24 IP: 200.124.78.0/23 IP: 2804:8a58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2b:e1:9d:54:69:9f:9d:4e:57:f7:8b:5a:1a:77:30:46:e9:16:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 8 18:27:23 2025 GMT Not After : May 7 18:32:23 2026 GMT Subject: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:49:af:93:99:72:71:47:d4:09:88:17:da: 72:18:52:e7:b5:24:71:a3:36:cc:99:19:3d:7c:e0: 8b:3f:a5:bf:d2:fa:8b:dd:e1:28:41:49:0b:f2:11: e9:7d:65:d9:fb:8f:f8:ea:9f:5b:e1:b9:18:84:92: 44:cb:83:ae:2e:a6:27:99:9c:88:1e:2f:38:e6:a3: 30:f8:c5:3e:89:7f:d4:08:89:ad:e1:c3:fe:34:4e: bc:cc:63:ed:03:0f:79:19:70:17:e1:1e:fb:fc:b9: d9:6d:d7:f3:4e:9a:21:04:af:e8:2d:c3:6a:45:2d: 6d:84:f0:93:bf:bc:47:f0:76:34:a6:2c:38:15:9b: cf:ad:0f:dd:70:65:2d:3d:50:c3:37:0b:0a:45:3c: 80:61:a7:23:29:9b:70:1d:a4:a2:07:6c:50:a6:a5: 72:18:2d:5d:e7:fe:75:fb:58:db:af:4d:64:e3:52: 25:93:7e:5c:23:3a:b5:f7:68:53:ba:54:f6:1e:b5: 95:19:c2:31:b6:71:94:d5:f0:1d:09:55:03:6c:bc: 63:5f:ee:c8:50:b1:9e:41:b2:26:89:6b:24:f0:3d: 66:ca:f1:68:b5:79:94:b3:aa:94:98:65:16:99:58: 79:6a:24:ca:3f:ad:e7:59:a2:01:76:33:d2:ab:45: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.8.71.0/24 200.124.78.0/23 IPv6: 2804:8a58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273663 Signature Algorithm: sha256WithRSAEncryption 32:f3:5c:60:d7:d9:23:85:9e:3c:c0:59:a4:40:6d:91:81:29: f0:6a:da:a6:64:3d:3d:a8:e5:35:9d:dc:d8:bd:08:59:ae:b4: 96:61:1c:cc:49:f9:05:2c:3d:c5:53:8a:7b:fc:ad:95:07:63: 54:f7:20:18:ce:6b:c2:5f:a3:59:ce:23:c5:d7:29:b2:93:5d: c4:73:b4:a6:c7:05:00:be:ed:a0:81:e6:26:2f:f0:e9:7e:67: 65:64:7d:ff:00:ca:75:62:95:5a:ef:5b:24:16:b4:49:8f:76: cd:08:7a:ff:44:62:5c:bd:f4:bb:f2:d8:9f:05:ff:33:17:14: 09:d1:63:aa:c3:7c:e9:69:4a:59:42:9c:ea:40:5c:ce:ab:89: 80:0d:d3:53:46:3a:fd:87:60:00:39:eb:50:af:5a:2b:48:90: f7:1d:82:22:10:05:ac:dc:6d:a6:c3:75:3e:e8:94:44:91:c3: cb:af:e7:37:e3:0a:cd:64:af:f9:20:02:b4:cc:f9:1b:89:f9: 63:2c:86:30:ab:4d:c7:72:7c:b2:bc:93:77:0d:77:43:43:17: af:99:50:36:2b:aa:68:10:a9:32:1b:26:fe:fb:95:b6:69:82: b4:ec:0c:79:12:b9:3f:07:e8:f2:c4:dc:db:56:b9:57:29:18: 43:e8:be:94 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIURSvhnVRpn51OV/eLWhp3MEbpFoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDgxODI3MjNaFw0yNjA1MDcxODMyMjNaMDMxMTAvBgNV BAMTKEYxMERBQTUwOEJCQUM1RTI4N0E5NUY4QUFCQjhGQTU0MkMxNUVDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz0mvk5lycUfUCYgX2nIYUue1 JHGjNsyZGT184Is/pb/S+ovd4ShBSQvyEel9Zdn7j/jqn1vhuRiEkkTLg64upieZ nIgeLzjmozD4xT6Jf9QIia3hw/40TrzMY+0DD3kZcBfhHvv8udlt1/NOmiEEr+gt w2pFLW2E8JO/vEfwdjSmLDgVm8+tD91wZS09UMM3CwpFPIBhpyMpm3AdpKIHbFCm pXIYLV3n/nX7WNuvTWTjUiWTflwjOrX3aFO6VPYetZUZwjG2cZTV8B0JVQNsvGNf 7shQsZ5BsiaJayTwPWbK8Wi1eZSzqpSYZRaZWHlqJMo/redZogF2M9KrRbz7AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxDapQi7rF4oep X4qruPpULBXsyzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjN4 SmYyTjVpbTIyMnBhQUZIRGo2ZE40V3I2S2NweVV2dnducXRYcUp0ei8wL0YxMERB QTUwOEJCQUM1RTI4N0E5NUY4QUFCQjhGQTU0MkMxNUVDQ0IubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEALEIRwMEAch8TjANBAIAAjAHAwUAKASKWDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMELP8wDQYJKoZIhvcNAQELBQADggEBADLzXGDX2SOF njzAWaRAbZGBKfBq2qZkPT2o5TWd3Ni9CFmutJZhHMxJ+QUsPcVTinv8rZUHY1T3 IBjOa8Jfo1nOI8XXKbKTXcRztKbHBQC+7aCB5iYv8Ol+Z2Vkff8AynVilVrvWyQW tEmPds0Iev9EYly99Lvy2J8F/zMXFAnRY6rDfOlpSllCnOpAXM6riYAN01NGOv2H YAA561CvWitIkPcdgiIQBazcbabDdT7olESRw8uv5zfjCs1kr/kgArTM+RuJ+WMs hjCrTcdyfLK8k3cNd0NDF6+ZUDYrqmgQqTIbJv77lbZpgrTsDHkSuT8H6PLE3NtW uVcpGEPovpQ= -----END CERTIFICATE-----Generated at Sun Jun 15 19:25:54 2025 by rpki-client