$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer File: 603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer (raw, json) Hash identifier: CqmHJzgHuSELcQ/AsY4QKg8pXuuyKuZvDWBdVws36yo= Subject key identifier: 60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 768142FFF74C28B4B90913CCA93B335C4AFAA4C7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.mft caRepository: rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Feb 2025 13:30:28 +0000 Certificate not after: Fri 20 Feb 2026 13:35:28 +0000 Subordinate resources: AS: 270608 IP: 186.219.232.0/22 IP: 2804:6e9c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 13:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:81:42:ff:f7:4c:28:b4:b9:09:13:cc:a9:3b:33:5c:4a:fa:a4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 21 13:30:28 2025 GMT Not After : Feb 20 13:35:28 2026 GMT Subject: CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:10:2e:c6:c6:b6:b8:87:b9:85:e6:69:07: a2:a5:fe:67:25:de:de:1f:05:dc:69:ba:80:8d:59: 70:5c:4b:b7:3f:5c:68:fe:50:b6:12:6c:df:24:71: 4b:76:ba:77:04:16:38:01:b6:4d:aa:30:88:74:9d: dc:a6:ae:16:5c:d5:9f:83:de:9a:74:3d:05:c5:dc: 0c:c8:f2:26:32:bc:b5:04:e2:f3:a1:e8:ba:62:f7: 31:f1:31:63:4b:1c:20:47:10:16:fa:4d:0e:61:b6: e8:77:c0:f8:fa:08:61:8a:2a:32:c9:fe:c1:02:12: 52:47:d7:81:15:39:3f:59:3c:96:58:82:26:4a:f0: d8:4e:8a:fb:75:34:e6:e0:51:cc:20:00:fc:30:4f: 56:17:bf:fc:6d:49:2b:1d:26:f2:ff:4e:25:6b:43: 1d:98:b0:84:a1:70:3a:53:fe:f5:18:0d:55:14:6e: 88:ab:67:6b:04:cd:14:74:0b:9d:ad:fe:65:0f:bf: 3f:55:c4:80:c1:9f:9b:30:a8:4d:ac:24:1e:77:cf: 20:23:4a:35:d5:9d:4e:df:46:94:6d:3a:e4:77:f2: b6:6f:0c:1c:6c:f4:75:b7:d4:da:2d:29:2b:b3:c1: 11:67:f7:e4:26:63:62:71:41:fc:43:5d:f9:01:f6: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.219.232.0/22 IPv6: 2804:6e9c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270608 Signature Algorithm: sha256WithRSAEncryption 02:ec:c9:b8:76:7a:b8:4b:6f:e5:ea:82:0e:7f:28:9d:51:c8: d5:03:11:ea:f6:c1:91:cf:aa:b7:89:87:c3:d0:86:af:6c:85: 57:a8:4a:89:9e:a2:f1:6a:60:72:94:c0:86:50:4e:8a:09:fa: de:71:0d:64:a8:80:cb:e9:2b:3b:34:72:55:a8:06:9f:22:fb: c4:1b:93:72:ef:d2:40:a0:c3:32:e9:cf:a3:ec:d5:e5:62:5a: 36:01:4a:3c:6b:d2:09:15:d8:da:fd:24:d6:65:3b:70:af:bb: 08:e2:75:72:15:e6:65:76:3c:0c:fe:a2:a1:75:b6:d0:99:28: 8a:87:c5:ee:91:8b:0c:c7:3d:18:ff:f8:c8:48:87:ee:a1:e5: cd:b6:20:e2:86:0b:7f:dc:64:3f:96:ab:26:1d:c9:6b:42:28: 06:93:b9:e8:19:cd:e8:6c:39:3d:26:bf:75:95:56:c6:00:7b: 15:92:b3:3a:2d:76:1e:19:2b:e3:fe:1e:de:6b:88:28:e4:37: a7:44:ea:ed:1f:a8:4b:6b:c9:49:1d:45:fd:85:6b:13:87:0a: bf:79:01:6e:83:b8:d3:47:b9:4b:46:57:6c:59:1d:1e:d8:24: 6e:64:3b:86:f3:54:63:2b:d5:de:ff:66:e0:ae:fb:d5:9b:e3: 23:58:97:bf -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdoFC//dMKLS5CRPMqTszXEr6pMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjExMzMwMjhaFw0yNjAyMjAxMzM1MjhaMDMxMTAvBgNV BAMTKDYwM0VEOUJGNTFGODlDNUYwODUzRTJBM0M1RUE4QkIwOTJFOEUyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdBBAuxsa2uIe5heZpB6Kl/mcl 3t4fBdxpuoCNWXBcS7c/XGj+ULYSbN8kcUt2uncEFjgBtk2qMIh0ndymrhZc1Z+D 3pp0PQXF3AzI8iYyvLUE4vOh6Lpi9zHxMWNLHCBHEBb6TQ5htuh3wPj6CGGKKjLJ /sECElJH14EVOT9ZPJZYgiZK8NhOivt1NObgUcwgAPwwT1YXv/xtSSsdJvL/TiVr Qx2YsIShcDpT/vUYDVUUboirZ2sEzRR0C52t/mUPvz9VxIDBn5swqE2sJB53zyAj SjXVnU7fRpRtOuR38rZvDBxs9HW31NotKSuzwRFn9+QmY2JxQfxDXfkB9sVfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgPtm/UficXwhT 4qPF6ouwkujimTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDR1 ZExDMmg5a2JvVWtmUVBIaEdvMUJweHZiMkY0aDdVcHlkRThlMXZQVjYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g0 dWRMQzJoOWtib1VrZlFQSGhHbzFCcHh2YjJGNGg3VXB5ZEU4ZTF2UFY2LzAvNjAz RUQ5QkY1MUY4OUM1RjA4NTNFMkEzQzVFQThCQjA5MkU4RTI5OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCutvoMA0EAgACMAcDBQAoBG6cMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhEDANBgkqhkiG9w0BAQsFAAOCAQEAAuzJuHZ6uEtv5eqC Dn8onVHI1QMR6vbBkc+qt4mHw9CGr2yFV6hKiZ6i8WpgcpTAhlBOign63nENZKiA y+krOzRyVagGnyL7xBuTcu/SQKDDMunPo+zV5WJaNgFKPGvSCRXY2v0k1mU7cK+7 COJ1chXmZXY8DP6ioXW20JkoiofF7pGLDMc9GP/4yEiH7qHlzbYg4oYLf9xkP5ar Jh3Ja0IoBpO56BnN6Gw5PSa/dZVWxgB7FZKzOi12Hhkr4/4e3muIKOQ3p0Tq7R+o S2vJSR1F/YVrE4cKv3kBboO400e5S0ZXbFkdHtgkbmQ7hvNUYyvV3v9m4K771Zvj I1iXvw== -----END CERTIFICATE-----Generated at Sun Apr 27 14:51:14 2025 by rpki-client on console.sobornost.net