$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer File: 2FD431E4607C7159B13CB28EDF58E31ABA74325A.cer (raw, json) Hash identifier: lSBvT++w5ikPBRAkXGVtfFtk6Gt4llHWAoDFyLhwJU0= Subject key identifier: 2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0131625B68E89788BFE2D54066BF44E96A43A6DF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft caRepository: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 19 Jul 2025 21:01:30 +0000 Certificate not after: Sat 18 Jul 2026 21:06:30 +0000 Subordinate resources: AS: 266021 IP: 170.245.36.0/22 IP: 2804:3940::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 08:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:31:62:5b:68:e8:97:88:bf:e2:d5:40:66:bf:44:e9:6a:43:a6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 19 21:01:30 2025 GMT Not After : Jul 18 21:06:30 2026 GMT Subject: CN=2FD431E4607C7159B13CB28EDF58E31ABA74325A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:29:a3:eb:0d:fe:b7:8d:fc:3b:df:19:dd: ea:b4:e8:17:21:5b:f4:e7:ef:20:27:4f:91:83:07: 30:1d:25:64:52:82:99:9f:c8:12:d3:78:4c:59:d4: 56:76:e4:bf:0c:a4:6b:36:24:57:13:5f:93:67:af: bc:c8:03:dd:cc:93:4c:ab:7e:b0:89:6b:b7:3d:b8: 42:64:49:bf:31:f0:ab:67:94:d1:d8:db:30:7b:41: fd:10:3c:9e:8e:d7:ce:b4:36:af:be:30:28:66:4f: 31:d8:eb:7d:d5:9b:92:1c:1d:83:36:20:d6:6b:82: e9:5a:fe:f6:ef:63:57:8e:8e:51:c5:e0:08:45:b6: d7:11:fb:03:b8:2a:33:6c:cc:43:56:fe:a6:67:26: e0:cd:78:33:4e:45:a3:5c:dc:25:fe:14:24:2d:70: 77:a1:e2:27:3a:a6:1f:fb:a6:7d:1d:0c:5a:4e:be: a1:77:11:7d:93:e7:f9:92:50:ba:38:9c:44:d3:d6: 9e:a4:65:66:f2:3d:ef:12:42:dc:96:64:f5:3c:2c: 01:6d:db:0e:e9:f9:49:29:ab:c2:74:66:03:3b:ee: ce:f5:a0:dd:e5:af:ab:cd:a6:6c:9d:34:4e:28:36: 32:9c:d2:4e:cb:ae:27:eb:f6:8f:db:01:d5:50:0b: 66:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:D4:31:E4:60:7C:71:59:B1:3C:B2:8E:DF:58:E3:1A:BA:74:32:5A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/2FD431E4607C7159B13CB28EDF58E31ABA74325A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.36.0/22 IPv6: 2804:3940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266021 Signature Algorithm: sha256WithRSAEncryption 3a:1b:6b:ae:14:d2:26:bc:3b:e2:72:5a:9f:27:61:ff:6d:df: c3:34:ea:84:a4:b3:78:9f:a2:68:72:a5:52:7b:b8:c0:a7:83: 9e:24:1e:c7:0a:71:26:9f:1c:c8:a9:50:d3:3a:f5:55:0c:a1: 8f:49:89:ee:0b:bb:8c:77:4a:be:1d:68:90:2d:12:a6:93:99: e9:32:07:e2:db:81:59:4d:71:05:85:33:0d:19:de:9f:de:fb: 8e:ec:ad:16:04:00:b0:a9:ed:78:a5:e2:bc:2c:1e:1c:c7:89: f6:86:4f:d9:83:88:37:5d:f0:d4:5c:9e:39:f4:6b:71:88:64: 01:60:04:35:97:26:69:26:0d:c0:3f:75:31:4a:4a:dd:eb:f8: 6c:01:56:34:22:f5:83:bc:ea:b2:9c:71:6c:8f:98:8f:21:df: 92:40:3d:12:84:b5:01:e4:de:04:30:14:a4:75:0a:22:41:e1: 99:c8:6d:93:d7:aa:2d:d5:e1:1f:66:f2:3e:a1:74:a8:da:f4: 68:dd:d7:d9:f9:10:cf:a8:12:ba:11:a3:62:31:45:44:40:7a: ad:8b:fe:77:bf:22:b5:2a:e3:13:8e:67:5e:eb:b4:91:47:9d: 31:8a:c7:4a:47:f3:b1:4b:25:2f:d8:38:4b:7d:92:13:c4:3e: 9a:35:22:40 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUATFiW2jol4i/4tVAZr9E6WpDpt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MTkyMTAxMzBaFw0yNjA3MTgyMTA2MzBaMDMxMTAvBgNV BAMTKDJGRDQzMUU0NjA3QzcxNTlCMTNDQjI4RURGNThFMzFBQkE3NDMyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Oimj6w3+t438O98Z3eq06Bch W/Tn7yAnT5GDBzAdJWRSgpmfyBLTeExZ1FZ25L8MpGs2JFcTX5Nnr7zIA93Mk0yr frCJa7c9uEJkSb8x8KtnlNHY2zB7Qf0QPJ6O1860Nq++MChmTzHY633Vm5IcHYM2 INZrgula/vbvY1eOjlHF4AhFttcR+wO4KjNszENW/qZnJuDNeDNORaNc3CX+FCQt cHeh4ic6ph/7pn0dDFpOvqF3EX2T5/mSULo4nETT1p6kZWbyPe8SQtyWZPU8LAFt 2w7p+Ukpq8J0ZgM77s71oN3lr6vNpmydNE4oNjKc0k7Lrifr9o/bAdVQC2ZJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv1DHkYHxxWbE8 so7fWOMaunQyWjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUFD WTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXlaNWEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FB Q1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAvMkZE NDMxRTQ2MDdDNzE1OUIxM0NCMjhFREY1OEUzMUFCQTc0MzI1QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvUkMA0EAgACMAcDBQAoBDlAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPJTANBgkqhkiG9w0BAQsFAAOCAQEAOhtrrhTSJrw74nJa nydh/23fwzTqhKSzeJ+iaHKlUnu4wKeDniQexwpxJp8cyKlQ0zr1VQyhj0mJ7gu7 jHdKvh1okC0SppOZ6TIH4tuBWU1xBYUzDRnen977juytFgQAsKnteKXivCweHMeJ 9oZP2YOIN13w1FyeOfRrcYhkAWAENZcmaSYNwD91MUpK3ev4bAFWNCL1g7zqspxx bI+YjyHfkkA9EoS1AeTeBDAUpHUKIkHhmchtk9eqLdXhH2byPqF0qNr0aN3X2fkQ z6gSuhGjYjFFREB6rYv+d78itSrjE45nXuu0kUedMYrHSkfzsUslL9g4S32SE8Q+ mjUiQA== -----END CERTIFICATE-----Generated at Sat Jul 26 06:32:18 2025 by rpki-client