$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer File: 411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer (raw, json) Hash identifier: mZ/nFpb3VT32sW0Rvgao8nNVWATAWweqx1PnEb+atsI= Subject key identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FB9D41AE2CBA586324DE1D583B38B31FD3809F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft caRepository: rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 07 Apr 2025 14:15:05 +0000 Certificate not after: Mon 06 Apr 2026 14:20:05 +0000 Subordinate resources: AS: 267492 IP: 201.182.12.0/22 IP: 2804:4250::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b9:d4:1a:e2:cb:a5:86:32:4d:e1:d5:83:b3:8b:31:fd:38:09:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 7 14:15:05 2025 GMT Not After : Apr 6 14:20:05 2026 GMT Subject: CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:35:4a:4b:2f:83:92:b4:75:b4:57:60:63: 85:11:5d:a5:f6:54:a3:2a:39:62:99:9c:10:81:bd: 75:84:70:e4:29:ff:c7:91:b3:76:7d:90:5d:2a:d3: 9c:1f:17:75:e4:4b:a2:e8:9c:95:90:2a:b2:61:a7: 22:4b:96:29:06:0b:96:1f:50:14:56:7e:26:be:9c: bc:d2:fa:5d:bc:1f:d1:ca:81:50:f4:e1:90:01:d8: 40:36:6a:e0:2f:8e:4a:cb:56:74:32:c0:bb:4d:c9: 83:f3:3a:ab:de:32:a9:dc:3b:80:63:4d:54:52:26: be:db:04:7f:6c:b4:2f:6c:ed:e6:e7:a9:7e:96:a1: 55:2d:82:e6:5b:62:20:76:79:fc:01:5e:c3:99:d9: 81:2e:8c:a3:af:31:cb:38:a1:a6:d6:86:f9:6f:e3: b7:a1:b4:91:12:20:ac:14:b5:d4:3d:d6:eb:d3:58: 57:85:37:f4:7e:3b:eb:d1:8d:e7:2a:5b:c7:64:45: dc:d0:da:02:8a:02:21:eb:12:7a:4a:cc:3f:ac:7c: 31:da:d9:6b:e1:51:fa:ac:90:c8:fb:0e:12:14:1e: 6a:03:91:28:20:35:af:7b:24:ec:ec:d4:69:10:fd: 00:46:a4:8b:ea:b5:fa:62:a8:ab:43:d8:ac:34:3c: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.182.12.0/22 IPv6: 2804:4250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267492 Signature Algorithm: sha256WithRSAEncryption da:14:70:b3:a0:00:c3:07:05:6b:30:66:56:6c:d6:8b:5b:79: 49:fe:4c:95:45:a4:f9:0c:5c:61:4f:55:ef:0b:4a:c1:a9:c9: aa:b3:b3:1d:c6:ed:11:22:b8:49:dc:11:c6:0f:63:b6:57:62: 5b:25:5f:bc:80:b2:c4:6b:70:3a:82:99:94:2f:fa:1c:84:3c: 4b:45:d8:2f:0e:78:0e:e0:e7:44:ce:c3:99:af:80:cc:5a:54: ca:14:d3:41:40:89:f0:a6:5b:54:14:10:b6:f6:ff:e2:f5:25: d2:83:f6:d4:dc:6e:67:fa:bd:fc:fe:b3:f9:d5:e3:02:cd:94: 05:82:4d:0b:eb:59:61:b7:72:1e:a3:bc:f8:74:a3:0c:03:25: 58:c1:f4:37:53:0c:93:e7:3d:a7:b4:d5:41:c5:15:6e:cc:a0: 09:8e:0b:73:93:d1:85:92:0f:8a:22:0d:5c:45:0e:e3:e3:e0: af:a4:29:72:31:c1:05:0c:c7:d3:9a:37:1b:e7:92:b4:8f:03: ad:ca:fa:27:33:69:01:d4:9c:7a:65:36:e1:09:4e:77:30:5e: ac:9e:e4:9c:bd:e5:1f:85:71:34:ce:eb:32:ba:0a:5c:45:95: 42:93:cf:6f:df:60:7f:72:f2:55:7b:7c:02:cc:68:8b:0e:84: 40:23:b7:e6 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUP7nUGuLLpYYyTeHVg7OLMf04CfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDcxNDE1MDVaFw0yNjA0MDYxNDIwMDVaMDMxMTAvBgNV BAMTKDQxMUY0RjhDNEM1QTcwODA3QTI4RkMzQzg1RjZDNkJBRjAxMTI0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxzVKSy+DkrR1tFdgY4URXaX2 VKMqOWKZnBCBvXWEcOQp/8eRs3Z9kF0q05wfF3XkS6LonJWQKrJhpyJLlikGC5Yf UBRWfia+nLzS+l28H9HKgVD04ZAB2EA2auAvjkrLVnQywLtNyYPzOqveMqncO4Bj TVRSJr7bBH9stC9s7ebnqX6WoVUtguZbYiB2efwBXsOZ2YEujKOvMcs4oabWhvlv 47ehtJESIKwUtdQ91uvTWFeFN/R+O+vRjecqW8dkRdzQ2gKKAiHrEnpKzD+sfDHa 2WvhUfqskMj7DhIUHmoDkSggNa97JOzs1GkQ/QBGpIvqtfpiqKtD2Kw0PEmBAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBH0+MTFpwgHoo /DyF9sa68BEkWzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jo OUNWbnVjWTdKV3N6REdGOFduMUVieDF5eWRxMm9Qcmd6aU52M1d4NXkvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Jo OUNWbnVjWTdKV3N6REdGOFduMUVieDF5eWRxMm9Qcmd6aU52M1d4NXkvMC80MTFG NEY4QzRDNUE3MDgwN0EyOEZDM0M4NUY2QzZCQUYwMTEyNDVCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALJtgwwDQQCAAIwBwMFACgEQlAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBTkMA0GCSqGSIb3DQEBCwUAA4IBAQDaFHCzoADDBwVrMGZW bNaLW3lJ/kyVRaT5DFxhT1XvC0rBqcmqs7Mdxu0RIrhJ3BHGD2O2V2JbJV+8gLLE a3A6gpmUL/ochDxLRdgvDngO4OdEzsOZr4DMWlTKFNNBQInwpltUFBC29v/i9SXS g/bU3G5n+r38/rP51eMCzZQFgk0L61lht3Ieo7z4dKMMAyVYwfQ3UwyT5z2ntNVB xRVuzKAJjgtzk9GFkg+KIg1cRQ7j4+CvpClyMcEFDMfTmjcb55K0jwOtyvonM2kB 1Jx6ZTbhCU53MF6snuScveUfhXE0zusyugpcRZVCk89v32B/cvJVe3wCzGiLDoRA I7fm -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:55 2025 by rpki-client on console.sobornost.net