$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer File: 2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer (raw, json) Hash identifier: /0eIFGMQaji8fWI+8rwuFOHieb6tVw16XcWSBUutM+A= Subject key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0BA02099FC68973DECAD2895F6A0B88F57BFA363 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft caRepository: rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:44 +0000 Certificate not after: Wed 04 Mar 2026 18:40:44 +0000 Subordinate resources: AS: 264126 IP: 138.59.200.0/22 IP: 2804:22d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a0:20:99:fc:68:97:3d:ec:ad:28:95:f6:a0:b8:8f:57:bf:a3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:44 2025 GMT Not After : Mar 4 18:40:44 2026 GMT Subject: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:19:34:17:7f:de:5b:73:ea:a8:63:9c:e8: 4e:b3:a8:56:c6:ce:87:b8:6f:e8:fb:89:46:01:b1: 51:b6:21:06:e6:06:7b:e8:fa:0b:33:2c:4d:7d:d7: b5:78:4a:b3:14:1f:98:46:ab:d9:91:26:53:51:56: d5:71:ad:f8:44:57:a3:16:cc:e9:f9:62:e3:60:67: 4f:36:30:09:f2:01:57:e6:56:0c:70:bd:d8:4d:3b: 69:17:c7:23:59:e5:5d:07:41:6b:36:66:1a:fe:de: 8e:b3:67:f8:b4:cd:98:50:82:84:86:c8:79:28:af: ab:6d:a4:14:44:d8:e1:2e:2e:52:e1:3b:73:aa:f3: de:de:37:50:fb:ab:ec:0e:18:7b:19:6c:c9:76:60: d4:17:a2:5a:7f:9c:dd:ef:32:0c:d9:7d:aa:a3:03: 57:a9:33:27:1e:8c:71:28:82:80:7f:a5:55:85:97: 05:36:c4:9f:07:d1:2a:1f:47:87:df:6c:35:55:4a: dc:18:83:a5:af:1b:45:45:af:53:7f:5b:cc:a4:7c: 6c:f7:00:7b:8e:d2:d6:fd:7f:bc:b7:16:c6:e3:a5: 81:aa:51:21:8a:e4:e9:ca:0c:7c:22:39:67:e6:2d: 50:57:87:66:a9:f8:ed:bb:f5:c7:47:7d:6a:85:12: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.200.0/22 IPv6: 2804:22d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264126 Signature Algorithm: sha256WithRSAEncryption 95:c9:d4:8e:1b:76:4b:79:e7:c2:2d:fb:d4:07:7a:dc:59:7f: a5:35:36:56:56:80:24:84:2a:cc:a3:12:6e:39:0b:b5:66:ac: 00:7e:ec:db:c4:91:94:7d:dc:d2:a7:7a:34:69:4e:7c:52:a1: 94:e1:7a:8c:33:98:67:35:24:30:c2:4d:81:9f:88:9f:6f:2b: 74:6f:22:23:09:53:bc:18:58:a5:f6:78:3d:bb:67:19:b3:3c: 58:ea:f1:73:7e:dd:45:3b:47:99:83:eb:d2:38:d6:15:ac:4a: d7:9f:ba:e6:d9:24:87:fa:7a:b5:c5:fb:7c:03:38:6b:e6:ef: 7f:fe:4e:02:41:49:bc:44:d0:fb:5a:2a:71:e1:40:e2:0c:c0: ac:f6:4a:ac:50:8f:cd:24:cd:13:bd:6d:68:9d:28:e8:ba:b1: 07:b9:0f:da:81:c4:ae:4c:58:ae:f4:69:cc:4f:48:27:10:3d: 80:9e:a0:56:03:7c:46:e1:98:df:b2:3c:21:09:aa:c6:3f:e1: d2:f9:21:cb:ff:b4:e9:36:8d:48:99:01:9b:8b:4e:89:6e:51: 21:eb:d0:35:9c:20:a9:a9:47:b5:74:79:08:95:50:32:dd:86: 83:8a:04:b8:c4:ca:eb:0b:06:f9:d1:f5:2f:a9:92:1a:d9:e6: 55:f0:62:e1 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUC6Agmfxolz3srSiV9qC4j1e/o2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NDRaFw0yNjAzMDQxODQwNDRaMDMxMTAvBgNV BAMTKDJCQjFGQjg1QjVBODI0Q0UxRjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcRk0F3/eW3PqqGOc6E6zqFbG zoe4b+j7iUYBsVG2IQbmBnvo+gszLE1917V4SrMUH5hGq9mRJlNRVtVxrfhEV6MW zOn5YuNgZ082MAnyAVfmVgxwvdhNO2kXxyNZ5V0HQWs2Zhr+3o6zZ/i0zZhQgoSG yHkor6ttpBRE2OEuLlLhO3Oq897eN1D7q+wOGHsZbMl2YNQXolp/nN3vMgzZfaqj A1epMycejHEogoB/pVWFlwU2xJ8H0SofR4ffbDVVStwYg6WvG0VFr1N/W8ykfGz3 AHuO0tb9f7y3FsbjpYGqUSGK5OnKDHwiOWfmLVBXh2ap+O279cdHfWqFErZ1AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrsfuFtagkzh8S 6Z2ElDwoEjONnDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEhB MmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhWazkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEhB MmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhWazkvMS8yQkIx RkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKO8gwDQQCAAIwBwMFACgEItgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAe+MA0GCSqGSIb3DQEBCwUAA4IBAQCVydSOG3ZLeefCLfvU B3rcWX+lNTZWVoAkhCrMoxJuOQu1ZqwAfuzbxJGUfdzSp3o0aU58UqGU4XqMM5hn NSQwwk2Bn4ifbyt0byIjCVO8GFil9ng9u2cZszxY6vFzft1FO0eZg+vSONYVrErX n7rm2SSH+nq1xft8Azhr5u9//k4CQUm8RND7Wipx4UDiDMCs9kqsUI/NJM0TvW1o nSjourEHuQ/agcSuTFiu9GnMT0gnED2AnqBWA3xG4ZjfsjwhCarGP+HS+SHL/7Tp No1ImQGbi06JblEh69A1nCCpqUe1dHkIlVAy3YaDigS4xMrrCwb50fUvqZIa2eZV 8GLh -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:12 2025 by rpki-client on console.sobornost.net