$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.cer File: E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.cer (raw, json) Hash identifier: y98VWMqNaU66yF0u1IoCggarRMCUtvqJquz9NW3TgBo= Subject key identifier: E8:54:7D:3C:BE:9C:28:47:8E:0C:3E:B8:DB:7E:37:E8:6D:8B:5D:EC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 25876046C796D0A6796D4D282BAB212100742358 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.mft caRepository: rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 05 May 2025 20:25:09 +0000 Certificate not after: Mon 04 May 2026 20:30:09 +0000 Subordinate resources: AS: 267961 IP: 45.165.160.0/22 IP: 2804:55dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 21:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:87:60:46:c7:96:d0:a6:79:6d:4d:28:2b:ab:21:21:00:74:23:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 5 20:25:09 2025 GMT Not After : May 4 20:30:09 2026 GMT Subject: CN=E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:49:9e:65:f4:64:67:4b:46:69:e5:14:f5: a7:fd:59:58:92:70:5c:f5:22:e7:10:bc:a0:b1:ef: fc:ab:f4:a4:77:13:59:14:a2:71:60:9d:55:4e:d4: 62:17:00:30:0f:72:47:0e:f6:0e:0e:e9:5a:5a:c3: 7b:c4:ec:f8:9b:f2:3e:25:f6:95:83:0c:f7:d7:1e: 44:4a:fe:96:69:10:a1:9f:8d:d1:7f:39:6e:b8:98: 8f:47:f7:f8:cc:8a:e3:93:87:2a:18:21:ea:27:31: d7:b1:93:1b:dd:5f:8c:58:2c:2f:92:8f:86:15:43: 79:83:02:a4:ae:26:4e:84:36:03:9c:a3:52:c7:d9: 48:32:5c:c7:92:c1:3f:db:14:c6:5c:6c:43:3d:60: 76:8b:34:ae:2d:50:80:6f:19:ed:7c:6a:25:4b:5d: 47:49:b2:6d:0b:e1:9d:2f:c5:96:9b:ac:29:be:67: 11:99:6f:04:d1:75:bc:8b:de:77:e7:2e:dd:d7:17: 3d:ca:a1:32:45:87:99:03:e5:79:4c:9b:33:b8:9f: 29:08:b4:3f:ff:ba:07:cb:51:0c:71:45:b5:60:fd: cc:84:6c:23:29:5d:9f:0d:7f:58:21:42:27:a3:d8: 7b:6d:2b:c3:cc:52:a2:7d:e5:8e:bc:c4:13:b4:32: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:54:7D:3C:BE:9C:28:47:8E:0C:3E:B8:DB:7E:37:E8:6D:8B:5D:EC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GeuFtHQL3Q31cBcnobFVdpCvYGiA6b14gBxzWXJXdzhV/0/E8547D3CBE9C28478E0C3EB8DB7E37E86D8B5DEC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.160.0/22 IPv6: 2804:55dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267961 Signature Algorithm: sha256WithRSAEncryption 59:e0:e4:21:d8:f5:b7:63:03:ed:97:93:2b:c6:95:60:e2:2f: 02:d5:fe:7f:4e:1b:4f:82:84:2e:a0:93:f7:a5:34:71:c8:69: 6e:7c:97:ad:ae:83:90:46:24:d2:9e:df:c1:90:c1:e8:2a:24: 50:75:6a:e2:6f:52:73:71:85:96:e1:01:87:f6:9e:e4:1e:1c: f7:54:7e:b4:5c:c0:71:2d:01:bb:67:89:14:eb:dd:25:13:34: 97:eb:5d:6b:9f:ce:7c:47:26:dc:01:c8:4e:84:24:d3:6f:31: f2:09:2e:e7:33:84:4b:99:6a:c6:23:39:a7:a6:f9:4d:87:f2: ed:dc:a9:01:e3:54:3a:c2:9a:7f:f7:5a:4b:e2:c2:e0:02:b1: 87:65:10:31:65:09:d4:a7:4b:97:ce:59:d1:d6:b5:29:a5:4f: 47:02:b1:8b:1e:b6:7e:db:42:7f:41:ac:22:a9:26:f1:d1:b5: ca:fa:9d:c8:fd:64:a8:ff:44:c2:2d:5f:f5:57:c0:b2:43:e4: b0:b0:aa:a4:49:64:da:af:bd:01:83:11:a9:6c:77:d6:6e:76: df:15:70:ef:fd:27:67:77:9d:83:90:5c:25:85:cc:d1:68:42: 85:ca:7c:9a:9d:e3:85:d7:96:2c:99:7a:2e:d9:a2:40:3c:46: 1c:3f:36:10 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJYdgRseW0KZ5bU0oK6shIQB0I1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MDUyMDI1MDlaFw0yNjA1MDQyMDMwMDlaMDMxMTAvBgNV BAMTKEU4NTQ3RDNDQkU5QzI4NDc4RTBDM0VCOERCN0UzN0U4NkQ4QjVERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95UmeZfRkZ0tGaeUU9af9WViS cFz1IucQvKCx7/yr9KR3E1kUonFgnVVO1GIXADAPckcO9g4O6Vpaw3vE7Pib8j4l 9pWDDPfXHkRK/pZpEKGfjdF/OW64mI9H9/jMiuOThyoYIeonMdexkxvdX4xYLC+S j4YVQ3mDAqSuJk6ENgOco1LH2UgyXMeSwT/bFMZcbEM9YHaLNK4tUIBvGe18aiVL XUdJsm0L4Z0vxZabrCm+ZxGZbwTRdbyL3nfnLt3XFz3KoTJFh5kD5XlMmzO4nykI tD//ugfLUQxxRbVg/cyEbCMpXZ8Nf1ghQiej2HttK8PMUqJ95Y68xBO0MvXPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToVH08vpwoR44M PrjbfjfobYtd7DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2V1 RnRIUUwzUTMxY0Jjbm9iRlZkcEN2WUdpQTZiMTRnQnh6V1hKWGR6aFYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dl dUZ0SFFMM1EzMWNCY25vYkZWZHBDdllHaUE2YjE0Z0J4eldYSlhkemhWLzAvRTg1 NDdEM0NCRTlDMjg0NzhFMEMzRUI4REI3RTM3RTg2RDhCNURFQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaWgMA0EAgACMAcDBQAoBFXcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQWuTANBgkqhkiG9w0BAQsFAAOCAQEAWeDkIdj1t2MD7ZeT K8aVYOIvAtX+f04bT4KELqCT96U0cchpbnyXra6DkEYk0p7fwZDB6CokUHVq4m9S c3GFluEBh/ae5B4c91R+tFzAcS0Bu2eJFOvdJRM0l+tda5/OfEcm3AHIToQk028x 8gku5zOES5lqxiM5p6b5TYfy7dypAeNUOsKaf/daS+LC4AKxh2UQMWUJ1KdLl85Z 0da1KaVPRwKxix62fttCf0GsIqkm8dG1yvqdyP1kqP9Ewi1f9VfAskPksLCqpElk 2q+9AYMRqWx31m523xVw7/0nZ3edg5BcJYXM0WhChcp8mp3jhdeWLJl6LtmiQDxG HD82EA== -----END CERTIFICATE-----Generated at Thu May 8 22:29:23 2025 by rpki-client