$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer File: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer (raw, json) Hash identifier: 8DXNOgweF8OIZ7Y2J7DfXl1ZwqUVRxjHSV+nO8GYWlQ= Subject key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2B60B315776EA3025FABF628D616D82513B96F11 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft caRepository: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 19:36:07 +0000 Certificate not after: Wed 04 Mar 2026 19:41:07 +0000 Subordinate resources: AS: 262422 IP: 143.208.204.0/22 IP: 177.39.80.0/21 IP: 2804:43c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:60:b3:15:77:6e:a3:02:5f:ab:f6:28:d6:16:d8:25:13:b9:6f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 19:36:07 2025 GMT Not After : Mar 4 19:41:07 2026 GMT Subject: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:a9:6b:3f:45:63:db:81:e3:ef:bb:8f:ea: a1:bf:2f:79:7b:1d:63:98:dd:9b:13:c5:48:08:0d: 5a:63:ff:21:6d:b4:e6:dc:2c:f2:9a:4a:79:71:89: e3:df:26:75:b3:19:31:b8:85:2c:14:59:c2:2c:65: 4b:d2:02:70:be:c3:0e:1f:d0:6a:de:ca:51:22:f2: 60:de:8e:73:12:2e:70:a0:57:b3:38:78:91:d1:7a: ac:3c:e4:b4:6e:83:58:aa:40:47:08:1e:d3:db:64: 23:21:c5:40:c7:69:cb:5c:7f:2b:ee:31:fd:ab:9a: a2:55:0b:88:bc:9a:99:60:dc:33:da:e0:1c:b6:65: 58:1c:49:af:86:73:7f:fa:e7:95:40:1b:fb:a3:55: 96:30:fa:d4:ec:26:7b:81:1f:dd:7d:72:39:03:a3: ac:26:9a:12:8a:57:0a:79:75:d5:e1:fb:ff:39:e4: 73:8e:3c:0e:22:8c:38:e2:b5:eb:54:ae:29:df:2f: ef:92:d9:b6:df:8e:c4:81:ac:a9:ad:54:fe:f2:e3: ad:59:65:96:89:b7:75:cc:5d:14:0c:8a:71:e6:03: 95:59:ad:42:60:41:74:e5:7b:0f:02:72:7a:89:54: 7a:0e:57:08:d6:64:2e:fe:9f:8e:36:2c:b3:b5:db: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.204.0/22 177.39.80.0/21 IPv6: 2804:43c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262422 Signature Algorithm: sha256WithRSAEncryption c9:04:2d:8e:c4:02:f5:b7:e7:d1:d8:0f:b9:7e:9e:63:77:f3: fe:80:6a:5d:d5:0b:45:5f:2b:50:08:43:bf:c2:a3:0b:82:c6: f7:f8:de:e7:f0:f7:bd:2b:33:c1:2a:0c:23:c3:81:e8:fa:b3: 64:7c:41:94:d7:42:1c:84:22:38:79:77:2a:30:d3:b1:ad:94: 11:0f:5e:61:94:76:49:8b:73:57:7c:23:4e:47:cb:b4:3d:88: 52:31:de:6b:1d:4f:5b:cf:46:56:6d:ea:9f:94:b2:df:43:bf: 0f:e3:5c:18:4b:ec:6d:3e:21:29:4b:c8:07:fb:26:da:db:ab: df:06:d7:b3:9b:76:fa:aa:d1:a0:93:51:d7:e7:1a:a0:3f:09: 7c:46:de:4a:f7:6b:e2:ac:ab:30:a7:33:be:b4:de:e6:b7:f2: 6d:8e:6a:19:3c:5c:1a:18:c8:80:41:1c:d2:ec:3f:c2:87:4e: 07:43:5e:96:4a:fd:44:ac:8b:62:06:03:d5:74:57:ba:ea:89: 3e:d5:b4:e1:97:fb:aa:83:7c:29:61:27:3e:bc:c9:f3:dd:b4: e1:61:e4:e2:14:fb:b4:8d:05:66:e3:a0:8f:b8:1a:a5:00:c0: ed:a9:a2:ad:7c:fb:85:1d:ea:61:bf:ba:45:16:f5:b2:64:88: 8d:71:da:0c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUK2CzFXduowJfq/Yo1hbYJRO5bxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxOTM2MDdaFw0yNjAzMDQxOTQxMDdaMDMxMTAvBgNV BAMTKDI0NDM4OERERkU5QTk5RDcxQ0VCMjdDREI2Qzc2NjM3RDIyQ0FCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwalrP0Vj24Hj77uP6qG/L3l7 HWOY3ZsTxUgIDVpj/yFttObcLPKaSnlxiePfJnWzGTG4hSwUWcIsZUvSAnC+ww4f 0GreylEi8mDejnMSLnCgV7M4eJHReqw85LRug1iqQEcIHtPbZCMhxUDHactcfyvu Mf2rmqJVC4i8mplg3DPa4By2ZVgcSa+Gc3/655VAG/ujVZYw+tTsJnuBH919cjkD o6wmmhKKVwp5ddXh+/855HOOPA4ijDjitetUrinfL++S2bbfjsSBrKmtVP7y461Z ZZaJt3XMXRQMinHmA5VZrUJgQXTlew8CcnqJVHoOVwjWZC7+n442LLO12/ndAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkQ4jd/pqZ1xzr J822x2Y30iyrjzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Vr b0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtnbWcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdl a29BcVFlWHpOS0VBWHFHTWR3cVpmOVRnN05kSlFyYlNhZWh4MWRLZ21nLzEvMjQ0 Mzg4RERGRTlBOTlENzFDRUIyN0NEQjZDNzY2MzdEMjJDQUI4Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj9DMAwQDsSdQMA0EAgACMAcDBQAoBAQ8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBFjANBgkqhkiG9w0BAQsFAAOCAQEAyQQtjsQC 9bfn0dgPuX6eY3fz/oBqXdULRV8rUAhDv8KjC4LG9/je5/D3vSszwSoMI8OB6Pqz ZHxBlNdCHIQiOHl3KjDTsa2UEQ9eYZR2SYtzV3wjTkfLtD2IUjHeax1PW89GVm3q n5Sy30O/D+NcGEvsbT4hKUvIB/sm2tur3wbXs5t2+qrRoJNR1+caoD8JfEbeSvdr 4qyrMKczvrTe5rfybY5qGTxcGhjIgEEc0uw/wodOB0Nelkr9RKyLYgYD1XRXuuqJ PtW04Zf7qoN8KWEnPrzJ89204WHk4hT7tI0FZuOgj7gapQDA7amirXz7hR3qYb+6 RRb1smSIjXHaDA== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:48 2025 by rpki-client on console.sobornost.net