$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.cer File: 6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.cer (raw, json) Hash identifier: jkGoYwl+Ylh4+t2pjErXb0P2snKGOU+0L3VjfoLV2P8= Subject key identifier: 6A:23:CA:B2:BE:FE:4D:19:6A:27:73:07:FF:D8:F5:BF:1D:E7:2C:13 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 153F180519BB2D5E8AB5D58E9D756E2CB45964D9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.mft caRepository: rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Feb 2025 23:04:57 +0000 Certificate not after: Thu 26 Feb 2026 23:09:57 +0000 Subordinate resources: AS: 28654 IP: 187.73.160.0/20 IP: 201.77.128.0/20 IP: 2804:95c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3f:18:05:19:bb:2d:5e:8a:b5:d5:8e:9d:75:6e:2c:b4:59:64:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 27 23:04:57 2025 GMT Not After : Feb 26 23:09:57 2026 GMT Subject: CN=6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:b2:c0:6b:6d:33:bf:02:e1:2d:4c:e9:c9: 5f:46:88:64:5b:6d:ad:e6:82:c4:d5:8a:76:df:2e: ad:a5:be:cc:c7:9e:09:2e:49:7f:7d:b1:73:44:9c: e7:11:f6:49:67:50:90:ef:97:c5:4a:c7:49:99:17: e5:10:74:cc:d9:b4:43:ed:1f:8e:51:16:ed:8b:a7: 6a:bd:23:f4:87:ef:5a:27:9d:38:a3:af:4d:54:4f: 15:d3:ee:24:d5:e7:7d:84:ac:0c:54:ce:94:5b:93: 3d:da:a8:15:cd:d8:ae:63:f7:22:48:bd:27:60:a6: 3c:83:03:cf:02:1f:91:63:2d:62:c4:c9:9b:ad:36: 36:e5:05:4f:04:73:61:0a:73:e3:60:26:d0:4f:95: 60:35:1e:8f:cf:09:bb:13:21:fd:75:40:ca:c1:b1: 83:40:39:6e:d0:58:a3:8e:00:e5:e8:aa:92:fd:39: d0:84:c3:3f:be:ac:2a:b9:ad:5e:76:b1:d7:74:27: 57:79:e3:7e:e6:a5:a9:3e:cf:be:17:14:4d:32:6f: 22:bc:56:d3:7e:e7:6b:d7:9e:aa:22:34:0f:d4:a4: bc:eb:00:5c:e0:88:66:f4:e7:bc:b1:5f:24:44:c5: 40:b5:d8:66:cf:0a:04:57:72:fd:82:b6:6a:cc:72: fe:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:23:CA:B2:BE:FE:4D:19:6A:27:73:07:FF:D8:F5:BF:1D:E7:2C:13 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/6A23CAB2BEFE4D196A277307FFD8F5BF1DE72C13.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.73.160.0/20 201.77.128.0/20 IPv6: 2804:95c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28654 Signature Algorithm: sha256WithRSAEncryption b5:5b:5c:52:a7:2a:9d:2c:e7:0e:c2:a0:29:38:91:8e:68:90: a7:fd:f3:fb:27:d4:44:25:76:eb:d1:6b:e3:37:05:a7:e1:7c: 00:50:0e:1f:4f:4e:5a:ff:5a:2c:6c:e8:be:0d:4a:95:19:a0: aa:15:a4:7b:7d:f2:62:b8:20:74:13:6d:db:1f:31:63:fe:9c: dd:81:e9:1c:41:a6:ec:71:f8:72:86:cd:b4:0d:08:6c:77:b3: f7:83:42:3a:b0:cc:35:31:20:46:9a:ca:7f:33:ca:89:0c:60: e4:f8:1d:33:1d:08:5e:85:06:b1:ca:7e:3b:9b:dd:19:90:d5: 33:bc:06:10:6d:c2:9b:c7:a0:de:5f:49:0e:7c:87:84:2c:da: ec:3d:df:b0:41:f4:cc:1f:22:54:e8:05:df:14:0f:30:76:6a: 21:81:1b:78:35:ad:0b:c5:af:68:da:d2:74:64:1e:f4:c7:6b: bb:b5:d5:c2:9d:72:39:ca:0f:03:ed:d1:f9:79:cd:57:5f:c3: 1e:f3:8e:90:31:5f:69:95:25:b3:97:a0:7d:36:21:19:f1:f0: df:9b:c9:90:4a:c0:06:46:46:58:42:ca:b2:a9:27:c0:b3:88: 72:da:3f:8c:b4:21:94:6d:14:b2:8f:7b:cb:ce:5b:09:b7:1a: 8c:bb:f8:f3 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUFT8YBRm7LV6KtdWOnXVuLLRZZNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjcyMzA0NTdaFw0yNjAyMjYyMzA5NTdaMDMxMTAvBgNV BAMTKDZBMjNDQUIyQkVGRTREMTk2QTI3NzMwN0ZGRDhGNUJGMURFNzJDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIbLAa20zvwLhLUzpyV9GiGRb ba3mgsTVinbfLq2lvszHngkuSX99sXNEnOcR9klnUJDvl8VKx0mZF+UQdMzZtEPt H45RFu2Lp2q9I/SH71onnTijr01UTxXT7iTV532ErAxUzpRbkz3aqBXN2K5j9yJI vSdgpjyDA88CH5FjLWLEyZutNjblBU8Ec2EKc+NgJtBPlWA1Ho/PCbsTIf11QMrB sYNAOW7QWKOOAOXoqpL9OdCEwz++rCq5rV52sdd0J1d5437mpak+z74XFE0ybyK8 VtN+52vXnqoiNA/UpLzrAFzgiGb057yxXyRExUC12GbPCgRXcv2CtmrMcv5LAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRqI8qyvv5NGWon cwf/2PW/HecsEzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFBQ RWR4Y2ZoYUdHM0ZvejNqTXRqRU5QZkc5S25RNUoyRjVzQkpMZXhYNEovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRQ UEVkeGNmaGFHRzNGb3ozak10akVOUGZHOUtuUTVKMkY1c0JKTGV4WDRKLzAvNkEy M0NBQjJCRUZFNEQxOTZBMjc3MzA3RkZEOEY1QkYxREU3MkMxMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEu0mgAwQEyU2AMA0EAgACMAcDBQAoBAlcMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm/uMA0GCSqGSIb3DQEBCwUAA4IBAQC1W1xSpyqd LOcOwqApOJGOaJCn/fP7J9REJXbr0WvjNwWn4XwAUA4fT05a/1osbOi+DUqVGaCq FaR7ffJiuCB0E23bHzFj/pzdgekcQabscfhyhs20DQhsd7P3g0I6sMw1MSBGmsp/ M8qJDGDk+B0zHQhehQaxyn47m90ZkNUzvAYQbcKbx6DeX0kOfIeELNrsPd+wQfTM HyJU6AXfFA8wdmohgRt4Na0Lxa9o2tJ0ZB70x2u7tdXCnXI5yg8D7dH5ec1XX8Me 846QMV9plSWzl6B9NiEZ8fDfm8mQSsAGRkZYQsqyqSfAs4hy2j+MtCGUbRSyj3vL zlsJtxqMu/jz -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:25 2025 by rpki-client on console.sobornost.net