$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer File: 71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer (raw, json) Hash identifier: b/OAyMwBa+ida1QTy5pxeRM3Fphx/utj3bRfWrXQwyY= Subject key identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59022D44CDCD6321E1F796E036ED2CBFE6A43EDC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft caRepository: rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 02 May 2025 01:55:11 +0000 Certificate not after: Fri 01 May 2026 02:00:11 +0000 Subordinate resources: AS: 268242 IP: 160.20.242.0/23 IP: 2804:4e24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 17:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:02:2d:44:cd:cd:63:21:e1:f7:96:e0:36:ed:2c:bf:e6:a4:3e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 01:55:11 2025 GMT Not After : May 1 02:00:11 2026 GMT Subject: CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c4:be:52:f6:b8:b2:f9:83:45:38:fb:12:89: 47:43:5e:a1:c8:3f:80:6e:a6:b4:1a:ee:bf:8d:ad: b4:96:a6:c6:bb:bc:98:ed:4b:c3:96:4c:0e:d7:e4: 85:bf:28:95:31:96:ba:e0:76:b3:99:a8:61:1b:a7: 58:98:65:8d:d3:5a:55:de:fb:0e:c5:53:12:23:9c: 1c:45:06:44:ed:47:1d:14:fc:17:9f:19:65:e6:c7: 1c:78:8a:2a:a1:37:47:a5:bd:0e:7b:97:dc:42:c6: 93:88:1a:f0:df:3e:c1:35:ca:29:d7:a8:c8:a2:9a: 1e:ba:b0:f3:6e:fe:b0:66:48:ef:2d:31:5d:f8:cb: d4:71:e6:83:a5:62:40:de:4a:3b:0b:46:df:f9:c8: 7d:96:b2:38:4f:7c:bf:b2:e2:ed:c8:a9:bf:6a:b8: 24:c6:c4:1b:47:9e:05:d5:7a:09:0a:96:eb:14:55: 41:40:2b:51:40:e6:5e:53:9c:b6:d2:8b:97:a6:c4: 2f:3f:f0:2f:18:d7:09:c6:1b:87:ac:d5:50:84:f7: f1:b6:2d:54:52:a3:af:a8:6c:a3:37:31:6e:19:4e: 05:bd:39:27:93:47:26:27:98:76:17:c6:68:01:78: 1b:b0:09:49:77:8d:60:77:2a:dd:fe:44:95:ce:60: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.242.0/23 IPv6: 2804:4e24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268242 Signature Algorithm: sha256WithRSAEncryption 86:97:ce:7e:c1:ea:fe:86:12:c4:8e:01:87:e1:82:77:ef:fa: 5f:87:bb:07:50:42:9f:7a:1d:78:40:a9:0c:98:f3:64:fd:a0: 0c:b9:e9:fb:fd:8c:6e:c3:4c:22:22:b8:3a:86:d8:a9:e6:46: 1f:ba:44:4b:0b:c2:8c:b1:69:dd:e3:ee:89:e1:c8:b4:31:cb: 37:29:69:50:b6:d5:69:90:b0:40:73:8d:75:b3:10:f3:c9:bc: 8c:ca:3c:05:db:f2:68:bf:35:fc:a4:7d:de:70:6a:00:7e:69: 32:ce:57:cd:72:cf:1d:00:b6:ca:4a:fe:48:31:01:6c:c9:d8: 45:4e:e6:2a:05:06:34:4d:23:f0:08:52:05:a2:7b:cd:5c:cb: 95:bf:47:57:f0:79:9a:c6:24:cc:58:d3:2b:0b:d1:f8:92:5c: 59:a5:65:27:e4:e8:22:de:6e:4f:2e:31:67:17:f8:f7:b9:bf: 5d:db:06:3d:7f:71:fe:7b:35:42:61:0f:6f:4b:ee:2a:2a:b1: f0:16:d4:b4:e2:cc:ff:36:dc:d6:81:95:67:8a:9e:26:25:2a: 56:7c:ed:a2:15:b8:82:84:76:97:f3:2e:58:d6:3e:20:1d:60: a4:ea:06:2e:c6:bd:7e:4c:2d:1f:9e:22:54:54:6c:70:53:cf: 8a:24:95:d7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWQItRM3NYyHh95bgNu0sv+akPtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDIwMTU1MTFaFw0yNjA1MDEwMjAwMTFaMDMxMTAvBgNV BAMTKDcxRDYwMzJEQkVCMzU3NTJEMDIyM0RDMzkxQURFREFEMEFFM0JDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzxL5S9riy+YNFOPsSiUdDXqHI P4BuprQa7r+NrbSWpsa7vJjtS8OWTA7X5IW/KJUxlrrgdrOZqGEbp1iYZY3TWlXe +w7FUxIjnBxFBkTtRx0U/BefGWXmxxx4iiqhN0elvQ57l9xCxpOIGvDfPsE1yinX qMiimh66sPNu/rBmSO8tMV34y9Rx5oOlYkDeSjsLRt/5yH2WsjhPfL+y4u3Iqb9q uCTGxBtHngXVegkKlusUVUFAK1FA5l5TnLbSi5emxC8/8C8Y1wnGG4es1VCE9/G2 LVRSo6+obKM3MW4ZTgW9OSeTRyYnmHYXxmgBeBuwCUl3jWB3Kt3+RJXOYN7jAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRx1gMtvrNXUtAi PcORre2tCuO8XTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWQ0 azhKTVRTa1NOWHV5R1RzWTNIc21iZXhVdVZ0U0hqRVM1N29GaGNFV00vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fk NGs4Sk1UU2tTTlh1eUdUc1kzSHNtYmV4VXVWdFNIakVTNTdvRmhjRVdNLzAvNzFE NjAzMkRCRUIzNTc1MkQwMjIzREMzOTFBREVEQUQwQUUzQkM1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBoBTyMA0EAgACMAcDBQAoBE4kMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQX0jANBgkqhkiG9w0BAQsFAAOCAQEAhpfOfsHq/oYSxI4B h+GCd+/6X4e7B1BCn3odeECpDJjzZP2gDLnp+/2MbsNMIiK4OobYqeZGH7pESwvC jLFp3ePuieHItDHLNylpULbVaZCwQHONdbMQ88m8jMo8BdvyaL81/KR93nBqAH5p Ms5XzXLPHQC2ykr+SDEBbMnYRU7mKgUGNE0j8AhSBaJ7zVzLlb9HV/B5msYkzFjT KwvR+JJcWaVlJ+ToIt5uTy4xZxf497m/XdsGPX9x/ns1QmEPb0vuKiqx8BbUtOLM /zbc1oGVZ4qeJiUqVnztohW4goR2l/MuWNY+IB1gpOoGLsa9fkwtH54iVFRscFPP iiSV1w== -----END CERTIFICATE-----Generated at Thu May 8 15:05:42 2025 by rpki-client