$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer File: 970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer (raw, json) Hash identifier: qjD3WZRai/VDuCjjjjy2YQiHUUUogj99QRr3A68SSbg= Subject key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2C77A2E7B00B1285C30D55710B2D3A56AAC98405 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft caRepository: rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Jun 2025 19:04:05 +0000 Certificate not after: Mon 22 Jun 2026 19:09:05 +0000 Subordinate resources: AS: 264496 IP: 131.255.224.0/22 IP: 143.255.204.0/22 IP: 170.238.72.0/22 IP: 177.55.64.0/20 IP: 186.195.160.0/22 IP: 2804:2084::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:77:a2:e7:b0:0b:12:85:c3:0d:55:71:0b:2d:3a:56:aa:c9:84:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 23 19:04:05 2025 GMT Not After : Jun 22 19:09:05 2026 GMT Subject: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:2a:83:a7:50:9d:f3:c9:16:38:e2:a7:ca: e3:cf:e5:4a:70:02:f2:41:5d:f2:c3:03:2a:f3:f3: 9f:7c:4c:73:4e:ce:eb:b6:e7:1b:dc:b9:31:be:70: cb:ae:d0:7a:a9:fa:5c:a8:73:25:dc:60:d9:d9:2f: a6:7d:7b:ce:b4:8e:30:57:dd:67:2b:22:66:74:18: 64:65:ac:c2:b8:2c:a0:45:8c:01:47:63:a6:41:02: 5c:a9:d3:9d:d7:0a:7d:94:6f:0f:94:5a:e5:dc:94: ec:0c:a1:a3:f4:df:dd:8b:b0:49:f0:c7:1c:ba:e8: fb:eb:2c:bc:1b:1c:63:6a:56:29:c9:60:de:ea:e0: c5:16:51:4f:60:c2:c8:f5:bb:01:2d:4f:46:bf:b3: 80:96:4a:2f:a3:b0:a0:c9:6e:a8:88:ca:36:55:15: 4f:b9:82:73:a1:c3:3f:43:bd:14:b2:87:2f:5e:44: bd:e4:85:fb:75:36:4e:43:31:51:3e:8a:aa:67:17: 30:00:85:d6:fd:8b:ff:cf:c7:b6:dc:73:d9:6a:13: 94:1e:bd:6e:7a:f3:cd:81:2c:69:c5:8e:81:4f:d0: f8:1a:16:f4:98:5f:70:c6:96:31:cc:38:53:6a:08: 54:a3:49:ef:c9:70:62:9f:14:56:51:8e:90:93:75: f8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.224.0/22 143.255.204.0/22 170.238.72.0/22 177.55.64.0/20 186.195.160.0/22 IPv6: 2804:2084::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264496 Signature Algorithm: sha256WithRSAEncryption c9:94:fd:be:fc:57:af:0e:b3:3e:2e:71:ec:26:4e:45:31:aa: 69:19:62:ec:c5:2c:92:58:d6:33:79:d5:5c:af:bf:48:ba:13: 41:a8:1a:86:f2:52:fa:98:53:fd:1f:9f:24:38:63:08:87:2f: 79:8b:66:44:48:77:9f:49:b2:b6:39:d8:4e:67:3f:5c:38:70: ad:c3:6c:c3:6e:03:bd:5d:88:ff:59:04:e0:2a:36:d7:44:ea: e3:79:bd:3a:44:a7:1e:94:e1:93:88:2c:52:d4:a0:15:62:71: 92:9c:44:72:e6:67:29:7e:80:3d:6f:06:b2:8e:1b:13:c9:fa: 78:73:d8:e0:14:f3:3c:cf:c5:ad:3e:07:f1:5d:67:d3:d6:3b: 20:25:0d:94:cc:30:21:85:6e:55:36:79:f5:9f:71:94:8f:07: 93:92:11:7b:24:2e:70:3b:34:cd:5b:8e:56:bf:b2:a3:73:cd: 09:f8:40:ad:a5:34:f6:75:7b:d9:37:90:9a:7a:b0:b3:57:56: a0:9a:c2:fa:db:02:77:93:33:3d:2e:79:44:1c:f5:26:45:d8: 93:6e:da:f8:52:9f:4d:07:7b:4e:68:0b:33:4e:8f:0d:7a:9a: 10:f1:65:a2:60:0b:0f:3a:27:94:04:e8:4c:cb:ef:14:55:ca: 0b:55:ba:36 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIULHei57ALEoXDDVVxCy06VqrJhAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MjMxOTA0MDVaFw0yNjA2MjIxOTA5MDVaMDMxMTAvBgNV BAMTKDk3MENDMjZERDBDMzUzQzI0NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4CqDp1Cd88kWOOKnyuPP5Upw AvJBXfLDAyrz8598THNOzuu25xvcuTG+cMuu0Hqp+lyocyXcYNnZL6Z9e860jjBX 3WcrImZ0GGRlrMK4LKBFjAFHY6ZBAlyp053XCn2Ubw+UWuXclOwMoaP0392LsEnw xxy66PvrLLwbHGNqVinJYN7q4MUWUU9gwsj1uwEtT0a/s4CWSi+jsKDJbqiIyjZV FU+5gnOhwz9DvRSyhy9eRL3khft1Nk5DMVE+iqpnFzAAhdb9i//Px7bcc9lqE5Qe vW56882BLGnFjoFP0PgaFvSYX3DGljHMOFNqCFSjSe/JcGKfFFZRjpCTdfh/AgMB AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXDMJt0MNTwkT3 L1tirktbDuWufDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR25S Ymp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZabmcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0du UmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAvOTcw Q0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIwRUU1QUU3Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCg//gAwQCj//MAwQCqu5IAwQEsTdAAwQCusOgMA0E AgACMAcDBQAoBCCEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJMDANBgkqhkiG 9w0BAQsFAAOCAQEAyZT9vvxXrw6zPi5x7CZORTGqaRli7MUskljWM3nVXK+/SLoT QagahvJS+phT/R+fJDhjCIcveYtmREh3n0mytjnYTmc/XDhwrcNsw24DvV2I/1kE 4Co210Tq43m9OkSnHpThk4gsUtSgFWJxkpxEcuZnKX6APW8Gso4bE8n6eHPY4BTz PM/FrT4H8V1n09Y7ICUNlMwwIYVuVTZ59Z9xlI8Hk5IReyQucDs0zVuOVr+yo3PN CfhAraU09nV72TeQmnqws1dWoJrC+tsCd5MzPS55RBz1JkXYk27a+FKfTQd7TmgL M06PDXqaEPFlomALDzonlAToTMvvFFXKC1W6Ng== -----END CERTIFICATE-----Generated at Sun Nov 2 23:04:11 2025 by rpki-client