$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer File: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer (raw, json) Hash identifier: g3674Agmi8rnPewsg8E/lcQoIANfVKIo6ngnLZex7Dw= Subject key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18633FC7A3E49BE4309CB032DC37178BC81DB51D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft caRepository: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 18:14:44 +0000 Certificate not after: Fri 06 Mar 2026 18:19:44 +0000 Subordinate resources: AS: 267602 IP: 45.71.84.0/22 IP: 2804:4418::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 13:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:63:3f:c7:a3:e4:9b:e4:30:9c:b0:32:dc:37:17:8b:c8:1d:b5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 18:14:44 2025 GMT Not After : Mar 6 18:19:44 2026 GMT Subject: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:98:e1:93:a3:f6:1b:65:97:83:f6:84:11: f3:d5:91:3a:7d:94:d7:12:f8:61:70:a2:48:91:af: 1c:e1:0b:41:06:11:92:f6:58:b4:51:70:21:65:4e: 19:8b:36:33:30:5b:75:6f:87:38:f8:62:fb:25:e9: 1b:1a:7c:b7:61:b3:5f:48:26:f5:64:99:ce:11:a5: 3d:f7:a9:c1:c8:b8:bc:c1:48:72:ca:de:c9:9d:a0: 9f:51:e4:23:1a:4a:c4:42:aa:9a:b6:4d:5f:90:08: 3a:04:5e:3c:e8:4e:bb:ee:d1:94:cf:a5:87:2a:c9: e8:cb:52:36:f8:46:6c:f2:cf:d2:48:0e:60:ab:ca: d6:6d:58:ca:e8:ef:99:5e:05:25:ac:e1:81:ef:b1: 92:a5:36:55:a1:e3:7f:f8:7f:ef:0d:1c:f7:48:68: d8:a4:ee:f9:89:71:04:aa:ce:84:34:5e:0b:46:61: ae:32:43:b0:ef:c8:2d:11:0f:35:6d:67:07:76:19: 15:f4:e2:f1:93:ef:54:80:2a:36:65:ce:9d:40:ef: 3f:12:ca:48:23:55:c7:06:24:0a:4c:f2:74:60:01: 77:e4:e2:ec:de:15:d9:b7:5b:c3:b7:9d:d5:70:d8: 24:13:2e:70:a5:cf:70:5b:8b:50:c4:9c:fb:18:83: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.84.0/22 IPv6: 2804:4418::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267602 Signature Algorithm: sha256WithRSAEncryption 37:5c:5f:f7:25:d0:0f:b1:84:5f:36:03:fe:73:13:66:89:75: 52:68:94:56:45:36:cd:07:fa:ec:ea:02:0c:26:5c:5d:34:87: e1:71:66:b8:2d:8b:fa:72:2d:d2:b6:97:75:82:67:84:d0:60: af:f3:88:25:c1:57:06:a5:eb:09:00:cf:34:51:6c:f9:c9:64: cf:8a:59:d3:ea:a7:81:45:4b:23:ac:cf:85:e2:83:4f:3f:a1: 25:63:f1:2e:d8:60:0e:a3:c7:83:c3:b6:77:25:b6:39:58:6f: 21:ec:3c:dd:57:d9:59:c0:f6:b8:c7:53:de:f3:ab:45:e0:e7: a5:70:8c:7d:60:26:9e:62:e3:f7:a9:c2:cd:bd:35:95:f3:5b: a6:14:2d:75:00:a8:46:03:7c:52:c5:a3:cc:d3:eb:11:ec:e7: 92:b3:f6:ef:cf:50:e6:87:76:e0:66:3a:c3:a6:6f:b4:8b:9a: 95:79:68:36:80:15:76:01:7c:a2:51:2b:08:d1:d3:c0:00:48: 2e:b8:71:3c:fc:78:32:5a:02:bb:0f:a8:ae:84:5b:7b:76:66: 14:be:42:3d:03:fc:a2:9e:c0:6b:56:60:6c:0a:bf:55:0d:6a: bd:aa:33:9f:3b:49:69:e1:73:6d:5f:4f:e5:ca:86:90:5b:64: 31:2c:61:f2 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUGGM/x6Pkm+QwnLAy3DcXi8gdtR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxODE0NDRaFw0yNjAzMDYxODE5NDRaMDMxMTAvBgNV BAMTKDJDQTJFOTc0MkJBRkIwM0ZGRjhCNDgwN0FCOTA3NUZGQ0MzMTAzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FZjhk6P2G2WXg/aEEfPVkTp9 lNcS+GFwokiRrxzhC0EGEZL2WLRRcCFlThmLNjMwW3Vvhzj4Yvsl6RsafLdhs19I JvVkmc4RpT33qcHIuLzBSHLK3smdoJ9R5CMaSsRCqpq2TV+QCDoEXjzoTrvu0ZTP pYcqyejLUjb4Rmzyz9JIDmCrytZtWMro75leBSWs4YHvsZKlNlWh43/4f+8NHPdI aNik7vmJcQSqzoQ0XgtGYa4yQ7DvyC0RDzVtZwd2GRX04vGT71SAKjZlzp1A7z8S ykgjVccGJApM8nRgAXfk4uzeFdm3W8O3ndVw2CQTLnClz3Bbi1DEnPsYg6uLAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsoul0K6+wP/+L SAerkHX/zDEDcDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDlH UjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFDQU0vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDlH UjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFDQU0vMS8yQ0Ey RTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItR1QwDQQCAAIwBwMFACgERBgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBVSMA0GCSqGSIb3DQEBCwUAA4IBAQA3XF/3JdAPsYRfNgP+ cxNmiXVSaJRWRTbNB/rs6gIMJlxdNIfhcWa4LYv6ci3Stpd1gmeE0GCv84glwVcG pesJAM80UWz5yWTPilnT6qeBRUsjrM+F4oNPP6ElY/Eu2GAOo8eDw7Z3JbY5WG8h 7DzdV9lZwPa4x1Pe86tF4OelcIx9YCaeYuP3qcLNvTWV81umFC11AKhGA3xSxaPM 0+sR7OeSs/bvz1Dmh3bgZjrDpm+0i5qVeWg2gBV2AXyiUSsI0dPAAEguuHE8/Hgy WgK7D6iuhFt7dmYUvkI9A/yinsBrVmBsCr9VDWq9qjOfO0lp4XNtX0/lyoaQW2Qx LGHy -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:41 2025 by rpki-client on console.sobornost.net