$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer File: 2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer (raw, json) Hash identifier: 88MzZ+LWF6WiA77QHsbo+jHK1zvec3y4Agbmj20epaI= Subject key identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 69C35953FBAF424E9385C1889F701C37929A7477 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft caRepository: rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 31 Mar 2025 13:29:38 +0000 Certificate not after: Mon 30 Mar 2026 13:34:38 +0000 Subordinate resources: AS: 267556 IP: 45.70.0.0/22 IP: 2804:4338::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c3:59:53:fb:af:42:4e:93:85:c1:88:9f:70:1c:37:92:9a:74:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 31 13:29:38 2025 GMT Not After : Mar 30 13:34:38 2026 GMT Subject: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:d2:22:62:4d:2d:26:8f:7a:4c:18:bc:51: 89:db:7e:af:81:78:8a:79:67:4a:09:90:ef:49:93: 24:a4:22:bb:3c:25:cb:80:59:79:d2:eb:82:db:c2: 6d:70:ab:c8:eb:a5:d6:83:a8:a7:1c:0b:8a:66:30: 90:b3:cc:e6:ee:da:3a:75:55:29:54:ad:22:06:b6: b9:2e:60:b6:67:40:41:1e:59:fc:e3:92:4e:2e:4d: c5:c2:4c:60:4d:3a:0d:d4:dd:1b:9b:32:6e:93:97: 24:3b:89:38:66:2f:cc:4d:50:31:76:88:65:57:3a: 2d:3b:d4:46:76:5f:49:89:0a:40:d9:01:3b:9d:b4: 88:2b:23:8e:d2:05:23:57:33:68:20:38:72:49:46: 1c:7c:2c:0d:a6:25:e4:44:91:f6:55:35:22:8f:cb: b2:c0:0e:be:a9:5f:b5:5d:99:8e:63:c5:5e:82:fc: 7d:35:aa:27:08:b3:80:38:2d:5b:0a:76:bf:af:52: 3f:57:9f:9a:2f:49:3b:9b:31:96:5d:4d:5d:24:2d: 0b:89:ba:c6:6b:21:d7:76:19:5e:b9:16:ab:fd:39: 25:88:e6:13:eb:75:bd:f2:65:be:46:3b:e4:9e:b9: 8b:db:08:a7:e8:a2:e6:45:8c:92:83:04:ff:6f:79: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.0.0/22 IPv6: 2804:4338::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267556 Signature Algorithm: sha256WithRSAEncryption 74:a4:01:02:6f:67:7f:55:73:b6:1e:d9:f0:aa:1a:a2:dc:cb: 02:de:32:34:92:22:ec:47:49:f5:8e:d9:67:eb:e3:1b:18:96: 9f:8f:1b:ab:fc:c4:7e:9c:11:50:b9:33:40:ac:2e:98:75:0a: 0e:9b:e4:34:63:5c:59:8a:c5:bb:57:e1:de:00:a7:11:46:28: 24:d9:b1:05:b6:c3:02:b6:cf:e5:c0:c4:7e:70:4c:2a:51:d9: ee:b8:c9:0f:91:69:c4:f8:15:62:ad:0f:7c:f4:c2:7c:cc:f1: f0:66:ec:c6:18:47:df:9d:4b:2e:82:f8:bd:c6:06:3c:a3:f6: d9:9a:9a:7f:98:a7:b8:0c:29:88:7a:71:e2:fe:ae:39:7c:07: e1:2d:3f:64:92:f9:a8:bd:40:93:ff:61:74:c1:73:62:d0:73: d3:fe:80:4b:10:37:29:fb:a6:af:ef:38:32:fb:e3:04:fa:cb: b8:97:80:43:67:5e:5d:13:93:af:9a:01:f0:0d:5a:25:d4:dc: fd:1a:ba:48:1f:cc:f9:c0:33:3c:42:2b:4f:04:60:4b:69:db: 1c:30:f2:5c:0d:fd:25:e6:03:06:25:2c:d6:31:01:5c:9c:a4: 60:f4:f3:31:6c:8e:5a:61:17:ef:ef:18:d1:10:42:d3:7d:2d: ac:77:f9:f8 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUacNZU/uvQk6ThcGIn3AcN5KadHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMzExMzI5MzhaFw0yNjAzMzAxMzM0MzhaMDMxMTAvBgNV BAMTKDIzODNCM0FGQTM1QURCMkEzNjM4QTlGMkFFMEQ5QzI3QUZCNUM1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFotIiYk0tJo96TBi8UYnbfq+B eIp5Z0oJkO9JkySkIrs8JcuAWXnS64Lbwm1wq8jrpdaDqKccC4pmMJCzzObu2jp1 VSlUrSIGtrkuYLZnQEEeWfzjkk4uTcXCTGBNOg3U3RubMm6TlyQ7iThmL8xNUDF2 iGVXOi071EZ2X0mJCkDZATudtIgrI47SBSNXM2ggOHJJRhx8LA2mJeREkfZVNSKP y7LADr6pX7VdmY5jxV6C/H01qicIs4A4LVsKdr+vUj9Xn5ovSTubMZZdTV0kLQuJ usZrIdd2GV65Fqv9OSWI5hPrdb3yZb5GO+SeuYvbCKfoouZFjJKDBP9veV9fAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjg7Ovo1rbKjY4 qfKuDZwnr7XFDjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXlZ ZHVkRXRmc0ZQSDhidFdkV2FjUHpTMzUzZ29Ua0g0dkY3ZHNHQVUzeC8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXlZ ZHVkRXRmc0ZQSDhidFdkV2FjUHpTMzUzZ29Ua0g0dkY3ZHNHQVUzeC8wLzIzODNC M0FGQTM1QURCMkEzNjM4QTlGMkFFMEQ5QzI3QUZCNUM1MEUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAi1GADANBAIAAjAHAwUAKARDODAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEFSQwDQYJKoZIhvcNAQELBQADggEBAHSkAQJvZ39Vc7Ye2fCq GqLcywLeMjSSIuxHSfWO2Wfr4xsYlp+PG6v8xH6cEVC5M0CsLph1Cg6b5DRjXFmK xbtX4d4ApxFGKCTZsQW2wwK2z+XAxH5wTCpR2e64yQ+RacT4FWKtD3z0wnzM8fBm 7MYYR9+dSy6C+L3GBjyj9tmamn+Yp7gMKYh6ceL+rjl8B+EtP2SS+ai9QJP/YXTB c2LQc9P+gEsQNyn7pq/vODL74wT6y7iXgENnXl0Tk6+aAfANWiXU3P0aukgfzPnA MzxCK08EYEtp2xww8lwN/SXmAwYlLNYxAVycpGD08zFsjlphF+/vGNEQQtN9Lax3 +fg= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:54 2025 by rpki-client on console.sobornost.net