$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0A8D927B2781E10E47E98BEE9B2077654F84695D.cer File: 0A8D927B2781E10E47E98BEE9B2077654F84695D.cer (raw, json) Hash identifier: OCgiXpp5LJxPxceK9+7CP4y0Cp8PQ4y2IGsq58bg9KA= Subject key identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 30B66D864F5B80A15B7B5A682AA4D843DB6968E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft caRepository: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Feb 2025 12:46:43 +0000 Certificate not after: Fri 27 Feb 2026 12:51:43 +0000 Subordinate resources: AS: 268786 IP: 45.172.168.0/22 IP: 168.196.204.0/22 IP: 2804:5aa4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b6:6d:86:4f:5b:80:a1:5b:7b:5a:68:2a:a4:d8:43:db:69:68:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 28 12:46:43 2025 GMT Not After : Feb 27 12:51:43 2026 GMT Subject: CN=0A8D927B2781E10E47E98BEE9B2077654F84695D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:0a:91:6a:a8:2d:37:dc:ee:ad:76:f8:c2: 3c:3b:18:6e:1d:ba:94:40:84:57:69:43:1d:ec:e0: 6f:1b:d8:4f:db:dd:ae:38:2d:ba:9f:71:0a:2a:1a: 37:bb:81:90:ac:96:cf:7d:ae:a4:08:4b:9f:f6:dd: d5:b4:52:92:57:00:fa:f5:9a:e3:c8:53:07:ef:ef: 28:53:1b:5d:45:ac:e3:59:00:1f:23:f2:34:39:15: a4:fc:16:0b:3b:d1:2e:d5:25:28:a8:23:95:b0:4c: 29:d0:93:06:45:80:e5:fb:5b:a4:b1:66:18:a2:a5: 29:2d:c3:63:2d:b3:47:c6:b9:65:2a:d7:54:5b:9f: fa:7e:57:ac:a5:56:b7:7f:d2:6f:25:04:39:0d:e1: 77:36:69:e4:13:43:7d:80:a7:51:2a:27:05:08:05: 0f:47:d3:34:b0:3d:1a:d6:75:1f:43:2a:0b:1f:97: 02:44:12:7a:3d:62:8c:33:06:e6:4e:12:20:cd:82: f7:ee:74:0c:d4:d1:5c:7c:28:f7:00:6a:44:83:35: 62:bc:1e:b6:31:94:43:14:b0:7b:d9:53:19:86:01: 2a:02:1b:3e:cc:b5:b9:3d:cb:30:33:7e:3c:bd:f6: 65:ab:4a:4a:54:eb:f8:ce:c4:78:70:b9:15:42:21: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:8D:92:7B:27:81:E1:0E:47:E9:8B:EE:9B:20:77:65:4F:84:69:5D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/0A8D927B2781E10E47E98BEE9B2077654F84695D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.168.0/22 168.196.204.0/22 IPv6: 2804:5aa4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268786 Signature Algorithm: sha256WithRSAEncryption c2:b4:8d:f0:23:86:88:af:10:a2:eb:fe:15:69:a0:7e:e8:ef: f1:b1:a6:03:cd:0c:f9:f5:71:0a:69:0b:b2:3c:1a:47:15:20: 99:ba:69:c1:98:b5:d8:88:39:3f:4f:9b:0d:89:a2:71:4b:98: 3d:d1:1e:a3:4b:2f:e5:d8:e6:7d:4a:af:4e:ee:23:91:5d:e2: 00:c7:c1:89:b5:b2:93:42:50:40:17:c4:18:eb:87:c8:d8:a3: a0:fa:b5:59:97:e1:5e:5d:82:1e:1b:3c:24:b0:79:ac:29:49: 01:83:d1:5c:3c:5c:dd:26:3b:a0:3b:97:4d:f7:87:99:13:3f: 1d:13:50:fa:08:db:77:9b:7b:73:11:95:d8:71:b4:2c:8a:21: 1d:ac:39:9f:3b:1f:1f:f0:83:8a:e6:31:d8:5f:db:81:7f:b0: 51:2d:92:24:a4:46:b8:6d:cb:99:86:c8:39:ef:c4:c0:ed:44: 11:6f:e3:24:f6:f6:6e:22:4c:1d:b5:bb:2f:97:7b:80:d5:0f: c1:68:ee:ea:fa:89:76:ff:2c:ff:d8:ae:75:78:83:fd:5f:29: ce:42:ba:9d:86:f0:a8:b7:e4:16:cd:e4:c1:2c:c8:98:92:de: 80:07:11:c8:92:5f:ce:97:24:c3:1d:d0:48:78:aa:15:15:64: 8c:00:2d:0b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMLZthk9bgKFbe1poKqTYQ9tpaOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjgxMjQ2NDNaFw0yNjAyMjcxMjUxNDNaMDMxMTAvBgNV BAMTKDBBOEQ5MjdCMjc4MUUxMEU0N0U5OEJFRTlCMjA3NzY1NEY4NDY5NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDQqRaqgtN9zurXb4wjw7GG4d upRAhFdpQx3s4G8b2E/b3a44LbqfcQoqGje7gZCsls99rqQIS5/23dW0UpJXAPr1 muPIUwfv7yhTG11FrONZAB8j8jQ5FaT8Fgs70S7VJSioI5WwTCnQkwZFgOX7W6Sx ZhiipSktw2Mts0fGuWUq11Rbn/p+V6ylVrd/0m8lBDkN4Xc2aeQTQ32Ap1EqJwUI BQ9H0zSwPRrWdR9DKgsflwJEEno9YowzBuZOEiDNgvfudAzU0Vx8KPcAakSDNWK8 HrYxlEMUsHvZUxmGASoCGz7Mtbk9yzAzfjy99mWrSkpU6/jOxHhwuRVCIYM1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKjZJ7J4HhDkfp i+6bIHdlT4RpXTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHgz cXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3aDEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh4 M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzAvMEE4 RDkyN0IyNzgxRTEwRTQ3RTk4QkVFOUIyMDc3NjU0Rjg0Njk1RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLayoAwQCqMTMMA0EAgACMAcDBQAoBFqkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQZ8jANBgkqhkiG9w0BAQsFAAOCAQEAwrSN8COG iK8Qouv+FWmgfujv8bGmA80M+fVxCmkLsjwaRxUgmbppwZi12Ig5P0+bDYmicUuY PdEeo0sv5djmfUqvTu4jkV3iAMfBibWyk0JQQBfEGOuHyNijoPq1WZfhXl2CHhs8 JLB5rClJAYPRXDxc3SY7oDuXTfeHmRM/HRNQ+gjbd5t7cxGV2HG0LIohHaw5nzsf H/CDiuYx2F/bgX+wUS2SJKRGuG3LmYbIOe/EwO1EEW/jJPb2biJMHbW7L5d7gNUP wWju6vqJdv8s/9iudXiD/V8pzkK6nYbwqLfkFs3kwSzImJLegAcRyJJfzpckwx3Q SHiqFRVkjAAtCw== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:42 2025 by rpki-client on console.sobornost.net