$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer File: 2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.cer (raw, json) Hash identifier: acI81RiexSR4l2WxW0tequaoOGCMMitEeLpQ4YK9QKk= Subject key identifier: 2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 693FC41B89EA51080F5C39875405155F094945FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.mft caRepository: rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Feb 2025 17:36:05 +0000 Certificate not after: Fri 20 Feb 2026 17:41:05 +0000 Subordinate resources: AS: 271595 IP: 190.9.84.0/22 IP: 2804:7dfc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3f:c4:1b:89:ea:51:08:0f:5c:39:87:54:05:15:5f:09:49:45:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 21 17:36:05 2025 GMT Not After : Feb 20 17:41:05 2026 GMT Subject: CN=2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:c6:78:37:32:b8:50:8e:96:5d:bc:dd:1b: c2:8c:32:91:9e:0d:06:49:b5:cb:59:90:e3:a9:48: 17:89:94:e9:6d:f6:f9:f7:0e:17:02:68:d2:24:e0: 3a:b2:17:50:43:ee:ea:59:63:bc:97:56:2a:b8:6a: 67:ed:47:5d:01:bd:50:9d:4c:78:c4:ea:1a:53:32: 2d:8e:f5:5a:5b:22:b7:c1:00:c8:18:54:98:f3:2f: e7:fb:91:68:88:07:88:91:d4:e5:36:88:8c:e9:73: 3a:12:47:7a:ce:a7:f3:91:a2:68:aa:17:11:53:f4: 3d:ad:48:54:80:49:6c:9b:ad:4c:24:a7:15:94:b0: fb:82:dc:51:8b:43:29:c2:57:79:0b:70:fe:51:fb: 7e:e9:64:0c:22:59:05:67:62:7e:05:5f:08:a9:6f: bb:19:76:64:38:a7:a5:21:5e:78:87:d7:e5:42:eb: a9:2d:55:28:c5:c8:9b:fa:4c:de:f1:33:db:66:46: 68:48:a0:3e:b4:a7:f7:7b:00:0e:8b:81:ae:60:3d: 55:71:2f:b8:6a:d7:93:10:84:cc:e1:d4:b1:80:29: 5b:24:50:f1:cd:25:03:29:6d:7f:26:51:62:4f:18: 44:f6:61:70:f8:c8:ac:b2:a2:81:55:bc:44:02:95: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:9E:D4:DB:7F:EB:E4:0A:94:D4:D7:C5:D6:A1:75:16:A3:C3:CE:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E82wCbFV1QakrWLEUpeAsJL9bpiwVwemFfDi6YeeBBTF/0/2F9ED4DB7FEBE40A94D4D7C5D6A17516A3C3CEDC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.84.0/22 IPv6: 2804:7dfc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271595 Signature Algorithm: sha256WithRSAEncryption 67:ae:b5:d2:07:90:70:ba:81:64:e5:84:6a:58:82:07:d4:c2: 9e:c7:59:87:e9:4d:36:a2:50:d3:87:e3:79:8b:b1:4f:d5:f4: e6:0e:c2:8c:5d:ad:63:7b:b6:39:aa:94:af:7a:36:d6:05:ab: 4c:44:1a:35:65:7f:ec:08:35:71:62:69:66:95:82:11:14:6c: e7:61:13:f0:9d:97:7f:2d:04:98:41:3a:fe:c7:f2:59:86:7a: 92:8a:74:2d:d4:45:9a:ee:3a:35:bc:dd:01:fc:91:27:cd:86: ef:ee:13:10:be:a8:3d:62:29:42:a4:c4:2a:b8:85:af:14:d7: 0e:ba:a1:4c:88:db:f2:f4:ec:c1:45:f7:9c:23:00:33:15:c6: 3e:f9:d0:06:30:ed:36:7b:8c:af:1a:2c:bb:a7:32:2d:c8:cc: 67:c5:8c:50:75:63:ee:8d:bc:ab:fe:ae:43:30:33:76:67:a0: cf:1d:c8:9f:9d:ae:8c:e4:a7:b1:5d:83:dd:c1:2c:ee:1c:fd: 5d:b6:b2:46:8f:42:4a:9f:4a:60:2a:af:47:45:b7:1b:5c:48: 37:bc:70:67:2a:78:37:b4:18:b7:9f:ef:d8:43:a8:47:42:bc: 5e:3f:ca:70:b8:c1:f7:43:ad:75:e0:c2:71:64:c0:ab:57:58: 40:15:82:cd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUaT/EG4nqUQgPXDmHVAUVXwlJRf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjExNzM2MDVaFw0yNjAyMjAxNzQxMDVaMDMxMTAvBgNV BAMTKDJGOUVENERCN0ZFQkU0MEE5NEQ0RDdDNUQ2QTE3NTE2QTNDM0NFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pMZ4NzK4UI6WXbzdG8KMMpGe DQZJtctZkOOpSBeJlOlt9vn3DhcCaNIk4DqyF1BD7upZY7yXViq4amftR10BvVCd THjE6hpTMi2O9VpbIrfBAMgYVJjzL+f7kWiIB4iR1OU2iIzpczoSR3rOp/ORomiq FxFT9D2tSFSASWybrUwkpxWUsPuC3FGLQynCV3kLcP5R+37pZAwiWQVnYn4FXwip b7sZdmQ4p6UhXniH1+VC66ktVSjFyJv6TN7xM9tmRmhIoD60p/d7AA6Lga5gPVVx L7hq15MQhMzh1LGAKVskUPHNJQMpbX8mUWJPGET2YXD4yKyyooFVvEQClR0xAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvntTbf+vkCpTU 18XWoXUWo8PO3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTgy d0NiRlYxUWFrcldMRVVwZUFzSkw5YnBpd1Z3ZW1GZkRpNlllZUJCVEYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U4 MndDYkZWMVFha3JXTEVVcGVBc0pMOWJwaXdWd2VtRmZEaTZZZWVCQlRGLzAvMkY5 RUQ0REI3RkVCRTQwQTk0RDREN0M1RDZBMTc1MTZBM0MzQ0VEQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvglUMA0EAgACMAcDBQAoBH38MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQk6zANBgkqhkiG9w0BAQsFAAOCAQEAZ6610geQcLqBZOWE aliCB9TCnsdZh+lNNqJQ04fjeYuxT9X05g7CjF2tY3u2OaqUr3o21gWrTEQaNWV/ 7Ag1cWJpZpWCERRs52ET8J2Xfy0EmEE6/sfyWYZ6kop0LdRFmu46NbzdAfyRJ82G 7+4TEL6oPWIpQqTEKriFrxTXDrqhTIjb8vTswUX3nCMAMxXGPvnQBjDtNnuMrxos u6cyLcjMZ8WMUHVj7o28q/6uQzAzdmegzx3In52ujOSnsV2D3cEs7hz9XbayRo9C Sp9KYCqvR0W3G1xIN7xwZyp4N7QYt5/v2EOoR0K8Xj/KcLjB90OtdeDCcWTAq1dY QBWCzQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:58 2025 by rpki-client on console.sobornost.net