$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer File: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer (raw, json) Hash identifier: z8pjroO+UIh/EFgRbi0QFZo/akxlOVBUEo5fyiinnNw= Subject key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 080F4B8FFF34B02953EDA17BA07B131D41103395 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft caRepository: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 16 Mar 2025 13:36:21 +0000 Certificate not after: Sun 15 Mar 2026 13:41:21 +0000 Subordinate resources: AS: 270770 IP: 189.127.138.0/23 IP: 2801:80:3980::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0f:4b:8f:ff:34:b0:29:53:ed:a1:7b:a0:7b:13:1d:41:10:33:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 16 13:36:21 2025 GMT Not After : Mar 15 13:41:21 2026 GMT Subject: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:d3:0b:75:9a:51:a7:0a:d0:b1:0a:f4:61: 04:39:d8:df:0b:a0:4e:89:a7:90:1b:e9:47:6d:0e: a0:80:72:90:67:ca:6d:a3:dc:8d:e2:05:65:eb:e9: ca:53:ef:3f:41:37:72:4a:46:2c:2a:27:2e:3e:96: 14:07:1c:7a:21:87:96:df:ea:8c:d8:94:a4:cf:c7: 10:8f:25:85:c7:b9:8b:ad:ba:05:d7:5f:2d:30:68: 98:be:a4:f2:fc:ac:6b:b6:cc:18:2e:08:39:dd:80: 92:37:40:66:da:83:e4:c0:b4:3f:75:e1:f1:fc:8e: d8:5c:cf:ad:eb:52:8c:e2:c6:83:98:68:72:57:e2: 9d:97:53:c9:5c:96:c4:3f:e9:f0:c3:76:75:3b:65: 00:f9:b6:a8:d0:f6:7a:50:e9:e7:41:6a:c4:a2:74: c1:7b:8c:a6:86:b9:a5:c6:81:e1:a9:27:b2:ab:69: ec:fd:d2:14:b7:a1:c4:cc:55:d3:82:08:27:06:1e: 34:d9:26:d8:2c:c9:87:57:5d:3d:90:85:0b:14:5c: 63:0e:4f:32:62:d5:da:64:d1:ee:f8:62:ea:5b:8f: e7:ca:8b:87:5e:26:5d:03:84:5f:71:93:6d:1f:87: b3:e8:9a:58:2a:6b:ef:69:30:65:1c:25:e3:0e:02: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.138.0/23 IPv6: 2801:80:3980::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270770 Signature Algorithm: sha256WithRSAEncryption 8b:eb:e9:4f:5e:87:d5:3b:1a:08:c8:e4:15:f9:5a:79:37:ea: e2:fa:b6:41:12:89:43:b3:a0:24:8e:bb:b1:b2:7a:33:f1:6e: 73:16:c8:8e:bb:17:d9:fc:05:be:9a:ef:8a:d7:89:59:3a:cf: f1:e1:77:b8:dd:c0:de:75:4a:8f:53:5d:af:e1:eb:d4:37:96: c0:f4:84:4c:73:06:87:d6:4b:6c:28:d2:d9:96:0c:59:e2:ee: e4:e1:d7:71:5f:2c:b5:3e:b4:96:d2:e8:fb:42:28:4e:1a:e8: 8f:89:60:5f:d3:04:7e:4a:19:48:e9:2a:36:46:e5:94:e3:13: 66:7b:5c:db:bc:2f:24:a9:be:3e:35:d9:5b:e4:7a:a4:bb:de: fc:5f:08:4f:4e:39:cf:28:42:8b:19:3d:c1:cf:96:e6:93:99: 15:b6:a5:a0:05:ca:15:f0:65:0d:c6:35:3f:ad:f3:4a:37:2f: 8c:59:7a:66:90:21:72:a8:44:b6:49:c0:bf:b6:d2:8b:e8:c3: bf:58:61:82:90:7e:81:9c:c5:4d:1a:f0:b8:4a:2d:54:5a:8d: 67:14:be:f9:91:46:4e:e2:16:b3:7f:92:4c:cf:fd:00:5d:b6: 71:62:4e:a5:34:92:b2:25:d6:8f:6b:3c:89:53:3a:d4:01:0c: b5:cb:d0:f9 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUCA9Lj/80sClT7aF7oHsTHUEQM5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTYxMzM2MjFaFw0yNjAzMTUxMzQxMjFaMDMxMTAvBgNV BAMTKDJGRThBNjU5REI0QkVEQTFFMEI5Q0Y2MzFDRDJCQTgwMkE3N0M2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmdMLdZpRpwrQsQr0YQQ52N8L oE6Jp5Ab6UdtDqCAcpBnym2j3I3iBWXr6cpT7z9BN3JKRiwqJy4+lhQHHHohh5bf 6ozYlKTPxxCPJYXHuYutugXXXy0waJi+pPL8rGu2zBguCDndgJI3QGbag+TAtD91 4fH8jthcz63rUozixoOYaHJX4p2XU8lclsQ/6fDDdnU7ZQD5tqjQ9npQ6edBasSi dMF7jKaGuaXGgeGpJ7Kraez90hS3ocTMVdOCCCcGHjTZJtgsyYdXXT2QhQsUXGMO TzJi1dpk0e74Yupbj+fKi4deJl0DhF9xk20fh7Pomlgqa+9pMGUcJeMOAnbDAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv6KZZ20vtoeC5 z2Mc0rqAKnfGVDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5G RGNwUUJITU1mZXoydnl1M0JqVEhNaUpEeWEzZ0t1U3BweGVMdEc1VFgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu RkRjcFFCSE1NZmV6MnZ5dTNCalRITWlKRHlhM2dLdVNwcHhlTHRHNVRYLzEvMkZF OEE2NTlEQjRCRURBMUUwQjlDRjYzMUNEMkJBODAyQTc3QzY1NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQBvX+KMA8EAgACMAkDBwAoAQCAOYAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCGyMA0GCSqGSIb3DQEBCwUAA4IBAQCL6+lPXofVOxoI yOQV+Vp5N+ri+rZBEolDs6Akjruxsnoz8W5zFsiOuxfZ/AW+mu+K14lZOs/x4Xe4 3cDedUqPU12v4evUN5bA9IRMcwaH1ktsKNLZlgxZ4u7k4ddxXyy1PrSW0uj7QihO GuiPiWBf0wR+ShlI6So2RuWU4xNme1zbvC8kqb4+Ndlb5Hqku978XwhPTjnPKEKL GT3Bz5bmk5kVtqWgBcoV8GUNxjU/rfNKNy+MWXpmkCFyqES2ScC/ttKL6MO/WGGC kH6BnMVNGvC4Si1UWo1nFL75kUZO4hazf5JMz/0AXbZxYk6lNJKyJdaPazyJUzrU AQy1y9D5 -----END CERTIFICATE-----Generated at Fri Apr 4 19:47:03 2025 by rpki-client