$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.cer File: 1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.cer (raw, json) Hash identifier: w//yR19eYJs3Yp13NIjlFHGet5TKjn7P9C5i0H/I2lY= Subject key identifier: 19:32:C0:4D:67:CD:B6:67:AB:EE:DD:FE:BE:7D:0B:09:F5:D2:D6:02 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5033181843D7BF32237BD2A36768EF64DB1D993F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.mft caRepository: rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 17:07:47 +0000 Certificate not after: Thu 02 Apr 2026 17:12:47 +0000 Subordinate resources: AS: 265267 IP: 168.90.60.0/22 IP: 2804:2d38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:33:18:18:43:d7:bf:32:23:7b:d2:a3:67:68:ef:64:db:1d:99:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 17:07:47 2025 GMT Not After : Apr 2 17:12:47 2026 GMT Subject: CN=1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:b7:32:cb:af:37:f5:bd:3e:33:25:0a:b7: 40:55:d7:4c:c3:47:10:01:3e:01:11:93:3d:81:8e: e4:3c:b0:af:4a:9e:50:e4:8e:64:f2:25:43:bc:e3: ef:3e:96:03:8a:dd:de:e4:ad:83:64:67:5b:a2:20: e1:d1:98:91:4b:e4:7e:4a:78:c0:c7:2e:1d:4f:40: ce:af:a5:4c:58:71:b9:d8:4f:64:4a:f7:e6:b3:ba: be:92:31:7b:37:36:24:37:ef:ce:42:c2:b0:3a:0c: 72:47:dc:9c:a5:b0:ee:91:ef:4f:85:0f:2e:49:d8: 29:94:21:20:92:c0:98:98:a4:aa:17:9c:90:55:73: 93:e4:3d:30:14:e1:ee:09:4c:7c:53:8d:68:5d:a1: 5b:db:ba:50:11:49:6f:4e:2c:22:58:92:94:4a:1a: c8:69:90:b4:c7:0c:79:1c:fa:2d:66:db:cc:88:a3: e7:53:e6:65:a2:48:08:e2:fb:7e:58:7b:ac:c1:54: 5a:f8:e1:14:2e:f6:12:45:8a:5c:c2:c6:d7:f9:3e: 6a:da:b0:d3:3c:13:2c:8f:2a:24:b6:46:37:fc:81: 74:1d:34:8c:74:b4:25:71:35:9b:fa:65:28:53:99: 8e:34:90:d2:70:58:f5:4e:8b:96:43:1d:b5:ff:c6: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:32:C0:4D:67:CD:B6:67:AB:EE:DD:FE:BE:7D:0B:09:F5:D2:D6:02 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HPktu2Dk7o8VanZ9fZ9p1f2dBa5DCHwa2EhiJBMjPJe2/0/1932C04D67CDB667ABEEDDFEBE7D0B09F5D2D602.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.60.0/22 IPv6: 2804:2d38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265267 Signature Algorithm: sha256WithRSAEncryption 31:2e:ee:dc:a1:0b:40:3c:cd:03:86:90:25:56:3d:0a:5e:65: ce:d6:d2:36:6d:86:b7:7f:e9:02:ae:f9:46:a0:8c:e3:ec:21: d5:76:30:66:39:05:bf:ed:23:57:f9:76:3e:ee:0a:88:50:c7: d1:b2:64:32:c5:20:15:5b:0e:48:f5:18:e1:9a:8b:94:2b:96: 38:ab:6d:9b:5a:c7:6b:d8:6a:a5:43:b6:e8:94:55:8f:19:c4: 06:0c:c3:ca:5b:12:ad:d1:a2:2d:dd:a5:8d:5b:1a:d6:d4:4b: 5a:4d:75:7a:0f:6a:41:63:dc:f9:f1:cb:bf:43:2c:c5:f8:ef: 08:5a:ff:4f:68:d4:59:45:c4:b1:da:1a:ba:03:c2:89:ac:07: 21:ad:a7:48:cc:4d:4b:c6:ef:ae:40:42:14:ff:45:4f:f5:fa: 13:3b:33:b4:27:d9:81:14:d2:c6:a9:e0:fd:58:ee:27:87:9d: 46:3f:ce:8d:d9:da:bf:f9:00:54:d3:74:38:43:0b:4c:69:ef: aa:1b:75:61:89:6b:97:3b:e4:90:dc:32:3d:ee:37:b6:c5:f7: ea:16:84:1d:ff:ab:f8:78:cd:88:fb:1d:87:46:99:c3:c2:9f: 00:94:4c:5e:e0:d4:d2:41:d7:db:88:b8:c3:dd:ce:e5:08:dc: be:2d:10:d3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUDMYGEPXvzIje9KjZ2jvZNsdmT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDMxNzA3NDdaFw0yNjA0MDIxNzEyNDdaMDMxMTAvBgNV BAMTKDE5MzJDMDRENjdDREI2NjdBQkVFRERGRUJFN0QwQjA5RjVEMkQ2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhbcyy6839b0+MyUKt0BV10zD RxABPgERkz2BjuQ8sK9KnlDkjmTyJUO84+8+lgOK3d7krYNkZ1uiIOHRmJFL5H5K eMDHLh1PQM6vpUxYcbnYT2RK9+azur6SMXs3NiQ3785CwrA6DHJH3JylsO6R70+F Dy5J2CmUISCSwJiYpKoXnJBVc5PkPTAU4e4JTHxTjWhdoVvbulARSW9OLCJYkpRK GshpkLTHDHkc+i1m28yIo+dT5mWiSAji+35Ye6zBVFr44RQu9hJFilzCxtf5Pmra sNM8EyyPKiS2Rjf8gXQdNIx0tCVxNZv6ZShTmY40kNJwWPVOi5ZDHbX/xqQZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZMsBNZ822Z6vu 3f6+fQsJ9dLWAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFBr dHUyRGs3bzhWYW5aOWZaOXAxZjJkQmE1RENId2EyRWhpSkJNalBKZTIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hQ a3R1MkRrN284VmFuWjlmWjlwMWYyZEJhNURDSHdhMkVoaUpCTWpQSmUyLzAvMTkz MkMwNEQ2N0NEQjY2N0FCRUVEREZFQkU3RDBCMDlGNUQyRDYwMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqFo8MA0EAgACMAcDBQAoBC04MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMMzANBgkqhkiG9w0BAQsFAAOCAQEAMS7u3KELQDzNA4aQ JVY9Cl5lztbSNm2Gt3/pAq75RqCM4+wh1XYwZjkFv+0jV/l2Pu4KiFDH0bJkMsUg FVsOSPUY4ZqLlCuWOKttm1rHa9hqpUO26JRVjxnEBgzDylsSrdGiLd2ljVsa1tRL Wk11eg9qQWPc+fHLv0MsxfjvCFr/T2jUWUXEsdoaugPCiawHIa2nSMxNS8bvrkBC FP9FT/X6EzsztCfZgRTSxqng/VjuJ4edRj/Ojdnav/kAVNN0OEMLTGnvqht1YYlr lzvkkNwyPe43tsX36haEHf+r+HjNiPsdh0aZw8KfAJRMXuDU0kHX24i4w93O5Qjc vi0Q0w== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:52 2025 by rpki-client on console.sobornost.net