$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer File: 38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer (raw, json) Hash identifier: mg0iKSRJXf3zTMpH+y2uwZsvOroPAf72klplGWTppXk= Subject key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E4807B3D12751845473AAE78AB6D371AFB2C131 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft caRepository: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 17:34:26 +0000 Certificate not after: Thu 05 Mar 2026 17:39:26 +0000 Subordinate resources: AS: 11097 IP: 192.207.194.0/24 IP: 200.0.70.0/24 IP: 200.202.128.0/18 IP: 2801:80:1400::/40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:48:07:b3:d1:27:51:84:54:73:aa:e7:8a:b6:d3:71:af:b2:c1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 17:34:26 2025 GMT Not After : Mar 5 17:39:26 2026 GMT Subject: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:a3:e6:0c:ca:8e:92:43:f1:f7:1a:bf:de: 64:37:8b:1e:36:14:d7:51:7b:ae:e4:c9:84:d7:ca: 64:f8:b6:4f:6e:04:64:a5:16:58:13:de:33:1f:43: c9:73:04:38:cf:36:c0:11:f7:97:6f:0c:79:d1:dd: e3:14:2b:cf:17:bb:ca:a9:d4:d0:0b:ce:23:6a:b9: 9e:ba:04:3c:6e:f5:12:78:5a:d1:e5:2a:b9:1d:5c: c6:da:2f:10:25:82:37:b9:2a:08:35:2a:f1:6e:be: 9b:79:b6:8b:1d:bf:e0:88:99:01:db:71:28:c7:67: 4c:f9:c4:78:35:3c:7f:f6:56:ec:18:23:33:9e:e5: 0b:7f:16:65:52:fa:ca:bc:c3:eb:16:95:fe:d3:9b: 1f:b7:3e:4a:f5:84:6a:bd:40:5f:93:49:a9:8b:42: 48:81:9e:bf:77:ce:58:32:27:6c:af:dd:35:f2:70: a6:eb:94:cb:53:4a:69:c7:f7:38:73:0a:8e:87:b2: b6:2a:c0:f5:ee:6a:1d:be:2f:8b:ed:0f:76:a5:87: fe:4e:47:d6:ab:a1:12:6b:4c:b4:3d:9a:52:d0:fa: a5:ed:2c:da:a9:5f:65:65:8b:b2:21:d2:ce:e2:68: 2b:a3:67:bb:d7:63:61:7c:39:5a:60:bf:3f:03:bb: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.207.194.0/24 200.0.70.0/24 200.202.128.0/18 IPv6: 2801:80:1400::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11097 Signature Algorithm: sha256WithRSAEncryption 19:2a:35:d6:ac:e7:12:0f:de:a7:01:e5:f1:62:a6:4c:47:25: ae:d0:03:e3:df:cf:d6:1e:b5:14:dc:64:3d:f8:5e:d8:8b:81: c7:15:8b:f0:cc:bc:9d:10:90:e0:2c:0d:40:94:23:d0:24:ea: 58:2c:a9:0f:bf:d7:87:50:17:cf:f7:26:e9:1f:d9:8f:22:53: 33:39:bb:d1:1a:30:14:60:96:de:4d:8e:5e:95:7c:82:54:9f: 8a:6f:19:8c:3b:2c:59:61:90:92:a9:f8:87:f7:f3:66:a8:d2: 80:18:0f:ed:c6:53:dc:df:36:c4:eb:bc:77:ba:82:a2:5b:99: 50:df:f6:2c:5c:9d:4c:28:e9:d3:57:00:05:a1:4a:9a:d7:a9: 0f:cc:12:9a:d6:c7:4e:2e:16:9d:76:26:1a:b0:f3:93:d5:98: 78:3a:11:12:24:89:0b:33:cc:05:cb:4e:4a:5a:1e:d4:b2:30: 39:52:12:24:68:b0:5b:57:71:cd:03:e8:f6:fc:42:86:a6:6f: a7:4d:ef:88:18:a7:61:16:da:43:72:c7:34:3c:de:7f:93:44: fe:0a:7c:f9:c0:44:3a:3a:19:76:a6:49:c0:ff:a3:87:dd:76: 73:59:b4:f8:0c:3c:af:31:af:58:3e:ba:f3:5e:83:6b:2a:17: d6:dd:9b:19 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUPkgHs9EnUYRUc6rnirbTca+ywTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNzM0MjZaFw0yNjAzMDUxNzM5MjZaMDMxMTAvBgNV BAMTKDM4RUE2NDU2QzhCMzVFQjc1RkJDNkE0MkRBN0YyNjAzNTg2MzRGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMKPmDMqOkkPx9xq/3mQ3ix42 FNdRe67kyYTXymT4tk9uBGSlFlgT3jMfQ8lzBDjPNsAR95dvDHnR3eMUK88Xu8qp 1NALziNquZ66BDxu9RJ4WtHlKrkdXMbaLxAlgje5Kgg1KvFuvpt5tosdv+CImQHb cSjHZ0z5xHg1PH/2VuwYIzOe5Qt/FmVS+sq8w+sWlf7Tmx+3Pkr1hGq9QF+TSamL QkiBnr93zlgyJ2yv3TXycKbrlMtTSmnH9zhzCo6HsrYqwPXuah2+L4vtD3alh/5O R9aroRJrTLQ9mlLQ+qXtLNqpX2Vli7Ih0s7iaCujZ7vXY2F8OVpgvz8Du6b/AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ46mRWyLNet1+8 akLafyYDWGNPLzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFoy bm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBpZWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRa Mm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAvMzhF QTY0NTZDOEIzNUVCNzVGQkM2QTQyREE3RjI2MDM1ODYzNEYyRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjAYBAIAATASAwQAwM/CAwQAyABGAwQGyMqAMA4EAgACMAgDBgAoAQCA FDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIrWTANBgkqhkiG9w0BAQsFAAOCAQEA GSo11qznEg/epwHl8WKmTEclrtAD49/P1h61FNxkPfhe2IuBxxWL8My8nRCQ4CwN QJQj0CTqWCypD7/Xh1AXz/cm6R/ZjyJTMzm70RowFGCW3k2OXpV8glSfim8ZjDss WWGQkqn4h/fzZqjSgBgP7cZT3N82xOu8d7qColuZUN/2LFydTCjp01cABaFKmtep D8wSmtbHTi4WnXYmGrDzk9WYeDoREiSJCzPMBctOSloe1LIwOVISJGiwW1dxzQPo 9vxChqZvp03viBinYRbaQ3LHNDzef5NE/gp8+cBEOjoZdqZJwP+jh912c1m0+Aw8 rzGvWD66816DayoX1t2bGQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:59 2025 by rpki-client on console.sobornost.net