$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer File: 2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer (raw, json) Hash identifier: h4pbi4oxoqusFAuqy9b765PdxC+Zhv8GEShP+wXzQLg= Subject key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5651357BF55718FF4E347629F6BEE89F6C1C73D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft caRepository: rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 26 Apr 2025 16:05:13 +0000 Certificate not after: Sat 25 Apr 2026 16:10:13 +0000 Subordinate resources: AS: 270770 IP: 189.127.138.0/23 IP: 2801:80:3980::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 13:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:51:35:7b:f5:57:18:ff:4e:34:76:29:f6:be:e8:9f:6c:1c:73:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 26 16:05:13 2025 GMT Not After : Apr 25 16:10:13 2026 GMT Subject: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:d3:0b:75:9a:51:a7:0a:d0:b1:0a:f4:61: 04:39:d8:df:0b:a0:4e:89:a7:90:1b:e9:47:6d:0e: a0:80:72:90:67:ca:6d:a3:dc:8d:e2:05:65:eb:e9: ca:53:ef:3f:41:37:72:4a:46:2c:2a:27:2e:3e:96: 14:07:1c:7a:21:87:96:df:ea:8c:d8:94:a4:cf:c7: 10:8f:25:85:c7:b9:8b:ad:ba:05:d7:5f:2d:30:68: 98:be:a4:f2:fc:ac:6b:b6:cc:18:2e:08:39:dd:80: 92:37:40:66:da:83:e4:c0:b4:3f:75:e1:f1:fc:8e: d8:5c:cf:ad:eb:52:8c:e2:c6:83:98:68:72:57:e2: 9d:97:53:c9:5c:96:c4:3f:e9:f0:c3:76:75:3b:65: 00:f9:b6:a8:d0:f6:7a:50:e9:e7:41:6a:c4:a2:74: c1:7b:8c:a6:86:b9:a5:c6:81:e1:a9:27:b2:ab:69: ec:fd:d2:14:b7:a1:c4:cc:55:d3:82:08:27:06:1e: 34:d9:26:d8:2c:c9:87:57:5d:3d:90:85:0b:14:5c: 63:0e:4f:32:62:d5:da:64:d1:ee:f8:62:ea:5b:8f: e7:ca:8b:87:5e:26:5d:03:84:5f:71:93:6d:1f:87: b3:e8:9a:58:2a:6b:ef:69:30:65:1c:25:e3:0e:02: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.138.0/23 IPv6: 2801:80:3980::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270770 Signature Algorithm: sha256WithRSAEncryption 44:db:6d:e8:77:3e:ee:84:43:34:13:27:a2:11:da:0a:c1:ca: df:0b:92:09:da:d0:d3:9e:5b:ec:0c:29:ab:f0:4d:be:71:42: f9:dc:c1:47:2b:ee:62:18:89:f5:e6:46:a7:c8:1e:94:a9:b9: fa:2f:c4:fa:3d:9c:2b:3c:77:93:71:e0:c1:3c:46:9b:d7:5f: 2f:ca:e1:1d:c3:de:0b:82:19:5c:ed:e5:9f:44:f3:eb:52:e3: 37:21:3b:14:3f:95:63:78:db:68:3c:fc:31:01:a6:aa:c5:a1: cb:4c:83:a2:42:5d:cc:f3:3e:f9:f8:66:47:ed:66:60:4c:e9: 43:6d:2a:05:54:ee:be:b4:c5:58:ff:5a:28:ce:e9:6c:86:90: 8c:d3:97:6a:f9:4a:68:4c:43:f0:bf:30:4b:1e:64:d4:a5:3a: 0f:ca:a3:0b:18:dc:21:6b:aa:fe:8d:85:51:d6:a3:b7:53:b8: 99:cd:4b:29:4d:10:fb:95:eb:a9:3e:19:aa:6c:bb:13:2f:d2: b0:d8:97:02:63:46:fb:47:3d:62:41:cd:ae:b2:80:40:b3:2b: ef:87:e4:62:24:3d:30:79:30:3a:32:58:74:a8:3c:25:23:c2: 80:27:db:b5:2b:8b:0d:73:a9:e1:fd:00:8c:c2:db:51:98:86: bf:d7:85:4c -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUVlE1e/VXGP9ONHYp9r7on2wcc9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjYxNjA1MTNaFw0yNjA0MjUxNjEwMTNaMDMxMTAvBgNV BAMTKDJGRThBNjU5REI0QkVEQTFFMEI5Q0Y2MzFDRDJCQTgwMkE3N0M2NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmdMLdZpRpwrQsQr0YQQ52N8L oE6Jp5Ab6UdtDqCAcpBnym2j3I3iBWXr6cpT7z9BN3JKRiwqJy4+lhQHHHohh5bf 6ozYlKTPxxCPJYXHuYutugXXXy0waJi+pPL8rGu2zBguCDndgJI3QGbag+TAtD91 4fH8jthcz63rUozixoOYaHJX4p2XU8lclsQ/6fDDdnU7ZQD5tqjQ9npQ6edBasSi dMF7jKaGuaXGgeGpJ7Kraez90hS3ocTMVdOCCCcGHjTZJtgsyYdXXT2QhQsUXGMO TzJi1dpk0e74Yupbj+fKi4deJl0DhF9xk20fh7Pomlgqa+9pMGUcJeMOAnbDAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQv6KZZ20vtoeC5 z2Mc0rqAKnfGVDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5G RGNwUUJITU1mZXoydnl1M0JqVEhNaUpEeWEzZ0t1U3BweGVMdEc1VFgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu RkRjcFFCSE1NZmV6MnZ5dTNCalRITWlKRHlhM2dLdVNwcHhlTHRHNVRYLzEvMkZF OEE2NTlEQjRCRURBMUUwQjlDRjYzMUNEMkJBODAyQTc3QzY1NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQBvX+KMA8EAgACMAkDBwAoAQCAOYAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBCGyMA0GCSqGSIb3DQEBCwUAA4IBAQBE223odz7uhEM0 EyeiEdoKwcrfC5IJ2tDTnlvsDCmr8E2+cUL53MFHK+5iGIn15kanyB6Uqbn6L8T6 PZwrPHeTceDBPEab118vyuEdw94Lghlc7eWfRPPrUuM3ITsUP5VjeNtoPPwxAaaq xaHLTIOiQl3M8z75+GZH7WZgTOlDbSoFVO6+tMVY/1oozulshpCM05dq+UpoTEPw vzBLHmTUpToPyqMLGNwha6r+jYVR1qO3U7iZzUspTRD7leupPhmqbLsTL9Kw2JcC Y0b7Rz1iQc2usoBAsyvvh+RiJD0weTA6Mlh0qDwlI8KAJ9u1K4sNc6nh/QCMwttR mIa/14VM -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:22 2025 by rpki-client