$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer File: 2C425257AE7B63529EB88108AC7DEA60648B43E5.cer (raw, json) Hash identifier: 0F0ctlxjnU/x2jLgvAHS/ea9ZHeTYCNX7OE1a/nUf9I= Subject key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3F5A4EC882F936DC130931A73A5E15727ED214FC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft caRepository: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 01 Apr 2025 12:45:06 +0000 Certificate not after: Tue 31 Mar 2026 12:50:06 +0000 Subordinate resources: AS: 272549 IP: 181.232.230.0/23 IP: 187.84.152.0/22 IP: 2804:84f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5a:4e:c8:82:f9:36:dc:13:09:31:a7:3a:5e:15:72:7e:d2:14:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 1 12:45:06 2025 GMT Not After : Mar 31 12:50:06 2026 GMT Subject: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:48:08:ba:1e:2d:7a:79:a7:e9:3e:8e:fe: cd:07:4e:94:46:75:ac:46:7d:76:ea:68:1f:d6:d8: 86:b7:63:6f:97:b4:35:e5:35:46:30:bf:50:72:b4: 55:71:40:e8:19:c2:0f:b5:0a:a9:10:73:0b:f5:4a: 09:e2:c5:0b:db:1e:6b:7c:e1:f4:10:fa:5c:64:16: a4:12:dd:06:bf:a9:92:de:59:d8:cf:aa:31:4a:ce: fa:c1:90:8a:45:f5:ad:98:df:93:db:e4:fb:ce:79: 2c:07:37:49:53:a9:b9:57:f0:e5:b2:11:88:19:ca: ed:9f:f0:55:4a:5a:e3:84:b8:9c:14:76:be:f9:8e: 7e:fe:73:61:bc:f9:97:a6:76:5e:73:5d:75:88:cc: c9:b7:fb:3c:18:63:a6:67:27:1c:48:16:f0:70:1b: 51:ca:93:6b:cd:4d:91:df:4c:b1:1c:dc:5f:6e:18: 72:bd:49:8b:c1:cf:41:a1:6e:de:ce:38:c9:43:e2: 80:15:74:18:fb:36:93:d7:74:3e:28:c0:06:7b:83: 5d:29:8c:31:48:95:3b:9a:e4:5c:c6:8c:11:a4:49: 54:7c:8a:13:39:ef:c9:0b:45:12:9d:17:88:64:24: 0e:98:95:6a:2b:c7:ef:ca:6b:9b:92:90:4f:0e:ae: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.230.0/23 187.84.152.0/22 IPv6: 2804:84f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272549 Signature Algorithm: sha256WithRSAEncryption 55:0b:83:af:fc:75:48:49:7c:b3:e0:d2:83:53:04:ce:5d:6d: 29:ac:71:b3:be:a0:a7:e2:af:73:64:aa:2e:43:a1:2e:4c:4c: 6d:36:ac:65:f4:ef:03:99:b0:8d:36:15:b7:50:ef:2d:0a:93: 51:4d:3c:34:6a:8e:0e:32:ba:c9:92:84:96:65:bf:2d:46:26: 5c:e6:62:5d:ea:71:e6:04:17:39:ef:2e:5a:64:b7:e6:8c:f0: 41:fc:72:89:0f:e4:e5:8f:61:b6:5d:cf:93:8a:3b:d0:0e:64: 84:3f:e7:52:a6:cb:e8:cb:b5:52:09:89:85:0f:0e:7c:5d:1e: 53:f0:fe:11:74:2a:5a:30:f0:4b:11:81:9b:8d:8b:c0:50:17: 54:db:58:f3:95:35:40:04:36:54:e4:51:95:b2:b9:b0:02:01: 75:2e:e1:27:3b:7c:90:60:9c:20:4e:c2:39:69:41:ed:00:22: 47:d8:0b:90:0f:51:fd:60:ac:38:4c:f8:60:04:4f:99:b2:c6: 09:0e:2f:6c:9a:c5:20:86:12:4d:9e:af:6d:46:4f:b6:f7:b6: b2:f6:61:2c:88:c4:8b:5f:49:46:3a:86:f3:a7:76:0f:d6:3b: 25:87:63:c0:06:20:2f:8c:dd:3d:02:fc:b8:5a:cc:7a:ae:a7: 3e:ad:eb:17 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUP1pOyIL5NtwTCTGnOl4Vcn7SFPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDExMjQ1MDZaFw0yNjAzMzExMjUwMDZaMDMxMTAvBgNV BAMTKDJDNDI1MjU3QUU3QjYzNTI5RUI4ODEwOEFDN0RFQTYwNjQ4QjQzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6EgIuh4tenmn6T6O/s0HTpRG daxGfXbqaB/W2Ia3Y2+XtDXlNUYwv1BytFVxQOgZwg+1CqkQcwv1SgnixQvbHmt8 4fQQ+lxkFqQS3Qa/qZLeWdjPqjFKzvrBkIpF9a2Y35Pb5PvOeSwHN0lTqblX8OWy EYgZyu2f8FVKWuOEuJwUdr75jn7+c2G8+Zemdl5zXXWIzMm3+zwYY6ZnJxxIFvBw G1HKk2vNTZHfTLEc3F9uGHK9SYvBz0Ghbt7OOMlD4oAVdBj7NpPXdD4owAZ7g10p jDFIlTua5FzGjBGkSVR8ihM578kLRRKdF4hkJA6YlWorx+/Ka5uSkE8Orhz9AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsQlJXrntjUp64 gQisfepgZItD5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGRp Tm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhkckwvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGRp Tm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhkckwvMS8yQzQy NTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0M0U1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAG16OYDBAK7VJgwDQQCAAIwBwMFACgEhPgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBCilMA0GCSqGSIb3DQEBCwUAA4IBAQBVC4Ov/HVI SXyz4NKDUwTOXW0prHGzvqCn4q9zZKouQ6EuTExtNqxl9O8DmbCNNhW3UO8tCpNR TTw0ao4OMrrJkoSWZb8tRiZc5mJd6nHmBBc57y5aZLfmjPBB/HKJD+Tlj2G2Xc+T ijvQDmSEP+dSpsvoy7VSCYmFDw58XR5T8P4RdCpaMPBLEYGbjYvAUBdU21jzlTVA BDZU5FGVsrmwAgF1LuEnO3yQYJwgTsI5aUHtACJH2AuQD1H9YKw4TPhgBE+ZssYJ Di9smsUghhJNnq9tRk+297ay9mEsiMSLX0lGOobzp3YP1jslh2PABiAvjN09Avy4 Wsx6rqc+resX -----END CERTIFICATE-----Generated at Fri Apr 25 10:37:22 2025 by rpki-client on console.sobornost.net