$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer (raw, json) Hash identifier: f+c8qPYOLZtFufMBXBuqMIXNICdQEV/EHgvMy2mEYcw= Subject key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 322B71584983E38B70D218415A538EDC9AA2B5E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft caRepository: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 17 Apr 2025 07:56:52 +0000 Certificate not after: Thu 16 Apr 2026 08:01:52 +0000 Subordinate resources: AS: 265264 IP: 168.90.48.0/22 IP: 187.95.128.0/22 IP: 2804:2d28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2b:71:58:49:83:e3:8b:70:d2:18:41:5a:53:8e:dc:9a:a2:b5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 17 07:56:52 2025 GMT Not After : Apr 16 08:01:52 2026 GMT Subject: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:7e:23:96:44:9f:04:38:6b:77:94:b0:11: 58:0a:0b:77:75:3b:52:50:3f:04:c9:da:07:7c:4e: 94:f8:60:fa:c8:81:9e:e4:eb:7e:fe:40:01:05:35: 5a:76:5f:9b:1f:22:83:fb:81:14:ac:6d:e6:66:c5: 73:f9:31:d6:9e:b6:de:29:f1:9c:37:35:cf:ec:20: a8:ce:d9:fd:bd:4b:c5:df:f8:ae:05:ba:55:ef:c1: 3e:4b:35:3b:8b:c4:b8:54:74:78:3a:8d:e9:65:3f: 35:7e:90:f9:55:f4:8c:c2:0b:dc:33:4d:63:5f:2c: 56:0c:e8:77:15:27:98:ad:44:6a:cc:6b:50:17:02: 3c:c5:a7:b0:56:ae:40:70:2c:08:cd:2d:26:87:ea: ca:8e:80:5c:2f:63:62:6a:3c:6a:23:2d:ef:ad:99: 29:94:0a:ed:c8:76:d3:9e:b7:5e:39:71:a3:5f:6f: 62:9a:3c:fa:a5:f9:d6:50:62:0c:12:f1:1a:c2:4d: f9:41:b3:a9:a6:91:bd:b4:d1:f2:8c:3f:44:2c:1d: 69:c6:d1:b9:24:29:7a:78:10:73:9b:c9:a7:82:d4: 51:03:6f:5c:8b:59:8c:58:aa:b2:62:50:1a:17:12: d0:3d:9b:e4:0a:03:97:8c:c8:8a:8f:c9:94:b7:b2: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.48.0/22 187.95.128.0/22 IPv6: 2804:2d28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265264 Signature Algorithm: sha256WithRSAEncryption 17:0d:92:3f:e8:da:1d:76:4a:6c:f6:3c:4d:d5:b0:00:e3:9b: 8d:8c:0d:57:b3:85:da:79:3c:cd:ca:b3:e7:8a:ca:80:18:5c: ac:fa:28:80:cd:18:13:79:02:c0:25:c2:dc:b3:92:37:4a:ad: 88:f7:af:d9:db:18:00:31:bc:aa:09:d5:13:6e:a3:60:9d:b7: e5:14:de:51:04:14:fd:0c:cc:14:48:9b:60:e3:9f:0c:b0:31: 95:2e:81:01:f7:73:8d:ff:43:ab:d0:e4:68:df:5c:08:bd:64: db:34:e8:06:da:0a:3a:ac:cd:a8:19:86:cb:7f:85:97:f1:f7: c2:e9:8c:eb:cc:1e:96:1f:37:44:e8:d8:74:b9:b8:ef:73:be: 7e:f5:5a:e4:5e:87:30:fa:70:bf:81:8a:6a:68:ce:7a:6f:61: a8:15:e6:cc:fa:6b:9d:eb:84:cf:29:46:35:ca:4e:e4:4d:8e: c1:50:54:f6:5e:7b:18:7f:d0:be:82:74:45:33:31:34:17:ac: 76:41:19:af:51:8b:25:b9:47:7f:f7:ef:dd:8f:ef:ee:01:7f: 23:f3:9f:95:1f:67:86:41:4f:c2:54:a2:ff:76:47:a2:14:7d: e0:04:d6:33:7d:dc:ea:92:03:c9:21:76:55:f3:f3:58:d2:64: d1:0e:89:1e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMitxWEmD44tw0hhBWlOO3JqiteUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTcwNzU2NTJaFw0yNjA0MTYwODAxNTJaMDMxMTAvBgNV BAMTKDY1MzgzN0Q3RUNBMUZFMTE0NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu734jlkSfBDhrd5SwEVgKC3d1 O1JQPwTJ2gd8TpT4YPrIgZ7k637+QAEFNVp2X5sfIoP7gRSsbeZmxXP5Mdaett4p 8Zw3Nc/sIKjO2f29S8Xf+K4FulXvwT5LNTuLxLhUdHg6jellPzV+kPlV9IzCC9wz TWNfLFYM6HcVJ5itRGrMa1AXAjzFp7BWrkBwLAjNLSaH6sqOgFwvY2JqPGojLe+t mSmUCu3IdtOet145caNfb2KaPPql+dZQYgwS8RrCTflBs6mmkb200fKMP0QsHWnG 0bkkKXp4EHObyaeC1FEDb1yLWYxYqrJiUBoXEtA9m+QKA5eMyIqPyZS3slHpAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlODfX7KH+EUXQ zhXgv4le4Gon4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUxw ZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVM cGVKRzlmZlQ1Q25oRGJobjdBZHV5dUxiRUE5QWhXVzV3aVBvSGFGZVBTLzAvNjUz ODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVFMDZBMjdFMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqFowAwQCu1+AMA0EAgACMAcDBQAoBC0oMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQMMDANBgkqhkiG9w0BAQsFAAOCAQEAFw2SP+ja HXZKbPY8TdWwAOObjYwNV7OF2nk8zcqz54rKgBhcrPoogM0YE3kCwCXC3LOSN0qt iPev2dsYADG8qgnVE26jYJ235RTeUQQU/QzMFEibYOOfDLAxlS6BAfdzjf9Dq9Dk aN9cCL1k2zToBtoKOqzNqBmGy3+Fl/H3wumM68welh83ROjYdLm473O+fvVa5F6H MPpwv4GKamjOem9hqBXmzPprneuEzylGNcpO5E2OwVBU9l57GH/QvoJ0RTMxNBes dkEZr1GLJblHf/fv3Y/v7gF/I/OflR9nhkFPwlSi/3ZHohR94ATWM33c6pIDySF2 VfPzWNJk0Q6JHg== -----END CERTIFICATE-----Generated at Fri Apr 25 10:37:34 2025 by rpki-client on console.sobornost.net