$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer File: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer (raw, json) Hash identifier: gzf9jZ7BFls0JtvF+6TmEWhJYbVzFNEFlkCDTC6pcQ4= Subject key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2AFC758B779966491DF48F66340B8CA80A5DA853 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft caRepository: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Apr 2025 19:53:46 +0000 Certificate not after: Mon 27 Apr 2026 19:58:46 +0000 Subordinate resources: AS: 266539 IP: 45.65.220.0/22 IP: 177.223.32.0/20 IP: 2804:3d90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 15:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fc:75:8b:77:99:66:49:1d:f4:8f:66:34:0b:8c:a8:0a:5d:a8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 28 19:53:46 2025 GMT Not After : Apr 27 19:58:46 2026 GMT Subject: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:03:56:c2:b2:ab:f6:f2:ca:b0:c4:54:ea: 42:44:ad:ca:dd:a8:b7:31:f3:02:81:bb:8c:c9:33: 2c:be:eb:ce:63:c6:46:1a:6b:8f:5c:f9:7d:51:01: b8:69:1c:3f:a9:62:f9:f5:98:5e:de:08:85:89:88: d8:f6:1e:66:00:d5:31:22:a4:7e:94:c1:25:f8:57: 38:b1:0c:c3:9e:f2:8d:14:f5:6f:06:d0:29:43:59: d6:9c:0a:0e:fc:fe:ae:ab:4e:d6:29:23:e1:04:95: ba:08:a1:a5:9d:ae:85:e5:5b:f8:ac:07:ad:cc:92: fb:1c:39:df:f8:a5:67:2d:e5:14:b0:69:64:f5:bd: d7:40:57:b7:b6:53:b7:a9:00:9d:ee:91:37:ae:40: bb:7b:c5:24:c4:0f:66:ef:06:47:ae:25:16:e9:f4: 9e:c8:0c:d6:a1:2c:fc:9e:6a:e0:c4:51:6f:40:e6: 79:96:e3:86:71:ee:04:20:7e:a7:e7:05:c5:03:c0: a4:3f:3e:2b:39:ab:15:c1:53:fb:fa:5f:90:e5:f6: af:cb:43:0b:71:67:1c:51:2c:e6:f2:c8:54:df:e9: 73:6e:88:31:21:7b:57:86:31:4f:2c:0f:23:e0:e9: 22:4d:47:be:44:82:c4:ee:c5:06:2b:b6:7d:ad:a9: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.220.0/22 177.223.32.0/20 IPv6: 2804:3d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266539 Signature Algorithm: sha256WithRSAEncryption 65:84:5b:3a:9b:20:47:09:36:5a:b7:a7:7e:58:c8:d9:aa:38: fe:80:6d:0d:1e:00:d9:01:e9:65:d2:ac:5f:91:b2:44:21:b7: be:5f:06:a1:71:0b:f9:8c:85:c9:60:e6:3c:c6:20:12:5d:66: 83:66:62:57:ca:21:c2:b0:91:97:bf:aa:af:14:ce:b2:59:f3: 76:72:66:40:b2:14:8f:b0:c7:04:d1:ea:bd:0d:98:57:34:f4: 20:c6:67:68:cb:96:63:ee:a6:b9:69:22:50:35:30:a5:bb:cd: ec:d3:f4:58:28:22:72:26:a4:55:01:9a:fb:be:58:76:99:4c: 19:5f:35:ae:b4:94:5d:4e:23:95:a4:bc:08:79:68:14:33:46: 5a:08:ba:bd:f4:43:fe:47:83:33:3f:f9:05:39:32:92:a7:a5: 5e:5a:a0:b0:73:ba:6b:7c:f9:ae:ad:4e:4e:88:76:d4:17:28: af:1c:a0:31:44:d2:05:f4:0e:a3:73:1e:19:07:fd:69:2b:2a: 05:9a:d9:75:ca:16:f1:7b:7c:53:65:55:ec:d4:62:d2:d2:0a: 81:8e:f0:11:54:44:72:a3:c9:fc:d5:1a:03:d1:66:cc:bd:6f: 84:1c:87:84:d2:a5:b7:48:fc:84:92:97:c2:59:77:c5:83:e2: 0e:13:89:12 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKvx1i3eZZkkd9I9mNAuMqApdqFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjgxOTUzNDZaFw0yNjA0MjcxOTU4NDZaMDMxMTAvBgNV BAMTKEFDRUNBQUQyOUFBRjc1MTI2RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwwNWwrKr9vLKsMRU6kJErcrd qLcx8wKBu4zJMyy+685jxkYaa49c+X1RAbhpHD+pYvn1mF7eCIWJiNj2HmYA1TEi pH6UwSX4VzixDMOe8o0U9W8G0ClDWdacCg78/q6rTtYpI+EElboIoaWdroXlW/is B63MkvscOd/4pWct5RSwaWT1vddAV7e2U7epAJ3ukTeuQLt7xSTED2bvBkeuJRbp 9J7IDNahLPyeauDEUW9A5nmW44Zx7gQgfqfnBcUDwKQ/Pis5qxXBU/v6X5Dl9q/L QwtxZxxRLObyyFTf6XNuiDEhe1eGMU8sDyPg6SJNR75EgsTuxQYrtn2tqZo9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSs7KrSmq91Em2N L1lPxDqw57OhDTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG1m SmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYyblovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht ZkppVTh1UnZqbzVpSllRcFJ4SzFlWjZrNHh4SjVXMnNRTUY4MUhmMm5aLzIvQUNF Q0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBFN0IzQTEwRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLUHcAwQEsd8gMA0EAgACMAcDBQAoBD2QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQRKzANBgkqhkiG9w0BAQsFAAOCAQEAZYRbOpsg Rwk2WrenfljI2ao4/oBtDR4A2QHpZdKsX5GyRCG3vl8GoXEL+YyFyWDmPMYgEl1m g2ZiV8ohwrCRl7+qrxTOslnzdnJmQLIUj7DHBNHqvQ2YVzT0IMZnaMuWY+6muWki UDUwpbvN7NP0WCgiciakVQGa+75YdplMGV81rrSUXU4jlaS8CHloFDNGWgi6vfRD /keDMz/5BTkykqelXlqgsHO6a3z5rq1OToh21BcorxygMUTSBfQOo3MeGQf9aSsq BZrZdcoW8Xt8U2VV7NRi0tIKgY7wEVREcqPJ/NUaA9FmzL1vhByHhNKlt0j8hJKX wll3xYPiDhOJEg== -----END CERTIFICATE-----Generated at Thu May 8 13:07:51 2025 by rpki-client