$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer File: 2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer (raw, json) Hash identifier: pKfWb9iSHU9/eoMQV3R7WL5KJ3ZNfYYlFnl0oGd5T3s= Subject key identifier: 25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 20FAFC357526F56CAAE3A751FEC35C1E0511F4CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft caRepository: rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Jun 2025 19:06:25 +0000 Certificate not after: Mon 22 Jun 2026 19:11:25 +0000 Subordinate resources: AS: 269715 IP: 170.84.244.0/22 IP: 187.62.84.0/22 IP: 2804:68c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fa:fc:35:75:26:f5:6c:aa:e3:a7:51:fe:c3:5c:1e:05:11:f4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 23 19:06:25 2025 GMT Not After : Jun 22 19:11:25 2026 GMT Subject: CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:82:3b:e4:bc:06:5a:0a:93:17:91:32:73: d9:d7:cb:11:19:14:cd:f1:2c:8f:06:b2:c5:58:61: 60:8d:a3:57:24:3b:24:46:6a:e9:bd:4f:0b:2e:1d: 4f:23:45:88:47:30:84:c1:95:8f:2b:c3:65:1a:c4: b5:79:ba:b8:fb:3e:e7:f8:30:ea:11:29:ba:95:77: 61:c3:97:4a:2b:f8:73:48:86:8e:50:76:fc:30:9d: ec:ad:c9:83:64:24:1b:34:51:15:c4:e2:de:05:78: 7a:4d:1d:6e:64:40:92:6e:f2:f6:16:63:30:d1:b6: 81:a9:c7:05:eb:87:40:be:6e:e9:75:bb:3d:0c:1a: 88:d8:93:39:3a:99:d6:b1:c2:bb:6d:12:f1:cb:33: 56:82:f8:39:61:9d:b3:25:ad:a7:e9:1c:6f:cb:73: cc:cc:fc:ca:3e:bc:9d:e9:f5:62:b7:ac:0c:2d:92: 0f:1f:40:55:33:da:c2:02:9c:a9:1a:96:b2:f7:57: 66:7c:bf:65:70:49:a7:23:0a:71:93:23:62:8a:55: d7:40:e0:e4:91:29:87:fb:e0:3c:e2:e9:84:1d:7e: db:c0:2a:2f:47:5d:36:e4:a3:0e:5a:25:0c:a8:2a: 97:bb:51:1f:28:69:0a:f7:05:9e:0b:28:79:ac:b5: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.244.0/22 187.62.84.0/22 IPv6: 2804:68c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269715 Signature Algorithm: sha256WithRSAEncryption 50:9e:8d:c3:a3:f1:f1:f3:80:34:c1:cf:1b:6b:03:60:1a:6b: 43:15:e8:dc:c6:46:bd:bd:71:e5:12:8c:57:b5:7d:62:0c:68: 32:0d:88:08:7a:3a:bb:f9:59:37:f4:89:a9:fe:96:3a:bb:23: 07:e5:22:6e:92:76:bd:20:06:4d:ca:26:6a:4c:51:aa:34:65: af:b4:56:48:46:02:9b:fc:e6:d2:63:a8:69:54:32:c8:b1:d5: 43:f3:da:1d:dd:b6:1b:7e:4d:c2:5e:0f:02:1f:0b:e0:bd:01: 11:33:4a:83:4c:9a:a6:e8:1a:3d:b2:1d:95:88:0b:a7:ef:25: 7d:f8:80:5a:bb:66:4d:a8:f0:41:39:2c:cb:83:24:93:92:3f: d1:5d:ad:0e:4a:21:b4:86:48:1c:6f:56:f9:ce:0a:b6:b8:94: 11:93:8d:19:81:b5:3b:34:a4:73:57:a1:26:23:df:ab:70:26: 84:d3:c6:1a:bc:e8:0f:7b:0a:32:be:db:b4:8a:ce:f0:19:52: ba:eb:4f:11:37:57:79:13:fb:68:be:97:32:9d:9b:0d:1a:40: e2:4b:9b:88:1b:38:d0:1d:e0:e6:a6:1f:5e:4a:39:04:d7:34: a3:be:9d:74:68:7b:ee:02:5b:8e:65:8f:04:0f:48:0c:19:0c: 62:0b:88:85 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUIPr8NXUm9Wyq46dR/sNcHgUR9M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjMxOTA2MjVaFw0yNjA2MjIxOTExMjVaMDMxMTAvBgNV BAMTKDI1NjdCQTFGMzdDMTlENjA4MUJBMjE3RDhDQUY1REYwNkZERDlGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyR4I75LwGWgqTF5Eyc9nXyxEZ FM3xLI8GssVYYWCNo1ckOyRGaum9TwsuHU8jRYhHMITBlY8rw2UaxLV5urj7Puf4 MOoRKbqVd2HDl0or+HNIho5QdvwwneytyYNkJBs0URXE4t4FeHpNHW5kQJJu8vYW YzDRtoGpxwXrh0C+bul1uz0MGojYkzk6mdaxwrttEvHLM1aC+DlhnbMlrafpHG/L c8zM/Mo+vJ3p9WK3rAwtkg8fQFUz2sICnKkalrL3V2Z8v2VwSacjCnGTI2KKVddA 4OSRKYf74Dzi6YQdftvAKi9HXTbkow5aJQyoKpe7UR8oaQr3BZ4LKHmstf4RAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQlZ7ofN8GdYIG6 IX2Mr13wb92fbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUjNC Q3VRa0NtdG05WFB0c1lnVmpUd2ttZGoxbzNwelZuaWR1SFhmTXZ0dy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUjNC Q3VRa0NtdG05WFB0c1lnVmpUd2ttZGoxbzNwelZuaWR1SFhmTXZ0dy8wLzI1NjdC QTFGMzdDMTlENjA4MUJBMjE3RDhDQUY1REYwNkZERDlGNkYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAqpU9AMEArs+VDANBAIAAjAHAwUAKARoyDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEHZMwDQYJKoZIhvcNAQELBQADggEBAFCejcOj8fHz gDTBzxtrA2Aaa0MV6NzGRr29ceUSjFe1fWIMaDINiAh6Orv5WTf0ian+ljq7Iwfl Im6Sdr0gBk3KJmpMUao0Za+0VkhGApv85tJjqGlUMsix1UPz2h3dtht+TcJeDwIf C+C9AREzSoNMmqboGj2yHZWIC6fvJX34gFq7Zk2o8EE5LMuDJJOSP9FdrQ5KIbSG SBxvVvnOCra4lBGTjRmBtTs0pHNXoSYj36twJoTTxhq86A97CjK+27SKzvAZUrrr TxE3V3kT+2i+lzKdmw0aQOJLm4gbONAd4OamH15KOQTXNKO+nXRoe+4CW45ljwQP SAwZDGILiIU= -----END CERTIFICATE-----Generated at Sun Jun 29 22:06:42 2025 by rpki-client