$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer File: 36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer (raw, json) Hash identifier: m3pU7mL+MVwkP2YMiCwwvm/u9AvIKMqjUwQLssq2KAY= Subject key identifier: 36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 45160C962B3EC4627788BDF6360A6855E73DF9D3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft caRepository: rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 28 Jan 2025 17:37:12 +0000 Certificate not after: Tue 27 Jan 2026 17:42:12 +0000 Subordinate resources: AS: 268809 IP: 45.173.100.0/22 IP: 2804:5af4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:16:0c:96:2b:3e:c4:62:77:88:bd:f6:36:0a:68:55:e7:3d:f9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 28 17:37:12 2025 GMT Not After : Jan 27 17:42:12 2026 GMT Subject: CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:79:96:85:d2:0e:b7:4c:c1:20:8e:a0:db: ac:9a:76:9c:3a:20:6c:98:99:71:8e:de:84:1c:9d: ff:72:df:5c:5d:9f:98:40:7e:49:6f:c6:31:b8:f8: 5a:c8:5d:42:02:f8:5e:af:9c:84:1d:2b:6a:b1:7a: 53:fe:4b:ac:45:ac:f5:cd:27:ab:4a:54:0f:3d:25: 6d:82:70:67:3d:26:ce:99:2b:e5:50:61:d9:f7:94: ad:f1:e7:1c:44:bc:36:54:c4:03:f7:44:40:ba:da: fc:78:60:b9:39:6c:c0:49:f8:71:94:97:97:b5:b9: e9:a7:b4:21:cb:4d:f2:47:7e:ee:19:16:69:38:54: 82:c1:fa:63:0f:3a:a3:22:d1:94:4c:4c:1f:b6:5a: 9b:73:e8:ee:e1:fc:e6:38:28:94:ee:f8:22:f9:c7: 72:0a:29:5c:eb:77:16:ad:ca:53:33:66:12:b4:6c: a4:47:f6:29:dd:04:fc:89:f7:3b:f0:31:7e:58:8d: 08:82:46:92:42:99:75:a3:3a:41:95:ab:48:be:f6: e8:1a:21:16:f9:cb:aa:5e:d5:f8:e9:bd:c6:fa:22: 46:67:cd:cb:f4:d4:fb:44:72:2e:74:86:23:14:df: bf:5d:c5:97:5e:89:73:7c:9e:62:75:e8:fe:fb:08: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.100.0/22 IPv6: 2804:5af4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268809 Signature Algorithm: sha256WithRSAEncryption cc:c4:7d:fd:17:99:f4:c2:27:d8:27:e1:ed:c9:bd:1d:14:64: 5d:55:0f:f7:b8:0c:3c:4f:6d:2c:88:50:ce:1e:55:5c:be:03: e1:cf:8d:e6:78:64:9b:4b:ab:0d:8b:0d:be:3d:f4:3a:3c:f6: f4:27:af:47:83:75:0b:12:5d:40:0b:b1:4a:dc:0b:51:77:d7: ac:9a:9b:8f:b2:fe:d3:e6:78:b5:c0:22:14:82:b2:4d:1c:5a: bf:53:b4:70:dc:16:96:5d:c5:17:63:38:7e:a4:34:4d:e3:72: 1c:0a:b3:74:df:5b:f6:8f:76:25:77:4d:02:a9:5c:78:f8:6a: 78:31:8f:47:c4:c6:bd:9b:1a:be:ad:9c:8d:15:09:41:ca:7d: 30:47:af:94:c1:00:21:03:63:57:c5:ce:df:4c:c9:0f:db:fb: 03:bd:db:71:ea:ae:02:83:ba:55:9e:8e:df:11:7e:6e:86:41: f8:0e:84:d5:67:08:dd:63:7d:ba:2d:d0:ae:8b:7b:35:fa:7f: fc:67:ee:1e:b6:5b:45:00:b4:e5:31:6c:ee:22:32:73:2c:0b: 3a:4e:95:8b:e4:11:11:9a:c3:8f:87:bc:b9:3f:ab:c2:fa:04: 9e:7c:5d:9b:7a:d7:30:e6:c2:cf:bf:27:38:db:e8:c0:6c:80: b3:b7:86:e0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURRYMlis+xGJ3iL32NgpoVec9+dMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjgxNzM3MTJaFw0yNjAxMjcxNzQyMTJaMDMxMTAvBgNV BAMTKDM2REE3MTgwMjJENTRBMzBFOTNCMzg3OEU3QjQxQTNCQkFEMUJBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYt3mWhdIOt0zBII6g26yadpw6 IGyYmXGO3oQcnf9y31xdn5hAfklvxjG4+FrIXUIC+F6vnIQdK2qxelP+S6xFrPXN J6tKVA89JW2CcGc9Js6ZK+VQYdn3lK3x5xxEvDZUxAP3REC62vx4YLk5bMBJ+HGU l5e1uemntCHLTfJHfu4ZFmk4VILB+mMPOqMi0ZRMTB+2Wptz6O7h/OY4KJTu+CL5 x3IKKVzrdxatylMzZhK0bKRH9indBPyJ9zvwMX5YjQiCRpJCmXWjOkGVq0i+9uga IRb5y6pe1fjpvcb6IkZnzcv01PtEci50hiMU379dxZdeiXN8nmJ16P77CCPRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ22nGAItVKMOk7 OHjntBo7utG66zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkFL a3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1mTW0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJB S2tzRGVUQkxNQ0dtalpIdXF2NjFOdFhXQ1lKVzZzNG1WS2o3TEpNZk1tLzAvMzZE QTcxODAyMkQ1NEEzMEU5M0IzODc4RTdCNDFBM0JCQUQxQkFFQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa1kMA0EAgACMAcDBQAoBFr0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaCTANBgkqhkiG9w0BAQsFAAOCAQEAzMR9/ReZ9MIn2Cfh 7cm9HRRkXVUP97gMPE9tLIhQzh5VXL4D4c+N5nhkm0urDYsNvj30Ojz29CevR4N1 CxJdQAuxStwLUXfXrJqbj7L+0+Z4tcAiFIKyTRxav1O0cNwWll3FF2M4fqQ0TeNy HAqzdN9b9o92JXdNAqlcePhqeDGPR8TGvZsavq2cjRUJQcp9MEevlMEAIQNjV8XO 30zJD9v7A73bcequAoO6VZ6O3xF+boZB+A6E1WcI3WN9ui3Qrot7Nfp//GfuHrZb RQC05TFs7iIycywLOk6Vi+QREZrDj4e8uT+rwvoEnnxdm3rXMObCz78nONvowGyA s7eG4A== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:59 2025 by rpki-client on console.sobornost.net