$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer File: 1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer (raw, json) Hash identifier: AAtsvOmBnoh0d13l4nA5bPJ85laq2yB1xQOpvcLASYE= Subject key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 13827C9C4277FB6D5A54C2342E4D0EE5C3A47B0D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft caRepository: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 11:58:35 +0000 Certificate not after: Fri 06 Mar 2026 12:03:35 +0000 Subordinate resources: AS: 264918 IP: 168.228.208.0/22 IP: 2804:2fe0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:82:7c:9c:42:77:fb:6d:5a:54:c2:34:2e:4d:0e:e5:c3:a4:7b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 11:58:35 2025 GMT Not After : Mar 6 12:03:35 2026 GMT Subject: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:f2:d0:68:62:65:a1:81:64:5c:94:05:18: 66:d0:c1:b2:6f:6a:29:20:e5:11:38:4d:51:1a:c6: 0c:6e:d8:48:92:53:cf:45:1e:5f:8c:f8:04:e7:22: 62:e8:c3:9d:78:0a:7b:a3:f6:06:d9:30:b8:58:86: 06:25:4a:a0:c9:0e:89:dc:1e:8c:7f:24:7a:e6:02: cf:80:a2:77:07:ec:e9:83:a6:ad:9c:51:20:1a:9b: ee:a3:e0:53:2d:fa:55:73:c2:ad:10:e7:d2:e5:45: 7e:e1:1b:c0:9e:6f:84:ce:f2:9d:14:ab:d3:39:1a: cf:0d:63:fc:f9:1d:63:5a:7c:05:ef:6d:7d:2d:a3: a1:9f:86:cc:25:51:f0:0d:47:7a:36:2a:41:64:3a: aa:89:28:8c:aa:dc:ad:5f:20:05:1a:99:bb:ba:63: 3f:6b:06:97:0d:b2:94:54:f1:3e:ac:e9:2f:c8:5b: 96:d3:fd:e4:84:c1:1d:32:2d:b2:2b:2b:71:46:33: a9:70:ff:a4:71:f1:bb:7a:2b:8f:3d:9e:95:5a:92: 39:70:99:c8:36:28:be:2c:68:d8:28:4d:21:d3:66: 5d:1c:3d:03:1e:3a:98:cd:45:eb:08:95:9b:19:8e: 48:06:6a:c0:1b:63:63:4f:bf:f1:76:72:ce:13:2c: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.208.0/22 IPv6: 2804:2fe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264918 Signature Algorithm: sha256WithRSAEncryption 7f:20:28:e6:b1:02:bb:09:8d:a7:4f:9d:1a:d3:c1:67:5a:45: eb:24:38:aa:8f:76:fb:0b:4b:bc:65:ef:79:00:33:90:2e:10: 5f:c5:fc:02:5b:62:67:cd:61:77:45:5c:1d:ca:7d:0b:89:de: 34:e7:c5:7c:f9:c5:50:10:2b:74:ac:3d:67:5d:0e:d6:6c:3e: ff:0b:ac:88:da:d8:0e:79:ec:17:aa:92:78:3c:c0:40:e5:9e: 86:e5:88:6b:af:a0:4e:e7:7c:2b:7d:62:a2:55:1d:1d:7d:70: b3:0a:89:76:fc:14:97:ed:39:98:5f:83:b0:0b:92:b4:4c:c3: 02:60:6c:b7:f1:59:73:de:6f:d6:a3:f4:b7:e1:4c:5f:63:28: 22:ba:75:7a:9f:54:e2:f3:e0:0f:e8:56:a7:b7:ca:16:15:cd: 1c:59:0e:79:ee:39:8d:1b:c4:dc:40:ed:b9:8b:00:94:e0:42: ff:45:e4:79:ef:36:d3:f6:07:23:90:94:a6:f4:66:10:cf:e7: de:db:1b:61:8a:13:dd:36:bf:0d:f7:7b:73:23:fe:fc:22:df: 68:b8:0c:ca:81:94:5a:47:f2:ad:d8:bd:a9:96:23:7c:14:70: bb:ae:13:b6:66:d8:1f:de:23:56:d9:6b:8c:65:0e:9b:fd:38: c9:4f:7d:d9 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUE4J8nEJ3+21aVMI0Lk0O5cOkew0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMTU4MzVaFw0yNjAzMDYxMjAzMzVaMDMxMTAvBgNV BAMTKDFBOEVGRkE1MkU0REIzOTNBNzdFQ0ExN0JDQjRDOEE1MUM0MTNFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0fLQaGJloYFkXJQFGGbQwbJv aikg5RE4TVEaxgxu2EiSU89FHl+M+ATnImLow514Cnuj9gbZMLhYhgYlSqDJDonc Hox/JHrmAs+AoncH7OmDpq2cUSAam+6j4FMt+lVzwq0Q59LlRX7hG8Ceb4TO8p0U q9M5Gs8NY/z5HWNafAXvbX0to6GfhswlUfANR3o2KkFkOqqJKIyq3K1fIAUambu6 Yz9rBpcNspRU8T6s6S/IW5bT/eSEwR0yLbIrK3FGM6lw/6Rx8bt6K489npVakjlw mcg2KL4saNgoTSHTZl0cPQMeOpjNResIlZsZjkgGasAbY2NPv/F2cs4TLFBrAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQajv+lLk2zk6d+ yhe8tMilHEE+YjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWMx d1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1URVYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWMx d1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1URVYvMS8xQThF RkZBNTJFNERCMzkzQTc3RUNBMTdCQ0I0QzhBNTFDNDEzRTYyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKo5NAwDQQCAAIwBwMFACgEL+AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBArWMA0GCSqGSIb3DQEBCwUAA4IBAQB/ICjmsQK7CY2nT50a 08FnWkXrJDiqj3b7C0u8Ze95ADOQLhBfxfwCW2JnzWF3RVwdyn0Lid4058V8+cVQ ECt0rD1nXQ7WbD7/C6yI2tgOeewXqpJ4PMBA5Z6G5Yhrr6BO53wrfWKiVR0dfXCz Col2/BSX7TmYX4OwC5K0TMMCYGy38Vlz3m/Wo/S34UxfYygiunV6n1Ti8+AP6Fan t8oWFc0cWQ557jmNG8TcQO25iwCU4EL/ReR57zbT9gcjkJSm9GYQz+fe2xthihPd Nr8N93tzI/78It9ouAzKgZRaR/Kt2L2pliN8FHC7rhO2Ztgf3iNW2WuMZQ6b/TjJ T33Z -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:52 2025 by rpki-client on console.sobornost.net