$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.cer File: 1A3ED1628CA42B3B4C8213417B61162F196BD434.cer (raw, json) Hash identifier: t+ecjlEKd1XrPgOumcRAx39GUrHzKAAqoLQINA8yB+g= Subject key identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 42B74C9E0D556348552CF41E7C1EE4E95CA55272 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft caRepository: rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 16:08:23 +0000 Certificate not after: Thu 05 Mar 2026 16:13:23 +0000 Subordinate resources: AS: 265929 IP: 131.196.136.0/22 IP: 2804:4008::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 22:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b7:4c:9e:0d:55:63:48:55:2c:f4:1e:7c:1e:e4:e9:5c:a5:52:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 16:08:23 2025 GMT Not After : Mar 5 16:13:23 2026 GMT Subject: CN=1A3ED1628CA42B3B4C8213417B61162F196BD434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:f2:dd:f6:a6:05:f3:03:ec:ba:a3:50:f1: a0:32:7e:eb:8f:19:46:30:9a:86:f2:2a:33:c2:4e: aa:10:8c:34:df:ae:40:6a:41:25:7d:46:b5:01:63: 1a:3a:92:f2:30:5a:0c:9a:fe:0d:5a:8a:a7:f0:58: 2c:ee:53:a9:5d:d6:61:35:43:19:bb:81:1e:08:75: bc:2e:ca:86:2f:f7:ae:df:46:ed:1a:67:00:bf:21: 82:fc:2d:ca:df:59:57:7d:46:42:a2:72:4b:55:f0: 8e:8a:c1:bc:1f:65:55:20:33:71:55:22:cc:5d:ac: 7c:14:08:1d:bc:03:3c:3f:a0:b6:d1:d7:ec:79:19: 43:87:f2:10:5b:8f:49:54:64:4c:11:6d:8d:1a:dd: ea:0b:1e:6a:21:70:bb:b3:ee:c7:4b:b4:08:25:8c: b2:15:b2:5f:5c:02:df:d8:98:b5:6c:10:69:6c:7b: 11:c1:3d:6f:f2:6e:74:6b:66:46:23:02:17:b5:ee: 31:88:32:bb:18:15:66:47:5c:30:1a:db:d3:37:30: 78:19:83:73:63:ad:2d:2b:80:42:ba:03:91:92:d7: 39:50:b7:62:15:6f:9f:83:bf:08:4d:91:b3:9a:d7: c8:a5:5a:0c:bd:ee:23:4e:42:56:f6:6d:a5:e6:7e: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:3E:D1:62:8C:A4:2B:3B:4C:82:13:41:7B:61:16:2F:19:6B:D4:34 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzQJpU2fbM4WX7tZyvkiYPvjdx6gYfgYQLDKAZfvS5sz/1/1A3ED1628CA42B3B4C8213417B61162F196BD434.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.136.0/22 IPv6: 2804:4008::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265929 Signature Algorithm: sha256WithRSAEncryption 02:af:4b:74:6a:2e:92:72:65:02:c0:09:70:d7:9b:76:a4:5b: 82:7a:b4:fb:c6:a5:71:9a:1d:20:fb:62:4a:6d:c2:90:de:6a: 19:28:fd:d9:c1:23:bb:99:15:66:da:7f:1b:ee:51:4c:64:cf: 6f:85:8b:f2:46:8d:2d:8a:9c:a8:3f:ee:ba:20:94:28:86:f3: 14:0f:c9:b9:a6:a7:a2:b3:5e:51:b4:ae:dc:59:18:98:48:96: 76:c1:fd:57:01:d6:e5:22:24:62:be:71:ff:58:0c:43:ec:82: 2e:8b:71:84:6b:86:40:2f:69:1c:bf:d9:d8:0f:d5:0b:47:de: 22:98:d9:12:c5:02:91:ac:a3:f8:c1:f3:72:15:da:71:19:37: 81:12:44:4c:8b:77:50:26:5d:d7:2e:9c:6d:46:56:be:8e:43: 14:a8:bf:9b:88:b2:e8:45:af:e7:d3:c4:eb:88:95:b9:a9:a4: be:73:51:79:8b:5d:c7:e3:eb:9b:49:37:7d:7d:06:d7:08:e3: 24:d7:54:78:6c:4f:b1:1d:5b:92:e4:c8:77:65:28:cd:1b:71: 2c:a1:1a:e3:93:48:f6:6a:b1:26:e0:cd:c3:80:67:92:79:f4: ba:1e:95:5b:8e:63:f2:05:f4:26:32:99:b2:77:88:8d:ea:45: 51:36:89:a0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQrdMng1VY0hVLPQefB7k6VylUnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNjA4MjNaFw0yNjAzMDUxNjEzMjNaMDMxMTAvBgNV BAMTKDFBM0VEMTYyOENBNDJCM0I0QzgyMTM0MTdCNjExNjJGMTk2QkQ0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9w/Ld9qYF8wPsuqNQ8aAyfuuP GUYwmobyKjPCTqoQjDTfrkBqQSV9RrUBYxo6kvIwWgya/g1aiqfwWCzuU6ld1mE1 Qxm7gR4IdbwuyoYv967fRu0aZwC/IYL8LcrfWVd9RkKicktV8I6KwbwfZVUgM3FV IsxdrHwUCB28Azw/oLbR1+x5GUOH8hBbj0lUZEwRbY0a3eoLHmohcLuz7sdLtAgl jLIVsl9cAt/YmLVsEGlsexHBPW/ybnRrZkYjAhe17jGIMrsYFWZHXDAa29M3MHgZ g3NjrS0rgEK6A5GS1zlQt2IVb5+DvwhNkbOa18ilWgy97iNOQlb2baXmfsKfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQaPtFijKQrO0yC E0F7YRYvGWvUNDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnpR SnBVMmZiTTRXWDd0Wnl2a2lZUHZqZHg2Z1lmZ1lRTERLQVpmdlM1c3ovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z6 UUpwVTJmYk00V1g3dFp5dmtpWVB2amR4NmdZZmdZUUxES0FaZnZTNXN6LzEvMUEz RUQxNjI4Q0E0MkIzQjRDODIxMzQxN0I2MTE2MkYxOTZCRDQzNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8SIMA0EAgACMAcDBQAoBEAIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQOyTANBgkqhkiG9w0BAQsFAAOCAQEAAq9LdGouknJlAsAJ cNebdqRbgnq0+8alcZodIPtiSm3CkN5qGSj92cEju5kVZtp/G+5RTGTPb4WL8kaN LYqcqD/uuiCUKIbzFA/JuaanorNeUbSu3FkYmEiWdsH9VwHW5SIkYr5x/1gMQ+yC LotxhGuGQC9pHL/Z2A/VC0feIpjZEsUCkayj+MHzchXacRk3gRJETIt3UCZd1y6c bUZWvo5DFKi/m4iy6EWv59PE64iVuamkvnNReYtdx+Prm0k3fX0G1wjjJNdUeGxP sR1bkuTId2UozRtxLKEa45NI9mqxJuDNw4Bnknn0uh6VW45j8gX0JjKZsneIjepF UTaJoA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:48:26 2025 by rpki-client on console.sobornost.net