$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer File: 6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer (raw, json) Hash identifier: pDeD+zAb17Tkh6koDlQ6Nb4FHHe+xV1SCbXQmHtC6Co= Subject key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6BDAB332AE2E982C17CD23A9A77FFCAD4261F298 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft caRepository: rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 22:15:28 +0000 Certificate not after: Thu 05 Mar 2026 22:20:28 +0000 Subordinate resources: AS: 266506 IP: 170.244.180.0/22 IP: 2804:38dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:da:b3:32:ae:2e:98:2c:17:cd:23:a9:a7:7f:fc:ad:42:61:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 22:15:28 2025 GMT Not After : Mar 5 22:20:28 2026 GMT Subject: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:09:5a:8e:97:21:a4:32:e0:70:7a:41:6f: 9a:55:39:64:7c:e6:54:e6:76:8c:26:04:78:d4:89: df:f3:bd:fb:f5:f1:57:f9:d0:e4:8c:4e:bf:fc:14: 51:cd:b9:93:b8:47:3a:30:93:d3:eb:63:17:fa:20: e3:d3:11:ff:76:50:2e:69:b5:66:51:39:06:6a:ae: ff:78:68:7c:c5:41:bf:08:17:e2:f1:76:2a:6a:e5: 3e:58:42:3e:21:04:c7:f6:9c:17:a9:53:12:ee:db: c9:2c:e8:c0:7f:23:47:3a:85:bb:6b:c8:ce:d2:24: 9b:a2:07:98:9f:97:dd:1d:f6:80:85:50:1c:39:51: dd:50:65:14:6e:9d:fa:ff:fc:09:48:20:61:59:46: 71:2d:09:f7:00:4e:83:cc:8c:2f:a3:20:7a:2a:aa: 1f:00:fa:16:0b:ff:9c:31:57:d6:da:e9:eb:58:8a: 3d:d5:fc:58:ca:07:c9:75:32:b6:b7:28:d7:50:43: 9e:85:7f:dc:90:04:e8:a2:4e:d4:3b:bc:62:7c:14: 19:6f:b2:4c:96:2a:11:5f:15:1f:7e:ea:d3:1b:75: ed:15:72:05:c0:d3:ea:bd:eb:71:00:46:01:3d:c7: 35:c8:c9:01:79:ca:8b:23:10:61:ca:2b:56:cd:dd: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.180.0/22 IPv6: 2804:38dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266506 Signature Algorithm: sha256WithRSAEncryption 8e:36:d9:2e:ee:39:fc:47:59:4a:cd:e5:eb:9d:f9:fa:f2:cc: c6:dd:63:91:97:40:cd:ea:c2:c6:b8:e9:68:99:33:90:5f:ae: d1:d6:4a:8e:89:0e:39:bc:09:30:f4:89:13:4f:c5:0f:49:44: ac:b7:8e:cf:d9:35:ce:66:03:e6:22:b3:86:04:a2:3c:9c:63: 32:eb:3c:2f:56:78:94:37:14:9d:3f:59:aa:00:e3:eb:cf:5e: 66:74:4d:b8:c6:0a:32:63:5c:50:4f:25:9a:3b:f1:af:bb:ad: eb:17:6c:fb:0c:c5:25:f1:a1:3e:f3:c9:88:12:58:26:f2:4a: dd:a2:bd:3b:b9:37:57:2c:7c:60:67:59:aa:9f:84:b4:0d:e4: 6e:d5:00:f2:e8:47:d6:c1:63:87:07:48:07:b8:4c:a1:68:c8: 02:ea:3f:ed:00:0c:30:55:6b:36:68:e1:b8:69:aa:8a:c9:53: 56:0b:e9:27:ac:38:0a:94:b7:e8:6e:16:a0:43:6b:14:da:1f: 3f:bc:45:59:a5:8a:9d:53:5d:3a:c2:f5:c1:b8:cf:49:52:c0: 03:79:d5:12:d1:1b:4f:e3:78:0b:ef:88:bf:6b:0f:c8:ed:7b: 60:c8:6b:16:c0:a7:65:ee:ec:0a:84:aa:92:65:e9:c4:f8:9b: 10:82:e6:11 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUa9qzMq4umCwXzSOpp3/8rUJh8pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMjE1MjhaFw0yNjAzMDUyMjIwMjhaMDMxMTAvBgNV BAMTKDZGMzRBREQ0QjlGN0JEMUIyQTcyMkUxRTExQjk1MUZDN0FDQTIwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwwlajpchpDLgcHpBb5pVOWR8 5lTmdowmBHjUid/zvfv18Vf50OSMTr/8FFHNuZO4Rzowk9PrYxf6IOPTEf92UC5p tWZROQZqrv94aHzFQb8IF+Lxdipq5T5YQj4hBMf2nBepUxLu28ks6MB/I0c6hbtr yM7SJJuiB5ifl90d9oCFUBw5Ud1QZRRunfr//AlIIGFZRnEtCfcAToPMjC+jIHoq qh8A+hYL/5wxV9ba6etYij3V/FjKB8l1Mra3KNdQQ56Ff9yQBOiiTtQ7vGJ8FBlv skyWKhFfFR9+6tMbde0VcgXA0+q963EARgE9xzXIyQF5yosjEGHKK1bN3ZTtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvNK3Uufe9Gypy Lh4RuVH8esog7TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRG dWtrcXh0d1FVUG53d3c2U1pkekJaSDZOeGl4QTU4azFER0VQbzhyNnQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0 RnVra3F4dHdRVVBud3d3NlNaZHpCWkg2TnhpeEE1OGsxREdFUG84cjZ0LzEvNkYz NEFERDRCOUY3QkQxQjJBNzIyRTFFMTFCOTUxRkM3QUNBMjBFRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvS0MA0EAgACMAcDBQAoBDjcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRCjANBgkqhkiG9w0BAQsFAAOCAQEAjjbZLu45/EdZSs3l 6535+vLMxt1jkZdAzerCxrjpaJkzkF+u0dZKjokOObwJMPSJE0/FD0lErLeOz9k1 zmYD5iKzhgSiPJxjMus8L1Z4lDcUnT9ZqgDj689eZnRNuMYKMmNcUE8lmjvxr7ut 6xds+wzFJfGhPvPJiBJYJvJK3aK9O7k3Vyx8YGdZqp+EtA3kbtUA8uhH1sFjhwdI B7hMoWjIAuo/7QAMMFVrNmjhuGmqislTVgvpJ6w4CpS36G4WoENrFNofP7xFWaWK nVNdOsL1wbjPSVLAA3nVEtEbT+N4C++Iv2sPyO17YMhrFsCnZe7sCoSqkmXpxPib EILmEQ== -----END CERTIFICATE-----Generated at Sat Apr 5 03:51:54 2025 by rpki-client