$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer File: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer (raw, json) Hash identifier: yvN/wlTS+/TcKj34P3hYV/0gAJIDBWBnKiYg0uzFmEs= Subject key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73695E7BD79F0F396404F4EC528885C1CFAD5A7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft caRepository: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:48 +0000 Certificate not after: Wed 04 Mar 2026 18:40:48 +0000 Subordinate resources: AS: 271367 IP: 200.36.216.0/22 IP: 2804:7a60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:69:5e:7b:d7:9f:0f:39:64:04:f4:ec:52:88:85:c1:cf:ad:5a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:48 2025 GMT Not After : Mar 4 18:40:48 2026 GMT Subject: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:20:9e:60:ea:cd:30:4d:a0:1f:df:45:31: b7:fb:18:0b:00:d7:a7:b9:65:59:b1:db:b0:4d:f7: c8:25:98:f2:66:bd:31:32:0a:39:1b:3e:c5:80:87: 95:15:b1:4a:fe:0e:7a:d2:a1:1e:cb:bd:b0:92:83: 66:93:6d:c3:58:c1:d7:20:4d:fd:51:1f:9c:a5:39: fe:ef:99:86:9e:7a:e9:b0:f3:44:d5:eb:44:bd:5f: 8f:0f:a2:0c:6b:0b:c6:7b:10:a2:bf:fe:6e:b5:1f: f5:93:fc:9b:24:33:c4:45:e1:da:3e:e4:e8:a6:bb: c7:18:71:3d:ee:e0:ee:99:9c:7c:0a:11:0a:b2:ef: 41:9f:70:2c:b3:ac:31:59:75:8a:d5:9b:84:03:63: da:7b:cc:f6:fb:bb:24:9f:af:47:dd:49:72:b2:76: 1d:8d:8c:6a:7e:2c:54:1d:b3:ec:74:76:c4:bd:fc: fe:f1:ef:2e:cf:fe:55:d5:f6:11:0b:c4:12:bb:82: 37:69:79:f0:d4:4d:6e:2e:10:2b:59:f8:26:a0:d8: 17:f0:82:53:4d:71:68:a8:b9:4c:3a:5e:6f:e3:07: 0c:16:f1:02:51:79:bb:2d:de:18:00:62:7f:7a:2c: 1c:ae:59:b0:35:ec:2c:9e:d6:8a:f7:8b:b5:b7:37: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.36.216.0/22 IPv6: 2804:7a60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271367 Signature Algorithm: sha256WithRSAEncryption bc:5c:2a:64:f5:b4:e8:13:5c:fd:7c:a0:91:2f:58:d0:f0:ea: ea:91:cf:39:50:78:46:45:a0:0a:33:d7:1e:e7:0b:a6:bf:ba: fe:b5:59:5b:a0:6b:f9:cb:97:6d:a5:63:92:8e:5c:b6:5e:c3: 38:b8:88:d0:a2:81:fa:5c:42:58:8e:54:35:62:24:55:3a:79: 86:72:83:73:c7:06:9e:c6:c3:ca:d8:c0:ee:56:f5:48:4e:15: 79:fa:83:e8:d8:8c:bc:46:aa:e9:92:8f:a2:74:c6:22:82:34: 86:bd:18:a9:19:55:43:05:e0:9b:43:ae:57:4d:54:0c:77:d6: 16:be:34:c3:1a:a1:62:27:c6:fe:55:ea:7e:51:45:b7:48:89: c0:b3:68:6e:42:6b:e5:86:6f:52:0a:93:3b:0c:77:00:99:24: fd:51:ff:05:67:0f:7f:41:b5:8d:ed:5c:15:ce:13:6f:ed:25: 11:62:13:ef:c5:1a:c9:27:43:8d:f8:6d:e7:c4:3b:13:20:fd: 3b:fe:88:00:88:41:88:52:d7:0e:3b:3f:37:ab:f8:ad:50:3f: 16:e7:aa:3d:ec:97:8c:01:05:8a:3e:61:44:dd:f5:da:eb:9c: 8a:e2:97:49:23:f9:d1:ae:3b:7d:19:c2:5e:3d:ea:2f:41:7c: 43:f0:f7:6d -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUc2lee9efDzlkBPTsUoiFwc+tWn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NDhaFw0yNjAzMDQxODQwNDhaMDMxMTAvBgNV BAMTKDNBQkY5NkQxOEU3RTA1QTI0RURBQTExN0QyQjlFNzZBMDdGRUM1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqyCeYOrNME2gH99FMbf7GAsA 16e5ZVmx27BN98glmPJmvTEyCjkbPsWAh5UVsUr+DnrSoR7LvbCSg2aTbcNYwdcg Tf1RH5ylOf7vmYaeeumw80TV60S9X48PogxrC8Z7EKK//m61H/WT/JskM8RF4do+ 5Oimu8cYcT3u4O6ZnHwKEQqy70GfcCyzrDFZdYrVm4QDY9p7zPb7uySfr0fdSXKy dh2NjGp+LFQds+x0dsS9/P7x7y7P/lXV9hELxBK7gjdpefDUTW4uECtZ+Cag2Bfw glNNcWiouUw6Xm/jBwwW8QJRebst3hgAYn96LByuWbA17Cye1or3i7W3N5GRAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6v5bRjn4Fok7a oRfSuedqB/7FzjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkZZ SHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3VzZ3IvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkZZ SHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3VzZ3IvMS8zQUJG OTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALIJNgwDQQCAAIwBwMFACgEemAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCQHMA0GCSqGSIb3DQEBCwUAA4IBAQC8XCpk9bToE1z9fKCR L1jQ8Orqkc85UHhGRaAKM9ce5wumv7r+tVlboGv5y5dtpWOSjly2XsM4uIjQooH6 XEJYjlQ1YiRVOnmGcoNzxwaexsPK2MDuVvVIThV5+oPo2Iy8Rqrpko+idMYigjSG vRipGVVDBeCbQ65XTVQMd9YWvjTDGqFiJ8b+Vep+UUW3SInAs2huQmvlhm9SCpM7 DHcAmST9Uf8FZw9/QbWN7VwVzhNv7SURYhPvxRrJJ0ON+G3nxDsTIP07/ogAiEGI UtcOOz83q/itUD8W56o97JeMAQWKPmFE3fXa65yK4pdJI/nRrjt9GcJePeovQXxD 8Pdt -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:54 2025 by rpki-client on console.sobornost.net