$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer File: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer (raw, json) Hash identifier: F98VODlIeMJRnEYl0MMhyzGB7b7zUyfZEL9busFTzd8= Subject key identifier: 4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 37865694A633429F423E92D56C2F1026CBD07887 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft caRepository: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 17:04:50 +0000 Certificate not after: Thu 02 Apr 2026 17:09:50 +0000 Subordinate resources: AS: 270582 IP: 177.8.136.0/22 IP: 2804:6e34::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:86:56:94:a6:33:42:9f:42:3e:92:d5:6c:2f:10:26:cb:d0:78:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 17:04:50 2025 GMT Not After : Apr 2 17:09:50 2026 GMT Subject: CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:42:c2:bc:d9:21:0c:7c:be:8b:32:c2:d4: 8d:e9:76:49:33:23:7c:35:b5:58:87:1c:ce:90:85: 42:4c:b3:da:c1:cb:81:64:a9:55:a3:01:9f:dd:0b: 1f:3c:a0:92:b4:a1:9c:a5:4a:7a:7a:59:05:4a:ea: 75:b5:24:79:84:ae:bc:58:2e:2d:cd:2f:49:7d:bc: 3d:46:38:70:f5:af:cb:f7:15:14:ab:2e:aa:a4:6e: cf:a1:c9:0e:2f:0c:4c:9a:a8:d5:da:14:d7:16:39: 44:8c:29:3d:b4:c5:c6:43:69:79:c6:31:e9:4a:f0: f6:6e:1c:be:83:1e:80:e2:39:b9:07:3f:cd:d1:7f: dd:d9:a2:7e:62:cd:2b:3b:ea:ad:f2:6a:76:02:b7: 1a:1d:4c:85:12:8a:21:69:e9:c9:7a:c9:2c:23:cf: 46:1b:6c:dc:2b:1e:fe:ba:cb:43:b2:f6:58:5e:95: 50:c1:36:02:21:2c:3c:59:23:87:7a:7b:d7:20:0f: ae:c0:9a:4b:dc:d2:5a:c0:ff:5f:7b:01:32:8e:50: 45:e4:c1:ca:1d:56:fd:c2:32:64:ad:4e:38:04:25: b7:44:dd:86:32:84:bf:8f:f4:6d:e1:bb:20:e1:3f: b7:92:55:41:2c:19:03:66:5c:51:68:e7:3a:5c:f9: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.8.136.0/22 IPv6: 2804:6e34::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270582 Signature Algorithm: sha256WithRSAEncryption af:6e:c9:59:6a:b2:21:4e:6d:e8:c8:91:17:f0:8b:7a:7e:b2: 4f:3a:81:ac:6a:58:87:65:f1:99:4e:c3:8b:36:58:55:e4:fa: 12:df:55:28:f7:71:21:d6:0a:9f:c2:92:64:ad:f4:bd:30:b3: 1c:29:53:8c:58:48:5b:74:9d:04:97:64:43:5a:87:54:b3:7a: 3d:8f:8c:57:8a:1e:30:0a:36:05:d4:ff:af:b0:7a:98:f1:ab: 60:32:e8:55:f3:4c:79:11:0a:e5:f6:0b:33:5c:bd:ce:27:1a: 2f:af:36:e5:5d:cf:1f:80:5a:67:66:d3:50:59:46:f5:cc:5d: de:98:0b:f0:cd:30:3b:f5:83:b4:d8:2d:6e:aa:93:1d:84:40: d6:33:20:70:35:ab:17:6c:a6:ac:be:f1:fa:af:c4:55:99:53: 04:56:f3:be:61:6b:1d:2e:2e:44:cb:c0:1a:53:37:07:74:a1: f9:39:1e:71:aa:71:e9:b9:0b:69:bd:16:a2:e2:e5:61:38:10: b6:e7:f1:90:bf:6c:a2:d1:30:eb:ab:e7:d5:b9:8f:01:ef:fa: c6:cd:e6:1c:f4:e7:d8:d9:07:87:8f:15:b3:bc:00:a2:9b:3b: a0:30:38:ce:aa:76:35:00:52:13:15:e7:db:ea:81:a6:3b:04: e5:27:4e:45 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUN4ZWlKYzQp9CPpLVbC8QJsvQeIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDMxNzA0NTBaFw0yNjA0MDIxNzA5NTBaMDMxMTAvBgNV BAMTKDRBNzI2NzVFMENCOTkyQUU0QjlENTBBNDRGRjQzODdGQTc4MEQ3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28ULCvNkhDHy+izLC1I3pdkkz I3w1tViHHM6QhUJMs9rBy4FkqVWjAZ/dCx88oJK0oZylSnp6WQVK6nW1JHmErrxY Li3NL0l9vD1GOHD1r8v3FRSrLqqkbs+hyQ4vDEyaqNXaFNcWOUSMKT20xcZDaXnG MelK8PZuHL6DHoDiObkHP83Rf93Zon5izSs76q3yanYCtxodTIUSiiFp6cl6ySwj z0YbbNwrHv66y0Oy9lhelVDBNgIhLDxZI4d6e9cgD67Amkvc0lrA/197ATKOUEXk wcodVv3CMmStTjgEJbdE3YYyhL+P9G3huyDhP7eSVUEsGQNmXFFo5zpc+Yr5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKcmdeDLmSrkud UKRP9Dh/p4DXzzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Ba cTRwRnFqcEJ1WEp5SngyMlhHMzFvb0cxZllDNjlDNXlvcGQxOHo0dzIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Nw WnE0cEZxanBCdVhKeUp4MjJYRzMxb29HMWZZQzY5QzV5b3BkMTh6NHcyLzAvNEE3 MjY3NUUwQ0I5OTJBRTRCOUQ1MEE0NEZGNDM4N0ZBNzgwRDdDRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsQiIMA0EAgACMAcDBQAoBG40MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQg9jANBgkqhkiG9w0BAQsFAAOCAQEAr27JWWqyIU5t6MiR F/CLen6yTzqBrGpYh2XxmU7DizZYVeT6Et9VKPdxIdYKn8KSZK30vTCzHClTjFhI W3SdBJdkQ1qHVLN6PY+MV4oeMAo2BdT/r7B6mPGrYDLoVfNMeREK5fYLM1y9zica L6825V3PH4BaZ2bTUFlG9cxd3pgL8M0wO/WDtNgtbqqTHYRA1jMgcDWrF2ymrL7x +q/EVZlTBFbzvmFrHS4uRMvAGlM3B3Sh+Tkecapx6bkLab0WouLlYTgQtufxkL9s otEw66vn1bmPAe/6xs3mHPTn2NkHh48Vs7wAops7oDA4zqp2NQBSExXn2+qBpjsE 5SdORQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:03 2025 by rpki-client on console.sobornost.net