$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer File: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer (raw, json) Hash identifier: QiD7a7Qlho+GmMOaJkw8LzUH8B5LyFlLyPBlf8MBE7g= Subject key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7DE4A616D16F622C61772F982EB02BBDE293BA62 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft caRepository: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 08 Jan 2025 17:58:14 +0000 Certificate not after: Wed 07 Jan 2026 18:03:14 +0000 Subordinate resources: AS: 262953 IP: 186.235.248.0/22 IP: 2804:e68::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e4:a6:16:d1:6f:62:2c:61:77:2f:98:2e:b0:2b:bd:e2:93:ba:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 8 17:58:14 2025 GMT Not After : Jan 7 18:03:14 2026 GMT Subject: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:cc:0e:b9:dc:96:e9:ae:77:8e:94:3a:42: 97:6f:7d:36:b3:ae:38:4c:69:4d:0f:28:f2:c6:94: f3:c1:da:f6:fb:04:7a:62:19:20:1b:fb:c4:27:e6: 44:f4:fc:c2:74:58:8b:cc:f1:ab:3c:57:af:c6:9f: 72:ee:ad:d3:af:03:0c:29:3e:81:56:0e:70:55:ec: 5b:6c:81:f6:2a:59:3f:9e:8f:57:46:e7:ce:c2:39: 11:59:ff:25:4c:85:e9:b6:be:b5:27:7f:e9:14:bf: 16:ce:cc:da:83:7c:7f:ad:53:2e:ce:50:a2:e0:fc: 95:97:97:9f:aa:39:22:3f:53:91:d2:55:82:6c:4e: 56:e4:67:d9:df:f2:e7:ea:0c:46:dd:d5:c1:16:1d: 99:a7:ea:e7:03:99:1e:04:e3:0a:54:ed:47:c9:58: 21:c7:a2:48:d3:a9:64:96:00:79:fd:88:08:8d:d9: b8:be:ef:c1:1c:f1:60:ac:d0:53:51:b2:5b:92:40: 23:99:79:e3:a4:c7:a3:af:68:c5:2c:24:0c:e5:a1: 32:41:fc:5d:bc:99:e7:13:d7:59:bc:9d:67:7e:a3: eb:cb:7a:12:2c:28:1b:d5:05:b6:3a:24:b5:13:91: 1a:36:97:63:4d:91:23:39:e4:ff:c9:ec:d9:a3:a9: cd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.235.248.0/22 IPv6: 2804:e68::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262953 Signature Algorithm: sha256WithRSAEncryption 00:48:89:98:a5:05:9a:07:ee:59:ee:8b:53:c7:b8:1d:a8:b8: e0:97:50:d6:80:e3:7b:3c:a9:44:4a:36:f1:be:f4:3f:5a:5d: 17:bd:8e:3f:e5:40:ff:e2:ac:95:57:a0:9f:80:89:74:08:13: 86:0b:4d:69:4e:2a:98:d1:5c:40:34:a7:54:b9:a3:7c:98:22: 60:1e:e8:27:03:3d:d7:2c:97:0d:1e:0f:17:d2:ac:97:61:2c: 8e:af:a6:2e:7a:f7:64:8f:17:35:27:3c:c8:e7:1f:53:a4:13: 8e:84:34:e0:7e:66:3c:e0:1d:c7:6c:69:0f:5c:41:db:33:cf: 5d:df:d4:ea:31:3d:5f:cc:b4:19:41:b7:1b:b5:d8:3d:c0:ad: 92:5b:f8:ca:ad:61:58:d7:18:4b:94:7d:21:a0:9c:12:ad:f0: 61:a9:49:33:bb:e3:30:8d:d9:eb:ba:42:a6:4e:ac:82:6a:35: 4d:d2:91:75:8d:49:73:8c:cf:c2:74:52:ec:ab:f4:1e:b2:d5: 71:05:dc:35:c4:31:5d:94:c4:e3:80:08:67:71:07:95:26:64: fa:3c:81:1a:45:ef:ce:4e:58:29:b6:a9:a3:9f:94:0a:c8:08: 92:e8:18:0e:1b:c2:8e:f8:a6:48:78:77:43:ce:56:8d:4e:2d: 9b:ac:05:52 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfeSmFtFvYixhdy+YLrArveKTumIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDgxNzU4MTRaFw0yNjAxMDcxODAzMTRaMDMxMTAvBgNV BAMTKDNFNTg2Rjk5ODk0OTI0NUE3QkE4N0Q1NEM0OERCNkM0MzYwQ0VCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3MwOudyW6a53jpQ6QpdvfTaz rjhMaU0PKPLGlPPB2vb7BHpiGSAb+8Qn5kT0/MJ0WIvM8as8V6/Gn3LurdOvAwwp PoFWDnBV7FtsgfYqWT+ej1dG587CORFZ/yVMhem2vrUnf+kUvxbOzNqDfH+tUy7O UKLg/JWXl5+qOSI/U5HSVYJsTlbkZ9nf8ufqDEbd1cEWHZmn6ucDmR4E4wpU7UfJ WCHHokjTqWSWAHn9iAiN2bi+78Ec8WCs0FNRsluSQCOZeeOkx6OvaMUsJAzloTJB /F28mecT11m8nWd+o+vLehIsKBvVBbY6JLUTkRo2l2NNkSM55P/J7Nmjqc3lAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+WG+ZiUkkWnuo fVTEjbbENgzrnTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3I5 eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZWGQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNy OXh5dGtrdHBCZTFRNUJ0TlJ3UExYekRiMVV0OGE5bnVlYmtzZjNYWVhkLzAvM0U1 ODZGOTk4OTQ5MjQ1QTdCQTg3RDU0QzQ4REI2QzQzNjBDRUI5RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCuuv4MA0EAgACMAcDBQAoBA5oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQDKTANBgkqhkiG9w0BAQsFAAOCAQEAAEiJmKUFmgfuWe6L U8e4Hai44JdQ1oDjezypREo28b70P1pdF72OP+VA/+KslVegn4CJdAgThgtNaU4q mNFcQDSnVLmjfJgiYB7oJwM91yyXDR4PF9Ksl2Esjq+mLnr3ZI8XNSc8yOcfU6QT joQ04H5mPOAdx2xpD1xB2zPPXd/U6jE9X8y0GUG3G7XYPcCtklv4yq1hWNcYS5R9 IaCcEq3wYalJM7vjMI3Z67pCpk6sgmo1TdKRdY1Jc4zPwnRS7Kv0HrLVcQXcNcQx XZTE44AIZ3EHlSZk+jyBGkXvzk5YKbapo5+UCsgIkugYDhvCjvimSHh3Q85WjU4t m6wFUg== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:55 2025 by rpki-client on console.sobornost.net