$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.cer File: AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.cer (raw, json) Hash identifier: CtNs3+S6g103rEGZSjT04Wz322KZ8h8CvHDG3mtDrY0= Subject key identifier: AE:63:3F:A2:12:2E:BF:A2:E7:10:3F:D8:06:B6:6E:A4:E4:C9:83:1B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2F745FC9ACF510FE9C1C098F2BD4ADA3E6DB389C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.mft caRepository: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Apr 2025 18:10:42 +0000 Certificate not after: Mon 27 Apr 2026 18:15:42 +0000 Subordinate resources: AS: 263256 IP: 170.247.200.0/22 IP: 198.58.8.0/22 IP: 2804:17e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 21:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:74:5f:c9:ac:f5:10:fe:9c:1c:09:8f:2b:d4:ad:a3:e6:db:38:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 28 18:10:42 2025 GMT Not After : Apr 27 18:15:42 2026 GMT Subject: CN=AE633FA2122EBFA2E7103FD806B66EA4E4C9831B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:b7:aa:81:fb:8a:3d:56:78:08:19:36:83: 7f:9e:31:6c:01:36:3a:31:bc:3f:59:5f:84:68:40: 32:d2:da:f0:0c:d2:2d:c5:2e:da:03:2d:35:bb:9d: 3f:51:e4:5c:21:88:09:65:9d:81:91:83:6e:21:86: 19:83:35:66:23:46:07:43:25:32:4f:b8:ec:54:9a: 25:b0:8a:67:87:b8:73:72:14:be:18:ea:45:b8:34: e4:7b:03:e6:68:e2:80:5f:0f:4f:0e:bb:21:1a:b3: 7b:2b:e3:31:66:42:5e:08:88:4f:5f:f4:62:01:4a: 6d:49:fe:01:69:28:29:3e:1e:cc:9c:80:98:43:45: ac:5b:c6:af:49:d9:9a:ab:fd:d1:6d:48:78:35:dd: f1:14:a1:62:f8:41:86:8c:70:59:4c:17:6f:12:66: d5:75:c0:18:18:ba:61:3c:94:c2:c8:0e:79:ab:b0: 0e:ee:7c:40:0a:56:fa:d2:c3:d8:b5:cf:12:cc:22: 0c:fc:a1:a9:e8:ad:83:5c:6e:90:62:7e:9a:f8:fe: 56:66:55:69:08:c7:32:ec:6d:b9:f6:2a:05:5a:23: fc:cc:7d:4e:92:50:ba:75:20:03:8f:07:fa:8c:ed: 8d:26:82:4f:01:43:c5:d3:4c:8a:2c:8a:f0:47:0d: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:63:3F:A2:12:2E:BF:A2:E7:10:3F:D8:06:B6:6E:A4:E4:C9:83:1B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/AE633FA2122EBFA2E7103FD806B66EA4E4C9831B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.200.0/22 198.58.8.0/22 IPv6: 2804:17e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263256 Signature Algorithm: sha256WithRSAEncryption 40:c0:1e:28:46:19:7a:b0:a7:61:6c:fa:b5:78:a7:5e:1c:b1: 50:b5:ad:3b:cc:84:a7:97:21:f8:37:fa:6f:3c:0d:45:ff:ab: 1d:14:8a:e5:8d:9a:f6:04:09:92:b8:c5:35:ed:a5:f4:94:ac: b0:c4:95:98:87:49:ec:45:57:af:36:bc:e9:b6:79:d3:3a:c8: 84:37:63:f4:2c:51:28:0d:7b:e2:60:d2:42:56:7c:97:b0:f8: 27:ef:d7:c9:1b:3e:28:93:61:29:6c:96:08:b1:a8:a9:39:c3: 04:ea:31:d3:72:64:9c:52:ee:c8:ec:93:cb:f1:a5:25:2f:35: 73:a0:96:4a:d2:de:ce:61:8b:9b:2a:4d:ba:d9:2b:d2:8b:15: 60:91:47:c5:d8:3a:1c:2f:47:e9:ec:a1:c1:5f:d4:45:ef:e5: d4:03:71:53:15:bc:48:46:2a:16:11:61:ea:02:47:4f:9b:ec: 70:cd:57:b7:4e:e8:72:de:d9:d2:db:8c:d8:e2:06:62:85:5a: f2:76:be:db:2e:bb:99:3c:51:65:1d:ca:79:15:b5:09:09:d5: fc:46:59:b1:f4:15:68:5f:9d:82:3a:b3:1a:b7:02:7d:f9:c7: 2f:2c:83:f3:24:a3:9f:76:06:b9:93:c5:e1:c8:cf:9e:41:38: e2:7c:c7:f7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUL3Rfyaz1EP6cHAmPK9Sto+bbOJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjgxODEwNDJaFw0yNjA0MjcxODE1NDJaMDMxMTAvBgNV BAMTKEFFNjMzRkEyMTIyRUJGQTJFNzEwM0ZEODA2QjY2RUE0RTRDOTgzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2z7eqgfuKPVZ4CBk2g3+eMWwB NjoxvD9ZX4RoQDLS2vAM0i3FLtoDLTW7nT9R5FwhiAllnYGRg24hhhmDNWYjRgdD JTJPuOxUmiWwimeHuHNyFL4Y6kW4NOR7A+Zo4oBfD08OuyEas3sr4zFmQl4IiE9f 9GIBSm1J/gFpKCk+HsycgJhDRaxbxq9J2Zqr/dFtSHg13fEUoWL4QYaMcFlMF28S ZtV1wBgYumE8lMLIDnmrsA7ufEAKVvrSw9i1zxLMIgz8oanorYNcbpBifpr4/lZm VWkIxzLsbbn2KgVaI/zMfU6SULp1IAOPB/qM7Y0mgk8BQ8XTTIosivBHDbNBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuYz+iEi6/oucQ P9gGtm6k5MmDGzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXB3 UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw d1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAvQUU2 MzNGQTIxMjJFQkZBMkU3MTAzRkQ4MDZCNjZFQTRFNEM5ODMxQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvfIAwQCxjoIMA0EAgACMAcDBQAoBBfgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEWDANBgkqhkiG9w0BAQsFAAOCAQEAQMAeKEYZ erCnYWz6tXinXhyxULWtO8yEp5ch+Df6bzwNRf+rHRSK5Y2a9gQJkrjFNe2l9JSs sMSVmIdJ7EVXrza86bZ50zrIhDdj9CxRKA174mDSQlZ8l7D4J+/XyRs+KJNhKWyW CLGoqTnDBOox03JknFLuyOyTy/GlJS81c6CWStLezmGLmypNutkr0osVYJFHxdg6 HC9H6eyhwV/URe/l1ANxUxW8SEYqFhFh6gJHT5vscM1Xt07oct7Z0tuM2OIGYoVa 8na+2y67mTxRZR3KeRW1CQnV/EZZsfQVaF+dgjqzGrcCffnHLyyD8ySjn3YGuZPF 4cjPnkE44nzH9w== -----END CERTIFICATE-----Generated at Thu May 8 21:04:46 2025 by rpki-client