$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer File: 3895E2089A93A58E1062DE9612B321CA505C51FA.cer (raw, json) Hash identifier: M/uQROgbjM4rztvcNsPR3Dap9T8LTsvpt535SPRRg+8= Subject key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0174EE92CE0BFE652AF1181E710988EBDE36235D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft caRepository: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:32 +0000 Certificate not after: Wed 04 Mar 2026 18:40:32 +0000 Subordinate resources: AS: 262309 IP: 177.87.224.0/21 IP: 2804:7a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 23:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:74:ee:92:ce:0b:fe:65:2a:f1:18:1e:71:09:88:eb:de:36:23:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:32 2025 GMT Not After : Mar 4 18:40:32 2026 GMT Subject: CN=3895E2089A93A58E1062DE9612B321CA505C51FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:50:82:74:4f:2f:8a:ef:58:94:7d:f1:a4: 2a:9c:21:3f:43:23:af:33:bd:4f:7b:bb:60:f2:93: 05:e4:32:8e:46:1a:f1:c9:bc:64:9a:d1:56:40:12: 70:04:e0:65:95:98:27:c3:fc:5e:01:50:b9:f8:a9: e7:5d:5c:3b:65:99:33:9e:bd:f4:b1:81:5f:a4:d1: 6b:a4:20:f0:5e:06:f6:f6:70:d4:c7:a6:da:52:ec: a0:68:95:d3:1b:15:17:9f:9e:1c:38:1f:45:1c:63: 46:76:d4:a1:d3:4d:cb:b1:76:d2:c4:73:70:22:a5: 21:27:48:59:d7:93:76:cb:f6:b4:f6:71:13:0f:9d: 49:d2:09:69:e6:9a:43:52:c1:76:35:8b:e6:3d:58: 2d:ea:bc:57:17:c9:11:06:2c:f1:0e:d7:6c:87:48: 1c:77:43:77:2e:8e:3c:ca:a7:ed:3a:6f:d5:05:7b: f6:c7:88:f2:ed:2a:2c:3c:dd:81:75:fc:05:4c:14: 44:e8:11:6e:e8:91:00:e0:b2:c7:dd:4f:2a:e1:09: 01:c4:92:94:a5:ae:3f:69:47:14:a7:28:69:03:86: 00:85:d5:f7:b1:59:a0:8d:65:74:34:60:3e:76:c6: 16:8d:02:31:70:98:81:5b:d6:cc:b8:d2:f3:ae:a1: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.87.224.0/21 IPv6: 2804:7a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262309 Signature Algorithm: sha256WithRSAEncryption bc:01:d6:d0:ec:00:f4:8f:ac:f1:b0:9a:97:8b:16:f3:92:a8: 95:cc:e7:e9:a7:8c:09:e3:10:22:c8:e5:a9:3e:4d:1b:cb:a9: 56:a6:59:d1:ca:3a:17:2b:a8:13:fb:10:bc:a4:24:ad:23:79: c3:10:82:72:5b:cc:09:fb:bb:b8:97:8a:2f:f4:c5:42:57:c5: da:ab:ed:5c:f1:d8:47:76:4a:97:a4:c2:3d:47:c2:b9:71:2d: d5:e9:e0:2c:34:c4:11:ad:68:56:e1:8a:4e:e3:62:d5:d5:53: cc:88:43:65:26:aa:4a:be:b9:22:8a:3d:e7:0c:9b:98:3c:28: 4c:88:24:e1:a6:af:6a:2b:f8:76:6b:52:a1:da:a0:a3:6f:21: 10:be:ff:6c:a0:58:e4:be:e2:ab:e3:f8:7b:6b:b3:47:0a:6e: 47:11:53:ed:df:82:4f:80:a7:86:12:00:a7:c0:f8:c1:50:27: 07:35:1d:db:65:69:7b:ed:fb:1b:ad:f7:04:3a:8b:c4:d6:be: 71:2c:76:d0:74:95:96:ef:25:28:e7:63:75:0a:e8:9d:0e:1d: 76:4f:c6:69:7c:76:21:f3:70:24:f0:4a:82:41:92:f1:44:5d: 8f:af:d7:c9:ec:ae:18:33:e2:62:18:5a:b2:bd:e9:47:f8:27: 4a:36:ca:52 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAXTuks4L/mUq8RgecQmI6942I10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzJaFw0yNjAzMDQxODQwMzJaMDMxMTAvBgNV BAMTKDM4OTVFMjA4OUE5M0E1OEUxMDYyREU5NjEyQjMyMUNBNTA1QzUxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6lCCdE8viu9YlH3xpCqcIT9D I68zvU97u2DykwXkMo5GGvHJvGSa0VZAEnAE4GWVmCfD/F4BULn4qeddXDtlmTOe vfSxgV+k0WukIPBeBvb2cNTHptpS7KBoldMbFRefnhw4H0UcY0Z21KHTTcuxdtLE c3AipSEnSFnXk3bL9rT2cRMPnUnSCWnmmkNSwXY1i+Y9WC3qvFcXyREGLPEO12yH SBx3Q3cujjzKp+06b9UFe/bHiPLtKiw83YF1/AVMFEToEW7okQDgssfdTyrhCQHE kpSlrj9pRxSnKGkDhgCF1fexWaCNZXQ0YD52xhaNAjFwmIFb1sy40vOuofPxAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ4leIImpOljhBi 3pYSsyHKUFxR+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGhn cldza1lwVXpnWWtTVEZUaFlBd0o2dXB2WUJiTlh5ZDVUSlpUeDFhU1gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzho Z3JXc2tZcFV6Z1lrU1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5 NUUyMDg5QTkzQTU4RTEwNjJERTk2MTJCMzIxQ0E1MDVDNTFGQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsVfgMA0EAgACMAcDBQAoBAeoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQApTANBgkqhkiG9w0BAQsFAAOCAQEAvAHW0OwA9I+s8bCa l4sW85Kolczn6aeMCeMQIsjlqT5NG8upVqZZ0co6FyuoE/sQvKQkrSN5wxCCclvM Cfu7uJeKL/TFQlfF2qvtXPHYR3ZKl6TCPUfCuXEt1engLDTEEa1oVuGKTuNi1dVT zIhDZSaqSr65Ioo95wybmDwoTIgk4aavaiv4dmtSodqgo28hEL7/bKBY5L7iq+P4 e2uzRwpuRxFT7d+CT4CnhhIAp8D4wVAnBzUd22Vpe+37G633BDqLxNa+cSx20HSV lu8lKOdjdQronQ4ddk/GaXx2IfNwJPBKgkGS8URdj6/XyeyuGDPiYhhasr3pR/gn SjbKUg== -----END CERTIFICATE-----Generated at Fri Apr 25 22:08:02 2025 by rpki-client on console.sobornost.net