$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer File: 6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.cer (raw, json) Hash identifier: DmQn4KiHRBPDfq0dvEe7oht2TbeptCfeNuDcXoBiLKQ= Subject key identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2DFA6EF2E4A395FF0E541EEBDEE0F3C64419038A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft caRepository: rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 05:10:05 +0000 Certificate not after: Fri 06 Mar 2026 05:15:05 +0000 Subordinate resources: AS: 263078 IP: 170.244.132.0/22 IP: 186.233.168.0/22 IP: 2804:960::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fa:6e:f2:e4:a3:95:ff:0e:54:1e:eb:de:e0:f3:c6:44:19:03:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 05:10:05 2025 GMT Not After : Mar 6 05:15:05 2026 GMT Subject: CN=6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:78:dc:0b:0d:f0:54:df:59:31:48:e3:23: 78:b5:d0:45:76:de:a2:f4:1c:c8:a3:62:5e:ee:5d: ec:dd:e0:59:96:ff:4c:fe:66:da:fb:5d:5d:53:4f: e3:03:48:ad:17:d3:84:5a:ae:5e:0b:58:73:92:4d: 53:67:31:e2:29:97:c1:5c:98:83:4c:45:ce:42:9a: 8a:a3:24:2c:64:a8:d2:5f:75:51:64:09:07:65:75: ee:78:a2:44:d2:98:bb:17:c5:62:3e:10:c2:a4:d5: c4:95:5e:b5:8f:b7:11:06:9d:2d:49:17:b0:25:dd: 29:21:1e:a8:a7:b0:c1:28:fd:b3:a2:2c:a1:cf:ee: 21:5d:3b:1a:b0:9f:64:96:da:b7:a9:25:72:9c:e2: 6f:22:85:cd:14:ce:7b:9f:5b:04:33:e1:f3:2c:35: 47:f9:ad:ac:b4:a1:9b:e7:dc:26:c4:28:d9:f1:46: f2:3d:bb:d1:08:d2:f5:a8:63:5a:f2:d4:4d:d4:13: 7c:32:69:e6:b3:c2:fa:cf:ed:6b:1e:4b:4c:a6:b7: d3:76:6a:b4:b9:a5:2b:d9:27:2f:ef:e3:bc:14:20: e8:95:55:4f:89:05:d8:93:40:be:2a:08:be:1a:3d: 0c:58:83:57:80:5c:0b:a3:d6:de:62:36:95:75:0e: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:27:B1:96:7A:21:FD:A5:DE:37:AB:7C:FA:6D:85:CD:47:B0:A1:BB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/1/6F27B1967A21FDA5DE37AB7CFA6D85CD47B0A1BB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.132.0/22 186.233.168.0/22 IPv6: 2804:960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263078 Signature Algorithm: sha256WithRSAEncryption 34:9f:96:eb:ac:f3:21:ed:37:86:1c:11:1c:77:aa:d5:68:b2: 26:a0:52:3f:2e:68:18:1d:29:79:85:8d:36:a9:44:88:bb:88: 52:f4:69:43:41:f2:eb:3d:d3:ad:da:92:93:0c:ec:bf:0c:42: 64:e9:9b:f9:fd:74:43:99:ed:1e:bd:eb:f4:95:58:c2:54:cf: 9c:5b:e9:cd:f9:8e:5b:15:25:e7:f8:f3:0c:f3:f0:11:52:7f: b5:c7:32:16:e1:17:db:f0:0f:42:4c:d2:17:b5:52:f4:7b:2f: a2:62:34:a9:6b:28:94:87:a2:4b:1a:65:48:c9:5c:c9:92:5d: 83:94:df:20:fc:75:d8:56:f3:23:1a:1e:39:7d:84:46:42:2c: c3:84:b8:d9:67:ad:bf:2e:bf:2f:ea:38:a6:47:0f:59:41:0d: 3a:d7:08:e1:17:bb:40:28:b8:b0:4b:f6:7a:7f:cb:1d:23:46: 07:1e:6c:ad:5f:c6:28:05:ba:73:b2:9d:c7:40:49:ab:c9:e5: 04:21:6c:39:52:e9:e4:81:7e:34:8d:0b:d7:3b:9e:cc:0f:13: 3c:c0:95:74:2e:d0:8f:f2:0e:b8:cb:70:05:1e:da:a5:62:bd: 04:6c:11:4e:1e:5b:12:bb:d4:49:2b:b2:fa:b7:2e:51:06:ad: 24:69:11:c2 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIULfpu8uSjlf8OVB7r3uDzxkQZA4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNTEwMDVaFw0yNjAzMDYwNTE1MDVaMDMxMTAvBgNV BAMTKDZGMjdCMTk2N0EyMUZEQTVERTM3QUI3Q0ZBNkQ4NUNENDdCMEExQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+XjcCw3wVN9ZMUjjI3i10EV2 3qL0HMijYl7uXezd4FmW/0z+Ztr7XV1TT+MDSK0X04Rarl4LWHOSTVNnMeIpl8Fc mINMRc5CmoqjJCxkqNJfdVFkCQdlde54okTSmLsXxWI+EMKk1cSVXrWPtxEGnS1J F7Al3SkhHqinsMEo/bOiLKHP7iFdOxqwn2SW2repJXKc4m8ihc0UznufWwQz4fMs NUf5ray0oZvn3CbEKNnxRvI9u9EI0vWoY1ry1E3UE3wyaeazwvrP7WseS0ymt9N2 arS5pSvZJy/v47wUIOiVVU+JBdiTQL4qCL4aPQxYg1eAXAuj1t5iNpV1DiBjAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvJ7GWeiH9pd43 q3z6bYXNR7ChuzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjZI dmF5MkQ0eWZBaXpKN1Z0M3FuM29VeFZ4M1hqQXNHUXVCc3d0SHpQaVQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjZI dmF5MkQ0eWZBaXpKN1Z0M3FuM29VeFZ4M1hqQXNHUXVCc3d0SHpQaVQvMS82RjI3 QjE5NjdBMjFGREE1REUzN0FCN0NGQTZEODVDRDQ3QjBBMUJCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKq9IQDBAK66agwDQQCAAIwBwMFACgECWAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAOmMA0GCSqGSIb3DQEBCwUAA4IBAQA0n5brrPMh 7TeGHBEcd6rVaLImoFI/LmgYHSl5hY02qUSIu4hS9GlDQfLrPdOt2pKTDOy/DEJk 6Zv5/XRDme0evev0lVjCVM+cW+nN+Y5bFSXn+PMM8/ARUn+1xzIW4Rfb8A9CTNIX tVL0ey+iYjSpayiUh6JLGmVIyVzJkl2DlN8g/HXYVvMjGh45fYRGQizDhLjZZ62/ Lr8v6jimRw9ZQQ061wjhF7tAKLiwS/Z6f8sdI0YHHmytX8YoBbpzsp3HQEmryeUE IWw5UunkgX40jQvXO57MDxM8wJV0LtCP8g64y3AFHtqlYr0EbBFOHlsSu9RJK7L6 ty5RBq0kaRHC -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:26 2025 by rpki-client on console.sobornost.net