$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.cer File: CF0C594ADBBA27C98FAB5992C23C098DD03AC631.cer (raw, json) Hash identifier: F/cv0R+2W8PNbj6v6voTusfeHtKBvAba4kfL82PAuJc= Subject key identifier: CF:0C:59:4A:DB:BA:27:C9:8F:AB:59:92:C2:3C:09:8D:D0:3A:C6:31 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09DF11BD2ABF723431AABEDD0E67392FA04358A1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.mft caRepository: rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 06 May 2025 18:08:22 +0000 Certificate not after: Tue 05 May 2026 18:13:22 +0000 Subordinate resources: AS: 270443 IP: 200.26.248.0/22 IP: 2804:6c10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 11:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:df:11:bd:2a:bf:72:34:31:aa:be:dd:0e:67:39:2f:a0:43:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 6 18:08:22 2025 GMT Not After : May 5 18:13:22 2026 GMT Subject: CN=CF0C594ADBBA27C98FAB5992C23C098DD03AC631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:7e:1b:53:2e:ec:85:4c:d1:0a:a8:f8:22: 4b:97:34:83:3b:d4:33:2f:8f:f6:47:ca:64:ef:83: 79:3a:bd:4d:fc:40:63:ee:24:48:97:29:c3:28:fd: 69:bd:f6:db:8d:bb:d5:da:be:0d:4a:e1:43:93:df: 33:bf:ed:7a:8f:14:33:17:79:db:38:bc:d3:33:8b: 7a:d8:b5:4c:49:8e:d1:5e:47:46:76:69:af:c0:d2: dc:32:f2:9a:6e:9e:0b:87:cc:29:f2:16:cf:01:8a: 14:b3:27:d8:3f:0b:51:66:da:f7:98:bb:4b:dc:e2: 50:9f:c2:1b:db:3a:1b:af:b9:bb:38:23:7c:ad:d8: 3b:a5:ef:10:cb:b7:be:12:27:40:3b:97:dd:0c:ed: 7a:b5:bb:9b:64:bf:5d:ae:cc:c4:f0:6d:f3:b1:a3: f0:3e:97:29:e2:bb:b4:5e:d4:cb:36:02:70:e5:48: b0:81:6c:27:da:4a:73:03:17:ca:64:eb:6c:b5:a8: 89:dc:2b:ce:b0:41:28:a3:93:38:ee:8a:60:ee:69: a7:36:03:84:87:22:96:75:76:e9:c1:8c:e5:1b:8f: d1:52:f5:8b:5c:fc:b8:2e:33:dd:71:fe:b8:d0:3d: 99:29:7c:96:bb:56:b1:61:72:10:45:ea:ef:57:65: f6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:0C:59:4A:DB:BA:27:C9:8F:AB:59:92:C2:3C:09:8D:D0:3A:C6:31 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/CF0C594ADBBA27C98FAB5992C23C098DD03AC631.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.26.248.0/22 IPv6: 2804:6c10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270443 Signature Algorithm: sha256WithRSAEncryption 0f:12:72:6c:51:1c:a6:aa:ba:7d:77:1d:ad:f7:7f:2f:56:0d: 0b:43:04:6a:11:ea:da:7b:8d:0e:ad:d2:df:5d:8c:2d:80:4f: 3f:b9:69:b2:fe:f9:bb:c7:07:1d:11:ff:7e:97:46:1c:0e:ca: 72:07:67:a0:99:ca:06:d6:05:ec:5a:60:f0:65:6a:44:57:2e: e9:da:30:6c:fe:99:25:7c:b7:eb:38:f3:7c:86:66:0a:3f:72: f6:a5:0a:4d:91:16:2b:35:3e:4e:09:b4:94:63:0d:31:bc:95: 71:20:84:68:b6:62:24:c1:0b:21:33:c7:2e:8f:98:44:cf:e0: 7e:fb:fa:3e:74:c7:e8:81:38:a0:f2:74:d0:19:fb:68:49:d0: ef:da:53:09:37:1c:05:d7:07:e0:6c:27:2b:5b:cd:fc:5a:53: 9b:8d:e9:84:e4:1f:d1:bd:de:2f:fc:58:d3:bf:0c:67:0b:3c: cc:11:9a:61:29:9c:65:ff:30:23:91:ee:51:a6:3c:a9:8a:1d: dd:15:96:f5:0e:a5:6a:59:00:f0:25:16:86:49:46:82:84:ef: 38:c0:f0:de:e1:f0:ec:a0:4e:6e:79:2b:38:96:49:b7:1a:89: 6f:f4:f5:4a:f0:9b:b7:6b:99:50:0a:82:4c:eb:be:e2:a1:d4: b0:e6:06:c4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCd8RvSq/cjQxqr7dDmc5L6BDWKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDYxODA4MjJaFw0yNjA1MDUxODEzMjJaMDMxMTAvBgNV BAMTKENGMEM1OTRBREJCQTI3Qzk4RkFCNTk5MkMyM0MwOThERDAzQUM2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHX4bUy7shUzRCqj4IkuXNIM7 1DMvj/ZHymTvg3k6vU38QGPuJEiXKcMo/Wm99tuNu9Xavg1K4UOT3zO/7XqPFDMX eds4vNMzi3rYtUxJjtFeR0Z2aa/A0twy8ppunguHzCnyFs8BihSzJ9g/C1Fm2veY u0vc4lCfwhvbOhuvubs4I3yt2Dul7xDLt74SJ0A7l90M7Xq1u5tkv12uzMTwbfOx o/A+lyniu7Re1Ms2AnDlSLCBbCfaSnMDF8pk62y1qIncK86wQSijkzjuimDuaac2 A4SHIpZ1dunBjOUbj9FS9Ytc/LguM91x/rjQPZkpfJa7VrFhchBF6u9XZfbrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPDFlK27onyY+r WZLCPAmN0DrGMTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmFD Sjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1aTYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jh Q0o3am9GNzRnVVRtVndQTHJLNGpwR0d0dmFOeUtnUFROVlp5N0dFdWk2LzAvQ0Yw QzU5NEFEQkJBMjdDOThGQUI1OTkyQzIzQzA5OEREMDNBQzYzMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyBr4MA0EAgACMAcDBQAoBGwQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgazANBgkqhkiG9w0BAQsFAAOCAQEADxJybFEcpqq6fXcd rfd/L1YNC0MEahHq2nuNDq3S312MLYBPP7lpsv75u8cHHRH/fpdGHA7KcgdnoJnK BtYF7Fpg8GVqRFcu6dowbP6ZJXy36zjzfIZmCj9y9qUKTZEWKzU+Tgm0lGMNMbyV cSCEaLZiJMELITPHLo+YRM/gfvv6PnTH6IE4oPJ00Bn7aEnQ79pTCTccBdcH4Gwn K1vN/FpTm43phOQf0b3eL/xY078MZws8zBGaYSmcZf8wI5HuUaY8qYod3RWW9Q6l alkA8CUWhklGgoTvOMDw3uHw7KBObnkrOJZJtxqJb/T1SvCbt2uZUAqCTOu+4qHU sOYGxA== -----END CERTIFICATE-----Generated at Thu May 8 10:43:06 2025 by rpki-client