$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer File: 12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer (raw, json) Hash identifier: SAVV3vw263F+svZSTA4dymb2Kjhyi8K+nsLDXgahAfg= Subject key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2497212C44126AB2B2D4AD5F63A544CDAC4BF5A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft caRepository: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 00:07:40 +0000 Certificate not after: Tue 21 Apr 2026 00:12:40 +0000 Subordinate resources: AS: 262378 IP: 170.79.192.0/22 IP: 177.131.16.0/20 IP: 2804:2d80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:97:21:2c:44:12:6a:b2:b2:d4:ad:5f:63:a5:44:cd:ac:4b:f5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 00:07:40 2025 GMT Not After : Apr 21 00:12:40 2026 GMT Subject: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:02:dc:be:a7:89:95:d0:31:9e:cc:a8:7e: dc:91:df:e2:67:ff:10:ad:ca:42:c9:f7:f5:28:90: 61:56:70:39:25:a4:57:ff:c0:7a:bb:3f:42:2d:2f: b8:97:13:b2:7d:d7:51:16:20:84:58:10:64:b5:ff: 34:62:7e:b0:1b:01:26:42:03:6c:2e:88:21:f8:4d: c7:37:fd:00:6a:3b:53:d0:82:4c:aa:93:c6:37:d8: 23:0e:a2:6b:e5:34:2c:c3:9f:a2:aa:6c:33:c9:73: f4:7d:5d:33:c4:7a:e9:4b:ff:d6:c5:18:ac:e6:57: cc:de:46:04:0c:44:66:a3:12:c2:c6:6e:ad:28:a5: db:3e:e7:af:c2:57:77:3b:1e:fa:26:73:e2:9d:a8: 56:9a:8e:00:e7:c9:9c:d2:a2:2f:bd:8d:c4:90:ed: 26:59:63:fd:76:71:5f:ff:b8:c9:89:fc:70:5f:c1: 48:f3:7a:01:17:e7:22:6f:b1:50:26:53:f2:e4:19: 0f:6b:c6:2e:1f:2d:8b:95:4c:cf:af:c3:24:26:b0: 9f:cd:9f:5d:51:28:bb:71:23:12:20:98:e8:59:07: ea:18:da:e7:1c:86:78:a8:82:eb:ec:9d:05:42:77: 5c:84:31:b6:57:26:f7:c8:b4:1f:43:11:f9:f1:57: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.192.0/22 177.131.16.0/20 IPv6: 2804:2d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262378 Signature Algorithm: sha256WithRSAEncryption 9e:a9:d8:d8:81:c2:44:81:84:f9:86:ae:c1:08:71:54:7b:bb: b7:b2:04:3b:91:63:5e:aa:22:ab:71:e1:95:8c:96:d0:b1:a5: 74:a5:74:93:2b:e9:5f:77:a6:46:fd:66:78:07:60:54:0a:44: ad:53:17:48:ac:da:d5:41:43:48:1e:d9:b2:9d:91:29:f3:2c: b7:6e:4f:16:24:21:86:60:e4:b9:20:11:fe:92:ee:66:c9:8a: 54:ee:a7:a0:76:e8:a4:1c:d6:20:84:e4:2a:40:53:a0:bc:5c: cf:33:57:41:02:74:f4:7f:9d:33:ca:1b:f7:0b:95:97:70:47: ba:01:59:a4:bb:9e:b1:8b:57:32:99:d8:14:8b:d2:44:87:9a: b7:ab:e5:bd:23:2d:1c:cd:a9:a7:ec:d8:55:39:5e:75:2f:e8: 39:b9:e4:1c:45:dd:27:24:6e:b9:4f:c1:6d:95:1a:22:53:c6: 24:f1:c7:28:9c:21:b5:5d:d4:2a:a2:d0:83:3c:57:dc:b8:92: ee:30:8f:af:c0:d0:7c:a0:e4:dc:b9:6f:c4:c2:8e:38:c2:ed: 4b:6c:67:10:20:54:83:b5:db:88:fe:f9:03:f9:9e:d0:7f:5b: 1d:94:18:bb:9d:d2:d9:90:bc:f9:cb:ea:cb:ee:b4:b8:9f:f6: a3:65:1e:a9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJJchLEQSarKy1K1fY6VEzaxL9aQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIwMDA3NDBaFw0yNjA0MjEwMDEyNDBaMDMxMTAvBgNV BAMTKDEyQzNGRUI5REVDNjE3NkVFNTk1MkY4NUNBRjdBNDRCM0Y2M0YzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSwLcvqeJldAxnsyoftyR3+Jn /xCtykLJ9/UokGFWcDklpFf/wHq7P0ItL7iXE7J911EWIIRYEGS1/zRifrAbASZC A2wuiCH4Tcc3/QBqO1PQgkyqk8Y32CMOomvlNCzDn6KqbDPJc/R9XTPEeulL/9bF GKzmV8zeRgQMRGajEsLGbq0opds+56/CV3c7Hvomc+KdqFaajgDnyZzSoi+9jcSQ 7SZZY/12cV//uMmJ/HBfwUjzegEX5yJvsVAmU/LkGQ9rxi4fLYuVTM+vwyQmsJ/N n11RKLtxIxIgmOhZB+oY2ucchnioguvsnQVCd1yEMbZXJvfItB9DEfnxV0VlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSw/653sYXbuWV L4XK96RLP2PzyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWlR dW5wZHcxRERVUTVIVkpWTGJHRm54dXNaOFRoSmFGU0d2UDZzcDJKOTkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp UXVucGR3MUREVVE1SFZKVkxiR0ZueHVzWjhUaEphRlNHdlA2c3AySjk5LzEvMTJD M0ZFQjlERUM2MTc2RUU1OTUyRjg1Q0FGN0E0NEIzRjYzRjNDQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk/AAwQEsYMQMA0EAgACMAcDBQAoBC2AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQA6jANBgkqhkiG9w0BAQsFAAOCAQEAnqnY2IHC RIGE+YauwQhxVHu7t7IEO5FjXqoiq3HhlYyW0LGldKV0kyvpX3emRv1meAdgVApE rVMXSKza1UFDSB7Zsp2RKfMst25PFiQhhmDkuSAR/pLuZsmKVO6noHbopBzWIITk KkBToLxczzNXQQJ09H+dM8ob9wuVl3BHugFZpLuesYtXMpnYFIvSRIeat6vlvSMt HM2pp+zYVTledS/oObnkHEXdJyRuuU/BbZUaIlPGJPHHKJwhtV3UKqLQgzxX3LiS 7jCPr8DQfKDk3LlvxMKOOMLtS2xnECBUg7XbiP75A/me0H9bHZQYu53S2ZC8+cvq y+60uJ/2o2UeqQ== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:06 2025 by rpki-client on console.sobornost.net