$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer File: 99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer (raw, json) Hash identifier: t2FrOBP+0KF1S0d7GlZ04kE8UwnucLl/UViOR7ULPcQ= Subject key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 597F47011159E00206170886CA058D6625EC071F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft caRepository: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 05 May 2025 12:23:05 +0000 Certificate not after: Mon 04 May 2026 12:28:05 +0000 Subordinate resources: AS: 268746 IP: 45.171.228.0/22 IP: 2804:5a10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 16:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7f:47:01:11:59:e0:02:06:17:08:86:ca:05:8d:66:25:ec:07:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 5 12:23:05 2025 GMT Not After : May 4 12:28:05 2026 GMT Subject: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:ee:05:06:f0:37:56:31:15:cc:f8:07:4b: 73:40:64:7e:57:82:42:10:ac:67:72:d4:2e:1d:fb: e9:f6:e7:44:ec:c6:fa:e1:ef:ef:2d:29:14:0d:20: 08:10:df:b0:c0:0a:20:6e:b2:fc:83:0d:51:1a:71: a6:5b:07:7c:74:7d:da:7d:47:d5:e2:3c:52:61:49: 82:de:9f:54:b5:21:4b:c8:a1:00:b0:f9:d4:2c:c4: 7b:7f:f9:51:e9:f7:24:ce:a4:e3:ec:13:fa:81:24: 2f:bf:29:4b:33:bd:03:59:fd:c8:e0:8c:af:c7:9a: ae:5a:95:70:1a:eb:ec:0a:b7:c9:4b:ac:36:d5:4a: 1b:26:93:3b:f5:9b:7d:8d:1f:ca:d3:bc:99:9b:1f: f4:f9:72:fc:a7:00:37:6e:f1:07:a7:b0:45:ef:6f: ee:c6:3a:52:f6:3a:e7:c9:74:94:66:31:81:40:c9: c2:76:1f:81:99:ff:08:c5:45:d4:34:d8:6a:11:dc: 22:26:be:34:85:a3:74:0b:32:8c:dd:0f:13:81:aa: ad:45:11:42:3b:71:bf:47:38:a2:60:75:00:a8:27: 47:cb:4d:1a:56:c7:b0:42:d3:d5:b2:ba:a3:fb:2a: 08:5b:59:2e:42:51:b6:18:a3:21:84:9d:ca:1b:96: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.228.0/22 IPv6: 2804:5a10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268746 Signature Algorithm: sha256WithRSAEncryption a7:16:2f:37:3e:3a:8f:e7:6e:2d:71:e5:25:36:fc:c9:1c:53: 85:6d:77:2f:5a:2a:f0:73:a9:51:04:0a:b4:b1:1e:47:00:3b: 3b:83:65:59:08:47:94:92:22:9e:b3:79:8b:e6:bd:de:07:e7: 07:8d:1e:8d:5d:90:0d:34:d9:b2:d1:0c:9a:63:ce:d4:38:97: ae:e6:d8:3f:9d:d3:61:3d:90:be:5e:fd:c8:5c:26:c2:73:57: 1e:9c:6f:e0:a9:e2:63:39:70:73:00:40:32:98:48:2a:a8:54: 9a:14:c7:52:d8:84:41:91:7a:37:7a:6d:4d:ee:cf:42:51:3f: 9d:47:06:99:6f:a1:03:e5:17:fd:ca:d2:78:02:38:85:83:a8: 22:3e:9e:20:28:21:7f:5d:27:1a:d4:ed:e5:b0:2d:6a:87:51: e3:3f:0a:9e:ec:13:09:dd:15:86:8a:0a:a7:fe:f6:50:ff:49: 1d:31:64:25:64:b6:ad:76:4f:ba:3b:f5:ca:9a:93:27:04:62: 4d:e6:70:01:dc:4f:fe:cb:e8:c7:73:f5:3e:68:9f:64:a9:24: 96:a0:7f:c5:c5:9d:b2:f0:c8:e3:00:d6:94:23:0a:9c:04:01: 82:75:8d:bc:a4:ea:da:bb:2a:e6:ba:e8:c2:0e:e9:30:f4:bb: d8:56:b2:90 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUWX9HARFZ4AIGFwiGygWNZiXsBx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDUxMjIzMDVaFw0yNjA1MDQxMjI4MDVaMDMxMTAvBgNV BAMTKDk5QzdENTEyQTNGNkQ4MTA2OEVGMURFN0ZBOTkyQzNFQzQxMUMzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbCO4FBvA3VjEVzPgHS3NAZH5X gkIQrGdy1C4d++n250Tsxvrh7+8tKRQNIAgQ37DACiBusvyDDVEacaZbB3x0fdp9 R9XiPFJhSYLen1S1IUvIoQCw+dQsxHt/+VHp9yTOpOPsE/qBJC+/KUszvQNZ/cjg jK/Hmq5alXAa6+wKt8lLrDbVShsmkzv1m32NH8rTvJmbH/T5cvynADdu8QensEXv b+7GOlL2OufJdJRmMYFAycJ2H4GZ/wjFRdQ02GoR3CImvjSFo3QLMozdDxOBqq1F EUI7cb9HOKJgdQCoJ0fLTRpWx7BC09WyuqP7KghbWS5CUbYYoyGEncoblpo7AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZx9USo/bYEGjv Hef6mSw+xBHD2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc1Fv VlhEM3Z3UGhIRVRmRG0zUjZaM0twRUZlVk44RldwbndhcGlBS0N5cy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc1Fv VlhEM3Z3UGhIRVRmRG0zUjZaM0twRUZlVk44RldwbndhcGlBS0N5cy8wLzk5QzdE NTEyQTNGNkQ4MTA2OEVGMURFN0ZBOTkyQzNFQzQxMUMzREIubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi2r5DANBAIAAjAHAwUAKARaEDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEGcowDQYJKoZIhvcNAQELBQADggEBAKcWLzc+Oo/nbi1x5SU2 /MkcU4Vtdy9aKvBzqVEECrSxHkcAOzuDZVkIR5SSIp6zeYvmvd4H5weNHo1dkA00 2bLRDJpjztQ4l67m2D+d02E9kL5e/chcJsJzVx6cb+Cp4mM5cHMAQDKYSCqoVJoU x1LYhEGRejd6bU3uz0JRP51HBplvoQPlF/3K0ngCOIWDqCI+niAoIX9dJxrU7eWw LWqHUeM/Cp7sEwndFYaKCqf+9lD/SR0xZCVktq12T7o79cqakycEYk3mcAHcT/7L 6Mdz9T5on2SpJJagf8XFnbLwyOMA1pQjCpwEAYJ1jbyk6tq7Kua66MIO6TD0u9hW spA= -----END CERTIFICATE-----Generated at Fri May 9 15:39:11 2025 by rpki-client