$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer File: 296C1957CA1EAD9BA9385FA528C36D900C425F48.cer (raw, json) Hash identifier: TxsvTIVifYffLDxT/3KC6TX5OphlfqtVt8qjAHKPvOc= Subject key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6564B31955A2CE4ECA37BF0A80FE87F510D13CF1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft caRepository: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Apr 2025 14:07:54 +0000 Certificate not after: Mon 13 Apr 2026 14:12:54 +0000 Subordinate resources: AS: 270564 IP: 24.152.36.0/22 IP: 181.224.24.0/22 IP: 2804:6dec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:64:b3:19:55:a2:ce:4e:ca:37:bf:0a:80:fe:87:f5:10:d1:3c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 14 14:07:54 2025 GMT Not After : Apr 13 14:12:54 2026 GMT Subject: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:3f:45:b9:e7:83:ad:9e:e3:de:3f:aa:13: 0d:f6:dc:9a:5e:cc:9c:1e:6b:4c:5c:ed:ff:89:04: 9c:e1:61:8e:01:44:26:ac:b5:12:c4:18:6d:1a:81: cf:84:a4:f5:e8:72:f0:dc:30:16:2c:b6:3d:22:0e: 77:30:ee:10:f3:78:a5:32:85:a6:51:90:32:b0:b2: db:9e:d3:68:40:d4:9c:86:d1:a2:6c:52:17:7c:1a: 68:0f:7c:4f:a9:e4:0f:16:22:32:9c:06:c3:ec:97: 92:17:46:a6:8d:b8:72:ff:47:5e:71:7e:b4:2e:bd: 2d:28:e2:c2:82:68:38:f8:71:9b:0c:ae:b6:a3:24: cd:d2:c0:79:0d:51:35:e5:5f:7f:99:2c:70:18:f0: c6:4a:99:84:ab:74:2f:1e:d1:61:64:6c:a3:37:f9: 43:f3:55:88:d8:69:f6:01:ef:77:4f:2a:e9:d9:8a: c1:8d:cc:f9:fc:cf:21:4f:80:04:32:2b:10:25:46: 9d:f1:8d:25:8b:ff:fa:77:b6:99:a3:13:8a:c0:3c: bf:2b:60:73:d0:4f:5c:db:68:d5:a7:7c:b1:70:4e: 15:e3:b0:f1:87:76:49:c5:8f:fb:f0:c0:6e:3a:8c: bb:fa:81:c6:95:7c:fa:92:4e:49:05:7b:fa:b7:8f: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.152.36.0/22 181.224.24.0/22 IPv6: 2804:6dec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270564 Signature Algorithm: sha256WithRSAEncryption b2:5d:5e:b9:a8:d1:fc:a4:a8:68:9c:00:a1:9e:93:01:b8:36: e4:47:9a:70:4d:56:b9:e1:a5:40:00:2c:52:1f:5e:20:03:4c: 32:e3:d8:45:8b:ce:33:66:a2:6d:da:d9:a6:0e:7b:aa:53:c4: 99:48:ce:fe:74:4e:e5:46:bd:fd:6e:73:84:b6:04:0d:81:41: 22:40:0b:c9:7f:6f:d5:b4:82:a9:24:7a:91:81:1f:69:92:a5: 7b:3a:23:2e:61:5f:e1:80:e9:d9:38:9f:1e:d2:3d:37:94:cf: 30:f2:25:ba:31:ce:75:23:23:c0:b8:0d:0e:22:d0:72:04:31: 2b:ad:74:9b:b8:eb:58:9c:77:1c:0f:b2:b1:6f:f0:56:63:8a: 05:54:69:b4:d9:de:08:8f:d0:fe:b6:fe:02:0b:60:b7:a5:c0: 3f:01:22:80:b7:46:a7:66:21:a5:81:8f:d6:6a:c2:07:d0:6e: 80:38:78:35:91:54:30:d1:f2:f7:62:0d:9d:62:98:22:79:67: b1:fa:d4:6c:63:0b:10:2a:97:43:90:6c:c8:6e:01:d1:3f:94: 16:9a:2c:e5:6d:64:cc:f3:f4:e2:aa:ff:cf:38:c4:65:98:03: e9:0e:2d:84:2f:d6:11:bd:8c:d6:21:5c:95:33:f0:67:cd:8d: 37:c4:72:40 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZWSzGVWizk7KN78KgP6H9RDRPPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTQxNDA3NTRaFw0yNjA0MTMxNDEyNTRaMDMxMTAvBgNV BAMTKDI5NkMxOTU3Q0ExRUFEOUJBOTM4NUZBNTI4QzM2RDkwMEM0MjVGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzD9FueeDrZ7j3j+qEw323Jpe zJwea0xc7f+JBJzhYY4BRCastRLEGG0agc+EpPXocvDcMBYstj0iDncw7hDzeKUy haZRkDKwstue02hA1JyG0aJsUhd8GmgPfE+p5A8WIjKcBsPsl5IXRqaNuHL/R15x frQuvS0o4sKCaDj4cZsMrrajJM3SwHkNUTXlX3+ZLHAY8MZKmYSrdC8e0WFkbKM3 +UPzVYjYafYB73dPKunZisGNzPn8zyFPgAQyKxAlRp3xjSWL//p3tpmjE4rAPL8r YHPQT1zbaNWnfLFwThXjsPGHdknFj/vwwG46jLv6gcaVfPqSTkkFe/q3jzJLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpbBlXyh6tm6k4 X6Uow22QDEJfSDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3Fp Szc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtxVTEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNx aUs3NE5oaVgzbzNhWjhXOG03U0YzQVJLbWRTZFNuMXl2RDJpTTZrcVUxLzAvMjk2 QzE5NTdDQTFFQUQ5QkE5Mzg1RkE1MjhDMzZEOTAwQzQyNUY0OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCGJgkAwQCteAYMA0EAgACMAcDBQAoBG3sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQg5DANBgkqhkiG9w0BAQsFAAOCAQEAsl1euajR /KSoaJwAoZ6TAbg25EeacE1WueGlQAAsUh9eIANMMuPYRYvOM2aibdrZpg57qlPE mUjO/nRO5Ua9/W5zhLYEDYFBIkALyX9v1bSCqSR6kYEfaZKlezojLmFf4YDp2Tif HtI9N5TPMPIlujHOdSMjwLgNDiLQcgQxK610m7jrWJx3HA+ysW/wVmOKBVRptNne CI/Q/rb+Agtgt6XAPwEigLdGp2YhpYGP1mrCB9BugDh4NZFUMNHy92INnWKYInln sfrUbGMLECqXQ5BsyG4B0T+UFpos5W1kzPP04qr/zzjEZZgD6Q4thC/WEb2M1iFc lTPwZ82NN8RyQA== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:50 2025 by rpki-client on console.sobornost.net