$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer File: 2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer (raw, json) Hash identifier: jvPutlrFtHzpoZxsJW6pVei8E3PaUii/LubBubdzLr4= Subject key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4F7956453AD9FBFEEF3B632711F8F73843B4AB04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft caRepository: rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 18:49:52 +0000 Certificate not after: Thu 05 Mar 2026 18:54:52 +0000 Subordinate resources: AS: 264996 IP: 45.179.128.0/22 IP: 170.84.84.0/22 IP: 2804:3124::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 01:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:79:56:45:3a:d9:fb:fe:ef:3b:63:27:11:f8:f7:38:43:b4:ab:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 18:49:52 2025 GMT Not After : Mar 5 18:54:52 2026 GMT Subject: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:59:ea:fe:da:f2:59:40:95:33:bc:79:10: 93:10:83:9b:42:a4:22:b9:68:d0:f1:80:7a:e4:b3: a1:4c:b7:b9:69:83:26:4e:a8:4d:8a:32:da:c4:8e: 19:e6:36:29:70:bb:28:a6:e0:68:9d:1c:20:24:cf: c5:e0:82:55:74:03:e8:c5:ec:16:c1:d8:bd:c5:0f: 62:dd:f9:ca:b6:7a:64:57:2b:f7:94:a4:07:e0:41: 57:a4:70:b1:d5:46:eb:30:f2:6c:37:9a:f6:3b:a2: c8:ce:0a:d4:b8:6b:5d:fb:09:70:02:a8:46:13:b8: bb:09:77:c1:21:34:26:04:9f:f6:0c:30:7f:d8:56: 69:a7:a5:96:ef:38:50:84:13:8b:be:ed:7b:7d:4c: ef:39:e3:f1:0c:c8:dc:43:e1:fb:d3:19:ae:d1:54: 98:3e:f1:00:77:14:1d:d4:a9:8f:de:6d:d3:0a:29: 39:62:08:aa:88:7c:52:5f:9a:f5:a5:b1:8e:fa:32: 62:b2:19:d9:d6:94:ba:82:30:89:00:bf:7a:8f:54: d6:3b:75:da:e1:be:d7:5f:06:d0:0c:be:36:52:24: 28:45:9e:e0:60:ab:bc:85:77:a8:df:ac:fd:da:89: 86:7b:e4:44:13:30:43:71:6a:cf:69:1e:17:9a:ca: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.179.128.0/22 170.84.84.0/22 IPv6: 2804:3124::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264996 Signature Algorithm: sha256WithRSAEncryption 44:09:f3:29:e5:b0:0f:a7:67:9a:45:bb:a2:4c:a5:45:07:ff: 23:52:8a:74:ab:15:77:05:00:12:6b:3c:34:cc:1a:b2:0b:4b: 93:e7:02:44:1b:88:4d:29:bf:40:20:6a:6c:8a:c7:6d:6a:d2: 35:77:a4:96:3a:88:78:6c:77:d7:7f:ce:02:df:a6:6a:d5:0e: e4:09:b4:97:7d:dd:90:47:94:dd:f6:c9:cf:3a:69:ad:ee:a2: b5:d7:0e:d1:e7:cc:65:02:4f:3b:65:f5:0e:7a:d7:bd:2e:1e: e0:12:8d:90:10:f7:b6:f3:46:d8:e7:50:8d:47:30:bf:24:38: a6:df:0b:ed:46:2b:69:51:fe:14:3e:66:c7:81:f2:32:4d:7f: 64:57:7e:2e:bf:e4:b6:cb:19:38:a6:23:a2:9d:71:4f:9e:a9: a1:15:bd:28:e0:05:36:d9:b4:8d:23:f5:a6:95:00:27:2f:48: c2:d4:98:e7:a9:37:0c:0b:bc:5f:9e:8e:da:96:bc:c4:88:4d: b9:06:f6:e0:97:ce:3a:a7:99:1d:dc:5b:e2:79:e5:56:fe:c8: 5f:cc:34:11:00:8c:ce:cf:4e:12:dc:6d:ef:d9:5a:0a:d1:9e: 91:1f:3e:a4:ed:6e:23:c0:17:d1:34:ba:ee:b3:09:b6:8f:a4: bd:b3:41:69 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUT3lWRTrZ+/7vO2MnEfj3OEO0qwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxODQ5NTJaFw0yNjAzMDUxODU0NTJaMDMxMTAvBgNV BAMTKDJGM0YxMkU5NDQ3MTlGMjRBOEQxQTRCM0M3OTgwRjcwQTZEOTlENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVplnq/tryWUCVM7x5EJMQg5tC pCK5aNDxgHrks6FMt7lpgyZOqE2KMtrEjhnmNilwuyim4GidHCAkz8XgglV0A+jF 7BbB2L3FD2Ld+cq2emRXK/eUpAfgQVekcLHVRusw8mw3mvY7osjOCtS4a137CXAC qEYTuLsJd8EhNCYEn/YMMH/YVmmnpZbvOFCEE4u+7Xt9TO854/EMyNxD4fvTGa7R VJg+8QB3FB3UqY/ebdMKKTliCKqIfFJfmvWlsY76MmKyGdnWlLqCMIkAv3qPVNY7 ddrhvtdfBtAMvjZSJChFnuBgq7yFd6jfrP3aiYZ75EQTMENxas9pHheayo2/AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvPxLpRHGfJKjR pLPHmA9wptmdaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3N2 am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5ZXQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3N2 am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5ZXQvMS8yRjNG MTJFOTQ0NzE5RjI0QThEMUE0QjNDNzk4MEY3MEE2RDk5RDY5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIts4ADBAKqVFQwDQQCAAIwBwMFACgEMSQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAskMA0GCSqGSIb3DQEBCwUAA4IBAQBECfMp5bAP p2eaRbuiTKVFB/8jUop0qxV3BQASazw0zBqyC0uT5wJEG4hNKb9AIGpsisdtatI1 d6SWOoh4bHfXf84C36Zq1Q7kCbSXfd2QR5Td9snPOmmt7qK11w7R58xlAk87ZfUO ete9Lh7gEo2QEPe280bY51CNRzC/JDim3wvtRitpUf4UPmbHgfIyTX9kV34uv+S2 yxk4piOinXFPnqmhFb0o4AU22bSNI/WmlQAnL0jC1JjnqTcMC7xfno7alrzEiE25 Bvbgl846p5kd3FvieeVW/shfzDQRAIzOz04S3G3v2VoK0Z6RHz6k7W4jwBfRNLru swm2j6S9s0Fp -----END CERTIFICATE-----Generated at Wed Apr 9 03:00:14 2025 by rpki-client