$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer File: 1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer (raw, json) Hash identifier: zPgdP53m4mKXbczsvLDbCIgSuecchVYW1Q0XYhOB3jE= Subject key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73C0524A437E632EC4AF27EC24749785972E2E58 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft caRepository: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 29 Apr 2025 22:31:33 +0000 Certificate not after: Tue 28 Apr 2026 22:36:33 +0000 Subordinate resources: AS: 265384 IP: 170.254.240.0/22 IP: 2804:3340::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 15:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c0:52:4a:43:7e:63:2e:c4:af:27:ec:24:74:97:85:97:2e:2e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 29 22:31:33 2025 GMT Not After : Apr 28 22:36:33 2026 GMT Subject: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:df:38:a8:4c:4e:4c:41:09:2c:92:42:68: 35:56:bf:43:f2:4b:45:6c:8d:9b:e5:31:fa:19:5a: 29:a4:81:5c:5e:de:c8:5b:7b:16:53:a4:b3:28:29: 3e:3b:19:98:76:b8:8b:f0:6a:a9:db:00:a7:6a:5d: 6f:26:dd:a7:20:e9:dd:56:b8:5d:0e:31:4a:a4:8e: 0c:36:e4:a5:f2:f9:b3:87:b9:4b:a8:f3:68:0b:36: 35:93:46:da:c7:94:d3:72:51:e8:49:33:04:f5:40: f3:be:89:ab:c8:ac:80:bc:0b:c4:2a:5a:9c:23:21: d4:b2:09:84:eb:38:a0:a5:a2:67:7e:fd:0f:5f:cb: 25:e9:32:2b:ba:8d:79:06:4a:a3:f6:d6:42:f3:ce: 04:fe:ba:41:db:e3:da:4a:25:9f:c5:c0:c9:7b:df: 98:19:97:da:fe:46:26:eb:1d:11:bf:9e:cc:2d:a8: 33:46:a3:06:e0:5f:a6:57:f4:b6:3b:f0:5d:b8:88: df:cf:05:6d:5d:82:d4:00:a1:2b:da:f3:0c:79:9b: e8:14:90:29:48:b3:ea:4e:78:35:47:3f:6d:3b:7b: f6:3f:f8:55:3c:17:6c:84:ba:23:42:76:50:94:0e: 0a:b4:95:ca:40:24:00:89:a4:69:3d:c3:8c:66:72: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.240.0/22 IPv6: 2804:3340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265384 Signature Algorithm: sha256WithRSAEncryption 73:a4:82:46:ca:bd:04:3b:5b:20:19:78:d1:b6:ae:a4:0d:91: 48:f8:7f:56:38:e7:f5:8d:ef:c0:28:ea:7d:23:1b:20:4e:6c: 69:62:b7:4b:9e:d6:31:6d:2f:72:ca:af:17:a1:8e:f4:06:4b: 1c:7c:f4:84:65:a5:0d:5a:2b:e6:ea:7c:c1:f2:f8:c8:af:de: eb:41:1f:73:1b:37:cc:97:fd:8b:1f:a3:21:82:95:0d:16:ec: 13:79:89:8b:07:01:82:40:44:a3:9f:63:94:18:7e:a7:e1:8c: f4:69:cb:a6:1c:c5:5b:d6:af:e9:f4:38:c3:b5:a2:ed:75:50: 16:5c:c6:c4:1b:12:d3:c3:7a:42:d2:58:d7:91:01:da:40:46: 14:71:d5:24:54:40:f7:51:fa:03:e7:2e:07:93:82:dd:da:11: 67:57:9a:5a:93:8a:a5:f9:36:fa:9a:ef:b9:a6:94:37:7e:7b: cf:5b:23:c0:25:b1:4a:d8:e6:31:7e:37:cf:5b:1b:7d:0c:88: 21:7b:7f:a7:e7:96:0b:f3:57:b5:a7:27:57:0f:b4:e3:38:61: 3a:da:4a:b4:8a:76:6f:a4:1f:e3:6d:a0:c2:84:5e:b3:9d:9a: fb:e8:2b:fb:1c:3e:69:2e:ad:34:9a:eb:d5:d1:70:54:c7:39: fe:52:22:45 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUc8BSSkN+Yy7EryfsJHSXhZcuLlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjkyMjMxMzNaFw0yNjA0MjgyMjM2MzNaMDMxMTAvBgNV BAMTKDFCN0E0Mjg5NkE0RkJGMkUyRTJCMDQ5NDMwMEFCNkYwMDk0RUY5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qd84qExOTEEJLJJCaDVWv0Py S0VsjZvlMfoZWimkgVxe3shbexZTpLMoKT47GZh2uIvwaqnbAKdqXW8m3acg6d1W uF0OMUqkjgw25KXy+bOHuUuo82gLNjWTRtrHlNNyUehJMwT1QPO+iavIrIC8C8Qq WpwjIdSyCYTrOKClomd+/Q9fyyXpMiu6jXkGSqP21kLzzgT+ukHb49pKJZ/FwMl7 35gZl9r+RibrHRG/nswtqDNGowbgX6ZX9LY78F24iN/PBW1dgtQAoSva8wx5m+gU kClIs+pOeDVHP207e/Y/+FU8F2yEuiNCdlCUDgq0lcpAJACJpGk9w4xmcmrvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbekKJak+/Li4r BJQwCrbwCU755TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMk5Q OGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VRcHQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJO UDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAvMUI3 QTQyODk2QTRGQkYyRTJFMkIwNDk0MzAwQUI2RjAwOTRFRjlFNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqv7wMA0EAgACMAcDBQAoBDNAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMqDANBgkqhkiG9w0BAQsFAAOCAQEAc6SCRsq9BDtbIBl4 0baupA2RSPh/Vjjn9Y3vwCjqfSMbIE5saWK3S57WMW0vcsqvF6GO9AZLHHz0hGWl DVor5up8wfL4yK/e60Efcxs3zJf9ix+jIYKVDRbsE3mJiwcBgkBEo59jlBh+p+GM 9GnLphzFW9av6fQ4w7Wi7XVQFlzGxBsS08N6QtJY15EB2kBGFHHVJFRA91H6A+cu B5OC3doRZ1eaWpOKpfk2+prvuaaUN357z1sjwCWxStjmMX43z1sbfQyIIXt/p+eW C/NXtacnVw+04zhhOtpKtIp2b6Qf422gwoRes52a++gr+xw+aS6tNJrr1dFwVMc5 /lIiRQ== -----END CERTIFICATE-----Generated at Fri Jun 6 17:44:21 2025 by rpki-client