$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer File: 70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.cer (raw, json) Hash identifier: Bw8xkBqPAG7NOq+JtDJLo2SKtvHEWXcaL4rWUVlNuBU= Subject key identifier: 70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6064457AFCD43943370CCFDF84263FD50123A355 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.mft caRepository: rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 19 Feb 2025 20:17:38 +0000 Certificate not after: Wed 18 Feb 2026 20:22:38 +0000 Subordinate resources: AS: 270716 IP: 189.127.188.0/22 IP: 2804:7044::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:64:45:7a:fc:d4:39:43:37:0c:cf:df:84:26:3f:d5:01:23:a3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 19 20:17:38 2025 GMT Not After : Feb 18 20:22:38 2026 GMT Subject: CN=70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:a8:6c:94:cd:7a:b7:96:08:35:4e:4c:05: 2f:28:6c:e9:4c:8b:14:82:bc:d6:34:61:6a:2e:80: 17:72:d1:44:26:ae:9e:c6:9b:10:1b:66:b2:0f:c5: 7f:cb:49:d2:ab:e7:0e:d4:be:c6:5c:60:7d:46:d3: a4:66:96:72:f5:20:94:e2:1d:ee:bb:34:7a:9b:86: 07:eb:e1:14:c9:f9:f6:4d:df:2b:42:4d:d1:f1:5c: f7:b0:c7:da:4e:21:2d:45:08:e2:a6:54:88:4a:f7: e1:ed:b9:8b:8d:32:36:c5:c4:cd:bc:16:f4:66:b3: 72:63:27:c5:cc:3f:45:7b:0c:7c:67:12:71:d5:ad: f4:37:45:6a:60:77:9f:56:39:87:54:e2:c1:51:39: 56:7a:02:bc:52:80:07:e9:75:07:76:3c:ea:27:60: 51:80:1e:34:69:7d:91:df:d5:ee:5f:13:ad:ef:de: a1:c4:32:0d:13:a1:2e:4a:34:38:ea:9f:b6:48:67: 69:90:56:9d:10:10:f3:07:08:94:cb:48:9c:b7:31: 03:6f:d0:fb:76:df:59:22:f0:c3:cf:b4:17:9b:36: 71:ba:0c:8f:28:52:ca:37:73:4e:7e:27:39:aa:e1: 68:b9:43:a1:09:32:b7:1c:ac:b1:2f:3f:e0:ed:e8: c7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:F7:5C:6F:26:DB:C3:FF:3E:C6:7E:B2:49:E3:8F:BD:8F:00:FE:39 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/70F75C6F26DBC3FF3EC67EB249E38FBD8F00FE39.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.188.0/22 IPv6: 2804:7044::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270716 Signature Algorithm: sha256WithRSAEncryption 15:16:b3:8e:48:a9:dc:41:11:48:dd:4c:93:1b:35:1e:83:5c: 70:42:ba:37:d3:7f:ec:4c:aa:c6:b3:9f:b6:8d:a8:9e:03:12: 20:82:c9:b8:f8:9e:6c:b3:a7:cd:b6:8c:83:b9:5b:ba:74:cd: 6f:f0:c6:de:37:5a:98:86:0c:e9:34:8a:bb:6d:a1:40:63:e5: 85:4a:db:42:86:ee:f9:b8:9d:46:9f:49:ff:20:68:6c:f5:7a: 93:6a:f0:87:2e:6a:87:ef:20:64:07:68:a8:96:c8:c5:02:aa: 95:b7:d5:dc:0f:80:81:7f:2d:19:e9:c0:aa:ed:71:1a:2d:7d: a8:0a:ea:96:1b:6d:31:63:f2:f7:2a:cd:a4:dd:10:01:ef:44: bd:3f:87:22:3a:18:5a:8d:41:d4:e5:75:d9:14:1f:75:48:cb: 49:62:d0:1a:3b:f2:6b:e7:d5:d5:0c:3d:c5:29:f6:f3:35:01: 91:32:35:48:ee:4f:98:73:24:a5:9b:0d:73:cc:40:d2:c1:15: 74:f6:f8:74:05:4b:17:0a:9a:e8:a5:52:f3:0e:8a:e1:d3:74: 21:44:6f:9b:7b:ae:32:68:ae:b9:74:62:11:33:75:15:ee:27: 89:cd:66:0d:d4:e1:9e:71:ed:25:bc:aa:cc:c5:12:24:ca:97: 83:3a:86:3a -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUYGRFevzUOUM3DM/fhCY/1QEjo1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTkyMDE3MzhaFw0yNjAyMTgyMDIyMzhaMDMxMTAvBgNV BAMTKDcwRjc1QzZGMjZEQkMzRkYzRUM2N0VCMjQ5RTM4RkJEOEYwMEZFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVE6hslM16t5YINU5MBS8obOlM ixSCvNY0YWougBdy0UQmrp7GmxAbZrIPxX/LSdKr5w7UvsZcYH1G06RmlnL1IJTi He67NHqbhgfr4RTJ+fZN3ytCTdHxXPewx9pOIS1FCOKmVIhK9+HtuYuNMjbFxM28 FvRms3JjJ8XMP0V7DHxnEnHVrfQ3RWpgd59WOYdU4sFROVZ6ArxSgAfpdQd2POon YFGAHjRpfZHf1e5fE63v3qHEMg0ToS5KNDjqn7ZIZ2mQVp0QEPMHCJTLSJy3MQNv 0Pt231ki8MPPtBebNnG6DI8oUso3c05+Jzmq4Wi5Q6EJMrccrLEvP+Dt6McNAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRw91xvJtvD/z7G frJJ44+9jwD+OTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2 dDQxYVIyQkhUQmRRS2VrQlAxaGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWFh2 dDQxYVIyQkhUQmRRS2VrQlAxaGh6Qks0N2s0SFd2djc4VTVDNHliVS8wLzcwRjc1 QzZGMjZEQkMzRkYzRUM2N0VCMjQ5RTM4RkJEOEYwMEZFMzkubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAr1/vDANBAIAAjAHAwUAKARwRDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEIXwwDQYJKoZIhvcNAQELBQADggEBABUWs45IqdxBEUjdTJMb NR6DXHBCujfTf+xMqsazn7aNqJ4DEiCCybj4nmyzp822jIO5W7p0zW/wxt43WpiG DOk0irttoUBj5YVK20KG7vm4nUafSf8gaGz1epNq8IcuaofvIGQHaKiWyMUCqpW3 1dwPgIF/LRnpwKrtcRotfagK6pYbbTFj8vcqzaTdEAHvRL0/hyI6GFqNQdTlddkU H3VIy0li0Bo78mvn1dUMPcUp9vM1AZEyNUjuT5hzJKWbDXPMQNLBFXT2+HQFSxcK muilUvMOiuHTdCFEb5t7rjJorrl0YhEzdRXuJ4nNZg3U4Z5x7SW8qszFEiTKl4M6 hjo= -----END CERTIFICATE-----Generated at Fri Apr 4 22:51:52 2025 by rpki-client