$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer File: 37E90523C827A57C11E0B97A03E6AD0AF350D7BB.cer (raw, json) Hash identifier: NOW3ge6M8Nff8og+4Q9oZKeeILJADnjVKvmw7Y+xS6Q= Subject key identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 759AFF3DBE81F7FBC19F2907B90ED0CF130B7C73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft caRepository: rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 11:08:49 +0000 Certificate not after: Fri 06 Mar 2026 11:13:49 +0000 Subordinate resources: AS: 266311 IP: 170.79.228.0/22 IP: 2804:35dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 13:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9a:ff:3d:be:81:f7:fb:c1:9f:29:07:b9:0e:d0:cf:13:0b:7c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 11:08:49 2025 GMT Not After : Mar 6 11:13:49 2026 GMT Subject: CN=37E90523C827A57C11E0B97A03E6AD0AF350D7BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:71:3e:f3:c4:52:1c:b9:1a:dc:15:05:a8: 85:4d:d8:d1:8a:7f:74:7f:08:32:d8:91:ee:56:23: df:82:02:ed:16:b1:e9:81:41:ea:04:d6:05:47:94: 24:ed:69:1b:14:fd:05:9c:8f:ff:80:6a:ae:14:7c: 44:bf:26:24:98:a0:14:26:09:8f:d6:72:e0:12:a1: cd:70:93:15:4f:01:27:37:5f:c7:10:5a:a7:17:47: 62:98:c2:79:08:1b:b6:e6:5b:69:70:85:46:88:c8: c4:b4:b2:40:d3:ab:b3:75:d3:7a:88:e1:e8:a1:45: 90:0e:5a:ea:12:4c:b2:63:2f:b1:67:ed:f4:0d:3e: 7d:86:f8:42:ab:3e:58:66:ef:95:35:ff:d3:90:69: d1:d2:5a:76:9e:89:b6:0d:af:72:3b:66:53:bb:eb: b5:ea:2f:b0:94:89:fc:e1:24:79:ad:cc:b2:97:f9: 48:80:7b:14:dc:2d:6e:9e:83:51:b4:76:f3:94:6e: df:a1:54:b1:92:72:57:aa:6d:8b:f8:e1:83:1d:c5: f0:31:80:a2:93:10:2c:5f:2a:fa:35:28:b5:31:fc: 54:32:32:29:00:13:9e:d0:51:d1:20:9b:a4:04:35: dd:ab:58:1b:25:0c:6e:95:88:1c:56:3a:c2:00:35: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:E9:05:23:C8:27:A5:7C:11:E0:B9:7A:03:E6:AD:0A:F3:50:D7:BB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5c5UPo1mrFmpdBpj6a5VLokLeB9z3So2MhcszETd7RU/1/37E90523C827A57C11E0B97A03E6AD0AF350D7BB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.228.0/22 IPv6: 2804:35dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266311 Signature Algorithm: sha256WithRSAEncryption 2e:48:bd:b5:db:5a:6d:fb:67:cf:e2:38:17:a8:6e:90:83:ce: 93:0d:de:04:39:9f:bb:e9:3c:f6:e4:91:da:e1:e1:d1:91:b2: 63:44:5d:05:1c:e6:68:16:ef:31:1d:7f:98:cc:23:ca:d0:52: 54:c8:30:0a:e3:b2:4c:00:2b:3b:17:e1:86:9e:ba:fc:c6:5a: 46:7b:ac:2c:78:45:b6:d9:22:e0:13:77:54:ab:bc:f3:66:43: bd:5b:7b:94:01:bc:92:72:68:ae:f7:5f:ca:45:73:3a:cf:d0: c6:0e:13:28:3a:3a:06:b5:8e:70:b7:eb:ed:c2:c9:2b:81:c8: 7c:a5:c0:a5:f2:a6:e5:75:9b:34:db:6f:82:4a:59:b0:29:d5: cf:f2:08:1a:25:07:3c:22:2d:b5:81:7f:71:91:9b:b9:5a:dd: 86:80:03:94:e4:a5:7d:91:da:7a:92:5f:0f:42:f0:68:13:af: f3:0e:2c:1c:92:d6:d9:9a:61:b5:a1:cc:f3:75:4b:4f:98:07: 0c:39:cb:2f:3a:07:19:e6:b8:a9:11:2e:61:92:d5:93:ca:e4: 67:ac:a2:7d:a8:ee:37:21:d9:aa:62:d7:2f:b8:28:37:1d:4d: 71:e5:1c:7a:cf:75:85:c3:be:94:64:82:f9:0e:fa:c3:2d:20: 13:3c:95:eb -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUdZr/Pb6B9/vBnykHuQ7QzxMLfHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMTA4NDlaFw0yNjAzMDYxMTEzNDlaMDMxMTAvBgNV BAMTKDM3RTkwNTIzQzgyN0E1N0MxMUUwQjk3QTAzRTZBRDBBRjM1MEQ3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEz3E+88RSHLka3BUFqIVN2NGK f3R/CDLYke5WI9+CAu0WsemBQeoE1gVHlCTtaRsU/QWcj/+Aaq4UfES/JiSYoBQm CY/WcuASoc1wkxVPASc3X8cQWqcXR2KYwnkIG7bmW2lwhUaIyMS0skDTq7N103qI 4eihRZAOWuoSTLJjL7Fn7fQNPn2G+EKrPlhm75U1/9OQadHSWnaeibYNr3I7ZlO7 67XqL7CUifzhJHmtzLKX+UiAexTcLW6eg1G0dvOUbt+hVLGScleqbYv44YMdxfAx gKKTECxfKvo1KLUx/FQyMikAE57QUdEgm6QENd2rWBslDG6ViBxWOsIANVHLAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ36QUjyCelfBHg uXoD5q0K81DXuzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzVj NVVQbzFtckZtcGRCcGo2YTVWTG9rTGVCOXozU28yTWhjc3pFVGQ3UlUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzVj NVVQbzFtckZtcGRCcGo2YTVWTG9rTGVCOXozU28yTWhjc3pFVGQ3UlUvMS8zN0U5 MDUyM0M4MjdBNTdDMTFFMEI5N0EwM0U2QUQwQUYzNTBEN0JCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqT+QwDQQCAAIwBwMFACgENdwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBBHMA0GCSqGSIb3DQEBCwUAA4IBAQAuSL2121pt+2fP4jgX qG6Qg86TDd4EOZ+76Tz25JHa4eHRkbJjRF0FHOZoFu8xHX+YzCPK0FJUyDAK47JM ACs7F+GGnrr8xlpGe6wseEW22SLgE3dUq7zzZkO9W3uUAbyScmiu91/KRXM6z9DG DhMoOjoGtY5wt+vtwskrgch8pcCl8qbldZs022+CSlmwKdXP8ggaJQc8Ii21gX9x kZu5Wt2GgAOU5KV9kdp6kl8PQvBoE6/zDiwcktbZmmG1oczzdUtPmAcMOcsvOgcZ 5ripES5hktWTyuRnrKJ9qO43IdmqYtcvuCg3HU1x5Rx6z3WFw76UZIL5DvrDLSAT PJXr -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:44 2025 by rpki-client on console.sobornost.net