$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2114B3B965382FA7393E772A6837B5B8D7173834.cer File: 2114B3B965382FA7393E772A6837B5B8D7173834.cer (raw, json) Hash identifier: mhTbUiP1yjIh6DhGy77zOBwjZ1TGfHbuQ11tGydxVyQ= Subject key identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 67EED54795B84FB13D496EAE10CAD9E7DE867CB8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft caRepository: rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 14:33:46 +0000 Certificate not after: Tue 21 Apr 2026 14:38:46 +0000 Subordinate resources: AS: 271657 IP: 45.225.112.0/22 IP: 2804:7ef4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ee:d5:47:95:b8:4f:b1:3d:49:6e:ae:10:ca:d9:e7:de:86:7c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 14:33:46 2025 GMT Not After : Apr 21 14:38:46 2026 GMT Subject: CN=2114B3B965382FA7393E772A6837B5B8D7173834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:7b:d4:0d:15:e0:1b:6b:3d:ed:98:bb:f8: 69:d2:32:00:dc:f7:34:ac:5d:8d:d2:8a:35:f7:2a: 0b:94:77:45:30:05:7c:43:27:20:18:cb:7d:83:bb: 7e:4a:d8:2d:2f:08:1c:a4:09:11:0c:7b:3d:ab:34: 12:65:bf:3a:6c:57:dc:d0:55:a7:80:05:dd:fa:15: 83:90:df:07:84:c6:e4:41:bb:46:ea:e1:32:53:7f: 9c:6f:1f:f2:4e:8d:87:e5:1a:bd:e2:1a:30:de:1e: 6e:8d:65:84:f2:5b:04:f5:7d:3f:88:d4:cb:2e:b0: 01:03:18:25:96:6f:61:05:7b:cf:4c:9e:ba:88:51: 59:8f:0b:b7:01:e3:98:ec:b7:ad:bb:43:dd:1f:97: 63:59:81:6b:ad:bd:06:33:0a:82:d7:0a:d5:4b:84: a2:12:91:57:f2:8a:8c:82:72:58:93:8e:37:74:5f: cc:d2:97:ee:4a:70:66:bd:0e:60:93:1e:d6:9c:f2: b5:30:ec:40:04:7e:83:b9:01:85:de:eb:66:65:7e: e2:db:fc:16:fe:0b:eb:16:45:16:ab:f4:1d:a5:11: 69:56:7a:00:6d:34:dd:4c:15:8c:13:96:c5:52:a0: d0:90:0b:5f:0b:8c:ae:50:29:a2:06:99:1c:d1:fd: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:14:B3:B9:65:38:2F:A7:39:3E:77:2A:68:37:B5:B8:D7:17:38:34 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/2114B3B965382FA7393E772A6837B5B8D7173834.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.112.0/22 IPv6: 2804:7ef4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271657 Signature Algorithm: sha256WithRSAEncryption cf:42:ab:7d:76:77:f7:8a:86:6a:25:4f:f3:12:34:3c:6e:0c: e4:78:b8:89:ef:06:85:0c:a6:5d:b8:8b:7d:64:26:43:b4:5b: 66:cc:32:17:4b:56:26:f9:0e:18:df:0e:f9:b9:bd:5c:f1:9f: 60:8c:27:e0:4c:49:79:22:4d:bc:85:5c:8e:05:61:50:dd:eb: de:ff:7b:ab:0e:c9:41:55:0b:39:1c:3e:d9:95:7d:82:59:54: 88:92:2a:b2:89:4f:57:aa:f5:35:89:1f:e4:48:8f:a5:29:8e: 0f:64:3d:d6:a2:50:22:98:98:13:2d:e7:56:1c:4a:9d:dd:2c: 73:7a:88:d6:7b:26:a9:cc:8c:b6:4f:44:65:16:14:83:a6:7d: e8:89:b7:2a:2f:11:9c:9a:e4:c5:f7:ee:b6:08:fa:b3:6c:1c: 01:e4:c6:40:48:f7:bb:78:65:10:de:16:34:f9:f8:4e:0a:d7: 5c:95:f1:85:22:b7:e2:aa:6e:d3:f6:cd:06:e3:c2:c2:a5:b9: b2:92:8e:08:f1:d6:37:eb:29:83:8e:65:e1:86:0e:b0:69:f7: 0f:0f:b5:00:2c:d6:a8:81:ee:cc:4b:c0:9b:0e:ae:2c:b0:b3: c5:49:52:9a:55:3b:b3:ec:d8:54:e6:fe:12:a9:c7:8f:7f:e3: 5c:d7:12:d3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZ+7VR5W4T7E9SW6uEMrZ596GfLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIxNDMzNDZaFw0yNjA0MjExNDM4NDZaMDMxMTAvBgNV BAMTKDIxMTRCM0I5NjUzODJGQTczOTNFNzcyQTY4MzdCNUI4RDcxNzM4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC543vUDRXgG2s97Zi7+GnSMgDc 9zSsXY3SijX3KguUd0UwBXxDJyAYy32Du35K2C0vCBykCREMez2rNBJlvzpsV9zQ VaeABd36FYOQ3weExuRBu0bq4TJTf5xvH/JOjYflGr3iGjDeHm6NZYTyWwT1fT+I 1MsusAEDGCWWb2EFe89MnrqIUVmPC7cB45jst627Q90fl2NZgWutvQYzCoLXCtVL hKISkVfyioyCcliTjjd0X8zSl+5KcGa9DmCTHtac8rUw7EAEfoO5AYXe62ZlfuLb /Bb+C+sWRRar9B2lEWlWegBtNN1MFYwTlsVSoNCQC18LjK5QKaIGmRzR/X+5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhFLO5ZTgvpzk+ dypoN7W41xc4NDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnZt ZG04Q1pmbXhEcGNmZkpncWQzN1U1NlptZlhteGVOUzdXVENjV3g1UUovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J2 bWRtOENaZm14RHBjZmZKZ3FkMzdVNTZabWZYbXhlTlM3V1RDY1d4NVFKLzAvMjEx NEIzQjk2NTM4MkZBNzM5M0U3NzJBNjgzN0I1QjhENzE3MzgzNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeFwMA0EAgACMAcDBQAoBH70MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQlKTANBgkqhkiG9w0BAQsFAAOCAQEAz0KrfXZ394qGaiVP 8xI0PG4M5Hi4ie8GhQymXbiLfWQmQ7RbZswyF0tWJvkOGN8O+bm9XPGfYIwn4ExJ eSJNvIVcjgVhUN3r3v97qw7JQVULORw+2ZV9gllUiJIqsolPV6r1NYkf5EiPpSmO D2Q91qJQIpiYEy3nVhxKnd0sc3qI1nsmqcyMtk9EZRYUg6Z96Im3Ki8RnJrkxffu tgj6s2wcAeTGQEj3u3hlEN4WNPn4TgrXXJXxhSK34qpu0/bNBuPCwqW5spKOCPHW N+spg45l4YYOsGn3Dw+1ACzWqIHuzEvAmw6uLLCzxUlSmlU7s+zYVOb+EqnHj3/j XNcS0w== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:47 2025 by rpki-client on console.sobornost.net