$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer File: 1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.cer (raw, json) Hash identifier: r238CCwjOTFekCL/xqgii1V8ljau6dkcU9qVyjnMZ5E= Subject key identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A01783D06F051E7E62D23C53D0508BACEFC331C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft caRepository: rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 29 Jan 2025 13:11:42 +0000 Certificate not after: Wed 28 Jan 2026 13:16:42 +0000 Subordinate resources: AS: 61632 IP: 131.100.124.0/22 IP: 138.121.236.0/22 IP: 168.232.184.0/22 IP: 2804:1bfc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:01:78:3d:06:f0:51:e7:e6:2d:23:c5:3d:05:08:ba:ce:fc:33:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 29 13:11:42 2025 GMT Not After : Jan 28 13:16:42 2026 GMT Subject: CN=1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:f0:63:1d:90:5c:e5:26:35:fc:c4:a8:25: 55:76:99:2c:40:f1:fd:ff:32:76:3f:18:6b:d7:ab: b8:18:7e:8b:58:27:ca:8b:2c:bf:d8:3c:d6:c6:47: 72:28:0c:47:f4:2c:33:5f:e1:a4:0d:4e:f6:04:38: 2d:98:9f:46:9d:55:a9:42:79:7f:62:f2:c9:48:bb: 68:c8:92:e7:52:30:15:87:b0:cc:86:e4:58:5f:53: 0c:a5:9b:de:d7:6b:8a:a7:9b:03:b2:94:e3:0d:bf: b0:97:97:ff:d3:c1:93:8a:84:e4:68:cb:d4:7c:39: e2:02:c8:37:bf:11:e0:35:62:8a:1f:70:7c:9e:e4: 37:85:33:6f:c3:84:03:e6:95:1a:73:bb:ab:00:96: f7:86:0e:98:f4:29:4f:c0:ac:ae:be:91:e8:2f:a1: 5a:e1:67:cf:ac:26:65:ae:91:dd:28:fe:5d:36:5d: b2:39:de:76:23:32:46:ec:85:ed:09:93:8f:61:a7: 01:c9:83:2b:af:07:15:99:5a:d9:65:47:9f:33:9f: cd:15:19:4d:b0:8e:68:17:04:fa:45:0f:e4:5c:98: 68:c5:5c:ff:37:8e:93:4d:4b:f2:d3:22:b5:6e:68: e5:7a:b0:0b:10:c6:48:38:87:ea:7d:84:19:56:52: b5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:32:93:CF:E3:82:AB:CE:81:F3:DC:5E:9B:FE:E1:8E:F0:B4:00:7E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/0/1F3293CFE382ABCE81F3DC5E9BFEE18EF0B4007E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.124.0/22 138.121.236.0/22 168.232.184.0/22 IPv6: 2804:1bfc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61632 Signature Algorithm: sha256WithRSAEncryption bf:af:33:1b:f8:6d:c4:20:90:ce:87:25:cc:61:2b:9e:50:62: f0:a5:f2:7c:69:2b:7f:11:ab:8e:96:4a:dc:11:03:97:56:53: 48:70:2c:bb:90:08:dd:ab:6c:ba:0d:ae:fc:48:5f:bb:7a:92: 50:bd:5f:ac:d0:a8:41:e5:9b:39:bd:c5:aa:03:e0:ea:d1:a0: 04:4a:5a:5c:ae:89:84:79:de:de:f3:6e:6b:37:c7:8e:2f:ee: ba:aa:c6:79:62:22:ff:71:c6:b6:97:7a:7d:03:6a:ff:a6:9c: 55:cc:c0:44:40:8d:6b:32:38:b0:61:a8:47:54:74:99:6f:dc: f3:1a:12:f6:0c:31:79:00:2c:17:d6:7a:7a:a7:63:61:b2:6a: 84:ad:54:b8:08:ab:2b:39:bb:10:d9:fc:58:20:b6:51:77:0b: c1:aa:ed:7f:a1:fb:fb:0f:24:7c:69:4a:1b:33:41:33:d4:26: 07:32:dd:3b:6d:58:06:fb:a8:4a:2c:c2:c3:45:33:ab:f8:66: 6a:e4:73:3a:47:a6:62:b5:4d:bb:29:32:aa:85:b4:a3:8f:04: a5:86:9e:35:bf:be:25:ef:38:4b:9b:7d:0b:10:2c:e8:17:e0: c3:44:07:94:2e:32:42:5d:60:0f:b1:6e:73:9a:44:d2:4a:a0: 9f:ea:59:ae -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUKgF4PQbwUefmLSPFPQUIus78MxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjkxMzExNDJaFw0yNjAxMjgxMzE2NDJaMDMxMTAvBgNV BAMTKDFGMzI5M0NGRTM4MkFCQ0U4MUYzREM1RTlCRkVFMThFRjBCNDAwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nfBjHZBc5SY1/MSoJVV2mSxA 8f3/MnY/GGvXq7gYfotYJ8qLLL/YPNbGR3IoDEf0LDNf4aQNTvYEOC2Yn0adValC eX9i8slIu2jIkudSMBWHsMyG5FhfUwylm97Xa4qnmwOylOMNv7CXl//TwZOKhORo y9R8OeICyDe/EeA1YoofcHye5DeFM2/DhAPmlRpzu6sAlveGDpj0KU/ArK6+kegv oVrhZ8+sJmWukd0o/l02XbI53nYjMkbshe0Jk49hpwHJgyuvBxWZWtllR58zn80V GU2wjmgXBPpFD+RcmGjFXP83jpNNS/LTIrVuaOV6sAsQxkg4h+p9hBlWUrXLAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQfMpPP44KrzoHz 3F6b/uGO8LQAfjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5k THZzWDJSa1JXSllwZkgzdVpDTUhQNEM1dHlWVFd0TkVleXAyV1Z3eWMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu ZEx2c1gyUmtSV0pZcGZIM3VaQ01IUDRDNXR5VlRXdE5FZXlwMldWd3ljLzAvMUYz MjkzQ0ZFMzgyQUJDRTgxRjNEQzVFOUJGRUUxOEVGMEI0MDA3RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCg2R8AwQCinnsAwQCqOi4MA0EAgACMAcDBQAoBBv8 MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwwDANBgkqhkiG9w0BAQsFAAOCAQEA v68zG/htxCCQzoclzGErnlBi8KXyfGkrfxGrjpZK3BEDl1ZTSHAsu5AI3atsug2u /Ehfu3qSUL1frNCoQeWbOb3FqgPg6tGgBEpaXK6JhHne3vNuazfHji/uuqrGeWIi /3HGtpd6fQNq/6acVczARECNazI4sGGoR1R0mW/c8xoS9gwxeQAsF9Z6eqdjYbJq hK1UuAirKzm7ENn8WCC2UXcLwartf6H7+w8kfGlKGzNBM9QmBzLdO21YBvuoSizC w0Uzq/hmauRzOkemYrVNuykyqoW0o48EpYaeNb++Je84S5t9CxAs6Bfgw0QHlC4y Ql1gD7Fuc5pE0kqgn+pZrg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:53 2025 by rpki-client on console.sobornost.net