$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer File: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer (raw, json) Hash identifier: GpmZJZvNS+8ppWHGmc2sbtIdjxZSBeV88B2Zcdknnno= Subject key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 15E89F330CF59C8D4ED01BAA7EF354EE7522A949 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft caRepository: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:36 +0000 Certificate not after: Wed 04 Mar 2026 18:40:36 +0000 Subordinate resources: AS: 262903 IP: 177.23.208.0/21 IP: 177.86.104.0/21 IP: 179.109.56.0/21 IP: 186.251.56.0/22 IP: 2804:1644::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e8:9f:33:0c:f5:9c:8d:4e:d0:1b:aa:7e:f3:54:ee:75:22:a9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:36 2025 GMT Not After : Mar 4 18:40:36 2026 GMT Subject: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:ac:d6:f7:c0:52:36:c2:d3:0a:9d:d7:92: 6e:f5:b4:44:e5:b6:03:08:4f:db:f6:7d:e0:34:a7: b1:f5:59:2c:31:57:6e:cf:ba:4b:43:ec:f1:fb:a6: ae:fc:2c:d1:22:64:8e:4c:a7:90:72:a2:9e:86:5e: ec:61:13:00:0b:92:71:af:51:66:99:f4:07:d7:47: 5b:f5:05:2b:12:19:1f:f0:f8:81:9f:33:96:92:48: 15:f6:0d:0b:78:68:d6:d7:ab:bc:02:ac:32:43:e7: 33:d3:0b:42:1d:ea:fc:c4:de:cd:c3:32:3d:bc:01: 59:cb:23:28:21:6f:2b:14:9f:bb:b3:3c:b9:5a:97: 39:91:1d:9a:3f:93:3b:eb:79:ca:b6:4f:91:4f:7d: b2:40:ca:19:c0:86:c6:4a:eb:9a:78:85:f9:b4:7e: e6:a8:52:0a:50:0d:8b:83:7f:20:ae:fe:63:02:79: c4:84:09:3d:83:94:f4:6a:97:23:71:80:23:26:7b: 03:88:01:99:51:08:b3:49:a8:8c:63:ca:ea:b3:eb: 21:b9:4f:0a:53:a7:04:dc:01:1e:d8:86:08:de:2e: 6d:37:8d:c9:a9:86:43:2c:df:fc:64:b7:29:be:2b: a1:a4:58:97:bd:3d:21:d1:c2:e4:5a:c4:3f:5f:22: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.23.208.0/21 177.86.104.0/21 179.109.56.0/21 186.251.56.0/22 IPv6: 2804:1644::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262903 Signature Algorithm: sha256WithRSAEncryption 2f:f9:f6:6d:78:24:a0:f9:74:de:2c:c5:ba:20:39:c8:68:e1: 08:b3:88:24:56:96:c0:ea:21:f8:0f:be:e2:6f:dc:91:22:ef: 53:a5:9b:e0:5b:45:40:ba:a4:66:04:9a:05:65:25:27:c3:fe: a7:0d:69:e0:6b:c4:3d:7b:2a:cb:d2:ef:8a:cd:cd:bd:32:4c: 4f:31:42:d5:94:69:96:14:e9:97:86:06:98:6b:a9:d9:38:97: 08:3a:e6:38:3d:f8:bd:ec:e5:49:08:cc:a3:fa:84:e6:6f:19: 02:5b:7c:ee:7c:40:a3:3c:c6:85:3f:f7:3a:67:57:70:3c:44: 72:c6:0e:8f:7a:95:50:6f:a5:69:5c:de:06:bc:47:bc:fe:2f: bd:19:d0:f8:79:38:e0:cc:8a:52:15:2b:f8:ac:63:e2:1d:d5: 24:59:a0:ea:33:76:e6:14:60:db:07:f9:2b:44:ac:d3:be:dd: 3b:fe:af:1d:98:e6:85:ae:04:a3:da:59:eb:45:fb:bc:d7:ec: 1d:a9:08:e1:e9:22:f8:ff:68:33:55:22:2a:7e:b2:61:59:9b: 9d:d0:82:5e:ed:66:cb:5e:e4:95:0c:b5:02:15:7a:18:3a:6e: 25:24:73:02:85:75:4a:c9:cf:08:f1:b1:a3:f3:d8:b8:d2:02: 14:09:63:28 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUFeifMwz1nI1O0BuqfvNU7nUiqUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzZaFw0yNjAzMDQxODQwMzZaMDMxMTAvBgNV BAMTKDIxQjcwREM2RUE0NkFBNEQyRUEyNTY2M0QyN0JDRDBDN0I3QjNENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXcqzW98BSNsLTCp3Xkm71tETl tgMIT9v2feA0p7H1WSwxV27PuktD7PH7pq78LNEiZI5Mp5Byop6GXuxhEwALknGv UWaZ9AfXR1v1BSsSGR/w+IGfM5aSSBX2DQt4aNbXq7wCrDJD5zPTC0Id6vzE3s3D Mj28AVnLIyghbysUn7uzPLlalzmRHZo/kzvrecq2T5FPfbJAyhnAhsZK65p4hfm0 fuaoUgpQDYuDfyCu/mMCecSECT2DlPRqlyNxgCMmewOIAZlRCLNJqIxjyuqz6yG5 TwpTpwTcAR7YhgjeLm03jcmphkMs3/xktym+K6GkWJe9PSHRwuRaxD9fIkKPAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhtw3G6kaqTS6i VmPSe80Me3s9YzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDlh UHZBSHk5bzlKNUxDb1o0eWlpalA2NU01U0tGRnpmZVR3aHdERE5lNHYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDlh UHZBSHk5bzlKNUxDb1o0eWlpalA2NU01U0tGRnpmZVR3aHdERE5lNHYvMS8yMUI3 MERDNkVBNDZBQTREMkVBMjU2NjNEMjdCQ0QwQzdCN0IzRDYzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB Af8EMTAvMB4EAgABMBgDBAOxF9ADBAOxVmgDBAOzbTgDBAK6+zgwDQQCAAIwBwMF ACgEFkQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAL3MA0GCSqGSIb3DQEBCwUA A4IBAQAv+fZteCSg+XTeLMW6IDnIaOEIs4gkVpbA6iH4D77ib9yRIu9TpZvgW0VA uqRmBJoFZSUnw/6nDWnga8Q9eyrL0u+Kzc29MkxPMULVlGmWFOmXhgaYa6nZOJcI OuY4Pfi97OVJCMyj+oTmbxkCW3zufECjPMaFP/c6Z1dwPERyxg6PepVQb6VpXN4G vEe8/i+9GdD4eTjgzIpSFSv4rGPiHdUkWaDqM3bmFGDbB/krRKzTvt07/q8dmOaF rgSj2lnrRfu81+wdqQjh6SL4/2gzVSIqfrJhWZud0IJe7WbLXuSVDLUCFXoYOm4l JHMChXVKyc8I8bGj89i40gIUCWMo -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:16 2025 by rpki-client