$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer (raw, json) Hash identifier: U5nD736HDtJYDWz/BUTWjLhNvrnxklIRTQ0Bv6RpKUg= Subject key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A119F0209876A89ACE773E0BE5DEDA1D874AA9D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft caRepository: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 08:17:05 +0000 Certificate not after: Thu 05 Mar 2026 08:22:05 +0000 Subordinate resources: AS: 268470 IP: 45.161.176.0/22 IP: 2804:51b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:11:9f:02:09:87:6a:89:ac:e7:73:e0:be:5d:ed:a1:d8:74:aa:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 08:17:05 2025 GMT Not After : Mar 5 08:22:05 2026 GMT Subject: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:0a:00:e7:0b:00:72:a4:94:21:27:84:62: 95:0c:20:88:75:4b:27:b0:7b:6b:6d:3d:04:2b:3c: 9b:93:51:83:4c:91:60:41:40:30:a6:b8:3b:d3:b4: 10:31:65:42:e9:23:f4:d9:02:a8:28:49:cd:35:3b: b3:aa:93:ca:34:11:33:fe:82:2e:1a:88:ad:67:14: 57:21:f6:1a:24:75:90:b2:fc:3f:fa:30:ed:62:e5: 20:96:32:41:8c:fe:71:51:32:d0:48:ac:6c:a7:bf: 5e:d2:e9:fc:68:af:2e:e7:53:89:a5:aa:d2:0a:fc: f1:dd:4a:38:36:3c:a7:80:66:d2:a5:82:fd:54:1f: c9:ef:b4:f8:d7:a7:1c:67:ef:d3:fd:d3:66:b5:81: 5b:1b:3f:c0:3b:da:d1:b2:79:be:ef:4d:6a:a1:a0: b6:62:fd:95:53:5b:da:99:cd:30:3a:c7:53:64:e2: 64:af:c3:e1:41:74:34:e4:56:23:17:fb:37:99:86: 55:4f:df:16:60:f4:d6:b7:25:71:90:09:f0:29:7c: f6:8c:d8:e8:db:2e:c2:42:04:26:83:b1:bd:b6:73: 52:6e:b6:89:f8:39:71:42:5a:b3:2e:70:51:2d:43: 1c:5e:a1:96:dd:15:ab:8c:a2:bb:e9:f6:e6:57:23: c3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.176.0/22 IPv6: 2804:51b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268470 Signature Algorithm: sha256WithRSAEncryption 2b:4e:fa:0d:5f:c6:8a:25:2f:d3:ab:97:b8:51:35:bb:a3:50: 9f:31:93:b5:70:39:4d:b7:48:ec:0e:0e:72:b5:51:c8:63:54: 1c:60:9a:45:3e:41:1a:44:37:15:6c:16:77:14:4a:01:e7:ed: a1:0a:94:d0:14:74:de:7d:c9:fa:c1:3f:cf:1c:21:46:40:b0: 65:0a:80:41:09:21:56:58:b4:b7:09:e2:04:69:63:07:8d:c8: 78:7c:67:a4:44:96:95:96:4c:e7:c2:d1:9f:ac:fe:86:68:ef: 86:d7:e6:fa:a8:95:cd:57:f6:01:9a:0e:64:c4:0d:20:b5:cd: 05:12:6b:04:a0:5f:42:ff:f9:ff:7e:ca:c5:f4:68:58:40:95: df:79:83:4a:ec:63:ac:22:72:f0:76:c9:3b:c3:a7:9e:9f:34: dc:da:b1:d8:5e:1b:c1:da:e3:2c:48:a7:e7:15:b4:99:6a:9c: 4f:88:ba:43:66:b0:3b:a2:e3:9f:fc:81:6c:66:86:c2:c7:e4: 03:b0:77:41:f2:64:e4:32:2a:51:d5:aa:ab:43:18:65:ac:75: 45:04:99:00:38:13:ec:3a:ae:87:cf:90:0c:cf:e8:e7:6e:4b: f3:18:44:ad:60:50:0d:86:3d:34:50:ec:c6:0b:d1:de:57:b5: e6:ea:a2:24 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWhGfAgmHaoms53Pgvl3todh0qp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwODE3MDVaFw0yNjAzMDUwODIyMDVaMDMxMTAvBgNV BAMTKDIzM0MwRjBCNTcxRkRBMUMzMzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRAoA5wsAcqSUISeEYpUMIIh1 Syewe2ttPQQrPJuTUYNMkWBBQDCmuDvTtBAxZULpI/TZAqgoSc01O7Oqk8o0ETP+ gi4aiK1nFFch9hokdZCy/D/6MO1i5SCWMkGM/nFRMtBIrGynv17S6fxory7nU4ml qtIK/PHdSjg2PKeAZtKlgv1UH8nvtPjXpxxn79P902a1gVsbP8A72tGyeb7vTWqh oLZi/ZVTW9qZzTA6x1Nk4mSvw+FBdDTkViMX+zeZhlVP3xZg9Na3JXGQCfApfPaM 2OjbLsJCBCaDsb22c1Juton4OXFCWrMucFEtQxxeoZbdFauMorvp9uZXI8PDAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjPA8LVx/aHDMT v4r31obHS6/LQTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXho UTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4 aFExS3dTcE1UalE4SFRoUm5DODk3bjY0SllCV3BMOFVZaW5hc05hQWYzLzEvMjMz QzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0QkFGQ0I0MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaGwMA0EAgACMAcDBQAoBFGwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYtjANBgkqhkiG9w0BAQsFAAOCAQEAK076DV/GiiUv06uX uFE1u6NQnzGTtXA5TbdI7A4OcrVRyGNUHGCaRT5BGkQ3FWwWdxRKAeftoQqU0BR0 3n3J+sE/zxwhRkCwZQqAQQkhVli0twniBGljB43IeHxnpESWlZZM58LRn6z+hmjv htfm+qiVzVf2AZoOZMQNILXNBRJrBKBfQv/5/37KxfRoWECV33mDSuxjrCJy8HbJ O8Onnp803Nqx2F4bwdrjLEin5xW0mWqcT4i6Q2awO6Ljn/yBbGaGwsfkA7B3QfJk 5DIqUdWqq0MYZax1RQSZADgT7Dquh8+QDM/o525L8xhErWBQDYY9NFDsxgvR3le1 5uqiJA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:54 2025 by rpki-client on console.sobornost.net