$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer File: 7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer (raw, json) Hash identifier: LVnG6rSefhzNF2SQoSH+WYAmHlOv54pNU90ouufsMS8= Subject key identifier: 7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1A14067C434ADE04436FB7C2D754101ACF32E35D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.mft caRepository: rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 11 Mar 2025 17:20:22 +0000 Certificate not after: Tue 10 Mar 2026 17:25:22 +0000 Subordinate resources: AS: 53094 IP: 143.208.68.0/22 IP: 187.102.16.0/20 IP: 2804:2a80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:14:06:7c:43:4a:de:04:43:6f:b7:c2:d7:54:10:1a:cf:32:e3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 11 17:20:22 2025 GMT Not After : Mar 10 17:25:22 2026 GMT Subject: CN=7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:a4:54:a2:ec:e8:93:29:0b:c0:ed:15:2c: bb:9d:49:2e:52:f7:c5:92:61:bc:3d:19:2b:5c:38: 49:0b:28:1c:b8:96:68:d8:c8:3c:5c:6b:b4:72:39: 5d:3b:dd:40:c5:60:dd:06:73:78:93:bf:7a:31:56: ae:d2:26:44:67:bb:17:de:b3:5e:96:94:c7:da:33: 72:d8:26:09:11:44:38:23:72:04:4e:7a:d6:8f:ec: c7:48:65:d0:69:7d:e2:09:74:5c:3b:4f:82:4d:fe: 5b:6d:0f:80:e4:62:4e:bb:5f:26:eb:7e:77:36:ae: 2f:61:5f:fa:d8:59:88:0d:6a:84:a5:a6:bf:5f:60: f5:d6:85:f6:f8:f5:f9:ec:a2:9a:97:b6:2a:e7:a8: c3:1b:68:be:2b:ed:1c:2d:22:17:91:19:7b:b6:03: 98:ba:6c:62:99:f5:96:d0:15:e9:74:a4:52:1d:60: c5:80:99:50:d8:2b:34:c0:eb:10:39:3e:cb:dd:d7: 2b:fe:01:f1:1b:67:1d:f7:54:2e:c5:fe:9b:48:e0: c5:b0:8c:c9:13:d2:c3:89:01:8b:15:8d:c5:0a:d5: c0:09:1c:ff:8c:2c:6e:35:be:63:b8:e5:61:10:12: d6:7d:57:c6:ae:c5:44:41:c4:bb:7e:f1:6d:f6:d1: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.68.0/22 187.102.16.0/20 IPv6: 2804:2a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53094 Signature Algorithm: sha256WithRSAEncryption c6:26:b5:57:5a:77:ac:02:9e:5a:aa:ea:96:20:6e:33:ea:d1: 7b:ad:4b:f8:ee:f2:dc:40:0e:44:92:61:21:64:e3:83:12:de: 07:7b:ce:11:d0:71:5e:2b:d2:a2:ae:33:71:01:cd:86:7e:39: a3:50:bf:bd:18:a6:b6:be:ee:fc:61:2a:a7:9c:00:6a:77:0b: bf:0a:52:4d:b6:f3:9e:82:13:6f:85:66:c1:1c:5b:ea:8e:ef: fe:fd:ab:26:cd:cb:77:a4:c6:85:e5:07:fc:0f:de:9f:8c:25: 0a:62:0b:23:13:1e:29:1d:73:3c:d3:57:e4:e1:b6:2d:3d:6b: c2:92:d4:0c:99:09:ff:5e:33:1b:17:bb:e4:bc:e9:60:76:d3: 72:fb:bb:d5:4d:62:c7:d2:7b:0c:52:70:34:2e:5f:70:99:25: 5a:aa:89:bb:6c:7b:64:e8:56:16:c6:0b:b0:33:bd:de:6e:47: 6a:4d:ed:35:7e:cc:20:fa:49:c5:03:82:80:41:9b:0b:28:0c: 8c:f4:18:c3:88:37:d5:48:76:67:3d:2e:9e:0d:26:ca:e6:fc: bc:31:ae:ff:bb:cb:37:a8:10:03:6c:0c:f5:25:71:51:bc:e7: 18:4d:55:a2:7e:73:92:4d:a0:b6:a5:53:7d:b2:b3:66:a0:f2: 5e:93:5d:bb -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGhQGfENK3gRDb7fC11QQGs8y410wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTExNzIwMjJaFw0yNjAzMTAxNzI1MjJaMDMxMTAvBgNV BAMTKDdDQ0IzMDYwNDZBRUFFMEUxNkU4OTEzRTMzQUY2RDZFQzZEMkYzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBO6RUouzokykLwO0VLLudSS5S 98WSYbw9GStcOEkLKBy4lmjYyDxca7RyOV073UDFYN0Gc3iTv3oxVq7SJkRnuxfe s16WlMfaM3LYJgkRRDgjcgROetaP7MdIZdBpfeIJdFw7T4JN/lttD4DkYk67Xybr fnc2ri9hX/rYWYgNaoSlpr9fYPXWhfb49fnsopqXtirnqMMbaL4r7RwtIheRGXu2 A5i6bGKZ9ZbQFel0pFIdYMWAmVDYKzTA6xA5Psvd1yv+AfEbZx33VC7F/ptI4MWw jMkT0sOJAYsVjcUK1cAJHP+MLG41vmO45WEQEtZ9V8auxURBxLt+8W320fYTAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR8yzBgRq6uDhbo kT4zr21uxtLzLDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnBW SkJHc1F1OTN0aHZ6VVhSUkV4ajV3a3BmZmUzNEhFVlVFZ0Vma3A2VksvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZw VkpCR3NRdTkzdGh2elVYUlJFeGo1d2twZmZlMzRIRVZVRWdFZmtwNlZLLzAvN0ND QjMwNjA0NkFFQUUwRTE2RTg5MTNFMzNBRjZENkVDNkQyRjMyQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj9BEAwQEu2YQMA0EAgACMAcDBQAoBCqAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPZjANBgkqhkiG9w0BAQsFAAOCAQEAxia1V1p3 rAKeWqrqliBuM+rRe61L+O7y3EAORJJhIWTjgxLeB3vOEdBxXivSoq4zcQHNhn45 o1C/vRimtr7u/GEqp5wAancLvwpSTbbznoITb4VmwRxb6o7v/v2rJs3Ld6TGheUH /A/en4wlCmILIxMeKR1zPNNX5OG2LT1rwpLUDJkJ/14zGxe75LzpYHbTcvu71U1i x9J7DFJwNC5fcJklWqqJu2x7ZOhWFsYLsDO93m5Hak3tNX7MIPpJxQOCgEGbCygM jPQYw4g31Uh2Zz0ung0myub8vDGu/7vLN6gQA2wM9SVxUbznGE1Von5zkk2gtqVT fbKzZqDyXpNduw== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:28 2025 by rpki-client on console.sobornost.net