$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer File: 684027F204382A1BC3E39E8891804EBB07906C89.cer (raw, json) Hash identifier: c0zoGSvAFjR+VPlF4Jz1d2Y0MyY0297O+hhgR1/+rvg= Subject key identifier: 68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 25ABBAECD5F3D084C6D45F5CCD22E613860B3EDB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft caRepository: rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 17:26:44 +0000 Certificate not after: Thu 05 Mar 2026 17:31:44 +0000 Subordinate resources: AS: 61660 IP: 131.108.44.0/22 IP: 138.185.100.0/22 IP: 2804:1c88::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ab:ba:ec:d5:f3:d0:84:c6:d4:5f:5c:cd:22:e6:13:86:0b:3e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 17:26:44 2025 GMT Not After : Mar 5 17:31:44 2026 GMT Subject: CN=684027F204382A1BC3E39E8891804EBB07906C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:5b:75:1d:66:36:9c:26:96:2e:e5:85:26: 7a:3b:37:80:21:87:88:f0:c0:e3:bb:a9:42:e9:fc: 57:a0:e3:fd:43:16:ca:f8:17:9f:a4:89:f8:93:7a: af:3e:e8:44:8a:03:5b:2e:72:ea:2b:ac:41:bd:0f: 2f:f8:dc:aa:04:77:17:66:e2:9e:ed:41:49:12:01: 5c:fb:a4:eb:a4:ef:51:ba:5c:a8:32:a1:f5:f8:d5: d3:48:3e:81:08:9c:15:d7:7f:3e:9f:5e:99:b5:75: 63:df:63:2f:9d:69:66:f7:2b:06:bd:48:07:44:57: e3:ee:20:cd:ba:f1:cd:fa:d5:bd:e9:87:bd:34:c0: 88:06:32:1b:7b:20:71:44:87:7c:1d:92:57:94:4d: bd:4e:38:7e:38:5b:72:56:d4:d4:b7:65:0c:30:84: 84:41:0f:19:fa:dd:6d:8f:f5:d0:1a:b5:cf:01:90: 72:f5:df:61:7b:41:f8:58:bd:e1:94:ee:a5:2d:cc: 99:b0:f9:4c:63:3e:25:79:2c:13:06:5d:c4:a8:e9: de:7a:da:7b:52:4d:91:e2:4f:61:8f:b0:10:f2:0e: db:bb:b8:6c:15:83:0f:ed:69:4e:0d:08:3f:3b:17: 21:03:a7:15:d6:38:63:7a:fd:5e:36:73:c9:db:31: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.108.44.0/22 138.185.100.0/22 IPv6: 2804:1c88::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61660 Signature Algorithm: sha256WithRSAEncryption 69:20:22:23:0b:f9:0b:da:af:cb:d6:c8:0a:b1:71:bf:f1:1c: cb:9a:78:dd:10:f6:0c:15:79:5f:94:73:c7:57:eb:d0:5a:73: 83:58:8d:6b:07:b1:47:6f:fd:c8:20:0c:3f:7a:e9:c2:6e:c7: e4:49:8c:ab:21:70:33:a8:2f:6e:73:c6:7a:dd:a4:5d:66:47: e8:f4:61:4f:9e:e1:67:18:71:74:21:2e:c5:8d:84:c3:b0:e5: b9:1d:b9:32:fd:b7:1d:af:c4:c0:7c:12:8f:34:e2:c3:f6:42: aa:4b:78:72:dc:6c:0f:3f:81:d4:0d:ec:8e:b3:55:1e:6f:3f: c4:8c:09:3a:6c:88:a0:f8:b4:74:c6:4f:02:88:01:ca:88:97: 34:9e:28:69:20:3c:80:a7:0d:b6:7a:99:47:49:ac:e0:ab:19: 58:1f:f2:92:f9:d4:2b:17:bc:64:44:d3:a8:15:ca:e9:41:70: 1b:13:10:a0:05:80:5a:a7:9b:85:45:2a:08:73:4a:b1:50:c1: 11:4c:5e:e9:29:ed:e2:35:13:45:6d:98:8e:7c:31:cb:0a:eb: a4:c0:8d:9a:0d:08:26:aa:d5:0f:4d:2a:0a:f8:03:05:83:68: fe:52:f6:9d:c8:27:3c:a3:b2:3f:72:d7:4a:b3:37:e9:41:cc: bf:66:c8:5b -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUJau67NXz0ITG1F9czSLmE4YLPtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNzI2NDRaFw0yNjAzMDUxNzMxNDRaMDMxMTAvBgNV BAMTKDY4NDAyN0YyMDQzODJBMUJDM0UzOUU4ODkxODA0RUJCMDc5MDZDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJVt1HWY2nCaWLuWFJno7N4Ah h4jwwOO7qULp/Feg4/1DFsr4F5+kifiTeq8+6ESKA1sucuorrEG9Dy/43KoEdxdm 4p7tQUkSAVz7pOuk71G6XKgyofX41dNIPoEInBXXfz6fXpm1dWPfYy+daWb3Kwa9 SAdEV+PuIM268c361b3ph700wIgGMht7IHFEh3wdkleUTb1OOH44W3JW1NS3ZQww hIRBDxn63W2P9dAatc8BkHL132F7QfhYveGU7qUtzJmw+UxjPiV5LBMGXcSo6d56 2ntSTZHiT2GPsBDyDtu7uGwVgw/taU4NCD87FyEDpxXWOGN6/V42c8nbMZGLAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoQCfyBDgqG8Pj noiRgE67B5BsiTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0dX R2JIUW44R3Fma2tGUkpmZENoWGhKUmc0UGFKMzVETEZLd2lrdG9aUm4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0dX R2JIUW44R3Fma2tGUkpmZENoWGhKUmc0UGFKMzVETEZLd2lrdG9aUm4vMS82ODQw MjdGMjA0MzgyQTFCQzNFMzlFODg5MTgwNEVCQjA3OTA2Qzg5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKDbCwDBAKKuWQwDQQCAAIwBwMFACgEHIgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAPDcMA0GCSqGSIb3DQEBCwUAA4IBAQBpICIjC/kL 2q/L1sgKsXG/8RzLmnjdEPYMFXlflHPHV+vQWnODWI1rB7FHb/3IIAw/eunCbsfk SYyrIXAzqC9uc8Z63aRdZkfo9GFPnuFnGHF0IS7FjYTDsOW5Hbky/bcdr8TAfBKP NOLD9kKqS3hy3GwPP4HUDeyOs1Uebz/EjAk6bIig+LR0xk8CiAHKiJc0nihpIDyA pw22eplHSazgqxlYH/KS+dQrF7xkRNOoFcrpQXAbExCgBYBap5uFRSoIc0qxUMER TF7pKe3iNRNFbZiOfDHLCuukwI2aDQgmqtUPTSoK+AMFg2j+UvadyCc8o7I/ctdK szfpQcy/Zshb -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:24 2025 by rpki-client on console.sobornost.net