$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer File: AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer (raw, json) Hash identifier: SwxZv7Od2sj4GZ4X50YgS8R1Y32kfRgS4AdJIBQqsQU= Subject key identifier: AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 01AAAC6655141B8C4182130B652B2A3C5F555928 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft caRepository: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Jan 2025 13:15:28 +0000 Certificate not after: Wed 21 Jan 2026 13:20:28 +0000 Subordinate resources: AS: 53163 IP: 177.137.176.0/20 IP: 187.1.112.0/20 IP: 2804:1030::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:aa:ac:66:55:14:1b:8c:41:82:13:0b:65:2b:2a:3c:5f:55:59:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 22 13:15:28 2025 GMT Not After : Jan 21 13:20:28 2026 GMT Subject: CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:fd:ff:b4:e8:c1:f2:87:7c:e2:b7:32:3a: db:63:72:63:a1:a7:3f:7c:19:f6:47:0e:b3:d3:84: 85:95:0b:7b:a3:99:c9:34:00:75:a8:f4:61:02:a2: 43:9e:c7:12:b0:fd:fe:c2:26:5a:92:e3:0b:30:b7: ac:fb:66:e7:20:0b:93:91:3d:a5:bb:0f:77:c1:c3: 0b:0e:c8:e8:03:8d:e9:93:98:2f:97:9f:51:34:b9: 48:55:2f:06:76:9c:78:88:86:da:a1:a4:95:8c:fe: 02:ed:62:16:c1:e4:ac:58:d3:ea:59:13:f7:7a:ca: d5:a0:c2:e5:70:fa:64:35:de:3f:8f:11:28:35:31: ce:1a:39:fd:db:21:37:f9:41:0c:ce:0f:87:24:45: c3:43:f6:4d:19:32:27:15:0a:bf:5c:bb:9f:d3:9d: ab:94:6e:bc:a9:2e:df:0e:eb:48:75:4a:e0:52:4a: 03:87:f6:b9:cd:09:82:95:94:2f:2d:ee:32:7c:7e: 28:2f:1e:d2:f7:a7:6d:11:cf:fa:df:a6:a8:f8:61: d5:2a:4d:60:1e:3e:c9:7c:02:16:e4:ef:7c:bb:a9: 9c:d6:40:2d:7e:cd:79:ad:5a:e8:de:e4:21:59:f2: bb:2f:10:50:87:6c:00:38:a6:3e:95:4c:53:3f:c1: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.137.176.0/20 187.1.112.0/20 IPv6: 2804:1030::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53163 Signature Algorithm: sha256WithRSAEncryption 6a:a7:b8:b4:1d:1a:83:ba:97:d0:1c:0d:61:ad:aa:96:d5:5d: b5:de:dd:dc:93:bb:f0:d8:ff:46:0a:4e:d4:52:26:64:1a:cc: 02:11:e9:be:b9:22:92:b9:58:cb:c8:bf:ad:27:59:5b:fe:6c: c2:a3:56:64:69:de:b9:05:5f:5f:ce:c6:4a:00:99:9a:58:28: 78:63:14:90:ef:d9:d1:c5:37:34:09:9c:4e:eb:da:29:91:27: a3:45:1f:1f:68:95:88:20:14:01:29:88:74:09:ce:cd:e1:2e: 94:e9:f1:11:69:b8:03:7f:8f:59:f8:eb:81:a1:84:e2:3a:7e: 9a:52:48:58:97:28:d1:a1:1e:b5:ed:9a:1d:98:ca:e3:d3:39: 8d:0e:04:64:13:9e:fc:7e:2c:e0:11:8a:ba:81:0e:a6:4c:c8: 45:fc:bf:4d:b9:79:6b:a1:fb:8a:b8:d0:cd:9f:31:33:52:0b: fe:92:98:71:99:89:99:fc:77:b3:f3:31:3c:ac:f0:31:6f:90: 00:3a:c6:62:a9:af:29:da:6f:c2:42:6b:79:db:ff:30:75:5a: 82:34:b2:51:08:dd:69:39:94:32:f7:7c:1f:63:a9:3e:20:44: 34:43:49:72:ad:b3:c2:f2:e5:d5:ff:04:5f:29:73:49:29:2b: 0e:9d:f4:8f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAaqsZlUUG4xBghMLZSsqPF9VWSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjIxMzE1MjhaFw0yNjAxMjExMzIwMjhaMDMxMTAvBgNV BAMTKEFBNkJEQkE4QTc5ODhDMzk0OEFFRjE3QTk1MjQ1ODUxOUEwMjZCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2/3/tOjB8od84rcyOttjcmOh pz98GfZHDrPThIWVC3ujmck0AHWo9GECokOexxKw/f7CJlqS4wswt6z7ZucgC5OR PaW7D3fBwwsOyOgDjemTmC+Xn1E0uUhVLwZ2nHiIhtqhpJWM/gLtYhbB5KxY0+pZ E/d6ytWgwuVw+mQ13j+PESg1Mc4aOf3bITf5QQzOD4ckRcND9k0ZMicVCr9cu5/T nauUbrypLt8O60h1SuBSSgOH9rnNCYKVlC8t7jJ8figvHtL3p20Rz/rfpqj4YdUq TWAePsl8Ahbk73y7qZzWQC1+zXmtWuje5CFZ8rsvEFCHbAA4pj6VTFM/wYuDAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqa9uop5iMOUiu 8XqVJFhRmgJrjjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnA2 VG1SQnBXb21pYUxwVmZ3ZTlNUDIxR3hwWEJpc0pNRHc1ZFZaWUU1aXQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zw NlRtUkJwV29taWFMcFZmd2U5TVAyMUd4cFhCaXNKTUR3NWRWWllFNWl0LzAvQUE2 QkRCQThBNzk4OEMzOTQ4QUVGMTdBOTUyNDU4NTE5QTAyNkI4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsYmwAwQEuwFwMA0EAgACMAcDBQAoBBAwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPqzANBgkqhkiG9w0BAQsFAAOCAQEAaqe4tB0a g7qX0BwNYa2qltVdtd7d3JO78Nj/RgpO1FImZBrMAhHpvrkikrlYy8i/rSdZW/5s wqNWZGneuQVfX87GSgCZmlgoeGMUkO/Z0cU3NAmcTuvaKZEno0UfH2iViCAUASmI dAnOzeEulOnxEWm4A3+PWfjrgaGE4jp+mlJIWJco0aEete2aHZjK49M5jQ4EZBOe /H4s4BGKuoEOpkzIRfy/Tbl5a6H7irjQzZ8xM1IL/pKYcZmJmfx3s/MxPKzwMW+Q ADrGYqmvKdpvwkJredv/MHVagjSyUQjdaTmUMvd8H2OpPiBENENJcq2zwvLl1f8E XylzSSkrDp30jw== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:37 2025 by rpki-client on console.sobornost.net