$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer File: 0D3D646783321347829AF3DBE2CF61D9810C07DF.cer (raw, json) Hash identifier: eCzETJnbVT3xJ4fcFdOj0MjCYUhU1/yXUWAOZFzVfP4= Subject key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 39D51A4EE41D385D34F20AB9070C61E0A1D239E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft caRepository: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Jan 2025 20:15:06 +0000 Certificate not after: Wed 21 Jan 2026 20:20:06 +0000 Subordinate resources: AS: 263866 IP: 138.186.112.0/22 IP: 2804:26f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d5:1a:4e:e4:1d:38:5d:34:f2:0a:b9:07:0c:61:e0:a1:d2:39:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 22 20:15:06 2025 GMT Not After : Jan 21 20:20:06 2026 GMT Subject: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:94:0f:2e:65:1f:99:d4:fd:c9:fd:a1:ee: 52:a0:8c:42:13:20:4b:c6:e3:ef:e5:fd:4a:cf:87: 40:5d:c1:f1:4b:55:c0:3b:b6:7b:4c:5c:aa:d9:68: 21:a2:6d:b0:5c:a3:d9:c4:47:ef:e7:df:9d:bc:33: a2:35:84:74:ac:9d:65:15:ad:cb:79:3e:18:40:25: 86:50:9c:34:38:e8:0f:2f:12:44:fa:26:32:18:62: 97:4e:08:f1:a4:4a:7a:ff:77:08:00:c7:06:f0:e6: 56:61:0a:06:43:a1:13:5e:59:3e:43:cf:e7:66:e9: a4:66:93:47:f0:b6:b9:49:1f:f0:ff:06:14:bf:44: 1b:32:c0:e9:74:fc:95:fa:68:11:07:28:1e:a4:62: 2e:a0:68:a2:1e:5a:60:81:67:08:99:b8:59:77:f1: 7b:81:30:53:95:3c:f4:86:a9:41:68:d4:6b:d2:6e: c0:05:65:00:96:d4:64:44:5c:25:43:f8:16:89:c8: fb:e8:cb:32:cc:f2:2c:2d:b0:dd:b0:89:00:95:18: df:73:c7:11:d4:68:8b:9c:a1:b2:ff:f8:5e:7c:02: 99:6e:d6:9a:92:6c:56:1f:3b:48:9f:36:bc:bf:7d: c6:ce:95:96:17:cf:d3:84:79:67:1b:55:12:b4:92: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.112.0/22 IPv6: 2804:26f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263866 Signature Algorithm: sha256WithRSAEncryption 2d:0c:e8:cc:a1:6a:a6:e3:9d:7a:34:e1:6d:4d:c7:0a:38:3c: a0:69:8f:b8:9c:fb:21:0a:1a:a6:5b:8d:1e:85:1e:e5:9e:7c: 7d:b8:40:e8:7a:79:82:2d:d1:e8:36:6e:48:6d:24:96:94:af: c0:a2:cc:02:e0:99:25:f9:08:7b:5d:3c:bc:e6:0d:74:c0:bc: b2:ca:87:80:f8:e5:5b:9f:b7:63:fc:00:5b:1b:ed:53:fe:79: 4c:04:1d:94:a6:65:b0:f5:59:a0:f9:37:bb:0b:52:bd:3e:ee: 1a:98:7d:d0:13:ec:20:f2:82:cc:81:cf:79:e0:21:41:4c:88: e6:27:57:38:8b:e8:2f:d7:93:b8:75:bb:10:24:15:eb:eb:16: 5e:5f:11:2e:0c:4e:1e:e9:27:03:94:7d:ff:f9:37:12:58:f5: 51:71:6d:34:7c:f6:8b:28:96:9c:e5:56:35:f7:2b:14:f6:45: 8b:98:8a:24:27:a5:ee:52:57:8b:e0:6e:cb:11:c4:99:21:a3: 76:18:e3:b6:66:ca:33:55:20:4a:54:fa:4a:75:79:53:24:19: 25:f4:90:e7:39:3f:c6:6c:28:aa:de:59:5e:c0:27:20:30:1f: f0:47:86:6b:12:e6:20:b2:49:eb:23:50:48:e6:ac:31:4b:cd: 96:32:78:16 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUOdUaTuQdOF008gq5Bwxh4KHSOeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjIyMDE1MDZaFw0yNjAxMjEyMDIwMDZaMDMxMTAvBgNV BAMTKDBEM0Q2NDY3ODMzMjEzNDc4MjlBRjNEQkUyQ0Y2MUQ5ODEwQzA3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNJQPLmUfmdT9yf2h7lKgjEIT IEvG4+/l/UrPh0BdwfFLVcA7tntMXKrZaCGibbBco9nER+/n3528M6I1hHSsnWUV rct5PhhAJYZQnDQ46A8vEkT6JjIYYpdOCPGkSnr/dwgAxwbw5lZhCgZDoRNeWT5D z+dm6aRmk0fwtrlJH/D/BhS/RBsywOl0/JX6aBEHKB6kYi6gaKIeWmCBZwiZuFl3 8XuBMFOVPPSGqUFo1GvSbsAFZQCW1GREXCVD+BaJyPvoyzLM8iwtsN2wiQCVGN9z xxHUaIucobL/+F58Aplu1pqSbFYfO0ifNry/fcbOlZYXz9OEeWcbVRK0knK3AgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNPWRngzITR4Ka 89viz2HZgQwH3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUUpa aktDbTZVMkFRaFBGRjJWOHFaWGVVRFdWYm1qazlBWTVvcU5hZURuOS8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vUUpa aktDbTZVMkFRaFBGRjJWOHFaWGVVRFdWYm1qazlBWTVvcU5hZURuOS8wLzBEM0Q2 NDY3ODMzMjEzNDc4MjlBRjNEQkUyQ0Y2MUQ5ODEwQzA3REYubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAoq6cDANBAIAAjAHAwUAKAQm9DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEBrowDQYJKoZIhvcNAQELBQADggEBAC0M6MyhaqbjnXo04W1N xwo4PKBpj7ic+yEKGqZbjR6FHuWefH24QOh6eYIt0eg2bkhtJJaUr8CizALgmSX5 CHtdPLzmDXTAvLLKh4D45Vuft2P8AFsb7VP+eUwEHZSmZbD1WaD5N7sLUr0+7hqY fdAT7CDygsyBz3ngIUFMiOYnVziL6C/Xk7h1uxAkFevrFl5fES4MTh7pJwOUff/5 NxJY9VFxbTR89osolpzlVjX3KxT2RYuYiiQnpe5SV4vgbssRxJkho3YY47ZmyjNV IEpU+kp1eVMkGSX0kOc5P8ZsKKreWV7AJyAwH/BHhmsS5iCySesjUEjmrDFLzZYy eBY= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:49 2025 by rpki-client on console.sobornost.net