$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer (raw, json) Hash identifier: bwAXCRI+j5jQfyLBEi7iTMdzLM5/F26tX/C2IaFmklQ= Subject key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3570D3BB7AA08E3DBCA6C7593ECA1B2E07A08C04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft caRepository: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 30 Jun 2025 19:48:49 +0000 Certificate not after: Mon 29 Jun 2026 19:53:49 +0000 Subordinate resources: AS: 273404 IP: 2804:8e20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 09:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:70:d3:bb:7a:a0:8e:3d:bc:a6:c7:59:3e:ca:1b:2e:07:a0:8c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 30 19:48:49 2025 GMT Not After : Jun 29 19:53:49 2026 GMT Subject: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:53:b7:30:18:89:bc:39:f6:44:e4:b6:2a: 42:db:1e:c2:37:c0:8e:70:b4:68:33:4c:7b:3e:db: 7c:8d:c1:05:0d:5d:c4:ff:a6:df:2b:7a:3d:0c:1a: 10:9d:43:bc:93:e6:cc:87:f9:81:ff:9d:b1:b0:61: e2:33:47:44:37:85:e6:8e:e5:57:2e:d2:40:53:9d: de:19:4c:2b:93:61:d9:0c:96:82:16:61:71:8f:04: 2d:09:32:c0:0d:03:d1:b4:9d:eb:ba:67:a4:41:fc: 7e:2e:e5:bf:3c:94:7f:fe:c1:52:3e:21:fb:79:ff: 91:aa:a6:fb:21:5b:d0:84:5b:6a:d3:95:b0:2c:41: 38:1c:45:b1:36:bf:6e:57:dc:7a:a7:00:6f:42:30: 9f:58:fa:e2:05:88:7b:95:a1:58:19:25:85:0e:ae: 68:27:70:e5:2a:b5:f9:a0:31:29:aa:63:2f:34:59: 4a:31:a5:34:bd:ff:b2:bf:84:32:ca:a9:d7:42:4d: 48:f6:ac:87:39:b5:d5:37:4f:30:e8:f0:a7:24:f1: cc:da:eb:40:01:e2:a1:85:6d:fa:6c:97:1e:3a:09: 85:f2:f9:c7:1a:21:3d:ed:1b:33:2c:63:66:55:df: cb:f0:6f:a2:35:d8:ae:70:76:ad:be:e8:fc:7d:b7: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8e20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273404 Signature Algorithm: sha256WithRSAEncryption 5a:33:74:c3:6a:5d:a7:0c:15:79:d6:19:1d:7f:27:1d:1f:5f: 8f:33:b4:42:51:77:d7:4b:b6:75:ed:1f:70:3c:2e:da:4f:ef: 81:3e:b0:bc:25:af:1b:09:b2:92:88:db:72:76:ba:b8:40:6e: 87:12:1e:41:58:97:04:75:39:03:bf:ef:5d:df:7c:c6:ed:d9: 2f:43:e2:fc:29:a7:a7:8f:8e:4a:9e:c4:ff:ca:f3:ac:cc:8b: 15:c2:a1:24:23:89:95:c7:82:47:e1:79:7e:57:77:cd:1d:13: d4:c8:86:d0:9b:19:8f:e2:f4:10:3b:a5:d2:1e:38:66:6a:ab: 0a:14:6d:c0:4d:c9:a4:6b:19:09:f8:37:81:f7:ea:f9:c3:a7: db:b3:be:a7:09:ce:d1:a6:4b:fe:11:15:54:fa:f2:1a:0a:4a: fe:ba:65:65:15:09:b2:40:5f:e4:f1:91:1d:41:fa:e7:4a:1a: 39:55:ef:26:c5:1d:a1:b2:1f:4f:cb:43:d6:3d:d4:26:ea:98: 01:52:ba:51:60:b2:f5:c0:d9:c3:da:8c:a7:28:17:4c:ba:22: 47:9f:04:cf:96:a9:09:98:eb:0a:c8:99:28:e5:02:51:8b:da: a2:3b:6f:44:ac:fa:f2:a3:42:c1:a1:fb:86:05:b9:b5:04:b7: 3b:ea:d6:97 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUNXDTu3qgjj28psdZPsobLgegjAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA2MzAxOTQ4NDlaFw0yNjA2MjkxOTUzNDlaMDMxMTAvBgNV BAMTKERGMzRBRkU0QzM1MjU5RUEwRTBBQjkzQTM0MERGMTM5RTg2QjhEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsFO3MBiJvDn2ROS2KkLbHsI3 wI5wtGgzTHs+23yNwQUNXcT/pt8rej0MGhCdQ7yT5syH+YH/nbGwYeIzR0Q3heaO 5Vcu0kBTnd4ZTCuTYdkMloIWYXGPBC0JMsANA9G0neu6Z6RB/H4u5b88lH/+wVI+ Ift5/5GqpvshW9CEW2rTlbAsQTgcRbE2v25X3HqnAG9CMJ9Y+uIFiHuVoVgZJYUO rmgncOUqtfmgMSmqYy80WUoxpTS9/7K/hDLKqddCTUj2rIc5tdU3TzDo8Kck8cza 60AB4qGFbfpslx46CYXy+ccaIT3tGzMsY2ZV38vwb6I12K5wdq2+6Px9t/OHAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfNK/kw1JZ6g4K uTo0DfE56GuNtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1R0 VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NU dFVibzJlcXA4Y0dhdVZrUUNUaWZIUXVhZUU1VmZTaVlwNFR3WGVYMUo5LzAvREYz NEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlFODZCOERCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASOIDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME K/wwDQYJKoZIhvcNAQELBQADggEBAFozdMNqXacMFXnWGR1/Jx0fX48ztEJRd9dL tnXtH3A8LtpP74E+sLwlrxsJspKI23J2urhAbocSHkFYlwR1OQO/713ffMbt2S9D 4vwpp6ePjkqexP/K86zMixXCoSQjiZXHgkfheX5Xd80dE9TIhtCbGY/i9BA7pdIe OGZqqwoUbcBNyaRrGQn4N4H36vnDp9uzvqcJztGmS/4RFVT68hoKSv66ZWUVCbJA X+TxkR1B+udKGjlV7ybFHaGyH0/LQ9Y91CbqmAFSulFgsvXA2cPajKcoF0y6Ikef BM+WqQmY6wrImSjlAlGL2qI7b0Ss+vKjQsGh+4YFubUEtzvq1pc= -----END CERTIFICATE-----Generated at Fri Jul 4 08:03:02 2025 by rpki-client