$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer File: 42E0C742D5DC5A6C41753F73202F41323E27436C.cer (raw, json) Hash identifier: 0uI4nETroI8q7gBSfXKz0d4EckkEQMyl8kC3RrkPMrU= Subject key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F6C3412462FC0B27C7A0D96FBDF61EC0423DC4F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft caRepository: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 12:54:28 +0000 Certificate not after: Thu 05 Mar 2026 12:59:28 +0000 Subordinate resources: AS: 264552 IP: 45.172.80.0/22 IP: 138.0.172.0/22 IP: 170.79.52.0/22 IP: 201.148.112.0/22 IP: 2804:2164::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6c:34:12:46:2f:c0:b2:7c:7a:0d:96:fb:df:61:ec:04:23:dc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 12:54:28 2025 GMT Not After : Mar 5 12:59:28 2026 GMT Subject: CN=42E0C742D5DC5A6C41753F73202F41323E27436C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:fb:94:c8:03:d2:b8:f0:89:0b:55:a2:87: 73:7a:9b:0e:d8:24:08:a9:7e:91:92:97:94:9e:c8: 3b:09:da:f5:67:32:b9:80:e3:33:e8:86:d4:a8:c9: 15:56:b5:8b:ee:dc:77:16:2e:96:2a:97:cf:7f:c8: 64:8b:08:6f:33:62:89:9b:a4:57:c6:2b:b1:86:9c: b9:b7:8e:d9:91:1d:c9:61:13:bd:23:2f:04:ae:d7: ac:a0:f5:53:22:48:a3:21:3d:01:69:8e:81:02:e6: 19:8a:54:f5:03:8c:9e:38:7a:cd:b2:76:85:73:24: b2:08:1f:cd:08:ca:a3:70:dc:56:40:de:b0:46:50: db:d0:4a:34:ee:03:fc:a1:9a:7c:6b:82:0f:6e:36: 27:45:67:85:bf:31:36:14:71:d5:14:41:af:b7:d4: fa:8d:6b:4f:a6:a4:0e:3c:cd:39:3c:a7:50:f4:48: dc:c7:c2:39:2c:46:dc:d3:1b:d6:cf:74:2f:fe:32: d9:6a:ea:db:c4:00:cb:a3:db:55:31:b4:53:20:15: d2:f1:b2:dc:9b:38:9f:32:14:81:0a:c1:05:ae:c9: a3:18:1b:76:3b:8e:ef:42:a8:84:32:0e:9c:b4:e7: 00:3d:f4:29:e1:b0:3d:81:1f:f0:53:de:b6:4a:9c: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.80.0/22 138.0.172.0/22 170.79.52.0/22 201.148.112.0/22 IPv6: 2804:2164::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264552 Signature Algorithm: sha256WithRSAEncryption 1f:da:0a:7e:44:d9:8f:5e:0b:be:a9:51:b4:82:37:a6:7b:dc: de:19:c6:aa:85:a3:9d:b4:fd:be:c2:11:2d:80:3c:cd:c0:b7: 90:fc:0d:18:b1:ff:2a:77:09:15:37:c4:f5:6f:ec:04:88:e2: 1a:4b:d4:72:4b:44:e4:78:0d:94:db:f9:e7:96:20:04:1a:11: 47:8e:a4:69:20:ab:e8:c2:9e:cc:a2:47:96:8a:90:dc:0e:d1: fd:c9:74:be:1f:87:99:58:56:6d:03:fc:40:a2:48:38:2f:c8: 49:39:4b:2e:0c:a2:c2:19:32:38:21:53:12:97:d5:b8:d9:9a: 9b:6e:f5:82:9a:ca:b7:dc:b2:2b:b0:ba:89:ff:7a:3b:b8:74: e2:e5:b5:26:a5:35:61:bf:1c:a7:93:98:0c:79:f4:52:9f:d6: 50:2d:05:f8:e1:b7:08:cc:03:3b:d8:05:ff:c8:d1:09:d7:c0: eb:6c:4a:5d:34:85:e8:6d:86:d8:c1:15:ff:34:84:44:81:a2: 2f:50:20:89:8a:c3:7d:1e:f3:d9:38:28:0e:49:6c:58:73:0a: 04:ec:e2:18:62:46:8d:d7:3d:2c:37:34:a5:0f:d4:a3:f3:15: fb:90:8d:0a:63:80:1a:61:c6:f0:fe:f5:15:18:cc:88:16:d3: b5:89:25:da -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUH2w0EkYvwLJ8eg2W+99h7AQj3E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxMjU0MjhaFw0yNjAzMDUxMjU5MjhaMDMxMTAvBgNV BAMTKDQyRTBDNzQyRDVEQzVBNkM0MTc1M0Y3MzIwMkY0MTMyM0UyNzQzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqk/uUyAPSuPCJC1Wih3N6mw7Y JAipfpGSl5SeyDsJ2vVnMrmA4zPohtSoyRVWtYvu3HcWLpYql89/yGSLCG8zYomb pFfGK7GGnLm3jtmRHclhE70jLwSu16yg9VMiSKMhPQFpjoEC5hmKVPUDjJ44es2y doVzJLIIH80IyqNw3FZA3rBGUNvQSjTuA/yhmnxrgg9uNidFZ4W/MTYUcdUUQa+3 1PqNa0+mpA48zTk8p1D0SNzHwjksRtzTG9bPdC/+Mtlq6tvEAMuj21UxtFMgFdLx stybOJ8yFIEKwQWuyaMYG3Y7ju9CqIQyDpy05wA99CnhsD2BH/BT3rZKnOUzAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRC4MdC1dxabEF1 P3MgL0EyPidDbDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHZO RWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRKd1YvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHZO RWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRKd1YvMS80MkUw Qzc0MkQ1REM1QTZDNDE3NTNGNzMyMDJGNDEzMjNFMjc0MzZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB Af8EMTAvMB4EAgABMBgDBAItrFADBAKKAKwDBAKqTzQDBALJlHAwDQQCAAIwBwMF ACgEIWQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAloMA0GCSqGSIb3DQEBCwUA A4IBAQAf2gp+RNmPXgu+qVG0gjeme9zeGcaqhaOdtP2+whEtgDzNwLeQ/A0Ysf8q dwkVN8T1b+wEiOIaS9RyS0TkeA2U2/nnliAEGhFHjqRpIKvowp7MokeWipDcDtH9 yXS+H4eZWFZtA/xAokg4L8hJOUsuDKLCGTI4IVMSl9W42ZqbbvWCmsq33LIrsLqJ /3o7uHTi5bUmpTVhvxynk5gMefRSn9ZQLQX44bcIzAM72AX/yNEJ18DrbEpdNIXo bYbYwRX/NIREgaIvUCCJisN9HvPZOCgOSWxYcwoE7OIYYkaN1z0sNzSlD9Sj8xX7 kI0KY4AaYcbw/vUVGMyIFtO1iSXa -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:16 2025 by rpki-client on console.sobornost.net