$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer File: 68EC60223DF10BE63B7A84464ACF2A9697173D75.cer (raw, json) Hash identifier: 3I97tGcog7SLSBobfe/d+Zz/Muh7vLDucFvGMJ+aJ6k= Subject key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 03CA1A811458C630E78754F40FEFBF909763A879 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft caRepository: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 15:08:54 +0000 Certificate not after: Fri 20 Mar 2026 15:13:54 +0000 Subordinate resources: AS: 265140 IP: 143.255.0.0/22 IP: 2804:2b34::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ca:1a:81:14:58:c6:30:e7:87:54:f4:0f:ef:bf:90:97:63:a8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 21 15:08:54 2025 GMT Not After : Mar 20 15:13:54 2026 GMT Subject: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:10:7d:90:d9:91:3d:ed:84:78:c0:1c:45: 74:a2:dc:c1:79:a6:ef:11:63:cc:fa:d5:74:a1:00: 20:3e:47:2a:c5:9d:42:e1:30:84:19:da:46:47:9b: ea:e2:97:82:93:56:a7:ba:8a:3e:11:83:f9:a8:45: 52:d2:4d:51:1e:3d:fb:e4:f9:c2:3e:8f:72:ab:d9: ff:e1:3e:c8:20:e8:3f:ab:9b:f3:d6:06:cd:3e:ce: dc:81:10:be:20:06:0c:49:c4:28:6c:8e:44:67:fe: 24:7a:3c:51:38:18:25:ed:a5:0f:06:c8:c9:cb:80: d5:d2:60:89:72:97:b8:13:cb:56:f9:dd:54:fb:9e: b0:c6:d1:f7:48:be:b8:7f:c9:6e:76:c0:fb:fb:c9: bc:02:6e:3c:bc:41:d4:be:6a:87:c2:d1:c2:8a:e5: b7:f4:1e:a5:cf:b1:24:a3:88:5f:fd:28:06:15:0d: 2a:57:35:06:39:55:fd:a7:f2:38:8b:8f:ef:4a:e9: f6:74:69:a6:7a:3d:3b:2f:5b:87:e2:00:3a:e7:2f: c6:df:ef:32:3d:b7:71:ed:75:74:51:92:66:d7:77: 29:23:28:bd:45:04:57:f4:77:f9:57:be:f9:a0:b6: 18:0e:8a:c2:b6:80:cc:0c:88:5c:10:d5:ef:2c:e5: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.0.0/22 IPv6: 2804:2b34::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265140 Signature Algorithm: sha256WithRSAEncryption 77:13:97:e3:ad:80:1f:dd:5a:3e:d4:6a:50:8f:3c:94:e4:e0: d4:53:1d:f5:fe:3e:f6:7b:19:57:61:20:66:87:f2:53:4a:29: 0f:44:fd:ac:45:e1:c5:cb:8f:51:57:c8:2f:e1:35:98:22:0f: 5e:06:8f:69:ef:55:37:7c:f2:95:fc:5f:11:e1:97:88:fb:42: bf:09:15:e7:ec:29:1f:1c:e2:54:da:e1:3d:c9:cf:3e:dc:2e: c3:78:1c:6f:32:a7:f7:4d:25:c1:82:34:55:0e:cc:6d:42:6c: dc:7b:07:19:21:3a:bd:3a:f9:76:dc:cd:2d:80:d7:bc:45:63: 5b:1e:8b:4c:77:d6:74:df:de:f7:33:77:23:6c:09:5a:52:c6: 3f:c8:98:25:29:4f:d7:45:2b:32:61:93:a5:f0:d0:b4:47:b8: 98:d8:14:52:57:44:bf:26:52:7b:87:a5:16:0e:0d:9e:61:51: c1:41:05:f8:69:49:81:69:c2:1c:fe:71:82:60:95:34:42:27: 16:bb:3a:f3:b1:27:dc:ab:9d:57:48:2c:ad:ec:ce:2d:06:84: cd:00:0c:7b:77:61:7e:bd:3f:3f:90:5f:8e:5d:f3:9e:52:da: b3:93:ae:83:53:44:92:a3:89:34:11:5f:93:11:c0:c9:ce:46: 95:fc:7e:91 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUA8oagRRYxjDnh1T0D++/kJdjqHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjExNTA4NTRaFw0yNjAzMjAxNTEzNTRaMDMxMTAvBgNV BAMTKDY4RUM2MDIyM0RGMTBCRTYzQjdBODQ0NjRBQ0YyQTk2OTcxNzNENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6khB9kNmRPe2EeMAcRXSi3MF5 pu8RY8z61XShACA+RyrFnULhMIQZ2kZHm+ril4KTVqe6ij4Rg/moRVLSTVEePfvk +cI+j3Kr2f/hPsgg6D+rm/PWBs0+ztyBEL4gBgxJxChsjkRn/iR6PFE4GCXtpQ8G yMnLgNXSYIlyl7gTy1b53VT7nrDG0fdIvrh/yW52wPv7ybwCbjy8QdS+aofC0cKK 5bf0HqXPsSSjiF/9KAYVDSpXNQY5Vf2n8jiLj+9K6fZ0aaZ6PTsvW4fiADrnL8bf 7zI9t3HtdXRRkmbXdykjKL1FBFf0d/lXvvmgthgOisK2gMwMiFwQ1e8s5fUhAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRo7GAiPfEL5jt6 hEZKzyqWlxc9dTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOG5N NWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktEZ24vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhu TTVrTlZFUHk5dkQ1ZFRjUWNkTkJ5dXhwZDJuSHk0UzNqa1VxSFJLRGduLzAvNjhF QzYwMjIzREYxMEJFNjNCN0E4NDQ2NEFDRjJBOTY5NzE3M0Q3NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCj/8AMA0EAgACMAcDBQAoBCs0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLtDANBgkqhkiG9w0BAQsFAAOCAQEAdxOX462AH91aPtRq UI88lOTg1FMd9f4+9nsZV2EgZofyU0opD0T9rEXhxcuPUVfIL+E1mCIPXgaPae9V N3zylfxfEeGXiPtCvwkV5+wpHxziVNrhPcnPPtwuw3gcbzKn900lwYI0VQ7MbUJs 3HsHGSE6vTr5dtzNLYDXvEVjWx6LTHfWdN/e9zN3I2wJWlLGP8iYJSlP10UrMmGT pfDQtEe4mNgUUldEvyZSe4elFg4NnmFRwUEF+GlJgWnCHP5xgmCVNEInFrs687En 3KudV0gsrezOLQaEzQAMe3dhfr0/P5Bfjl3znlLas5Oug1NEkqOJNBFfkxHAyc5G lfx+kQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:09 2025 by rpki-client on console.sobornost.net