$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer File: CA70F9A507FA2985459107906414142C8199804F.cer (raw, json) Hash identifier: TsX6088QEr54j1yaieDL9shoaueDLZ4IHImbsZqUG18= Subject key identifier: CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1238F68509325A07C2A6EFA0B786CEF3C531A17B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft caRepository: rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 16 May 2025 15:22:50 +0000 Certificate not after: Fri 15 May 2026 15:27:50 +0000 Subordinate resources: AS: 274799 IP: 2804:93c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 11:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:38:f6:85:09:32:5a:07:c2:a6:ef:a0:b7:86:ce:f3:c5:31:a1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 16 15:22:50 2025 GMT Not After : May 15 15:27:50 2026 GMT Subject: CN=CA70F9A507FA2985459107906414142C8199804F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:e1:62:9f:45:12:f7:84:2d:17:ea:06:e1: f7:5f:57:93:de:4e:f1:8b:c1:6f:51:38:41:b9:f9: f5:dd:f5:49:4b:d2:29:a9:44:95:ed:d8:46:8a:7f: 34:69:f5:a1:65:51:06:23:33:cc:34:82:4d:a1:44: 69:f0:a6:97:17:43:bb:29:1e:bb:54:b0:d7:24:38: fe:8e:44:fa:b1:21:2d:b2:f5:05:f2:cd:ff:a6:08: 2a:be:19:07:59:85:2d:e6:8b:75:56:8c:e4:3c:60: 01:d8:fe:44:68:8e:75:ac:9f:9e:b5:38:5e:7e:02: 47:27:93:c7:ac:cc:93:f7:bb:b4:8e:60:bb:ad:76: fb:e2:fb:9e:05:1c:98:91:d4:9f:71:cd:d0:86:9e: eb:f6:91:28:67:76:19:48:43:b2:4e:ae:2b:80:fd: c2:f0:87:56:cc:d5:23:a9:d4:d1:fd:5f:3e:ba:94: ac:c2:52:9a:a3:18:61:8e:22:0d:40:2e:13:e9:84: 6b:54:6f:1c:c1:7d:5a:da:c3:15:d3:c4:c4:d4:ab: d2:77:ea:d9:c7:b0:81:60:8a:23:00:52:c9:f3:86: 4b:75:16:3a:1a:74:2e:b7:c8:23:86:62:30:58:e8: bf:c0:9f:25:90:ae:50:e1:14:4e:18:51:e7:40:fe: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:93c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274799 Signature Algorithm: sha256WithRSAEncryption a5:21:0f:f8:aa:df:63:c3:a7:92:35:a3:40:24:fb:be:d4:11: 1a:0d:c5:4b:26:28:cb:95:6e:7e:41:a7:2a:93:b9:47:0f:99: 46:e1:7d:56:75:e2:7d:8a:69:35:05:96:a3:06:0f:f6:61:7e: 4d:b3:9a:e6:ec:37:6d:c5:13:13:fe:59:66:be:2a:ba:1d:7a: 1a:94:b1:72:64:50:08:4f:01:23:40:bb:28:0f:0b:ac:09:17: 63:15:cd:ed:40:b6:90:4e:dc:18:1c:b6:74:e3:5a:03:5e:59: 02:18:e3:ce:d3:74:b2:ca:1d:79:d1:d2:0d:45:df:7f:f1:42: e5:9c:d2:62:56:96:47:dc:11:e1:93:80:da:88:a2:8a:ea:19: 30:f4:e1:61:6d:28:02:bc:fc:46:61:b5:56:bf:bc:40:e0:df: fc:30:87:77:90:67:93:02:df:96:9a:75:72:d5:7d:68:a1:c9: bb:78:ac:de:31:fe:41:af:9d:82:03:cb:c4:0d:e4:1e:fe:20: 60:4e:7b:45:ad:21:f8:80:4c:00:8b:98:db:10:f1:1a:41:1a: b5:7d:6b:07:ef:bf:9d:ce:87:89:ef:d9:14:88:7b:ec:46:aa: a3:f0:0c:65:35:8b:68:1c:d2:82:3d:00:3d:24:63:38:60:56: 44:5f:99:95 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUEjj2hQkyWgfCpu+gt4bO88UxoXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA1MTYxNTIyNTBaFw0yNjA1MTUxNTI3NTBaMDMxMTAvBgNV BAMTKENBNzBGOUE1MDdGQTI5ODU0NTkxMDc5MDY0MTQxNDJDODE5OTgwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6+Fin0US94QtF+oG4fdfV5Pe TvGLwW9ROEG5+fXd9UlL0impRJXt2EaKfzRp9aFlUQYjM8w0gk2hRGnwppcXQ7sp HrtUsNckOP6ORPqxIS2y9QXyzf+mCCq+GQdZhS3mi3VWjOQ8YAHY/kRojnWsn561 OF5+Akcnk8eszJP3u7SOYLutdvvi+54FHJiR1J9xzdCGnuv2kShndhlIQ7JOriuA /cLwh1bM1SOp1NH9Xz66lKzCUpqjGGGOIg1ALhPphGtUbxzBfVrawxXTxMTUq9J3 6tnHsIFgiiMAUsnzhkt1FjoadC63yCOGYjBY6L/AnyWQrlDhFE4YUedA/nSRAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTKcPmlB/ophUWR B5BkFBQsgZmATzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkZL Mlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoyc1kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZG SzJaNUNEdm43NE5Sc2lGdjcyM1BwU2NodE1GaHFKUGVSQVQ2U0VqMnNZLzAvQ0E3 MEY5QTUwN0ZBMjk4NTQ1OTEwNzkwNjQxNDE0MkM4MTk5ODA0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASTxDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MW8wDQYJKoZIhvcNAQELBQADggEBAKUhD/iq32PDp5I1o0Ak+77UERoNxUsmKMuV bn5BpyqTuUcPmUbhfVZ14n2KaTUFlqMGD/Zhfk2zmubsN23FExP+WWa+KrodehqU sXJkUAhPASNAuygPC6wJF2MVze1AtpBO3BgctnTjWgNeWQIY487TdLLKHXnR0g1F 33/xQuWc0mJWlkfcEeGTgNqIoorqGTD04WFtKAK8/EZhtVa/vEDg3/wwh3eQZ5MC 35aadXLVfWihybt4rN4x/kGvnYIDy8QN5B7+IGBOe0WtIfiATACLmNsQ8RpBGrV9 awfvv53Oh4nv2RSIe+xGqqPwDGU1i2gc0oI9AD0kYzhgVkRfmZU= -----END CERTIFICATE-----Generated at Wed Jun 4 11:27:40 2025 by rpki-client