$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer File: 68444A333B7333B9388B8EEAF41EBF4CE7435184.cer (raw, json) Hash identifier: U7ZmvbQh/fPzl5ZtbN0pmc/UiAkftqRcJvb0Jzmfseo= Subject key identifier: 68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AEE23D3B3C5B41D100B3FCC02623565B83E2774 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft caRepository: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 11 Dec 2024 12:21:00 +0000 Certificate not after: Wed 10 Dec 2025 12:26:00 +0000 Subordinate resources: AS: 273564 IP: 2804:90a0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ee:23:d3:b3:c5:b4:1d:10:0b:3f:cc:02:62:35:65:b8:3e:27:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 11 12:21:00 2024 GMT Not After : Dec 10 12:26:00 2025 GMT Subject: CN=68444A333B7333B9388B8EEAF41EBF4CE7435184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:0a:76:2f:93:42:1f:6a:2f:f0:a9:d4:48: 14:5a:db:da:7f:ce:47:8e:4f:c8:2a:f1:27:08:73: 0f:3c:29:87:4e:f3:98:ca:53:3d:16:c0:ad:e4:e8: a6:26:29:95:f3:51:cf:55:b1:22:ac:e9:da:e0:4a: a6:9c:0f:53:37:71:27:2b:1f:69:ae:6f:a9:87:3e: e3:fd:7d:13:04:37:e4:b3:2e:06:b4:83:4f:06:f8: da:6f:f6:b5:4d:62:f0:36:85:ce:07:8b:0a:47:71: 37:7d:53:2b:f6:b3:91:28:52:11:57:1b:2b:c2:01: 70:14:f9:98:64:08:48:51:b8:f9:e8:6e:ce:57:10: 52:b5:33:ee:47:8d:92:04:1d:e0:3f:57:ca:77:82: 30:70:04:4a:eb:d0:eb:7f:dd:80:38:70:0a:2b:65: 8c:06:78:5f:69:f7:c6:cb:eb:68:fb:1a:c5:1f:44: 7c:a8:3a:b7:cf:a9:5b:03:a8:21:d9:d0:ad:c4:5f: 54:8d:fa:9d:4c:36:77:ec:ca:89:46:3f:c9:85:e6: 11:00:43:15:f9:85:70:6b:bc:8f:18:2e:3f:ae:42: 37:5a:36:06:c2:71:83:f4:9f:72:27:54:51:48:06: 9d:7c:5d:cf:f1:1a:8a:cf:79:95:91:1b:c3:5f:97: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:90a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273564 Signature Algorithm: sha256WithRSAEncryption 54:82:71:09:d2:52:9e:8d:30:9c:26:86:a9:6c:7c:1d:cc:46: d0:f3:89:4e:3d:9f:8d:2a:ed:a8:71:03:3a:2c:2d:95:66:52: 54:cc:0d:e3:84:40:b8:b2:16:11:6e:6b:33:2f:bd:e7:20:c6: 6e:14:67:05:6a:e9:5f:cb:3e:6d:f8:4d:20:49:2c:88:c3:d1: 0a:6b:f1:74:70:ec:81:19:6c:32:26:f6:88:58:7c:b3:cb:13: b8:dd:bc:bc:49:10:68:d0:4f:4e:6d:66:16:49:d9:91:32:53: fc:6d:c6:bb:6d:75:aa:2f:74:c1:d3:1a:6f:49:36:c3:8d:ba: 46:2c:99:4b:30:64:fe:35:11:44:9e:64:e3:4b:96:4f:c9:ac: b4:2a:ae:2e:2e:1d:d8:62:f7:4a:5e:8e:6b:19:a9:47:80:cc: 12:eb:30:33:00:34:f0:bc:fa:63:ad:70:45:f9:4e:12:be:19: d7:88:bc:87:f7:e9:a6:83:c0:d0:40:37:75:1b:31:76:ba:3a: 26:cb:75:1e:fd:3a:00:50:90:d0:7a:a9:ba:02:e5:1f:30:c0: 6d:41:cf:9b:70:ff:44:83:98:d6:10:8f:b2:38:b7:6e:d9:d6: e4:68:b4:2d:e8:a3:df:ab:5f:74:60:65:be:4b:1b:42:e0:7a: aa:9a:34:76 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUOu4j07PFtB0QCz/MAmI1Zbg+J3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTExMjIxMDBaFw0yNTEyMTAxMjI2MDBaMDMxMTAvBgNV BAMTKDY4NDQ0QTMzM0I3MzMzQjkzODhCOEVFQUY0MUVCRjRDRTc0MzUxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwaAp2L5NCH2ov8KnUSBRa29p/ zkeOT8gq8ScIcw88KYdO85jKUz0WwK3k6KYmKZXzUc9VsSKs6drgSqacD1M3cScr H2mub6mHPuP9fRMEN+SzLga0g08G+Npv9rVNYvA2hc4HiwpHcTd9Uyv2s5EoUhFX GyvCAXAU+ZhkCEhRuPnobs5XEFK1M+5HjZIEHeA/V8p3gjBwBErr0Ot/3YA4cAor ZYwGeF9p98bL62j7GsUfRHyoOrfPqVsDqCHZ0K3EX1SN+p1MNnfsyolGP8mF5hEA QxX5hXBrvI8YLj+uQjdaNgbCcYP0n3InVFFIBp18Xc/xGorPeZWRG8Nfl965AgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRoREozO3MzuTiL jur0Hr9M50NRhDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFJC VUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4xcGcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hS QlVCNDVyM0J2TmNEQUNCU2JQYVZZNTNlUDhKRjM3OTV3MVlwM2puMXBnLzAvNjg0 NDRBMzMzQjczMzNCOTM4OEI4RUVBRjQxRUJGNENFNzQzNTE4NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASQoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LJwwDQYJKoZIhvcNAQELBQADggEBAFSCcQnSUp6NMJwmhqlsfB3MRtDziU49n40q 7ahxAzosLZVmUlTMDeOEQLiyFhFuazMvvecgxm4UZwVq6V/LPm34TSBJLIjD0Qpr 8XRw7IEZbDIm9ohYfLPLE7jdvLxJEGjQT05tZhZJ2ZEyU/xtxrttdaovdMHTGm9J NsONukYsmUswZP41EUSeZONLlk/JrLQqri4uHdhi90pejmsZqUeAzBLrMDMANPC8 +mOtcEX5ThK+GdeIvIf36aaDwNBAN3UbMXa6OibLdR79OgBQkNB6qboC5R8wwG1B z5tw/0SDmNYQj7I4t27Z1uRotC3oo9+rX3RgZb5LG0LgeqqaNHY= -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:09 2025 by rpki-client on console.sobornost.net