$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer File: 4937C541E7F86C7930B257F315044E29E4FF02B0.cer (raw, json) Hash identifier: 0gin7mz+JVkyVmlxH/uk/srrqdMN0VgIvxR2CJW0LKc= Subject key identifier: 49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 349B5D10BCFC797A53C11A4755D21532BBD716F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft caRepository: rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:15:57 +0000 Certificate not after: Fri 06 Mar 2026 02:20:57 +0000 Subordinate resources: AS: 271425 IP: 200.39.44.0/22 IP: 2804:7b54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9b:5d:10:bc:fc:79:7a:53:c1:1a:47:55:d2:15:32:bb:d7:16:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:15:57 2025 GMT Not After : Mar 6 02:20:57 2026 GMT Subject: CN=4937C541E7F86C7930B257F315044E29E4FF02B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:3d:78:02:f5:69:f7:6e:1d:bf:10:ee:2d: 7f:b2:17:2f:e0:31:c0:84:94:17:7d:4c:5b:d0:63: 41:4d:3a:75:df:bf:f0:c9:3f:1f:ff:d1:cc:58:7e: e9:27:08:14:00:22:f6:e5:df:62:de:3b:69:d5:0e: 90:6b:f3:45:c2:09:63:7b:ed:32:c7:85:f1:f9:ee: 19:47:f7:7d:02:61:8e:80:cf:a6:f7:6e:5f:25:22: 70:5d:53:1f:bf:ac:68:89:1c:02:c3:69:c8:b5:cc: bd:14:23:4e:e1:22:d0:ad:1c:78:c2:ba:f7:c9:f1: a9:24:ee:87:a0:b0:ad:1a:6a:1d:30:46:fd:1f:84: ee:8d:7d:eb:65:ed:fb:f2:18:a1:69:70:97:18:d7: 84:29:30:d9:26:89:9f:00:98:6d:3f:fc:50:a9:88: b2:54:9c:8d:c5:33:29:69:fd:8a:d4:ad:c0:7b:7a: 05:db:ec:42:12:d7:f8:d6:45:90:0d:00:08:0e:e4: 24:11:eb:cb:d4:4f:b0:03:e3:33:ec:14:1b:48:3b: 41:23:bd:4b:a9:0e:da:2d:6c:69:34:94:4d:31:e6: ec:c2:ca:32:a9:fc:fb:70:f3:6a:77:4c:5a:d2:77: a8:d5:95:16:fd:63:40:42:c0:cb:b3:16:66:46:23: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.39.44.0/22 IPv6: 2804:7b54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271425 Signature Algorithm: sha256WithRSAEncryption 20:3a:08:6c:2e:fa:20:e9:f1:64:45:1c:be:ef:c8:4d:46:22: e3:6e:00:0b:10:aa:e8:d8:0a:c1:57:89:f5:f7:91:14:58:32: 91:13:97:7f:68:39:56:87:6e:f2:4e:b3:09:15:23:9c:20:99: fe:12:b9:3d:5d:13:7b:19:5b:97:88:43:c2:d2:8c:2d:bf:5c: 62:94:80:11:c4:74:77:1f:81:f4:af:bb:bf:4e:e6:f8:31:b1: e5:62:a1:5a:4d:7f:64:8a:68:22:27:68:6f:ff:ff:f8:77:8f: 0e:b1:87:5a:d8:f3:19:74:08:4a:a1:5f:57:35:c7:f1:50:c4: b4:aa:79:df:82:66:d8:3c:36:58:7f:2f:6d:c5:74:73:8f:95: f4:bf:d4:ba:f7:63:18:83:e0:62:b5:a3:ff:46:27:1a:7e:70: f0:34:d3:80:94:31:ea:ef:d3:0c:6a:2a:77:d3:d2:98:56:96: 8c:35:07:4f:b6:9c:20:e8:e7:a9:22:08:75:87:cb:20:a0:04: 22:6b:00:8f:99:c5:9c:be:9a:4e:3a:2e:55:69:0f:ca:db:fe: b0:e9:ee:7c:d1:cd:2f:d1:7a:bc:8e:88:cc:2b:eb:d7:77:f6: 2b:f5:5e:b5:fa:81:15:93:82:a2:8c:5b:8c:7d:93:ff:c2:d9: e7:de:fe:bf -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUNJtdELz8eXpTwRpHVdIVMrvXFvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjE1NTdaFw0yNjAzMDYwMjIwNTdaMDMxMTAvBgNV BAMTKDQ5MzdDNTQxRTdGODZDNzkzMEIyNTdGMzE1MDQ0RTI5RTRGRjAyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGTz14AvVp924dvxDuLX+yFy/g McCElBd9TFvQY0FNOnXfv/DJPx//0cxYfuknCBQAIvbl32LeO2nVDpBr80XCCWN7 7TLHhfH57hlH930CYY6Az6b3bl8lInBdUx+/rGiJHALDaci1zL0UI07hItCtHHjC uvfJ8akk7oegsK0aah0wRv0fhO6Nfetl7fvyGKFpcJcY14QpMNkmiZ8AmG0//FCp iLJUnI3FMylp/YrUrcB7egXb7EIS1/jWRZANAAgO5CQR68vUT7AD4zPsFBtIO0Ej vUupDtotbGk0lE0x5uzCyjKp/Ptw82p3TFrSd6jVlRb9Y0BCwMuzFmZGI1UHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRJN8VB5/hseTCy V/MVBE4p5P8CsDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlBS bmJDU052Y0Fab0dHUVl5Zm9nSnFuWWN2Ykh2ZmE2bzhRZ25Ubzg3d1EvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JQ Um5iQ1NOdmNBWm9HR1FZeWZvZ0pxblljdmJIdmZhNm84UWduVG84N3dRLzEvNDkz N0M1NDFFN0Y4NkM3OTMwQjI1N0YzMTUwNDRFMjlFNEZGMDJCMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyCcsMA0EAgACMAcDBQAoBHtUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQkQTANBgkqhkiG9w0BAQsFAAOCAQEAIDoIbC76IOnxZEUc vu/ITUYi424ACxCq6NgKwVeJ9feRFFgykROXf2g5Vodu8k6zCRUjnCCZ/hK5PV0T exlbl4hDwtKMLb9cYpSAEcR0dx+B9K+7v07m+DGx5WKhWk1/ZIpoIidob///+HeP DrGHWtjzGXQISqFfVzXH8VDEtKp534Jm2Dw2WH8vbcV0c4+V9L/UuvdjGIPgYrWj /0YnGn5w8DTTgJQx6u/TDGoqd9PSmFaWjDUHT7acIOjnqSIIdYfLIKAEImsAj5nF nL6aTjouVWkPytv+sOnufNHNL9F6vI6IzCvr13f2K/VetfqBFZOCooxbjH2T/8LZ 597+vw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:03 2025 by rpki-client on console.sobornost.net