$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer File: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer (raw, json) Hash identifier: Zu3tt7JpyrCg9BnZJLvn2oU4teYUtMYOcpHgUy+LTaA= Subject key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F0EB3A0A91CC826B5B2E0DB82857A103024BC7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft caRepository: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 13:53:57 +0000 Certificate not after: Thu 05 Mar 2026 13:58:57 +0000 Subordinate resources: AS: 271002 IP: 177.223.144.0/22 IP: 2804:74c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0e:b3:a0:a9:1c:c8:26:b5:b2:e0:db:82:85:7a:10:30:24:bc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 13:53:57 2025 GMT Not After : Mar 5 13:58:57 2026 GMT Subject: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:e3:09:41:72:44:65:d3:d0:11:02:61:1a: 49:25:47:d0:2a:5e:a5:3d:c3:6e:af:ef:09:cd:2d: 9b:4f:03:f6:9c:63:d4:74:38:cc:36:05:17:0d:7f: 5f:01:e8:e4:18:9b:e8:cc:b7:1a:87:9d:e2:5e:1d: 7f:9f:67:54:cc:aa:b0:de:92:0e:28:81:92:5b:7f: 29:ba:84:3d:47:78:c5:25:d8:0d:e7:20:bb:f9:bd: 97:5d:cd:d9:a9:3c:44:e9:14:2a:83:e5:ce:48:5b: b6:58:5d:e4:f2:8f:45:b2:4f:4d:08:bc:4a:f0:d9: c6:b0:f1:44:18:13:2c:1d:7c:86:3f:0f:32:38:94: df:e9:1a:58:20:2b:db:1e:76:80:52:aa:61:5d:90: 40:2e:cf:70:2f:0e:b5:5d:2f:c1:9a:1b:76:e7:3d: d1:48:9e:24:f4:6e:61:91:39:85:ee:13:9a:4c:ec: d8:c6:49:7c:a7:12:ea:81:4f:1a:ed:78:1a:b3:33: 41:87:33:b7:93:67:fb:46:b2:82:37:7f:4c:2c:1e: d0:6d:33:1d:3c:49:c7:96:0b:aa:18:30:ce:1e:41: 58:81:70:9a:0a:d5:6d:42:df:a6:81:05:d6:87:5d: b8:60:3a:9b:2d:26:55:cf:e7:9d:cb:50:28:6b:fb: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.223.144.0/22 IPv6: 2804:74c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271002 Signature Algorithm: sha256WithRSAEncryption 54:e0:a6:99:dd:3b:b9:4a:b7:f6:ac:df:70:f9:53:d7:4e:17: 1e:7c:51:71:07:fc:98:e5:cd:db:c0:7f:06:5d:79:72:c2:4a: fe:f2:4f:ee:c3:50:c7:e9:39:16:59:49:06:52:31:50:85:dd: 65:96:6e:8c:ac:22:38:c8:ce:d0:44:4b:1f:89:9b:ea:2c:f3: 82:5d:6b:9a:91:42:46:44:5b:5a:c7:92:aa:14:7f:2e:d3:5d: 46:e4:98:94:0d:4a:21:c0:97:6f:3b:f7:b8:8d:c0:e9:9a:40: a0:8b:55:c4:85:b3:31:53:38:16:76:91:e1:91:09:64:a2:e5: 4f:83:e2:ed:82:a3:70:b2:fb:69:ff:eb:85:c3:2d:e3:04:f1: 81:81:7f:df:8b:fb:7a:c8:79:c6:df:9f:aa:d0:90:fd:41:45: 1a:cd:58:7d:3f:50:81:38:8f:25:52:a8:9f:32:c8:e8:e8:03: dc:42:67:75:5d:ba:e1:d6:ae:36:97:ae:16:75:58:9c:51:5e: f2:25:02:2a:2f:bc:f6:1b:b4:99:89:bf:ae:10:7b:e4:0f:10: 42:6c:10:8f:52:38:0c:a0:9a:05:7e:10:77:13:07:ff:fe:e9: ab:63:92:b5:71:19:c0:be:c8:44:6b:e0:70:13:75:ec:be:e7: 4b:6e:fa:b6 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUHw6zoKkcyCa1suDbgoV6EDAkvH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxMzUzNTdaFw0yNjAzMDUxMzU4NTdaMDMxMTAvBgNV BAMTKDE2NzJBNkFDNURGQkU4NUI3QjEwQ0ZDOEFEQUNERjZCQkEwOEE0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLuMJQXJEZdPQEQJhGkklR9Aq XqU9w26v7wnNLZtPA/acY9R0OMw2BRcNf18B6OQYm+jMtxqHneJeHX+fZ1TMqrDe kg4ogZJbfym6hD1HeMUl2A3nILv5vZddzdmpPETpFCqD5c5IW7ZYXeTyj0WyT00I vErw2caw8UQYEywdfIY/DzI4lN/pGlggK9sedoBSqmFdkEAuz3AvDrVdL8GaG3bn PdFIniT0bmGROYXuE5pM7NjGSXynEuqBTxrteBqzM0GHM7eTZ/tGsoI3f0wsHtBt Mx08SceWC6oYMM4eQViBcJoK1W1C36aBBdaHXbhgOpstJlXP553LUChr+3XTAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWcqasXfvoW3sQ z8itrN9rugikzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkQ2 YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpuU3cvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkQ2 YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpuU3cvMS8xNjcy QTZBQzVERkJFODVCN0IxMENGQzhBREFDREY2QkJBMDhBNENDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKx35AwDQQCAAIwBwMFACgEdMQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCKaMA0GCSqGSIb3DQEBCwUAA4IBAQBU4KaZ3Tu5Srf2rN9w +VPXThcefFFxB/yY5c3bwH8GXXlywkr+8k/uw1DH6TkWWUkGUjFQhd1llm6MrCI4 yM7QREsfiZvqLPOCXWuakUJGRFtax5KqFH8u011G5JiUDUohwJdvO/e4jcDpmkCg i1XEhbMxUzgWdpHhkQlkouVPg+LtgqNwsvtp/+uFwy3jBPGBgX/fi/t6yHnG35+q 0JD9QUUazVh9P1CBOI8lUqifMsjo6APcQmd1Xbrh1q42l64WdVicUV7yJQIqL7z2 G7SZib+uEHvkDxBCbBCPUjgMoJoFfhB3Ewf//umrY5K1cRnAvshEa+BwE3XsvudL bvq2 -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:07 2025 by rpki-client on console.sobornost.net