$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer (raw, json) Hash identifier: 0ZsJ07Zhx2nf6BVxR7wi34X9ZyJP+LgMas3J3xQH7JM= Subject key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0202549422CDB0F025B4B217C329F051F8E3C7FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft caRepository: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 18:34:14 +0000 Certificate not after: Wed 03 Jun 2026 18:39:14 +0000 Subordinate resources: AS: 267643 IP: 45.71.220.0/22 IP: 2804:44a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:02:54:94:22:cd:b0:f0:25:b4:b2:17:c3:29:f0:51:f8:e3:c7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 18:34:14 2025 GMT Not After : Jun 3 18:39:14 2026 GMT Subject: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:26:39:03:c4:81:4a:b5:2f:af:01:2a:af:a6: 97:eb:fa:4c:26:b1:fb:de:63:53:b1:be:72:7b:d2: 28:51:dc:ae:2f:18:6b:48:3a:89:81:7d:b9:68:aa: b6:92:08:57:50:e7:64:e5:18:33:11:65:2f:02:6d: 98:d8:e6:f3:f1:a0:75:dd:83:ae:bd:c3:f0:fb:3a: 34:a9:02:63:23:7f:74:2f:74:2e:7f:12:2e:a5:27: ca:0a:a2:55:7a:ed:53:f0:2f:80:af:fb:b7:b0:aa: b2:69:8a:22:99:70:11:1d:62:98:85:2c:5f:63:e7: 59:f8:86:2f:11:5d:dc:98:95:bc:da:18:79:92:b0: cd:82:80:4c:3a:59:5a:01:03:68:6b:d7:f2:c5:2d: 73:c7:e5:9b:12:07:19:c9:61:d9:33:45:d2:0a:db: e5:3b:7c:ca:f7:f1:c3:99:b3:71:b0:c0:7f:61:ff: f4:a6:7e:29:8d:86:3b:bb:dc:2a:34:3d:33:b9:1a: cd:f4:ff:7a:6a:f0:70:9b:3e:60:16:e3:c0:3e:bb: a0:48:1c:22:0f:80:8f:66:2f:e9:0a:59:b0:6b:2a: 4e:be:fd:e9:76:14:73:78:5d:ef:5e:5f:75:67:93: 48:ab:ba:76:9e:4a:79:11:ea:ff:14:14:fc:45:28: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.220.0/22 IPv6: 2804:44a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267643 Signature Algorithm: sha256WithRSAEncryption 10:7e:3b:ed:b5:1a:cc:af:14:dc:57:9b:5b:a6:f4:1c:ba:4e: 59:da:71:6c:69:5b:ed:06:ca:c6:a9:de:50:51:2f:78:b7:98: 66:30:55:99:93:1e:b9:88:11:17:82:0c:f0:2d:b7:3f:24:0a: 49:43:fd:6c:48:3b:ea:95:96:70:a7:88:49:43:c4:61:93:18: db:33:b8:67:29:a5:f8:c9:a4:c2:cc:3b:3b:ab:48:df:ad:94: f2:29:ca:40:ab:c2:46:8f:71:78:73:47:50:8e:c4:da:b6:79: 20:4a:64:ed:21:b1:b7:14:9a:54:9b:d0:92:fd:7b:fb:45:89: 44:e3:f9:b4:d2:2e:98:dc:4f:c4:c6:18:6e:bb:6c:05:c3:5d: 01:3e:47:d5:4c:9d:25:64:06:6e:12:a1:30:9e:b8:b0:0a:b8: fa:72:30:b8:cc:50:6e:1c:8e:dc:96:86:a8:28:3e:cf:48:d1: 22:b3:cd:b9:a9:a8:ab:a7:d5:dc:5b:fd:67:47:b3:4f:aa:98: a9:9c:bc:8c:a1:f7:72:78:92:e6:74:45:3f:ce:1a:f7:cd:5a: bf:73:47:1b:7f:b6:a4:76:51:6a:b9:7e:5e:65:d6:91:cd:89: 4b:44:1a:5e:59:92:a9:53:06:a6:14:5b:2c:82:b0:c7:50:b7: 41:05:e1:31 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAgJUlCLNsPAltLIXwynwUfjjx/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MDQxODM0MTRaFw0yNjA2MDMxODM5MTRaMDMxMTAvBgNV BAMTKEQ5NzBGMTdDODZENEQ1QTlDNjM5NUU5RTJEMTYwMUJCRDlGQThCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJjkDxIFKtS+vASqvppfr+kwm sfveY1OxvnJ70ihR3K4vGGtIOomBfbloqraSCFdQ52TlGDMRZS8CbZjY5vPxoHXd g669w/D7OjSpAmMjf3QvdC5/Ei6lJ8oKolV67VPwL4Cv+7ewqrJpiiKZcBEdYpiF LF9j51n4hi8RXdyYlbzaGHmSsM2CgEw6WVoBA2hr1/LFLXPH5ZsSBxnJYdkzRdIK 2+U7fMr38cOZs3GwwH9h//SmfimNhju73Co0PTO5Gs30/3pq8HCbPmAW48A+u6BI HCIPgI9mL+kKWbBrKk6+/el2FHN4Xe9eX3Vnk0irunaeSnkR6v8UFPxFKNjTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZcPF8htTVqcY5 Xp4tFgG72fqL2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzND NHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Mz QzR0N21KWFczWUZZcFpIQ05iZUY5d1I5enVuRWZ6bTV0MjNCQUxYb3ZiLzEvRDk3 MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJEOUZBOEJEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUfcMA0EAgACMAcDBQAoBESgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVezANBgkqhkiG9w0BAQsFAAOCAQEAEH477bUazK8U3Feb W6b0HLpOWdpxbGlb7QbKxqneUFEveLeYZjBVmZMeuYgRF4IM8C23PyQKSUP9bEg7 6pWWcKeISUPEYZMY2zO4Zyml+Mmkwsw7O6tI362U8inKQKvCRo9xeHNHUI7E2rZ5 IEpk7SGxtxSaVJvQkv17+0WJROP5tNIumNxPxMYYbrtsBcNdAT5H1UydJWQGbhKh MJ64sAq4+nIwuMxQbhyO3JaGqCg+z0jRIrPNuamoq6fV3Fv9Z0ezT6qYqZy8jKH3 cniS5nRFP84a981av3NHG3+2pHZRarl+XmXWkc2JS0QaXlmSqVMGphRbLIKwx1C3 QQXhMQ== -----END CERTIFICATE-----Generated at Sun Nov 2 23:02:56 2025 by rpki-client