$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer File: 140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer (raw, json) Hash identifier: jMxqUYFjNzfBCQD6Rq/ab9Y+jm50y+/RzxFvWsqQ+lk= Subject key identifier: 14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F57AB05254D6354D8944B07F7B49EEA3AB9C0DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft caRepository: rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 08 Apr 2025 14:14:21 +0000 Certificate not after: Tue 07 Apr 2026 14:19:21 +0000 Subordinate resources: AS: 270439 IP: 200.11.120.0/22 IP: 2804:6c00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:57:ab:05:25:4d:63:54:d8:94:4b:07:f7:b4:9e:ea:3a:b9:c0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 14:14:21 2025 GMT Not After : Apr 7 14:19:21 2026 GMT Subject: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:3c:a7:fd:58:28:1d:b3:4f:9b:00:56:95: 57:e1:4e:3a:37:df:06:07:31:99:95:e5:1c:de:ad: 75:f3:4e:bf:1f:82:56:03:b8:b6:42:d1:ad:26:cb: a1:7a:f3:cc:40:5c:b2:47:51:9a:8b:aa:90:bb:25: df:c1:ee:83:85:b8:5b:a8:18:00:7b:a2:8b:7a:8c: eb:39:64:0f:3b:82:a0:96:57:ec:69:32:cb:d1:7d: 05:ea:bc:50:26:34:b7:7f:95:31:92:e2:23:26:36: 18:cf:3b:1e:64:0f:24:72:89:5f:20:e8:26:21:4f: a1:e1:b7:75:40:eb:02:62:6a:27:ec:19:89:05:a2: d8:6c:0c:bb:24:41:f5:8b:a1:56:8d:d8:4d:93:7f: 5b:7d:07:dc:b3:22:27:11:ee:94:69:de:f3:9d:c5: b9:a0:e0:9c:31:34:0d:42:25:9b:76:4a:50:00:50: 6d:28:d6:ea:4d:36:4e:05:27:53:bc:bd:f2:5d:a0: b6:18:cf:90:2c:06:f8:e1:68:9d:8d:c3:43:6e:33: f7:aa:97:6e:c5:af:41:5e:37:3b:1e:21:ad:34:49: 50:e8:2f:82:f7:36:71:24:58:58:f9:35:91:9a:88: 34:25:a9:12:c9:ca:be:6b:a8:36:d3:00:7d:4e:ee: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.11.120.0/22 IPv6: 2804:6c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270439 Signature Algorithm: sha256WithRSAEncryption 4a:fd:44:c6:14:15:9a:50:2d:f6:3b:bc:73:ba:39:fc:e7:a0: 6a:3d:fd:17:3e:68:57:d5:ee:8c:06:75:02:aa:8e:c6:a7:8c: d5:32:7a:6e:1a:41:27:13:6c:50:c1:6d:ff:3e:82:bc:03:35: d0:d3:bf:2c:3e:01:83:30:e7:2c:31:a6:15:ea:80:c6:03:07: 62:b3:ee:53:3a:72:cb:f6:7f:eb:1e:17:2a:7c:a8:28:5f:2b: 8d:17:5f:5b:01:89:81:b8:65:ee:09:aa:60:c4:36:20:91:23: a1:f3:de:89:a5:cc:3b:98:a7:6b:65:ad:46:34:f4:f6:43:72: c8:f1:54:21:a4:00:d5:2e:cc:4b:87:50:dc:7f:0f:4b:23:06: 17:c6:52:b7:cc:4d:ca:1b:69:8d:7d:b4:9a:ec:cb:13:06:88: f6:2e:93:67:ed:30:d9:d9:58:15:32:27:f7:e8:f1:65:83:d9: 19:6b:04:b1:12:ac:1a:15:8a:fe:a5:ca:40:0c:f2:97:d1:93: 3f:f1:9c:27:cb:65:2e:6c:66:4d:ae:72:30:f4:22:0f:5b:06: ee:e9:2b:9b:46:c6:50:84:da:b4:d5:d1:65:e8:7f:cf:eb:0f: fe:8b:2c:e6:d1:4a:f6:75:8d:13:04:46:46:de:33:81:cd:fc: a1:81:fc:ea -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUD1erBSVNY1TYlEsH97Se6jq5wNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDgxNDE0MjFaFw0yNjA0MDcxNDE5MjFaMDMxMTAvBgNV BAMTKDE0MDM1MEY5RDNDNEEwNUJBOTBDOUZDRjlBNUM2RDBGRTJEQzk4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+zyn/VgoHbNPmwBWlVfhTjo3 3wYHMZmV5RzerXXzTr8fglYDuLZC0a0my6F688xAXLJHUZqLqpC7Jd/B7oOFuFuo GAB7oot6jOs5ZA87gqCWV+xpMsvRfQXqvFAmNLd/lTGS4iMmNhjPOx5kDyRyiV8g 6CYhT6Hht3VA6wJiaifsGYkFothsDLskQfWLoVaN2E2Tf1t9B9yzIicR7pRp3vOd xbmg4JwxNA1CJZt2SlAAUG0o1upNNk4FJ1O8vfJdoLYYz5AsBvjhaJ2Nw0NuM/eq l27Fr0FeNzseIa00SVDoL4L3NnEkWFj5NZGaiDQlqRLJyr5rqDbTAH1O7oirAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUA1D508SgW6kM n8+aXG0P4tyYvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkZ1 MW9TdXhGYnBXTmVidXRyd2sxcko1c3RjeXQ0WlJmZFNLdHRlazd5RWIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZG dTFvU3V4RmJwV05lYnV0cndrMXJKNXN0Y3l0NFpSZmRTS3R0ZWs3eUViLzAvMTQw MzUwRjlEM0M0QTA1QkE5MEM5RkNGOUE1QzZEMEZFMkRDOThCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyAt4MA0EAgACMAcDBQAoBGwAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgZzANBgkqhkiG9w0BAQsFAAOCAQEASv1ExhQVmlAt9ju8 c7o5/Oegaj39Fz5oV9XujAZ1AqqOxqeM1TJ6bhpBJxNsUMFt/z6CvAM10NO/LD4B gzDnLDGmFeqAxgMHYrPuUzpyy/Z/6x4XKnyoKF8rjRdfWwGJgbhl7gmqYMQ2IJEj ofPeiaXMO5ina2WtRjT09kNyyPFUIaQA1S7MS4dQ3H8PSyMGF8ZSt8xNyhtpjX20 muzLEwaI9i6TZ+0w2dlYFTIn9+jxZYPZGWsEsRKsGhWK/qXKQAzyl9GTP/GcJ8tl LmxmTa5yMPQiD1sG7ukrm0bGUITatNXRZeh/z+sP/oss5tFK9nWNEwRGRt4zgc38 oYH86g== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:51 2025 by rpki-client on console.sobornost.net