$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D70AEA1061F94850A8A9E906B852D2ED075B6932.cer File: D70AEA1061F94850A8A9E906B852D2ED075B6932.cer (raw, json) Hash identifier: 526hAgHBlnRRj2va5fjqSbUehdfKMGhMBGITULYGd14= Subject key identifier: D7:0A:EA:10:61:F9:48:50:A8:A9:E9:06:B8:52:D2:ED:07:5B:69:32 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7ADDCFCC4566C9F7A876A047C499A48F21F228 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft caRepository: rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Jun 2025 16:58:25 +0000 Certificate not after: Fri 19 Jun 2026 17:03:25 +0000 Subordinate resources: AS: 271350 IP: 181.189.64.0/22 IP: 2804:7a24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:dd:cf:cc:45:66:c9:f7:a8:76:a0:47:c4:99:a4:8f:21:f2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 20 16:58:25 2025 GMT Not After : Jun 19 17:03:25 2026 GMT Subject: CN=D70AEA1061F94850A8A9E906B852D2ED075B6932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f0:48:99:2f:3e:69:c7:7b:a7:51:f1:a7:36: 2d:c1:d0:02:aa:36:5f:70:ac:43:a9:f0:7a:72:2e: d7:25:12:50:ef:86:04:70:95:70:6c:fc:77:b0:e2: 85:1d:36:77:0c:ae:d3:79:96:6e:68:a5:b1:94:4f: 8d:d7:f6:41:68:33:d6:01:be:f0:69:23:c6:c2:14: 2c:f4:8d:62:4a:b0:10:c0:44:3e:ba:d8:50:98:5d: 33:56:8a:cb:5d:37:46:0d:60:20:5c:51:87:cb:50: 55:90:15:54:f6:75:0f:e5:e1:a6:ce:ba:83:3f:1b: 26:b8:60:de:93:b0:50:d8:51:8e:aa:84:bb:ff:aa: 1a:56:4c:3f:65:1f:da:ab:f2:be:36:59:09:22:f8: 9b:80:2f:3a:5c:f6:db:7c:61:95:c6:86:2f:1b:74: 06:41:8e:69:c1:39:61:66:63:ec:a6:3e:dd:2d:d9: 3a:37:bd:3f:64:cf:53:f3:a7:a2:ad:7a:df:92:00: 9a:f5:57:b2:f2:48:df:92:95:63:50:6c:5b:d5:4d: 87:cb:70:0e:d9:7f:5e:e5:be:1d:8c:c9:a8:4e:d2: 3e:84:b2:ba:49:51:53:dd:aa:78:34:31:49:e8:d9: 6f:25:01:df:a9:97:8f:36:f3:53:fc:0b:75:9e:ff: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:0A:EA:10:61:F9:48:50:A8:A9:E9:06:B8:52:D2:ED:07:5B:69:32 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ds1k6H2n6CyNZQvAVQXJGje5UaJHt19XBdRV3PDkM7em/0/D70AEA1061F94850A8A9E906B852D2ED075B6932.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.189.64.0/22 IPv6: 2804:7a24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271350 Signature Algorithm: sha256WithRSAEncryption 0a:be:22:fe:07:b4:2f:67:bd:05:bb:09:2f:12:81:08:e6:67: 56:86:21:44:9f:dc:8f:e1:3c:7e:3d:53:59:3c:d8:a7:13:3c: 9e:51:46:55:c1:ec:67:d1:80:16:60:e1:dd:72:c5:ae:29:b3: 17:66:4c:49:63:fc:7d:30:11:78:d4:74:03:08:72:5d:5a:1a: 40:f0:88:01:ad:91:4d:24:0c:55:26:94:a0:92:93:ea:75:9b: 6d:8a:25:7d:7b:ad:17:a8:e4:97:85:ed:55:3e:28:24:7f:96: 9d:c9:7f:5f:c3:bb:f5:5c:ae:45:6c:ca:1f:f5:60:ba:6a:ae: 56:b0:3d:0a:5b:e8:74:39:b2:5b:a3:59:9a:9d:5a:0d:81:05: 17:0c:d9:ef:bc:96:a1:fd:aa:1c:11:ad:3a:31:dd:3b:31:88: a4:76:70:fd:3d:50:9a:f4:c2:e4:35:f6:91:ab:8a:7b:34:0f: c0:52:e5:b7:12:a3:7a:24:73:ef:3a:9a:60:89:07:01:b1:e6: e2:08:aa:d5:8e:74:0f:40:f7:d7:60:d3:44:83:31:07:0f:e1: e6:00:62:62:f9:91:d6:71:52:f3:aa:5e:2f:4c:e6:31:83:25: a0:3e:b2:98:b1:23:78:6e:9b:fe:34:fd:d2:cd:ba:8e:90:20: 16:df:84:f5 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgITet3PzEVmyfeodqBHxJmkjyHyKDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3 Q0E4QTRCMB4XDTI1MDYyMDE2NTgyNVoXDTI2MDYxOTE3MDMyNVowMzExMC8GA1UE AxMoRDcwQUVBMTA2MUY5NDg1MEE4QTlFOTA2Qjg1MkQyRUQwNzVCNjkzMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAObwSJkvPmnHe6dR8ac2LcHQAqo2 X3CsQ6nwenIu1yUSUO+GBHCVcGz8d7DihR02dwyu03mWbmilsZRPjdf2QWgz1gG+ 8GkjxsIULPSNYkqwEMBEPrrYUJhdM1aKy103Rg1gIFxRh8tQVZAVVPZ1D+Xhps66 gz8bJrhg3pOwUNhRjqqEu/+qGlZMP2Uf2qvyvjZZCSL4m4AvOlz223xhlcaGLxt0 BkGOacE5YWZj7KY+3S3ZOje9P2TPU/Onoq1635IAmvVXsvJI35KVY1BsW9VNh8tw Dtl/XuW+HYzJqE7SPoSyuklRU92qeDQxSejZbyUB36mXjzbzU/wLdZ7/HIECAwEA AaOCAzowggM2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNcK6hBh+UhQqKnp BrhS0u0HW2kyMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9EczFr NkgybjZDeU5aUXZBVlFYSkdqZTVVYUpIdDE5WEJkUlYzUERrTTdlbS8wLzCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHMx azZIMm42Q3lOWlF2QVZRWEpHamU1VWFKSHQxOVhCZFJWM1BEa003ZW0vMC9ENzBB RUExMDYxRjk0ODUwQThBOUU5MDZCODUyRDJFRDA3NUI2OTMyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK1vUAwDQQCAAIwBwMFACgEeiQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCP2MA0GCSqGSIb3DQEBCwUAA4IBAQAKviL+B7QvZ70Fuwkv EoEI5mdWhiFEn9yP4Tx+PVNZPNinEzyeUUZVwexn0YAWYOHdcsWuKbMXZkxJY/x9 MBF41HQDCHJdWhpA8IgBrZFNJAxVJpSgkpPqdZttiiV9e60XqOSXhe1VPigkf5ad yX9fw7v1XK5FbMof9WC6aq5WsD0KW+h0ObJbo1manVoNgQUXDNnvvJah/aocEa06 Md07MYikdnD9PVCa9MLkNfaRq4p7NA/AUuW3EqN6JHPvOppgiQcBsebiCKrVjnQP QPfXYNNEgzEHD+HmAGJi+ZHWcVLzql4vTOYxgyWgPrKYsSN4bpv+NP3SzbqOkCAW 34T1 -----END CERTIFICATE-----Generated at Sun Jun 29 23:58:26 2025 by rpki-client