$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F0B79B6E473982D91807611066BFFF4312B1B2D.cer File: 2F0B79B6E473982D91807611066BFFF4312B1B2D.cer (raw, json) Hash identifier: X+s8Zg5weRMBPDGzWBPZM2yAweD+Q7YgXKlmPqJHEYs= Subject key identifier: 2F:0B:79:B6:E4:73:98:2D:91:80:76:11:06:6B:FF:F4:31:2B:1B:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 51DA92D83B3238D70C37EB81B72EF3F484A06E87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.mft caRepository: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 07 May 2025 12:55:11 +0000 Certificate not after: Wed 06 May 2026 13:00:11 +0000 Subordinate resources: AS: 264360 IP: 131.161.28.0/22 IP: 138.255.132.0/22 IP: 2804:1d50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:da:92:d8:3b:32:38:d7:0c:37:eb:81:b7:2e:f3:f4:84:a0:6e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 12:55:11 2025 GMT Not After : May 6 13:00:11 2026 GMT Subject: CN=2F0B79B6E473982D91807611066BFFF4312B1B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:b1:93:08:c1:8b:70:71:83:67:3d:4d:e5: e1:03:e2:c1:48:24:07:ec:fa:5e:73:71:5e:fd:9e: 64:ab:a1:e9:a2:d5:1f:e9:ef:5f:2d:dc:66:53:f9: 54:8a:ce:85:32:54:ec:dd:9d:e1:ac:6f:97:6a:6c: 24:78:0b:75:e7:34:79:c2:52:c7:35:0e:08:0e:4f: ba:d7:41:f4:59:46:f5:0d:62:a0:86:25:04:0d:57: ea:20:00:c4:7c:a7:6d:89:b4:2c:7e:e5:bc:82:7f: aa:16:40:b3:2c:59:f6:00:8c:22:0b:44:78:2d:49: 57:94:5f:04:81:00:fa:34:2b:cc:2d:a0:c1:16:02: 83:5b:34:d2:ce:aa:c2:c6:5c:c6:e3:a8:7f:4b:62: 47:02:c1:aa:45:d8:97:1e:6c:f0:2c:b8:2d:19:19: c5:66:2c:c6:c6:82:c9:d4:08:eb:7e:17:5d:5a:97: 54:4a:6a:e0:5c:08:6c:cf:76:05:c4:39:09:ac:9b: b8:3b:12:63:65:90:29:db:9b:f3:df:cf:73:96:ba: 6b:c9:29:a1:83:1a:0f:bc:2a:6d:cb:14:41:58:45: 01:7f:3d:aa:bd:6c:3f:98:14:ac:41:50:58:ff:91: aa:5c:48:65:91:71:00:f7:16:21:c0:8e:81:fa:bb: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:0B:79:B6:E4:73:98:2D:91:80:76:11:06:6B:FF:F4:31:2B:1B:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.28.0/22 138.255.132.0/22 IPv6: 2804:1d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264360 Signature Algorithm: sha256WithRSAEncryption d1:ae:14:f8:84:92:a9:0d:c0:d6:1c:c2:ce:7e:76:e3:1a:1f: cc:16:6e:26:fc:6a:e2:38:60:2e:80:81:08:d0:ae:d9:96:62: 1a:c0:7d:89:a7:f8:9d:3d:85:03:dd:6a:2c:4a:47:1a:6e:94: f5:09:81:48:65:22:83:63:de:a6:24:7a:c7:35:0f:45:ec:ac: 46:40:9a:58:60:0a:9b:be:23:d2:8e:13:93:2d:5b:cf:56:ff: 04:30:ca:8a:0e:fa:4e:78:68:73:fe:af:20:86:ab:cb:08:c9: f8:5d:6c:73:b4:80:21:16:c3:6d:62:db:cf:b8:36:b2:11:a7: 9b:1e:ad:09:a2:d1:ca:be:0a:21:27:13:af:23:37:57:4e:24: ef:64:57:81:6a:da:1a:ed:35:83:91:ca:b3:b9:25:2a:0f:9a: aa:84:17:11:c4:5c:85:20:a8:ad:30:46:0e:ea:e4:e1:5b:30: fa:70:48:8c:dc:fe:98:46:e6:b5:2a:3a:91:7b:67:0e:23:02: aa:25:2b:61:c4:5c:ea:41:df:c3:6d:20:91:5f:d5:71:34:e3: 20:bc:5f:12:5c:37:0c:52:37:0b:f3:49:06:0f:3c:01:ab:ca: 8b:ec:e2:e0:30:9a:d5:47:f9:e9:87:99:b9:ed:f0:09:2c:1b: 49:7f:9d:13 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUUdqS2DsyONcMN+uBty7z9ISgbocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDcxMjU1MTFaFw0yNjA1MDYxMzAwMTFaMDMxMTAvBgNV BAMTKDJGMEI3OUI2RTQ3Mzk4MkQ5MTgwNzYxMTA2NkJGRkY0MzEyQjFCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldLGTCMGLcHGDZz1N5eED4sFI JAfs+l5zcV79nmSroemi1R/p718t3GZT+VSKzoUyVOzdneGsb5dqbCR4C3XnNHnC Usc1DggOT7rXQfRZRvUNYqCGJQQNV+ogAMR8p22JtCx+5byCf6oWQLMsWfYAjCIL RHgtSVeUXwSBAPo0K8wtoMEWAoNbNNLOqsLGXMbjqH9LYkcCwapF2JcebPAsuC0Z GcVmLMbGgsnUCOt+F11al1RKauBcCGzPdgXEOQmsm7g7EmNlkCnbm/Pfz3OWumvJ KaGDGg+8Km3LFEFYRQF/Paq9bD+YFKxBUFj/kapcSGWRcQD3FiHAjoH6u79rAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvC3m25HOYLZGA dhEGa//0MSsbLTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0tM NGI0S2s4UFFjbzZYb3NQNGdHY3hZMnNiZGl5UGZKRER6UzF2UnNhTHUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNL TDRiNEtrOFBRY282WG9zUDRnR2N4WTJzYmRpeVBmSkREelMxdlJzYUx1LzAvMkYw Qjc5QjZFNDczOTgyRDkxODA3NjExMDY2QkZGRjQzMTJCMUIyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg6EcAwQCiv+EMA0EAgACMAcDBQAoBB1QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIqDANBgkqhkiG9w0BAQsFAAOCAQEA0a4U+ISS qQ3A1hzCzn524xofzBZuJvxq4jhgLoCBCNCu2ZZiGsB9iaf4nT2FA91qLEpHGm6U 9QmBSGUig2PepiR6xzUPReysRkCaWGAKm74j0o4Tky1bz1b/BDDKig76Tnhoc/6v IIarywjJ+F1sc7SAIRbDbWLbz7g2shGnmx6tCaLRyr4KIScTryM3V04k72RXgWra Gu01g5HKs7klKg+aqoQXEcRchSCorTBGDurk4Vsw+nBIjNz+mEbmtSo6kXtnDiMC qiUrYcRc6kHfw20gkV/VcTTjILxfElw3DFI3C/NJBg88AavKi+zi4DCa1Uf56YeZ ue3wCSwbSX+dEw== -----END CERTIFICATE-----Generated at Sun May 11 05:30:40 2025 by rpki-client