$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer File: 67B531125B42B4898E018F1D5F2837CCA874EB8B.cer (raw, json) Hash identifier: AN1Uc6RZCAp/ncAARbIwjMEEmZXcy6PYNumB/Kz3goI= Subject key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35E47DBEA852F783A85B5AA6E061EFFD08284938 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft caRepository: rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:50 +0000 Certificate not after: Wed 04 Mar 2026 18:41:50 +0000 Subordinate resources: AS: 270836 IP: 189.14.112.0/22 IP: 2804:7228::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e4:7d:be:a8:52:f7:83:a8:5b:5a:a6:e0:61:ef:fd:08:28:49:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:50 2025 GMT Not After : Mar 4 18:41:50 2026 GMT Subject: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:2d:c3:30:c6:c7:90:d7:54:e1:20:f3:fa: 3b:54:c0:96:6e:43:c0:e2:d0:a9:9f:d2:0e:a2:58: ee:85:d9:e6:ff:f6:9e:68:00:2a:af:6b:6d:36:5a: 7c:ef:32:e5:87:d6:28:6b:4b:42:e6:0c:0c:a9:0e: 99:00:97:b6:60:3e:49:12:0c:3e:b9:d1:ee:7a:fc: 85:f8:07:e9:17:e3:8a:47:16:5d:e7:ab:da:82:62: 25:c9:28:88:a2:f9:59:2f:e7:65:d3:e4:18:6c:bb: 1c:8c:a7:10:2b:9a:0d:5e:98:39:00:7c:ba:92:57: 55:4c:0d:4d:26:81:0a:b9:5a:aa:b8:a3:b7:61:76: b3:7d:d1:d2:3b:98:c4:b5:fd:56:b5:62:8a:51:d0: bb:e8:7d:67:b6:07:c7:4b:e5:66:dc:43:0b:cc:3c: b4:ac:4b:36:2a:84:35:21:cd:8c:34:68:d1:a7:45: 4f:10:2f:22:65:48:7e:39:88:67:86:4d:29:48:dc: c7:3f:df:96:22:1c:3d:f5:66:fa:cc:6c:a5:c6:16: ec:0a:d3:a9:1a:9d:85:8a:12:d2:f5:52:68:be:5a: 4c:fe:56:ce:07:bb:84:03:d4:0e:07:c8:2f:fc:67: 28:a2:d4:0d:1c:5e:ac:03:1b:99:10:c1:20:db:54: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.14.112.0/22 IPv6: 2804:7228::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270836 Signature Algorithm: sha256WithRSAEncryption 97:9c:58:2c:95:0a:13:66:5f:b1:b6:3c:ab:f3:5b:bb:31:d5: cd:95:e8:d3:2f:b9:74:7b:6e:b3:03:18:cb:a2:ff:4e:0b:21: 36:98:01:fe:4c:34:02:ae:af:a2:dd:9d:1d:17:8e:be:17:15: b1:15:39:3c:b4:70:b5:8e:e3:a8:85:50:98:28:04:f4:62:23: 12:94:ee:9c:5e:71:41:24:2c:97:43:e2:ab:57:96:64:a5:58: 17:e0:17:fe:7b:b2:aa:ff:c6:b3:79:87:2d:fe:d9:51:71:2c: 92:cd:ce:04:4b:b0:05:64:00:51:7e:fe:f8:1d:85:2c:3c:18: ad:e7:bb:a1:be:4a:f8:1e:44:48:35:90:15:af:c8:1c:4a:87: b1:4a:74:8b:cc:e5:4f:44:b0:a8:18:91:6a:cf:20:e8:d5:62: e8:89:4e:00:35:e9:17:7b:d2:18:b2:e5:8d:18:da:9f:1b:c8: be:a6:51:05:fe:b9:ea:1a:62:fc:fc:2b:15:d8:dd:bb:11:7c: 5d:f9:1d:b9:1e:95:f4:07:39:37:dd:19:d6:ac:54:2a:a3:5b: b0:84:d9:13:2b:0f:97:4b:e8:9b:0f:19:cb:c0:e7:5b:44:3a: 82:94:ca:7f:a1:6d:9b:3f:50:b3:90:fd:54:4b:fa:65:79:9a: f0:a9:7c:78 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUNeR9vqhS94OoW1qm4GHv/QgoSTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2NTBaFw0yNjAzMDQxODQxNTBaMDMxMTAvBgNV BAMTKDY3QjUzMTEyNUI0MkI0ODk4RTAxOEYxRDVGMjgzN0NDQTg3NEVCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOC3DMMbHkNdU4SDz+jtUwJZu Q8Di0Kmf0g6iWO6F2eb/9p5oACqva202WnzvMuWH1ihrS0LmDAypDpkAl7ZgPkkS DD650e56/IX4B+kX44pHFl3nq9qCYiXJKIii+Vkv52XT5BhsuxyMpxArmg1emDkA fLqSV1VMDU0mgQq5Wqq4o7dhdrN90dI7mMS1/Va1YopR0LvofWe2B8dL5WbcQwvM PLSsSzYqhDUhzYw0aNGnRU8QLyJlSH45iGeGTSlI3Mc/35YiHD31ZvrMbKXGFuwK 06kanYWKEtL1Umi+Wkz+Vs4Hu4QD1A4HyC/8Zyii1A0cXqwDG5kQwSDbVG2FAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRntTESW0K0iY4B jx1fKDfMqHTrizAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRh Um5VU2I2WXY2aXhxdW9mQ2lXNXp2RWZXVmo0OWJFVW5FbzhMS2V4c0MvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRh Um5VU2I2WXY2aXhxdW9mQ2lXNXp2RWZXVmo0OWJFVW5FbzhMS2V4c0MvMS82N0I1 MzExMjVCNDJCNDg5OEUwMThGMUQ1RjI4MzdDQ0E4NzRFQjhCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK9DnAwDQQCAAIwBwMFACgEcigwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCH0MA0GCSqGSIb3DQEBCwUAA4IBAQCXnFgslQoTZl+xtjyr 81u7MdXNlejTL7l0e26zAxjLov9OCyE2mAH+TDQCrq+i3Z0dF46+FxWxFTk8tHC1 juOohVCYKAT0YiMSlO6cXnFBJCyXQ+KrV5ZkpVgX4Bf+e7Kq/8azeYct/tlRcSyS zc4ES7AFZABRfv74HYUsPBit57uhvkr4HkRINZAVr8gcSoexSnSLzOVPRLCoGJFq zyDo1WLoiU4ANekXe9IYsuWNGNqfG8i+plEF/rnqGmL8/CsV2N27EXxd+R25HpX0 Bzk33RnWrFQqo1uwhNkTKw+XS+ibDxnLwOdbRDqClMp/oW2bP1CzkP1US/pleZrw qXx4 -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:24 2025 by rpki-client on console.sobornost.net