$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FD3341671CEE00BE6A1E79864057B66AF83F10E.cer File: 2FD3341671CEE00BE6A1E79864057B66AF83F10E.cer (raw, json) Hash identifier: yyHdTD/vCgsXNgmToYKN8DVBSmcIQM0bv8N8krqSizM= Subject key identifier: 2F:D3:34:16:71:CE:E0:0B:E6:A1:E7:98:64:05:7B:66:AF:83:F1:0E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 17BF45A2C3149C952252065C5C17AAA1AE48FE18 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/2FD3341671CEE00BE6A1E79864057B66AF83F10E.mft caRepository: rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 23:27:06 +0000 Certificate not after: Tue 30 Jun 2026 23:32:06 +0000 Subordinate resources: AS: 262376 IP: 143.255.168.0/22 IP: 177.74.148.0/22 IP: 177.128.168.0/22 IP: 2804:10d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 00:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bf:45:a2:c3:14:9c:95:22:52:06:5c:5c:17:aa:a1:ae:48:fe:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 23:27:06 2025 GMT Not After : Jun 30 23:32:06 2026 GMT Subject: CN=2FD3341671CEE00BE6A1E79864057B66AF83F10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:87:28:f3:bf:18:22:a4:dd:44:c8:5e:df: 22:05:e1:19:5d:aa:e4:2d:a0:76:a1:28:48:e6:40: 74:77:ec:b3:19:1f:9e:a9:28:57:5c:8d:58:dc:9a: 6c:2c:00:8f:c0:cb:2a:83:ae:ce:f2:da:a8:fe:c4: 07:59:92:0b:fc:40:4f:28:53:3d:b3:89:a9:61:27: 74:71:9e:c4:2f:95:7c:74:73:71:6b:c2:8d:1a:7b: 67:a9:c9:0b:37:2f:93:8a:88:ba:4b:50:15:61:31: d4:6a:7d:f7:b2:cf:a3:bd:5f:96:f0:16:93:5e:3b: 5e:30:6b:7b:1a:7d:fc:d5:4c:3e:7e:c3:ef:a3:d5: f8:56:48:22:e5:48:88:12:1d:42:cb:97:1b:ff:44: 89:a3:44:4f:09:89:6e:53:e0:63:21:c3:f7:dd:25: 76:ea:1f:e6:86:ef:19:c8:8a:5f:aa:56:1e:1c:76: d1:ca:b6:0a:ce:22:92:12:7d:4b:ea:07:e3:e7:fa: 6c:80:b8:cd:3b:26:82:c1:c9:25:92:23:f0:db:53: 90:0c:10:23:b8:a7:77:c5:a1:f0:29:d3:ee:ff:70: f0:10:dc:d3:f3:e1:0f:8e:88:af:77:7e:b1:99:4c: af:03:7a:79:96:de:a5:4a:53:2c:d3:6b:45:ee:a9: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:D3:34:16:71:CE:E0:0B:E6:A1:E7:98:64:05:7B:66:AF:83:F1:0E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/2FD3341671CEE00BE6A1E79864057B66AF83F10E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.168.0/22 177.74.148.0/22 177.128.168.0/22 IPv6: 2804:10d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262376 Signature Algorithm: sha256WithRSAEncryption 30:47:cf:00:6e:53:96:83:54:2c:e8:ba:5d:14:fd:d2:56:54: c9:95:12:d3:24:1f:4f:65:49:be:52:d1:f1:89:86:12:e2:10: 52:f4:0a:b4:24:26:a7:9e:2f:97:eb:f9:06:f7:51:c9:2c:e2: 60:78:b2:5d:43:25:0b:60:59:58:ff:f4:0c:df:d2:91:51:ef: 1e:bb:e5:ff:4f:a7:d6:77:c2:85:53:8c:8f:8f:2d:57:72:00: 17:48:10:d1:fb:25:90:cd:02:ef:0e:74:46:f5:44:2c:d4:ec: 63:0c:53:bc:1c:b7:38:33:ea:32:c6:e1:f2:e5:09:6f:a8:6e: aa:2c:b3:f5:5e:ea:ab:56:6a:21:09:ef:ad:a4:8e:d6:6d:1b: 94:21:eb:63:da:84:ed:a8:43:93:4e:1e:46:83:46:71:0e:cd: cc:cd:b0:66:29:e4:fd:e0:02:c6:40:fc:3a:c6:e6:b7:3d:4e: 17:d0:57:4c:66:94:0e:f1:72:10:56:f3:28:da:d8:07:a0:1c: 52:b6:a4:53:ea:07:6a:73:ea:19:67:0f:e9:13:f4:a3:2a:0b: f0:2e:5d:4f:d6:45:b3:84:2a:33:17:57:7e:3f:bd:ee:40:56: dc:5e:ce:4a:fc:b0:e0:27:62:6b:84:3d:92:4d:53:73:79:aa: 8e:83:b6:8a -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUF79FosMUnJUiUgZcXBeqoa5I/hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA3MDEyMzI3MDZaFw0yNjA2MzAyMzMyMDZaMDMxMTAvBgNV BAMTKDJGRDMzNDE2NzFDRUUwMEJFNkExRTc5ODY0MDU3QjY2QUY4M0YxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDIco878YIqTdRMhe3yIF4Rld quQtoHahKEjmQHR37LMZH56pKFdcjVjcmmwsAI/AyyqDrs7y2qj+xAdZkgv8QE8o Uz2zialhJ3RxnsQvlXx0c3Frwo0ae2epyQs3L5OKiLpLUBVhMdRqffeyz6O9X5bw FpNeO14wa3saffzVTD5+w++j1fhWSCLlSIgSHULLlxv/RImjRE8JiW5T4GMhw/fd JXbqH+aG7xnIil+qVh4cdtHKtgrOIpISfUvqB+Pn+myAuM07JoLBySWSI/DbU5AM ECO4p3fFofAp0+7/cPAQ3NPz4Q+OiK93frGZTK8DenmW3qVKUyzTa0XuqbofAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv0zQWcc7gC+ah 55hkBXtmr4PxDjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEI3 WXd6UVhSbjZ2YWo3REpIUHFqTWlRSGlhd1ZFQkNKRE5ydDhmWk1aV2svMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhC N1l3elFYUm42dmFqN0RKSFBxak1pUUhpYXdWRUJDSkROcnQ4ZlpNWldrLzAvMkZE MzM0MTY3MUNFRTAwQkU2QTFFNzk4NjQwNTdCNjZBRjgzRjEwRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCj/+oAwQCsUqUAwQCsYCoMA0EAgACMAcDBQAoBBDU MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQA6DANBgkqhkiG9w0BAQsFAAOCAQEA MEfPAG5TloNULOi6XRT90lZUyZUS0yQfT2VJvlLR8YmGEuIQUvQKtCQmp54vl+v5 BvdRySziYHiyXUMlC2BZWP/0DN/SkVHvHrvl/0+n1nfChVOMj48tV3IAF0gQ0fsl kM0C7w50RvVELNTsYwxTvBy3ODPqMsbh8uUJb6huqiyz9V7qq1ZqIQnvraSO1m0b lCHrY9qE7ahDk04eRoNGcQ7NzM2wZink/eACxkD8Osbmtz1OF9BXTGaUDvFyEFbz KNrYB6AcUrakU+oHanPqGWcP6RP0oyoL8C5dT9ZFs4QqMxdXfj+97kBW3F7OSvyw 4Cdia4Q9kk1Tc3mqjoO2ig== -----END CERTIFICATE-----Generated at Fri Jul 4 07:53:07 2025 by rpki-client