$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.cer File: 2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.cer (raw, json) Hash identifier: Wb0MAmqGLdljYj9g3yoCYVo2YXQyp2uHge/d8ASgmaE= Subject key identifier: 2A:72:36:C5:E8:90:B7:B0:7F:86:E5:EC:AA:9A:69:F1:2B:AE:D2:85 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75D13871380EF0337B680ABF82A1817DE2FA97F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.mft caRepository: rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 11 Apr 2025 16:55:24 +0000 Certificate not after: Fri 10 Apr 2026 17:00:24 +0000 Subordinate resources: AS: 264065 IP: 143.202.0.0/22 IP: 2804:2a38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d1:38:71:38:0e:f0:33:7b:68:0a:bf:82:a1:81:7d:e2:fa:97:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 11 16:55:24 2025 GMT Not After : Apr 10 17:00:24 2026 GMT Subject: CN=2A7236C5E890B7B07F86E5ECAA9A69F12BAED285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a2:93:ad:9c:f4:ac:f5:eb:4a:b2:9e:b4:a1: a2:38:36:08:37:7e:65:0f:67:06:fc:99:5b:b2:27: e2:e6:21:b0:32:50:b0:6f:2d:bd:cc:34:11:f4:f3: e7:33:a0:16:1f:1e:08:f2:1c:50:e9:67:8b:7f:67: 8a:ac:29:75:51:74:86:5c:93:0d:fa:3a:22:f4:7a: b6:fe:98:20:c1:d7:a7:d3:b0:ce:b5:c3:7c:d4:80: fe:33:d8:b0:a4:a7:97:b9:0d:e3:42:2f:b4:be:70: 81:46:03:ae:1e:f3:60:c4:66:dc:3a:d2:ab:80:70: 3e:b8:3b:0e:42:28:d5:ae:e2:07:ca:67:59:9e:3b: d5:37:a1:66:3c:99:60:4f:cf:94:8b:68:a0:03:16: 84:b4:b9:66:e0:9a:84:31:dd:a7:c9:9b:cb:12:fd: 31:76:30:79:2b:53:8b:26:12:4c:a9:cc:1f:ba:2e: 37:78:7c:94:09:e4:5b:04:59:5b:96:37:7c:c0:37: 35:21:0b:f1:90:35:21:06:29:01:0e:c7:f7:8d:ee: 3d:ae:fd:99:af:58:4f:01:7e:40:dd:97:bb:d5:3b: be:f7:87:9a:37:25:2c:72:17:20:e5:dc:89:6c:86: 08:76:04:ef:b7:83:bc:0e:c2:48:33:ac:64:95:f5: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:72:36:C5:E8:90:B7:B0:7F:86:E5:EC:AA:9A:69:F1:2B:AE:D2:85 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/2A7236C5E890B7B07F86E5ECAA9A69F12BAED285.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.0.0/22 IPv6: 2804:2a38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264065 Signature Algorithm: sha256WithRSAEncryption 9e:3f:aa:08:e8:ca:39:ef:4b:ed:f0:b3:ec:d1:2b:63:ec:b7: 60:e6:28:b2:88:d5:26:0f:f5:93:42:60:eb:f0:91:85:ed:e7: 31:e4:5b:1f:5a:2c:03:df:83:18:89:96:cb:ba:fc:40:df:1b: 80:e4:5a:63:d2:f8:dd:05:99:ca:af:55:e6:65:8d:2a:4f:55: 81:e3:94:52:8a:bc:df:82:7a:f0:84:4b:cc:22:a2:ed:3a:7e: ab:71:52:d6:f6:2d:7c:49:df:e9:d6:4a:90:4b:7b:0f:58:eb: 38:fd:96:0d:f5:44:69:f9:9c:0c:a3:32:44:3d:40:0d:bb:dc: 9d:6d:46:cc:e9:01:04:3a:d0:4a:32:e4:cc:7a:fa:38:42:40: 59:b6:37:6c:8d:3e:2a:9b:67:64:84:10:99:92:33:03:93:aa: 27:fb:9c:85:ca:9a:79:2b:f9:29:fa:b7:b7:10:88:e9:d5:0e: 03:71:68:6e:49:16:8b:ec:df:e5:8d:ad:85:e8:4c:a1:63:ad: ee:49:0a:ce:1a:2a:13:ef:ac:da:8a:b2:91:48:7e:f7:7a:90: c4:c3:3f:2f:80:36:2b:81:12:ef:e4:a4:76:fa:15:f0:12:db: 1a:5f:21:55:f3:1d:4f:81:73:0b:a3:e3:2c:de:ad:e4:d9:a2: a1:da:9d:3d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUddE4cTgO8DN7aAq/gqGBfeL6l/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTExNjU1MjRaFw0yNjA0MTAxNzAwMjRaMDMxMTAvBgNV BAMTKDJBNzIzNkM1RTg5MEI3QjA3Rjg2RTVFQ0FBOUE2OUYxMkJBRUQyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNopOtnPSs9etKsp60oaI4Ngg3 fmUPZwb8mVuyJ+LmIbAyULBvLb3MNBH08+czoBYfHgjyHFDpZ4t/Z4qsKXVRdIZc kw36OiL0erb+mCDB16fTsM61w3zUgP4z2LCkp5e5DeNCL7S+cIFGA64e82DEZtw6 0quAcD64Ow5CKNWu4gfKZ1meO9U3oWY8mWBPz5SLaKADFoS0uWbgmoQx3afJm8sS /TF2MHkrU4smEkypzB+6Ljd4fJQJ5FsEWVuWN3zANzUhC/GQNSEGKQEOx/eN7j2u /ZmvWE8BfkDdl7vVO773h5o3JSxyFyDl3Ilshgh2BO+3g7wOwkgzrGSV9SRtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqcjbF6JC3sH+G 5eyqmmnxK67ShTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmM5 OWRxVmVRVzI2ZVNvVzg3aG82QWNUR2dhdG5kY0VGWGFva01wczVtRlYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zj OTlkcVZlUVcyNmVTb1c4N2hvNkFjVEdnYXRuZGNFRlhhb2tNcHM1bUZWLzAvMkE3 MjM2QzVFODkwQjdCMDdGODZFNUVDQUE5QTY5RjEyQkFFRDI4NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj8oAMA0EAgACMAcDBQAoBCo4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHgTANBgkqhkiG9w0BAQsFAAOCAQEAnj+qCOjKOe9L7fCz 7NErY+y3YOYosojVJg/1k0Jg6/CRhe3nMeRbH1osA9+DGImWy7r8QN8bgORaY9L4 3QWZyq9V5mWNKk9VgeOUUoq834J68IRLzCKi7Tp+q3FS1vYtfEnf6dZKkEt7D1jr OP2WDfVEafmcDKMyRD1ADbvcnW1GzOkBBDrQSjLkzHr6OEJAWbY3bI0+KptnZIQQ mZIzA5OqJ/uchcqaeSv5Kfq3txCI6dUOA3FobkkWi+zf5Y2thehMoWOt7kkKzhoq E++s2oqykUh+93qQxMM/L4A2K4ES7+SkdvoV8BLbGl8hVfMdT4FzC6PjLN6t5Nmi odqdPQ== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:12 2025 by rpki-client on console.sobornost.net