$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer File: 36ED969D92322E6C7F28A050D3ABC47947497160.cer (raw, json) Hash identifier: NqvECG/IrZeKbJZjYeTl/k/VIznn3G9pbpwRaAQgjQ8= Subject key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 31925D35D13BA135CA4F98B7A73F6E73F0F78459 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft caRepository: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 19 Apr 2025 10:53:12 +0000 Certificate not after: Sat 18 Apr 2026 10:58:12 +0000 Subordinate resources: AS: 61813 IP: 138.122.196.0/22 IP: 201.159.156.0/22 IP: 2804:19b4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:92:5d:35:d1:3b:a1:35:ca:4f:98:b7:a7:3f:6e:73:f0:f7:84:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 19 10:53:12 2025 GMT Not After : Apr 18 10:58:12 2026 GMT Subject: CN=36ED969D92322E6C7F28A050D3ABC47947497160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:1c:99:df:ce:65:ff:fd:1e:db:10:d5:62: 07:7e:04:d7:b6:f6:9e:ad:1a:60:3a:62:ae:fe:65: 64:05:d9:e7:98:e7:f5:69:ae:1f:6e:4c:bd:68:f7: 75:b2:f9:db:33:f5:39:44:2a:a4:3c:12:4e:ec:db: b6:66:9e:4b:c2:a1:c2:1c:2b:0c:65:e0:7b:32:1c: 74:b8:4d:f3:c7:a1:ee:a8:f8:cc:1e:7e:76:50:b9: 7d:8b:8f:ba:71:76:2e:1b:e1:27:33:db:b8:aa:b6: dd:ed:61:f7:e4:53:ca:7a:8c:74:55:fb:0c:fb:45: 9f:8d:d2:99:38:57:77:aa:a9:44:bc:4e:92:57:18: ee:84:69:b7:5b:5e:25:8e:fe:2a:2b:e8:92:68:58: 28:b0:d5:c5:94:44:05:17:eb:05:5a:f1:b4:35:80: 82:f6:c4:25:ec:41:9c:67:b8:ba:df:75:a0:91:c3: 6a:5f:b5:51:f8:ad:13:91:93:fe:81:f2:58:0c:11: b4:2f:5f:e6:e2:88:d5:9b:fc:d3:09:fc:8d:72:04: 37:d9:d3:47:92:09:f7:73:d6:4f:80:eb:46:2d:85: 2c:d3:b4:14:dc:8e:a2:30:16:d7:c0:16:94:82:bd: 3b:6e:54:41:2c:9f:93:c7:78:25:78:6f:fb:47:6f: 41:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.196.0/22 201.159.156.0/22 IPv6: 2804:19b4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61813 Signature Algorithm: sha256WithRSAEncryption 9f:33:0b:2e:39:e0:cd:cb:10:ee:5c:09:1e:e2:86:fe:b3:9e: 30:46:72:b0:ca:24:56:f9:d0:0c:62:f7:40:2b:ac:bf:89:26: d9:90:ca:e7:0e:75:83:7f:04:8f:f0:a8:19:a5:ec:ec:cc:51: f2:b0:95:05:df:a6:81:a3:c6:2a:78:7a:da:f1:fc:97:2b:41: 45:d7:e6:b2:25:40:48:5a:59:21:c5:2b:5f:ce:eb:ff:7d:df: 0b:90:94:4f:0c:6e:c4:0b:5a:22:a3:46:19:22:31:4e:fc:ba: 71:7b:71:18:3b:ee:f6:23:65:32:01:5c:1a:1e:3e:99:d7:f5: 37:64:bf:a0:c1:33:c0:8c:b6:8d:d1:bb:70:0b:b0:3b:2f:f2: a4:82:a6:0f:74:2a:62:24:79:86:12:24:ca:7c:8b:70:de:e0: 3f:52:03:7d:18:ee:06:d0:71:5a:31:08:94:1f:ce:c0:93:4d: 7b:0f:a8:ea:d1:76:89:0e:50:7a:3e:fd:c8:fe:bd:97:d4:96: 91:1f:79:b6:3d:8a:4c:05:7d:fd:98:ad:0a:a9:54:11:cf:27: 9a:1f:79:74:68:3a:44:91:52:2c:de:01:6e:58:c3:7f:fd:78: df:5b:54:bf:86:96:39:1b:ea:18:35:78:83:30:15:6c:e4:97: b9:6a:99:8f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMZJdNdE7oTXKT5i3pz9uc/D3hFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTkxMDUzMTJaFw0yNjA0MTgxMDU4MTJaMDMxMTAvBgNV BAMTKDM2RUQ5NjlEOTIzMjJFNkM3RjI4QTA1MEQzQUJDNDc5NDc0OTcxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObByZ385l//0e2xDVYgd+BNe2 9p6tGmA6Yq7+ZWQF2eeY5/Vprh9uTL1o93Wy+dsz9TlEKqQ8Ek7s27ZmnkvCocIc Kwxl4HsyHHS4TfPHoe6o+MwefnZQuX2Lj7pxdi4b4Scz27iqtt3tYffkU8p6jHRV +wz7RZ+N0pk4V3eqqUS8TpJXGO6EabdbXiWO/ior6JJoWCiw1cWURAUX6wVa8bQ1 gIL2xCXsQZxnuLrfdaCRw2pftVH4rRORk/6B8lgMEbQvX+biiNWb/NMJ/I1yBDfZ 00eSCfdz1k+A60YthSzTtBTcjqIwFtfAFpSCvTtuVEEsn5PHeCV4b/tHb0HRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ27ZadkjIubH8o oFDTq8R5R0lxYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFhV eUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2emUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RY VXlGMlZtNGFaV2NEY3pzM0pNUmg0cnVHQlMxdG5NdFBOY3ZDRmV0NnplLzAvMzZF RDk2OUQ5MjMyMkU2QzdGMjhBMDUwRDNBQkM0Nzk0NzQ5NzE2MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinrEAwQCyZ+cMA0EAgACMAcDBQAoBBm0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxdTANBgkqhkiG9w0BAQsFAAOCAQEAnzMLLjng zcsQ7lwJHuKG/rOeMEZysMokVvnQDGL3QCusv4km2ZDK5w51g38Ej/CoGaXs7MxR 8rCVBd+mgaPGKnh62vH8lytBRdfmsiVASFpZIcUrX87r/33fC5CUTwxuxAtaIqNG GSIxTvy6cXtxGDvu9iNlMgFcGh4+mdf1N2S/oMEzwIy2jdG7cAuwOy/ypIKmD3Qq YiR5hhIkynyLcN7gP1IDfRjuBtBxWjEIlB/OwJNNew+o6tF2iQ5Qej79yP69l9SW kR95tj2KTAV9/ZitCqlUEc8nmh95dGg6RJFSLN4BbljDf/1431tUv4aWORvqGDV4 gzAVbOSXuWqZjw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:59 2025 by rpki-client on console.sobornost.net