$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer File: 2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.cer (raw, json) Hash identifier: 9kzW2AjIwvHml/USW0xzlczm5h6MNBrtmAgkuEVA3II= Subject key identifier: 2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0434BD608F9D2B2CA76C01198C67B4FC31A61BF6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.mft caRepository: rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 05:00:25 +0000 Certificate not after: Fri 06 Mar 2026 05:05:25 +0000 Subordinate resources: AS: 267584 IP: 45.70.172.0/22 IP: 2804:43b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:34:bd:60:8f:9d:2b:2c:a7:6c:01:19:8c:67:b4:fc:31:a6:1b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 05:00:25 2025 GMT Not After : Mar 6 05:05:25 2026 GMT Subject: CN=2EE98CD7A649AE2259E9DAD3099736C3C595E9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:b4:ba:e4:5f:89:53:51:12:89:30:6f:89: 68:e7:79:87:16:18:88:bf:81:a4:42:77:88:ed:7d: 33:0b:cf:11:80:92:a6:c0:d7:7b:64:2c:93:e1:bb: e2:2e:8f:f3:e3:e4:0f:27:0a:63:8a:c4:05:3e:62: 2f:23:ad:32:1a:2b:d3:70:c1:4b:6f:fb:74:7b:95: f9:92:5e:98:54:15:5a:c6:cf:27:61:56:27:3c:5a: 2e:1f:27:10:ad:a8:b3:d2:24:b4:e7:eb:08:d9:53: d2:2e:a5:c9:e7:83:06:db:c9:76:71:70:79:a0:73: 18:4b:a3:6b:bd:c6:9e:3d:ee:ba:cc:02:a9:ff:a3: 1c:a4:2c:fd:61:e4:aa:5e:22:3c:df:ab:ae:1b:44: 87:a8:ea:8b:20:84:d1:e1:c3:04:24:d2:34:54:ff: 0d:e4:95:9a:e7:39:ee:98:ba:53:24:5f:c0:9e:77: 07:d9:ef:b8:8c:07:f5:1c:36:31:fa:cd:04:83:da: a5:8f:dc:bd:26:d4:b5:0a:12:60:49:c4:4f:6b:5e: e6:c1:44:62:b1:f4:9a:8a:11:42:66:7f:99:d9:60: 70:f0:db:95:37:84:53:4b:50:4e:9d:07:15:de:de: 0c:fa:a4:bb:a1:71:47:e6:9e:26:1b:7d:2d:04:5a: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:E9:8C:D7:A6:49:AE:22:59:E9:DA:D3:09:97:36:C3:C5:95:E9:D5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/1/2EE98CD7A649AE2259E9DAD3099736C3C595E9D5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.172.0/22 IPv6: 2804:43b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267584 Signature Algorithm: sha256WithRSAEncryption c1:f9:c5:fd:5a:25:65:0b:b8:45:d0:33:e4:cb:bd:a7:6d:c3: a4:d1:69:f7:73:ab:27:85:d8:65:91:b2:77:11:2c:5d:7f:c9: d6:b8:55:2c:f7:1f:a3:b3:11:c9:b2:77:67:52:f3:9e:54:80: 95:b8:58:aa:05:62:8b:2a:71:28:b4:17:18:75:3d:e8:e1:4b: c4:af:8b:6f:42:79:1f:ba:7e:c9:62:78:e3:c9:24:60:17:84: 8a:2a:cb:75:a1:27:6f:6f:4f:44:00:a8:81:41:62:13:a0:fc: ab:c0:ac:a0:5b:2c:83:b2:27:f8:57:a1:37:09:9f:f2:82:31: 20:e8:57:ef:cb:4e:c2:d7:cb:51:14:a9:bf:d8:63:7d:72:e0: 46:48:7a:f9:4e:e4:85:f9:f1:e5:a5:7e:1b:2c:f6:0c:08:80: b1:88:4c:5b:5b:bd:79:43:66:a0:5a:92:2e:2f:04:0f:fb:ad: 5e:2e:a9:9c:fd:b7:61:d1:6d:2c:57:79:c1:f3:7f:8b:64:ac: 34:32:91:0b:20:82:eb:38:7a:3f:02:ba:c8:8f:27:ab:55:09: 92:3d:c0:bf:f6:85:b4:4a:fd:48:3e:44:3a:29:9a:d4:61:6b: af:cc:29:b1:b4:3a:8d:85:5c:75:60:07:0c:09:98:c2:b1:32: e4:cf:32:21 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUBDS9YI+dKyynbAEZjGe0/DGmG/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNTAwMjVaFw0yNjAzMDYwNTA1MjVaMDMxMTAvBgNV BAMTKDJFRTk4Q0Q3QTY0OUFFMjI1OUU5REFEMzA5OTczNkMzQzU5NUU5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ebS65F+JU1ESiTBviWjneYcW GIi/gaRCd4jtfTMLzxGAkqbA13tkLJPhu+Iuj/Pj5A8nCmOKxAU+Yi8jrTIaK9Nw wUtv+3R7lfmSXphUFVrGzydhVic8Wi4fJxCtqLPSJLTn6wjZU9IupcnngwbbyXZx cHmgcxhLo2u9xp497rrMAqn/oxykLP1h5KpeIjzfq64bRIeo6osghNHhwwQk0jRU /w3klZrnOe6YulMkX8CedwfZ77iMB/UcNjH6zQSD2qWP3L0m1LUKEmBJxE9rXubB RGKx9JqKEUJmf5nZYHDw25U3hFNLUE6dBxXe3gz6pLuhcUfmniYbfS0EWgt3AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu6YzXpkmuIlnp 2tMJlzbDxZXp1TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2dn d0N0RWNnbjJBOUNvRFVrWUhUclRBUG5VTGdQbzhqZzl6cEVxN0pUaEEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2dn d0N0RWNnbjJBOUNvRFVrWUhUclRBUG5VTGdQbzhqZzl6cEVxN0pUaEEvMS8yRUU5 OENEN0E2NDlBRTIyNTlFOURBRDMwOTk3MzZDM0M1OTVFOUQ1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItRqwwDQQCAAIwBwMFACgEQ7AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBVAMA0GCSqGSIb3DQEBCwUAA4IBAQDB+cX9WiVlC7hF0DPk y72nbcOk0Wn3c6snhdhlkbJ3ESxdf8nWuFUs9x+jsxHJsndnUvOeVICVuFiqBWKL KnEotBcYdT3o4UvEr4tvQnkfun7JYnjjySRgF4SKKst1oSdvb09EAKiBQWIToPyr wKygWyyDsif4V6E3CZ/ygjEg6Ffvy07C18tRFKm/2GN9cuBGSHr5TuSF+fHlpX4b LPYMCICxiExbW715Q2agWpIuLwQP+61eLqmc/bdh0W0sV3nB83+LZKw0MpELIILr OHo/ArrIjyerVQmSPcC/9oW0Sv1IPkQ6KZrUYWuvzCmxtDqNhVx1YAcMCZjCsTLk zzIh -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:13 2025 by rpki-client on console.sobornost.net