$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer File: 0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer (raw, json) Hash identifier: 60ecR+GP1D0RdLSVZfmq92YxeNu2c/0jL12gYdQDIbo= Subject key identifier: 0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F42491DD0269B2CC78A3D77EFFFCC16E90C636F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft caRepository: rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 00:35:45 +0000 Certificate not after: Fri 06 Mar 2026 00:40:45 +0000 Subordinate resources: AS: 271592 IP: 190.9.120.0/22 IP: 2804:7df0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:42:49:1d:d0:26:9b:2c:c7:8a:3d:77:ef:ff:cc:16:e9:0c:63:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 00:35:45 2025 GMT Not After : Mar 6 00:40:45 2026 GMT Subject: CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:c9:74:85:ba:a0:bd:c7:f0:e3:db:cb:ca: c4:8e:ed:dc:60:b6:d9:cf:1c:7c:ce:a6:e5:3c:79: ad:9d:cb:36:3b:62:b1:13:5d:1d:cb:e6:e6:51:e4: b1:12:95:55:e5:d6:9a:b2:cd:75:73:cf:c6:07:67: 69:db:a5:f1:be:1d:78:93:30:03:2a:54:7d:ad:47: 68:0b:0d:83:2f:f6:c6:0a:d3:62:d8:e7:2a:f6:02: 0b:30:2e:d1:91:6d:2c:63:52:a8:4b:0a:be:b4:6f: 9d:3b:e2:10:97:5b:a0:ae:9f:32:f9:ad:cf:96:bb: 84:a7:a6:87:2b:18:a5:1b:58:d9:22:47:9c:bf:63: 0d:31:3b:6b:af:e5:fd:f4:c4:dd:f3:c7:f9:68:28: 6c:90:57:e9:bb:52:84:95:ee:aa:a0:84:f2:fa:b3: 0e:37:23:75:39:36:ce:36:40:fa:e4:86:ff:ce:a7: 9f:3d:5a:40:36:f9:3e:2b:b6:7b:8d:ce:fb:8f:26: 5b:8d:e0:e0:96:74:0b:b8:c1:fb:98:d3:8d:c0:aa: e3:d5:61:5a:04:9c:cf:d1:ce:4a:d4:e1:37:e6:d6: 2a:d8:bb:6f:d7:8c:11:f4:53:25:4c:7b:8d:cf:0d: 53:13:5d:d2:0e:53:8d:2f:9c:2d:5b:3c:bb:47:3d: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.120.0/22 IPv6: 2804:7df0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271592 Signature Algorithm: sha256WithRSAEncryption 57:45:c2:37:92:69:ec:7b:f3:3b:63:77:60:d8:8d:c2:0f:d9: 77:a8:05:64:15:52:fe:13:08:59:43:43:98:34:a0:a9:ea:8a: ff:4f:b9:52:36:90:1d:3e:a5:2a:e8:22:ce:fc:1a:7e:e6:94: d7:c6:20:d7:1e:5c:92:26:fe:cd:a0:a9:74:7f:20:d4:6f:37: 93:82:18:63:c3:11:b1:1b:69:e2:16:1f:9b:f5:93:d8:10:7e: 6d:4e:00:2a:04:80:d3:b1:dd:bc:ea:92:ac:b3:53:9a:ce:33: 23:2d:6d:39:8b:2d:91:6f:54:0d:28:26:07:53:29:07:d3:2d: 89:c9:e7:8e:19:61:57:26:c1:36:8f:d9:02:c3:11:93:8a:cb: 8e:de:be:f0:2c:19:52:43:60:51:47:94:42:9c:c5:b0:14:7e: b3:ab:20:46:ad:ce:83:86:ec:7f:b6:a8:f8:c8:96:5c:66:e3: 60:db:1a:40:5d:c3:21:8e:9d:c4:dd:0e:57:d8:af:15:e3:bd: 3c:bf:cd:b8:c0:14:5a:30:76:4c:43:18:09:64:37:c9:4c:66: ac:60:05:8b:6e:15:dc:3f:06:47:51:dc:e3:20:30:af:45:3d: 76:95:8c:9e:8f:16:7d:76:5c:a5:cb:da:6a:54:35:63:23:78: 2c:59:c0:a2 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUX0JJHdAmmyzHij137//MFukMY28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMDM1NDVaFw0yNjAzMDYwMDQwNDVaMDMxMTAvBgNV BAMTKDBEODdFNDgxRERFMTNDMkIwODI0MUZGMTQxNTg1NUNFQUFBRDVBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEsl0hbqgvcfw49vLysSO7dxg ttnPHHzOpuU8ea2dyzY7YrETXR3L5uZR5LESlVXl1pqyzXVzz8YHZ2nbpfG+HXiT MAMqVH2tR2gLDYMv9sYK02LY5yr2AgswLtGRbSxjUqhLCr60b5074hCXW6CunzL5 rc+Wu4SnpocrGKUbWNkiR5y/Yw0xO2uv5f30xN3zx/loKGyQV+m7UoSV7qqghPL6 sw43I3U5Ns42QPrkhv/Op589WkA2+T4rtnuNzvuPJluN4OCWdAu4wfuY043AquPV YVoEnM/RzkrU4Tfm1irYu2/XjBH0UyVMe43PDVMTXdIOU40vnC1bPLtHPWfHAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNh+SB3eE8Kwgk H/FBWFXOqq1akDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUhD cUJxVVd5UUhXNUVGa0F3UFBYRGpQVmJDQmNGNm9GUUhTRnJOcG1talQvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUhD cUJxVVd5UUhXNUVGa0F3UFBYRGpQVmJDQmNGNm9GUUhTRnJOcG1talQvMi8wRDg3 RTQ4MURERTEzQzJCMDgyNDFGRjE0MTU4NTVDRUFBQUQ1QTkwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK+CXgwDQQCAAIwBwMFACgEffAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCToMA0GCSqGSIb3DQEBCwUAA4IBAQBXRcI3kmnse/M7Y3dg 2I3CD9l3qAVkFVL+EwhZQ0OYNKCp6or/T7lSNpAdPqUq6CLO/Bp+5pTXxiDXHlyS Jv7NoKl0fyDUbzeTghhjwxGxG2niFh+b9ZPYEH5tTgAqBIDTsd286pKss1OazjMj LW05iy2Rb1QNKCYHUykH0y2JyeeOGWFXJsE2j9kCwxGTisuO3r7wLBlSQ2BRR5RC nMWwFH6zqyBGrc6Dhux/tqj4yJZcZuNg2xpAXcMhjp3E3Q5X2K8V4708v824wBRa MHZMQxgJZDfJTGasYAWLbhXcPwZHUdzjIDCvRT12lYyejxZ9dlyly9pqVDVjI3gs WcCi -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:49 2025 by rpki-client on console.sobornost.net