$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer File: 63CF3814814F9F8799D1D11C2BBD8F541A383E8E.cer (raw, json) Hash identifier: FjBxYhN0MAA5pyp/qbEPntfCLMbq8/uCesUwYvjU5eY= Subject key identifier: 63:CF:38:14:81:4F:9F:87:99:D1:D1:1C:2B:BD:8F:54:1A:38:3E:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2AF747109DD6286B0BC8EDEEA7CB50EF646A64FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.mft caRepository: rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 12:43:47 +0000 Certificate not after: Tue 21 Apr 2026 12:48:47 +0000 Subordinate resources: AS: 262290 IP: 138.118.16.0/22 IP: 186.226.200.0/21 IP: 2804:24c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f7:47:10:9d:d6:28:6b:0b:c8:ed:ee:a7:cb:50:ef:64:6a:64:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 12:43:47 2025 GMT Not After : Apr 21 12:48:47 2026 GMT Subject: CN=63CF3814814F9F8799D1D11C2BBD8F541A383E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:95:ce:91:82:a6:58:91:bf:f1:72:5d:71: f3:67:e1:33:27:8e:07:08:bd:5c:b3:e8:91:0c:ae: 01:1a:4c:a8:fe:7b:38:ee:53:5d:87:99:59:37:08: 9e:6a:47:84:d2:9e:30:cf:98:3d:28:d0:5e:f4:54: 5e:e8:b9:50:cc:b3:d0:54:68:71:e1:6d:77:0b:2b: e2:56:36:50:78:c8:18:2e:1c:e8:af:a8:7d:ce:3e: eb:ab:05:59:81:90:be:ad:68:c3:81:b2:9c:00:94: 20:cc:be:b1:67:b7:60:7b:c6:1a:b7:69:d3:55:86: fb:80:bd:af:b4:fa:14:90:25:52:b4:02:f3:ff:b0: b2:6e:5b:17:d1:71:77:76:17:22:f7:96:7f:ce:48: aa:d6:9c:42:0c:82:fc:7a:fe:5a:cf:82:47:0b:c0: c8:03:22:1e:71:06:7c:94:90:24:12:e8:3b:82:76: 9a:2e:ad:4a:6f:33:8f:4d:12:eb:75:8f:74:a9:db: 27:b2:bc:26:04:8a:90:23:97:a3:77:ef:4a:60:17: 3b:3e:bd:0f:19:af:51:49:f4:a2:47:30:15:a9:c1: 42:f0:0b:14:f9:ca:8e:53:98:dd:65:4f:84:a0:75: 1e:08:f6:b3:1d:2e:22:ba:cc:9b:f5:20:16:ec:88: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:CF:38:14:81:4F:9F:87:99:D1:D1:1C:2B:BD:8F:54:1A:38:3E:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/63CF3814814F9F8799D1D11C2BBD8F541A383E8E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.16.0/22 186.226.200.0/21 IPv6: 2804:24c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262290 Signature Algorithm: sha256WithRSAEncryption be:28:01:50:91:ac:4f:44:95:48:6e:e3:d5:4b:49:aa:42:99: 8d:ce:ed:1c:33:35:06:36:2f:70:28:5d:11:64:e3:0f:48:87: 65:6e:55:30:c4:e4:7e:59:31:23:7f:4f:e8:b3:28:dc:f5:b1: 0c:d6:c9:16:b3:31:8d:f2:4a:73:41:d7:45:64:fe:1d:37:02: 51:7d:4a:91:8f:17:dc:04:60:fa:6d:28:c4:21:2c:d3:c1:45: fa:38:ae:a6:f9:83:95:cb:4b:6d:ff:4a:e7:7a:29:5d:d4:6d: 23:1c:61:a8:82:eb:6a:b9:5e:05:e7:96:f4:bd:84:4a:de:9e: 62:ef:ff:e0:4f:e9:7b:65:b6:b0:5a:09:c3:05:8d:96:6d:c8: df:04:5b:63:97:30:5d:22:45:c4:56:b0:ca:c4:a1:8e:22:33: e9:81:b1:d1:07:9d:04:da:ea:c1:2d:99:3f:66:d1:78:fb:71: 28:b8:04:da:c2:07:17:47:43:96:f9:f8:9f:b6:d3:76:51:60: 4b:2e:67:99:ed:22:fc:dd:e8:6b:0b:c5:68:5c:a3:da:df:a8: 1e:8f:01:8e:49:de:94:ce:4b:7a:e5:1f:18:87:30:28:d4:40: 24:39:4c:af:07:71:c4:b8:8c:2e:cf:6c:b1:62:10:dd:b4:ab: ea:a2:fb:f4 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUKvdHEJ3WKGsLyO3up8tQ72RqZP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIxMjQzNDdaFw0yNjA0MjExMjQ4NDdaMDMxMTAvBgNV BAMTKDYzQ0YzODE0ODE0RjlGODc5OUQxRDExQzJCQkQ4RjU0MUEzODNFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxs5XOkYKmWJG/8XJdcfNn4TMn jgcIvVyz6JEMrgEaTKj+ezjuU12HmVk3CJ5qR4TSnjDPmD0o0F70VF7ouVDMs9BU aHHhbXcLK+JWNlB4yBguHOivqH3OPuurBVmBkL6taMOBspwAlCDMvrFnt2B7xhq3 adNVhvuAva+0+hSQJVK0AvP/sLJuWxfRcXd2FyL3ln/OSKrWnEIMgvx6/lrPgkcL wMgDIh5xBnyUkCQS6DuCdpourUpvM49NEut1j3Sp2yeyvCYEipAjl6N370pgFzs+ vQ8Zr1FJ9KJHMBWpwULwCxT5yo5TmN1lT4SgdR4I9rMdLiK6zJv1IBbsiNQ3AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRjzzgUgU+fh5nR 0RwrvY9UGjg+jjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR005 VVBqV1NRUkdNODFNYWNiZjZ0OHFURmVUOFJHaVJRSFJ1SG1wcWVicG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dN OVVQaldTUVJHTTgxTWFjYmY2dDhxVEZlVDhSR2lSUUhSdUhtcHFlYnBuLzAvNjND RjM4MTQ4MTRGOUY4Nzk5RDFEMTFDMkJCRDhGNTQxQTM4M0U4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinYQAwQDuuLIMA0EAgACMAcDBQAoBCTAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQAkjANBgkqhkiG9w0BAQsFAAOCAQEAvigBUJGs T0SVSG7j1UtJqkKZjc7tHDM1BjYvcChdEWTjD0iHZW5VMMTkflkxI39P6LMo3PWx DNbJFrMxjfJKc0HXRWT+HTcCUX1KkY8X3ARg+m0oxCEs08FF+jiupvmDlctLbf9K 53opXdRtIxxhqILrarleBeeW9L2ESt6eYu//4E/pe2W2sFoJwwWNlm3I3wRbY5cw XSJFxFawysShjiIz6YGx0QedBNrqwS2ZP2bRePtxKLgE2sIHF0dDlvn4n7bTdlFg Sy5nme0i/N3oawvFaFyj2t+oHo8BjknelM5LeuUfGIcwKNRAJDlMrwdxxLiMLs9s sWIQ3bSr6qL79A== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:23 2025 by rpki-client on console.sobornost.net