$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer File: 12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer (raw, json) Hash identifier: 1cIOS8fuS4mHYj8+dmwi7YmmIZjD8Nhh5utCHpsh3Fo= Subject key identifier: 12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 387E72BA2F4A516806B327BF485E03A34B875D74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft caRepository: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 02 May 2025 16:15:51 +0000 Certificate not after: Fri 01 May 2026 16:20:51 +0000 Subordinate resources: AS: 263614 IP: 168.232.220.0/22 IP: 177.23.108.0/22 IP: 2804:1004::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 06:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7e:72:ba:2f:4a:51:68:06:b3:27:bf:48:5e:03:a3:4b:87:5d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 16:15:51 2025 GMT Not After : May 1 16:20:51 2026 GMT Subject: CN=12284CDA6822A8D5AD2892F46CF3BBE009E300C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:aa:a6:ce:4f:35:9d:e2:71:b8:c1:02:11: 78:18:4e:88:95:54:95:25:06:da:8d:a2:45:da:ba: e3:79:2c:ae:14:96:1c:b7:0c:db:e3:3f:27:61:4f: c6:09:78:7e:ba:58:c7:48:c7:47:e8:ca:4c:52:83: 1d:23:58:09:04:d8:22:dc:2e:52:c9:95:1b:df:53: df:e9:fa:7b:0a:8e:92:f1:65:43:fb:40:9a:b9:26: b0:6d:e1:6d:13:fd:98:12:f1:25:d1:b3:d6:c8:15: 16:27:22:a9:18:2a:a3:00:1d:5a:a7:fa:68:1b:35: e0:7d:e1:a7:c4:bd:dd:2f:ef:1d:e3:85:fd:bd:aa: f5:df:45:30:d2:83:8f:ab:95:c7:d0:ac:a0:5f:29: a0:02:ff:65:6b:0d:ef:bb:1c:55:27:0c:83:98:6b: 58:c2:57:e5:f9:c5:16:b0:32:ad:bd:09:cc:c2:47: 2c:6b:43:9b:79:a8:df:0a:1e:16:76:c5:ef:b3:2f: 2f:0a:dc:bc:ba:3f:f1:10:dd:4c:29:2d:23:f0:49: 7d:44:9b:9f:1c:21:34:8c:07:85:f0:93:e4:7b:01: ec:eb:66:d7:c4:44:86:c1:cc:f9:87:14:55:5c:bd: e7:d5:81:14:b3:2b:86:f1:88:65:00:f4:e4:11:ab: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.220.0/22 177.23.108.0/22 IPv6: 2804:1004::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263614 Signature Algorithm: sha256WithRSAEncryption d1:db:08:e7:ff:e2:9e:41:70:18:9d:fb:5b:e8:a0:c9:7c:6e: f2:31:90:23:f6:47:77:74:49:9f:38:37:f4:38:77:1d:3f:79: 7c:04:70:fb:b2:7f:40:41:ed:f3:5c:b9:fe:6a:ab:52:60:9b: 55:4c:52:38:dc:7a:d8:cd:16:91:e8:7b:8f:9e:d8:c0:d7:74: 7d:ab:cd:2b:39:82:a3:3d:8f:8f:e3:9d:84:fa:40:60:9d:43: 87:10:09:a6:51:a3:32:ea:b4:66:4a:5b:9d:2e:bf:7e:15:57: 66:79:34:72:2d:a2:9a:8e:5d:d2:a6:54:ca:96:b4:b7:66:d6: 19:dc:a5:03:6c:86:9d:c1:c1:6b:16:09:60:9b:f8:e4:9e:5e: cf:d5:8e:a4:28:df:b8:12:99:c4:f3:36:1c:ba:59:62:8f:cd: fc:49:bb:ca:a1:bb:15:6b:6d:92:ee:10:34:f9:2c:e9:29:23: e2:d9:b5:34:c5:91:9e:59:65:2d:aa:f4:c9:3a:a3:4b:96:e2: db:c5:8c:f0:bc:04:00:67:29:98:6e:b9:c0:cf:fc:e5:9d:4d: ad:0a:b5:10:e3:7e:0e:88:9a:b4:a1:3e:8a:a0:9f:f0:e2:ba: a8:c8:75:dd:59:af:5e:3a:90:31:5e:e1:83:fd:d0:68:97:0f: 7c:b5:7e:ee -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOH5yui9KUWgGsye/SF4Do0uHXXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDIxNjE1NTFaFw0yNjA1MDExNjIwNTFaMDMxMTAvBgNV BAMTKDEyMjg0Q0RBNjgyMkE4RDVBRDI4OTJGNDZDRjNCQkUwMDlFMzAwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCqqmzk81neJxuMECEXgYToiV VJUlBtqNokXauuN5LK4Ulhy3DNvjPydhT8YJeH66WMdIx0foykxSgx0jWAkE2CLc LlLJlRvfU9/p+nsKjpLxZUP7QJq5JrBt4W0T/ZgS8SXRs9bIFRYnIqkYKqMAHVqn +mgbNeB94afEvd0v7x3jhf29qvXfRTDSg4+rlcfQrKBfKaAC/2VrDe+7HFUnDIOY a1jCV+X5xRawMq29CczCRyxrQ5t5qN8KHhZ2xe+zLy8K3Ly6P/EQ3UwpLSPwSX1E m58cITSMB4Xwk+R7AezrZtfERIbBzPmHFFVcvefVgRSzK4bxiGUA9OQRq5//AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSKEzaaCKo1a0o kvRs87vgCeMAyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlo0 UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpqOHUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZa NFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAvMTIy ODRDREE2ODIyQThENUFEMjg5MkY0NkNGM0JCRTAwOUUzMDBDOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOjcAwQCsRdsMA0EAgACMAcDBQAoBBAEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFvjANBgkqhkiG9w0BAQsFAAOCAQEA0dsI5//i nkFwGJ37W+igyXxu8jGQI/ZHd3RJnzg39Dh3HT95fARw+7J/QEHt81y5/mqrUmCb VUxSONx62M0Wkeh7j57YwNd0favNKzmCoz2Pj+OdhPpAYJ1DhxAJplGjMuq0Zkpb nS6/fhVXZnk0ci2imo5d0qZUypa0t2bWGdylA2yGncHBaxYJYJv45J5ez9WOpCjf uBKZxPM2HLpZYo/N/Em7yqG7FWttku4QNPks6Skj4tm1NMWRnlllLar0yTqjS5bi 28WM8LwEAGcpmG65wM/85Z1NrQq1EON+DoiatKE+iqCf8OK6qMh13VmvXjqQMV7h g/3QaJcPfLV+7g== -----END CERTIFICATE-----Generated at Thu May 8 05:54:56 2025 by rpki-client