$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8964DA678810C9D7252377EEFA3803CD0AA8586B.cer File: 8964DA678810C9D7252377EEFA3803CD0AA8586B.cer (raw, json) Hash identifier: o6NKvYJOUEREKRpgzKJolAplrmGCEdbM6OtAyJ/z+mE= Subject key identifier: 89:64:DA:67:88:10:C9:D7:25:23:77:EE:FA:38:03:CD:0A:A8:58:6B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09200C3FF08ED7891096150137961C6F650CBEF3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/8964DA678810C9D7252377EEFA3803CD0AA8586B.mft caRepository: rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 27 Apr 2025 03:12:51 +0000 Certificate not after: Sun 26 Apr 2026 03:17:51 +0000 Subordinate resources: AS: 271577 IP: 181.232.228.0/23 IP: 2804:7db4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 06:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:20:0c:3f:f0:8e:d7:89:10:96:15:01:37:96:1c:6f:65:0c:be:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 27 03:12:51 2025 GMT Not After : Apr 26 03:17:51 2026 GMT Subject: CN=8964DA678810C9D7252377EEFA3803CD0AA8586B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:03:bc:ab:5d:46:09:bc:b2:24:e4:f9:53: e4:1e:bb:57:ff:be:bb:28:89:b4:7b:2f:57:62:67: 8f:ce:17:5e:8a:c5:92:4e:f1:2a:12:c4:d5:25:ab: ec:31:f2:53:58:66:1e:a5:5c:f8:e8:31:6f:92:9e: 62:af:b0:b0:c0:28:13:e3:3f:86:62:b1:89:39:3d: 54:9d:fe:7b:e2:0d:ac:4b:35:3c:3f:6e:0a:f5:64: b6:04:61:0d:d8:ad:a0:f6:b6:2c:b9:77:ae:1b:ba: f4:da:ac:f9:63:3c:e0:01:ba:46:47:d1:66:ef:d4: 1f:84:44:51:3b:2f:92:8c:ed:15:dd:30:bb:34:e8: 81:db:2e:57:32:ed:3c:df:0c:89:35:40:c0:ca:3d: 43:cc:9d:7d:75:0f:ca:10:d0:22:08:f3:ff:a3:53: 1d:75:42:cf:00:9b:90:a3:8b:71:cd:ac:00:29:83: 7c:64:a1:12:36:0e:71:2f:0d:32:10:ad:ea:8a:7c: dc:fd:16:a6:e0:b6:bb:f2:50:7d:65:08:bf:9a:31: 77:cb:84:2b:ec:e1:01:98:cb:b4:b4:6e:db:36:68: 2a:ef:3c:1a:44:de:ab:6e:cd:0d:46:7b:dd:a4:15: c1:d2:f2:64:da:a3:92:69:0e:88:dc:ac:0b:78:69: 11:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:64:DA:67:88:10:C9:D7:25:23:77:EE:FA:38:03:CD:0A:A8:58:6B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/8964DA678810C9D7252377EEFA3803CD0AA8586B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.228.0/23 IPv6: 2804:7db4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271577 Signature Algorithm: sha256WithRSAEncryption a5:f8:b6:be:73:6f:54:f1:c0:28:e9:a2:16:f4:ea:34:d1:e5: 49:46:99:29:22:ad:a4:3d:f5:f5:7d:a1:6e:9a:46:a8:91:3a: 3c:fd:09:01:af:46:4a:58:43:ec:df:1a:62:a2:ff:e6:1c:e1: af:f8:6c:9b:f1:14:a4:1b:3c:1f:de:53:34:a4:de:55:63:ef: 28:b0:c5:36:a3:16:bb:5a:35:04:3c:93:90:70:24:fb:88:5d: a0:62:79:e4:fb:7e:86:55:e3:3e:18:f4:41:27:b5:43:f8:bc: 27:e9:3f:c2:e0:b5:c3:6a:8f:f1:ea:32:5a:b9:49:4e:c1:d0: 2e:5e:6b:ea:0e:98:12:95:c7:b6:99:65:5c:d3:e5:89:5f:88: 63:fa:dd:4c:a7:de:03:5f:76:a8:55:e6:af:f9:4e:be:24:8d: 0c:1f:8c:96:fe:f8:02:47:b8:69:12:f8:e1:4b:54:f2:db:0f: 3f:05:49:bc:9b:2b:48:ee:f6:1d:63:26:ea:d1:98:06:e8:ca: 89:08:30:46:bb:91:16:c3:5a:e9:d1:4f:30:1e:88:33:de:cc: d5:9c:53:56:3b:e7:9a:2e:8b:48:e1:2e:40:73:2a:aa:f4:55: 60:66:07:e1:ea:f3:e1:da:a5:27:f1:2c:3c:48:10:e4:31:7f: b3:ab:f2:60 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCSAMP/CO14kQlhUBN5Ycb2UMvvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjcwMzEyNTFaFw0yNjA0MjYwMzE3NTFaMDMxMTAvBgNV BAMTKDg5NjREQTY3ODgxMEM5RDcyNTIzNzdFRUZBMzgwM0NEMEFBODU4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClEwO8q11GCbyyJOT5U+Qeu1f/ vrsoibR7L1diZ4/OF16KxZJO8SoSxNUlq+wx8lNYZh6lXPjoMW+SnmKvsLDAKBPj P4ZisYk5PVSd/nviDaxLNTw/bgr1ZLYEYQ3YraD2tiy5d64buvTarPljPOABukZH 0Wbv1B+ERFE7L5KM7RXdMLs06IHbLlcy7TzfDIk1QMDKPUPMnX11D8oQ0CII8/+j Ux11Qs8Am5Cji3HNrAApg3xkoRI2DnEvDTIQreqKfNz9FqbgtrvyUH1lCL+aMXfL hCvs4QGYy7S0bts2aCrvPBpE3qtuzQ1Ge92kFcHS8mTao5JpDojcrAt4aRG1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJZNpniBDJ1yUj d+76OAPNCqhYazAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXpm OXR5MUN1eTZ2U3h2UjdRWlh6QmRMeTRrMjV3SjZkSFROeDE4TDFZbjEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V6 Zjl0eTFDdXk2dlN4dlI3UVpYekJkTHk0azI1d0o2ZEhUTngxOEwxWW4xLzAvODk2 NERBNjc4ODEwQzlENzI1MjM3N0VFRkEzODAzQ0QwQUE4NTg2Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBtejkMA0EAgACMAcDBQAoBH20MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQk2TANBgkqhkiG9w0BAQsFAAOCAQEApfi2vnNvVPHAKOmi FvTqNNHlSUaZKSKtpD319X2hbppGqJE6PP0JAa9GSlhD7N8aYqL/5hzhr/hsm/EU pBs8H95TNKTeVWPvKLDFNqMWu1o1BDyTkHAk+4hdoGJ55Pt+hlXjPhj0QSe1Q/i8 J+k/wuC1w2qP8eoyWrlJTsHQLl5r6g6YEpXHtpllXNPliV+IY/rdTKfeA192qFXm r/lOviSNDB+Mlv74Ake4aRL44UtU8tsPPwVJvJsrSO72HWMm6tGYBujKiQgwRruR FsNa6dFPMB6IM97M1ZxTVjvnmi6LSOEuQHMqqvRVYGYH4erz4dqlJ/EsPEgQ5DF/ s6vyYA== -----END CERTIFICATE-----Generated at Sat May 10 13:52:36 2025 by rpki-client