$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer File: 0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer (raw, json) Hash identifier: MjZnCR6t20I4srOGFnRmYAkRLVSUZDMvF2xUZ/5zcuw= Subject key identifier: 03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 167A7B5E96290BFCEAC3C04E315559E58D3BC962 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft caRepository: rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 30 Jan 2025 20:05:36 +0000 Certificate not after: Thu 29 Jan 2026 20:10:36 +0000 Subordinate resources: AS: 270705 IP: 189.127.148.0/22 IP: 2804:7018::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7a:7b:5e:96:29:0b:fc:ea:c3:c0:4e:31:55:59:e5:8d:3b:c9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 30 20:05:36 2025 GMT Not After : Jan 29 20:10:36 2026 GMT Subject: CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:ab:db:67:c3:14:83:68:1d:d4:17:85:a9: 4e:3e:52:cf:52:1d:04:ad:49:c3:af:64:a4:b8:3b: 97:1a:77:a5:1c:de:70:29:ba:db:46:2d:5b:1c:6a: 3c:d7:7a:d6:b2:41:3f:8d:75:b6:8b:62:25:49:ee: fd:f8:fd:9f:68:be:9c:67:d4:91:03:33:79:d1:2d: 7e:88:21:b5:b1:58:dd:83:ad:6d:70:13:65:aa:88: 92:90:ee:5e:db:1b:c4:c8:40:2c:8c:d6:86:78:0a: c6:5c:6f:b0:2f:7d:d3:93:16:7c:5d:e0:24:b2:f7: 6c:2c:d8:65:3c:52:d4:fd:f3:02:9d:7e:a5:2f:29: 48:e0:a9:3a:03:b2:53:84:4b:a4:42:0a:0d:a2:5a: d5:23:4c:32:54:77:c8:e8:7d:1a:59:00:c7:28:23: 9b:86:07:84:4c:f3:ae:92:6a:8c:44:99:79:17:59: e8:9d:24:11:d5:45:da:a2:81:07:6d:49:54:fa:77: 5d:93:19:a2:4b:7c:a7:ce:5c:2c:65:90:ad:8c:d2: 19:2e:3b:08:b5:8d:fb:bb:30:44:88:9a:48:67:14: d8:e7:e5:bf:bd:ff:52:55:f9:33:fd:8c:68:b7:96: 80:6b:cd:fa:55:f3:ee:22:55:0f:ef:45:37:14:1e: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.127.148.0/22 IPv6: 2804:7018::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270705 Signature Algorithm: sha256WithRSAEncryption 2b:89:e3:c9:f9:47:a6:0b:14:f0:42:9b:16:7c:de:82:a8:60: 4c:4c:92:f0:06:ef:fa:95:b9:a0:97:7d:7d:8f:eb:da:ab:ad: a5:6c:d6:be:8f:a3:6c:52:e3:f3:0f:21:8a:dc:a6:13:47:37: 6f:4f:4b:c6:0a:49:08:c7:e8:7e:2c:70:e4:35:a1:fc:e4:36: 4a:4b:db:df:2b:f2:0c:30:78:5f:a0:a1:bd:7a:89:21:fd:d1: 04:a3:a2:97:9a:dd:1e:98:7e:86:7b:b2:a7:a0:e5:35:d9:bc: 21:5f:df:62:f3:13:1e:1f:1e:de:70:4f:6b:18:58:b1:9c:cb: 3c:a4:3c:e2:4a:01:cd:23:dc:c4:b4:e8:44:b9:3e:be:82:4d: 4d:ab:0a:bc:ea:31:b8:cc:cf:1c:68:9d:af:6b:4a:88:8e:1c: e5:5b:99:01:5f:c9:24:dd:dd:b5:9a:21:30:0c:88:17:22:40: 4b:7b:c8:6f:b8:40:72:e9:86:f0:a9:44:56:30:4d:a6:b2:50: bd:f7:e6:73:e5:f4:c7:f7:b7:82:cb:2d:66:92:82:c5:75:8d: 4c:0c:df:66:7d:7b:d1:aa:ed:26:47:81:67:eb:d2:ea:d0:d7: d4:ad:a2:e4:0f:a6:9a:69:b2:70:83:de:70:c1:52:84:4d:36: b9:12:45:55 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUFnp7XpYpC/zqw8BOMVVZ5Y07yWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMzAyMDA1MzZaFw0yNjAxMjkyMDEwMzZaMDMxMTAvBgNV BAMTKDAzOTBFRUMyQjBFQTgwMDRENEJDRjdFNzM0QTdENTk3RDMwQzUyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKavbZ8MUg2gd1BeFqU4+Us9S HQStScOvZKS4O5cad6Uc3nAputtGLVscajzXetayQT+NdbaLYiVJ7v34/Z9ovpxn 1JEDM3nRLX6IIbWxWN2DrW1wE2WqiJKQ7l7bG8TIQCyM1oZ4CsZcb7AvfdOTFnxd 4CSy92ws2GU8UtT98wKdfqUvKUjgqToDslOES6RCCg2iWtUjTDJUd8jofRpZAMco I5uGB4RM866SaoxEmXkXWeidJBHVRdqigQdtSVT6d12TGaJLfKfOXCxlkK2M0hku Owi1jfu7MESImkhnFNjn5b+9/1JV+TP9jGi3loBrzfpV8+4iVQ/vRTcUHlKtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDkO7CsOqABNS8 9+c0p9WX0wxSrzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFNp cUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNUckIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhT aXFLWUwxS2ZwVXJ4UUUyM3VOa3VVR2hmN2ozcUNmcjJqeTRvRlhzVHJCLzEvMDM5 MEVFQzJCMEVBODAwNEQ0QkNGN0U3MzRBN0Q1OTdEMzBDNTJBRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvX+UMA0EAgACMAcDBQAoBHAYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhcTANBgkqhkiG9w0BAQsFAAOCAQEAK4njyflHpgsU8EKb FnzegqhgTEyS8Abv+pW5oJd9fY/r2qutpWzWvo+jbFLj8w8hitymE0c3b09LxgpJ CMfofixw5DWh/OQ2Skvb3yvyDDB4X6ChvXqJIf3RBKOil5rdHph+hnuyp6DlNdm8 IV/fYvMTHh8e3nBPaxhYsZzLPKQ84koBzSPcxLToRLk+voJNTasKvOoxuMzPHGid r2tKiI4c5VuZAV/JJN3dtZohMAyIFyJAS3vIb7hAcumG8KlEVjBNprJQvffmc+X0 x/e3gsstZpKCxXWNTAzfZn170artJkeBZ+vS6tDX1K2i5A+mmmmycIPecMFShE02 uRJFVQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:48 2025 by rpki-client on console.sobornost.net