$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer (raw, json) Hash identifier: f+Ovm4h7haSpq8DjAycWSx+AALbL7EX/DbJuXuDbA0c= Subject key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FFDB2C014225D2FA641780B710D959E9CEED84A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft caRepository: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:29 +0000 Certificate not after: Fri 06 Mar 2026 14:42:29 +0000 Subordinate resources: AS: 268295 IP: 45.237.236.0/22 IP: 2804:4ef8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fd:b2:c0:14:22:5d:2f:a6:41:78:0b:71:0d:95:9e:9c:ee:d8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:29 2025 GMT Not After : Mar 6 14:42:29 2026 GMT Subject: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:86:e9:5e:63:74:81:d4:24:9e:09:8a:fb:1c: 39:a2:d7:b8:72:83:89:3d:2d:b5:69:43:15:24:72: 61:65:1a:d1:16:09:0c:b0:6d:c8:9d:6c:57:76:ab: 06:73:c5:66:f1:7c:91:70:67:4e:c1:c0:f2:22:32: 9f:99:92:fa:e1:86:b4:3e:fd:eb:35:08:3f:6b:99: 88:84:b1:90:52:98:e0:28:ee:16:88:3c:32:1e:bb: ca:73:ac:21:11:83:54:f2:96:0c:3f:ab:7e:35:22: d2:04:a8:59:e1:81:72:87:f6:2f:4c:c9:d1:f4:78: 58:38:3a:0a:ae:2b:49:67:d8:96:bd:55:0f:b9:65: 8e:e7:40:fa:d5:65:81:ef:73:b1:31:16:b6:d9:8b: 1e:e0:aa:3b:f4:47:f1:d3:3c:55:01:b0:c5:86:2b: 75:b4:73:48:a1:ab:d4:4b:6b:d7:3f:cb:49:20:c5: 14:e9:b0:02:77:f6:e0:d4:4a:1a:b1:8a:b2:b8:cb: 0d:8b:93:3c:08:89:dd:02:c1:3a:ee:9c:d1:1e:7c: 67:6d:bb:b5:1b:99:a8:7f:de:0a:52:ea:5d:fc:d1: 34:4b:e3:a3:05:fd:06:f9:9e:14:4b:3e:bb:9a:37: e3:52:03:aa:c1:03:05:a5:57:12:bb:8f:f1:4f:d9: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.236.0/22 IPv6: 2804:4ef8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268295 Signature Algorithm: sha256WithRSAEncryption 32:8f:f7:dd:f2:1b:b2:00:0d:66:dc:4b:6a:ac:7e:d3:31:5c: 42:e8:4a:69:4a:47:3b:56:54:cd:77:2c:d1:9e:6d:fd:e6:4f: 0c:69:07:19:d5:aa:81:83:20:ad:c0:31:65:44:68:18:c5:bd: a4:c0:13:11:3f:5e:85:ce:bc:b3:31:90:c3:c1:23:17:cb:1e: 43:51:bc:e7:2c:65:4d:6a:35:ce:ca:fc:85:36:e6:2d:a8:10: 7e:7e:1f:32:d5:b7:a9:a9:51:56:66:9b:89:45:d1:2f:f2:fb: 2a:c5:72:4b:df:b0:65:65:f3:6b:45:27:4d:68:73:d4:46:94: b0:85:57:8e:df:95:90:0c:2e:0d:51:61:ec:33:f5:99:82:0d: 77:ff:0b:2f:5b:a2:fa:17:d6:1e:ff:ec:44:37:9d:d2:3b:8f: bc:2e:9c:91:7d:0d:47:19:00:f9:19:f2:94:0f:41:70:af:cc: 80:33:e9:7f:1f:cc:bc:48:3a:61:cc:28:02:dc:76:11:fb:20: 36:90:68:5e:c8:3f:08:ec:32:6c:83:7e:57:cd:d0:f7:0a:a5: 83:61:20:ae:07:62:eb:1f:cd:72:fe:c3:fa:73:70:75:bb:c5: c1:37:0d:40:5a:33:0e:42:ca:48:9f:3c:e8:b2:4f:45:d0:f2: 39:e9:7e:c8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUP/2ywBQiXS+mQXgLcQ2Vnpzu2EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MjlaFw0yNjAzMDYxNDQyMjlaMDMxMTAvBgNV BAMTKDFCQTM2MDlEOTY2REQ4QjIyRTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhuleY3SB1CSeCYr7HDmi17hy g4k9LbVpQxUkcmFlGtEWCQywbcidbFd2qwZzxWbxfJFwZ07BwPIiMp+ZkvrhhrQ+ /es1CD9rmYiEsZBSmOAo7haIPDIeu8pzrCERg1Tylgw/q341ItIEqFnhgXKH9i9M ydH0eFg4OgquK0ln2Ja9VQ+5ZY7nQPrVZYHvc7ExFrbZix7gqjv0R/HTPFUBsMWG K3W0c0ihq9RLa9c/y0kgxRTpsAJ39uDUShqxirK4yw2LkzwIid0CwTrunNEefGdt u7Ubmah/3gpS6l380TRL46MF/Qb5nhRLPruaN+NSA6rBAwWlVxK7j/FP2bUXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbo2Cdlm3Ysi5f 1WZ+S6ys7/jR8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkRH ejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJE R3oxYzVBVjNZU3dHTnB1UkVGZHAxNkQ2NFhuZjR4cjRNcUVOTEdxSHJvLzEvMUJB MzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNFRkY4RDFGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLe3sMA0EAgACMAcDBQAoBE74MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYBzANBgkqhkiG9w0BAQsFAAOCAQEAMo/33fIbsgANZtxL aqx+0zFcQuhKaUpHO1ZUzXcs0Z5t/eZPDGkHGdWqgYMgrcAxZURoGMW9pMATET9e hc68szGQw8EjF8seQ1G85yxlTWo1zsr8hTbmLagQfn4fMtW3qalRVmabiUXRL/L7 KsVyS9+wZWXza0UnTWhz1EaUsIVXjt+VkAwuDVFh7DP1mYINd/8LL1ui+hfWHv/s RDed0juPvC6ckX0NRxkA+RnylA9BcK/MgDPpfx/MvEg6YcwoAtx2EfsgNpBoXsg/ COwybIN+V83Q9wqlg2Egrgdi6x/Ncv7D+nNwdbvFwTcNQFozDkLKSJ886LJPRdDy Oel+yA== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:46 2025 by rpki-client on console.sobornost.net