$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.cer (raw, json) Hash identifier: osQbZfS1I6SdJkHR1pUqSHm/U6AjPp9wd+WERXyhZV8= Subject key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D2B2B60576A00F181F86265FB3139BF3639FB6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft caRepository: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 01:03:26 +0000 Certificate not after: Fri 06 Mar 2026 01:08:26 +0000 Subordinate resources: AS: 264233 IP: 138.117.116.0/22 IP: 170.80.100.0/22 IP: 2804:249c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:2b:60:57:6a:00:f1:81:f8:62:65:fb:31:39:bf:36:39:fb:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 01:03:26 2025 GMT Not After : Mar 6 01:08:26 2026 GMT Subject: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:c3:47:98:f5:73:f7:a7:55:78:2f:4f:59: ba:ba:f9:55:ac:e9:e0:11:9f:14:42:60:f6:bf:eb: b8:ad:3e:f1:e1:44:0d:57:00:8d:2c:7c:c6:8a:ab: 76:fb:06:a2:b6:5c:b6:90:0e:71:bc:8b:a7:4a:dc: 05:b4:c0:48:c4:ad:20:44:45:89:1a:43:c4:64:ad: 8d:ed:0a:8e:15:4c:fe:18:37:52:dc:30:7f:53:34: b9:35:a5:fb:76:c7:61:70:b0:89:8c:15:83:30:0c: 63:3c:4f:42:60:b2:5a:54:f3:1f:fe:69:19:bf:e1: 2c:f7:57:6b:2c:87:b1:09:ab:6d:1f:0d:56:ec:39: 86:1a:58:45:ac:b8:f5:e5:d7:69:05:ec:fd:ba:43: ed:6b:16:89:b7:9a:02:73:85:80:5d:3c:1b:35:05: 9f:36:fd:44:16:a7:2c:8d:c8:cc:e1:ea:37:b1:24: 88:d0:e9:4e:f8:97:22:31:f4:36:31:5b:80:04:6d: a9:db:cf:31:ae:22:5a:bf:6a:32:b8:6b:be:fc:cb: be:51:16:ef:f6:2a:12:d6:0c:8b:4f:49:d3:dd:25: 46:57:de:27:99:c5:a4:42:8c:cc:86:c9:fa:12:e9: 6b:f1:18:e2:f1:03:e6:7a:1e:4e:6c:09:0c:29:cb: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.116.0/22 170.80.100.0/22 IPv6: 2804:249c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264233 Signature Algorithm: sha256WithRSAEncryption 13:0c:74:96:41:40:d6:39:ff:7c:10:bd:46:e4:92:8c:a7:fb: 24:f5:e5:6a:36:cc:8d:c0:4e:07:2c:60:86:7f:09:f6:de:6d: 02:72:8e:d1:1b:d1:e9:08:22:37:79:c1:29:9b:86:aa:b8:c2: 2d:35:f5:fc:11:60:f8:bb:ba:14:11:80:eb:34:b5:91:26:cb: dd:d8:f4:9a:ff:62:70:2f:95:c8:f4:cd:a8:d3:31:28:b2:dc: c8:6c:79:45:ff:84:94:04:d5:1d:01:5c:98:27:cf:95:43:09: 0f:60:da:34:3a:de:e0:a3:a5:68:c9:31:77:dc:04:83:34:78: ee:8e:91:1c:09:2c:ef:37:ed:e6:fe:2c:48:26:c5:02:81:b8: 18:b9:a4:ab:e4:3c:13:e6:b6:99:e9:28:1b:b2:b6:35:42:0d: 86:c7:56:aa:b8:f4:59:c4:7f:dc:55:fd:a1:e7:06:6b:7a:da: b2:19:fd:16:4f:e2:5b:e0:cd:6e:88:78:82:d0:86:8b:01:e3: 3d:85:6b:07:d7:2e:70:35:5c:04:e5:20:ae:05:a6:22:ba:cf: 68:3a:b5:e3:19:98:f9:40:5d:12:59:90:02:aa:58:f1:1e:07: ae:88:5d:ad:0a:30:77:e4:fc:aa:d5:7d:b1:6a:90:d3:78:7d: 18:77:8d:57 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXSsrYFdqAPGB+GJl+zE5vzY5+2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMTAzMjZaFw0yNjAzMDYwMTA4MjZaMDMxMTAvBgNV BAMTKDJENTk5MDVDM0ZDQTVCREEzNEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQMNHmPVz96dVeC9PWbq6+VWs 6eARnxRCYPa/67itPvHhRA1XAI0sfMaKq3b7BqK2XLaQDnG8i6dK3AW0wEjErSBE RYkaQ8RkrY3tCo4VTP4YN1LcMH9TNLk1pft2x2FwsImMFYMwDGM8T0JgslpU8x/+ aRm/4Sz3V2ssh7EJq20fDVbsOYYaWEWsuPXl12kF7P26Q+1rFom3mgJzhYBdPBs1 BZ82/UQWpyyNyMzh6jexJIjQ6U74lyIx9DYxW4AEbanbzzGuIlq/ajK4a778y75R Fu/2KhLWDItPSdPdJUZX3ieZxaRCjMyGyfoS6WvxGOLxA+Z6Hk5sCQwpy8p/AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtWZBcP8pb2jTX EBsIjYBFHQJsRzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFRT cmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RU U3JhVWRBV1dMaFVZWDl1ZDNjeW55WEg2WmVXY0FWQzh6Y0dvRmhQOUFILzEvMkQ1 OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUxRDAyNkM0Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinV0AwQCqlBkMA0EAgACMAcDBQAoBCScMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIKTANBgkqhkiG9w0BAQsFAAOCAQEAEwx0lkFA 1jn/fBC9RuSSjKf7JPXlajbMjcBOByxghn8J9t5tAnKO0RvR6QgiN3nBKZuGqrjC LTX1/BFg+Lu6FBGA6zS1kSbL3dj0mv9icC+VyPTNqNMxKLLcyGx5Rf+ElATVHQFc mCfPlUMJD2DaNDre4KOlaMkxd9wEgzR47o6RHAks7zft5v4sSCbFAoG4GLmkq+Q8 E+a2mekoG7K2NUINhsdWqrj0WcR/3FX9oecGa3rashn9Fk/iW+DNboh4gtCGiwHj PYVrB9cucDVcBOUgrgWmIrrPaDq14xmY+UBdElmQAqpY8R4HrohdrQowd+T8qtV9 sWqQ03h9GHeNVw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:57 2025 by rpki-client on console.sobornost.net