$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer File: 47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer (raw, json) Hash identifier: FBJkqSzZpq/l8ACil3h0ZsBRU8B2EQWo73HuEI4Yl2A= Subject key identifier: 47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6C5CDB10E7C9E79A1B98B960BB1302CC78B1388C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.mft caRepository: rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 22:06:02 +0000 Certificate not after: Tue 21 Apr 2026 22:11:02 +0000 Subordinate resources: AS: 1251 IP: 143.108.0.0/16 IP: 200.18.48.0/20 IP: 200.18.96.0/20 IP: 200.18.240.0/20 IP: 200.19.80.0/20 IP: 200.19.224.0/20 IP: 200.136.0.0/16 IP: 200.144.32.0 -- 200.144.143.255 IP: 2001:12d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5c:db:10:e7:c9:e7:9a:1b:98:b9:60:bb:13:02:cc:78:b1:38:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 22:06:02 2025 GMT Not After : Apr 21 22:11:02 2026 GMT Subject: CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:8f:15:bd:b0:9e:89:0c:d8:8a:a5:8a:8b: d9:f8:56:9a:10:e4:1d:12:99:6b:74:b2:47:5a:2e: e5:0d:d9:a3:2c:c8:82:21:d3:e8:d8:33:2b:fc:a5: df:fa:7d:95:c5:81:1f:06:93:b7:ee:ea:d7:2b:2e: 92:0e:70:c1:b5:b8:78:86:15:c5:d7:21:e8:e8:67: bc:aa:24:95:42:b8:e5:34:b5:50:62:db:a5:5d:80: d1:26:3d:8a:ec:64:66:eb:02:db:2a:20:02:a7:2c: 31:a5:53:ab:d2:24:38:72:1a:c1:c1:73:9c:a4:32: 45:21:04:4f:af:b8:bd:e9:44:0a:84:b2:a3:26:fc: 7c:57:56:0d:c3:23:4a:30:ae:d7:c1:60:a8:ce:53: f5:7b:e8:26:23:82:53:cb:39:43:90:f3:31:39:b6: b0:45:a5:39:a7:0d:70:64:f0:2a:e7:3f:10:f6:14: 7d:8a:93:cc:60:ac:4b:60:c3:9a:cb:eb:e9:4f:0a: 36:a3:ea:a3:b6:53:0c:39:a0:7f:05:04:0a:14:a4: 0e:55:f2:32:01:87:9d:00:68:f6:0a:01:70:4c:ad: 06:93:07:94:2c:7c:64:85:4f:91:97:2e:a3:2b:12: ad:88:14:8b:1c:d0:55:29:09:a1:e4:84:70:de:d3: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.108.0.0/16 200.18.48.0/20 200.18.96.0/20 200.18.240.0/20 200.19.80.0/20 200.19.224.0/20 200.136.0.0/16 200.144.32.0-200.144.143.255 IPv6: 2001:12d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1251 Signature Algorithm: sha256WithRSAEncryption 4d:06:36:e2:af:41:7a:e8:57:d1:10:c6:bd:98:50:d1:a5:e3: 75:85:9f:9f:d6:27:f0:75:d6:28:ff:71:21:61:27:e5:49:03: 84:47:f9:87:52:9f:08:4e:7d:9f:39:1d:37:31:09:04:cc:33: 36:67:41:b5:4a:fa:c9:d2:bc:09:50:cd:18:34:69:de:bf:b2: ae:ec:01:10:22:cf:08:71:3f:43:60:ae:50:b3:7f:09:1f:98: cf:81:79:eb:d0:54:7b:79:9e:0b:da:0a:3c:f5:0c:88:5b:af: 5b:16:b2:b7:66:77:21:4a:5d:53:da:02:cd:5f:83:27:5a:0d: b5:1b:e4:79:94:81:0b:cc:b8:3b:6e:ab:95:3f:07:77:15:99: e5:40:55:c8:7c:f2:e2:76:22:71:1d:6a:97:15:9c:82:4f:1e: a5:7a:43:93:f5:c3:d4:39:1e:61:26:9a:f8:ba:6a:72:3d:1e: db:19:4c:de:86:31:09:80:5d:39:12:56:f7:29:53:47:63:b4: 29:58:60:c6:64:56:ee:52:c1:35:c7:fb:95:a4:cd:a2:9c:1f: 66:a3:8f:2f:ce:48:d9:95:f9:15:50:3b:85:4e:39:fb:ee:98: 38:30:f0:d1:bb:76:89:95:6c:db:b2:5e:0a:41:80:13:e0:52: 0e:50:aa:bc -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUbFzbEOfJ55obmLlguxMCzHixOIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIyMjA2MDJaFw0yNjA0MjEyMjExMDJaMDMxMTAvBgNV BAMTKDQ3RjlCN0YxNTIzQjVCMzMzRTcxNDA0REY0RDY1OUVCMTZEMUQ3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuI8VvbCeiQzYiqWKi9n4VpoQ 5B0SmWt0skdaLuUN2aMsyIIh0+jYMyv8pd/6fZXFgR8Gk7fu6tcrLpIOcMG1uHiG FcXXIejoZ7yqJJVCuOU0tVBi26VdgNEmPYrsZGbrAtsqIAKnLDGlU6vSJDhyGsHB c5ykMkUhBE+vuL3pRAqEsqMm/HxXVg3DI0owrtfBYKjOU/V76CYjglPLOUOQ8zE5 trBFpTmnDXBk8CrnPxD2FH2Kk8xgrEtgw5rL6+lPCjaj6qO2Uww5oH8FBAoUpA5V 8jIBh50AaPYKAXBMrQaTB5QsfGSFT5GXLqMrEq2IFIsc0FUpCaHkhHDe0yr5AgMB AAGjggNpMIIDZTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRH+bfxUjtbMz5x QE301lnrFtHXdTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHhw eUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VMSmovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR4 cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAvNDdG OUI3RjE1MjNCNUIzMzNFNzE0MDRERjRENjU5RUIxNkQxRDc3NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEH AQH/BE8wTTA8BAIAATA2AwMAj2wDBATIEjADBATIEmADBATIEvADBATIE1ADBATI E+ADAwDIiDAMAwQFyJAgAwQEyJCAMA0EAgACMAcDBQAgARLYMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAgTjMA0GCSqGSIb3DQEBCwUAA4IBAQBNBjbir0F66FfREMa9 mFDRpeN1hZ+f1ifwddYo/3EhYSflSQOER/mHUp8ITn2fOR03MQkEzDM2Z0G1SvrJ 0rwJUM0YNGnev7Ku7AEQIs8IcT9DYK5Qs38JH5jPgXnr0FR7eZ4L2go89QyIW69b FrK3ZnchSl1T2gLNX4MnWg21G+R5lIELzLg7bquVPwd3FZnlQFXIfPLidiJxHWqX FZyCTx6lekOT9cPUOR5hJpr4umpyPR7bGUzehjEJgF05Elb3KVNHY7QpWGDGZFbu UsE1x/uVpM2inB9mo48vzkjZlfkVUDuFTjn77pg4MPDRu3aJlWzbsl4KQYAT4FIO UKq8 -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:02 2025 by rpki-client on console.sobornost.net