$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer File: 701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer (raw, json) Hash identifier: EWBYkNZ693QbaQp3/9098QO44aYHns9cg7VXdoZocTo= Subject key identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 592A0B01362D428981640888A7C71B992FAC0DFF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft caRepository: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:52 +0000 Certificate not after: Wed 04 Mar 2026 18:40:52 +0000 Subordinate resources: AS: 263849 IP: 138.185.200.0/22 IP: 2804:26b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2a:0b:01:36:2d:42:89:81:64:08:88:a7:c7:1b:99:2f:ac:0d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:52 2025 GMT Not After : Mar 4 18:40:52 2026 GMT Subject: CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:ed:47:b8:fb:ff:c4:3f:b7:6b:9a:cd:f0: 73:cb:2a:d4:2a:69:e5:84:f9:50:ee:56:9e:fc:d1: c6:2b:d2:d1:d9:87:1f:20:ae:01:5b:a9:69:7b:73: 3c:0c:df:1a:9f:c6:cd:ba:6f:7c:ed:d4:ef:0d:57: 7d:6d:17:86:43:c0:ff:49:02:d3:5f:be:46:13:6f: 82:44:68:6f:52:f5:7d:55:e0:d6:ad:d5:00:65:d1: e8:49:d1:8e:5b:b8:3d:98:9d:5c:3e:25:47:ba:7b: a9:22:20:cd:88:bf:cb:03:20:00:63:8d:c6:34:a1: 39:d1:6a:d6:14:84:72:69:58:ee:b1:bc:03:6a:b7: a0:f0:2c:71:c4:f9:46:04:20:86:cc:06:ad:8a:5b: ac:1a:81:67:bc:98:96:73:71:0d:32:2e:8c:83:9d: b3:4f:36:b7:f9:b7:37:6c:6f:41:bf:d5:7e:d9:1a: c5:55:5c:47:fe:9e:5f:b7:12:5e:72:c4:fe:fe:67: 40:24:93:d6:d3:0f:9a:bc:8b:95:b8:96:a5:d5:27: f6:ce:33:1d:fd:b9:87:f0:f7:85:66:10:da:4e:cd: f8:55:9c:91:bd:bc:06:8e:55:cc:aa:6b:af:f8:33: 8b:03:05:a5:dd:d2:82:36:2e:44:58:99:33:9d:4a: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.200.0/22 IPv6: 2804:26b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263849 Signature Algorithm: sha256WithRSAEncryption 9f:d9:9c:2f:33:9a:e7:b2:07:19:a3:2e:50:5a:05:15:3e:91: f1:68:83:0d:d3:14:0c:52:d6:6b:52:02:24:d4:8a:85:8b:d6: 57:ef:fd:f1:25:9e:4c:a2:42:67:e3:08:a5:1e:bd:e3:11:de: 6d:55:4a:80:ce:7b:d2:bc:34:a4:c4:5b:1b:1e:86:cd:48:69: d9:40:5d:c2:68:87:66:50:c6:0a:8b:d5:a8:a8:b4:37:e7:0a: eb:22:b8:6d:f3:bd:6d:24:f4:f7:e6:94:36:2a:e9:91:f3:fe: b6:43:92:c7:0b:fe:55:87:ed:62:58:1e:86:c7:28:74:00:55: a4:ed:a6:c0:e9:38:1e:3f:38:0e:b6:ec:70:bd:6c:aa:6d:38: 3e:8b:f9:68:ab:c8:07:29:a3:c4:34:bc:03:18:ab:93:8c:1a: 60:32:58:8f:87:27:19:86:bd:1c:f4:e4:9e:d5:b2:38:f2:18: bd:60:f5:cf:a5:50:d6:f2:00:48:0a:b4:97:4f:2b:4e:d1:ea: e8:52:4c:08:15:4f:e2:4a:99:03:11:91:fa:d2:d7:30:9a:5e: c7:1f:74:34:59:52:05:f8:35:e3:c8:d6:10:34:ab:fb:de:4a: cd:ec:a9:ac:e9:af:bd:27:4e:dc:f1:8c:55:bd:70:a5:21:ce: fd:78:d3:80 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUWSoLATYtQomBZAiIp8cbmS+sDf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NTJaFw0yNjAzMDQxODQwNTJaMDMxMTAvBgNV BAMTKDcwMUNBOUREMjRGRTZCQkU5Q0ZGQ0UzRjBBREJDNjY0QTEyMTU3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvO1HuPv/xD+3a5rN8HPLKtQq aeWE+VDuVp780cYr0tHZhx8grgFbqWl7czwM3xqfxs26b3zt1O8NV31tF4ZDwP9J AtNfvkYTb4JEaG9S9X1V4Nat1QBl0ehJ0Y5buD2YnVw+JUe6e6kiIM2Iv8sDIABj jcY0oTnRatYUhHJpWO6xvANqt6DwLHHE+UYEIIbMBq2KW6wagWe8mJZzcQ0yLoyD nbNPNrf5tzdsb0G/1X7ZGsVVXEf+nl+3El5yxP7+Z0Akk9bTD5q8i5W4lqXVJ/bO Mx39uYfw94VmENpOzfhVnJG9vAaOVcyqa6/4M4sDBaXd0oI2LkRYmTOdSuA5AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwHKndJP5rvpz/ zj8K28ZkoSFXGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWY5 VE1yNURVU24yUXNNYmNaWWthOVpQTVc3dEt3MVFMMUxrY0FFd1lYMzgvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWY5 VE1yNURVU24yUXNNYmNaWWthOVpQTVc3dEt3MVFMMUxrY0FFd1lYMzgvMS83MDFD QTlERDI0RkU2QkJFOUNGRkNFM0YwQURCQzY2NEExMjE1NzFBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKucgwDQQCAAIwBwMFACgEJrAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAapMA0GCSqGSIb3DQEBCwUAA4IBAQCf2ZwvM5rnsgcZoy5Q WgUVPpHxaIMN0xQMUtZrUgIk1IqFi9ZX7/3xJZ5MokJn4wilHr3jEd5tVUqAznvS vDSkxFsbHobNSGnZQF3CaIdmUMYKi9WoqLQ35wrrIrht871tJPT35pQ2KumR8/62 Q5LHC/5Vh+1iWB6Gxyh0AFWk7abA6TgePzgOtuxwvWyqbTg+i/loq8gHKaPENLwD GKuTjBpgMliPhycZhr0c9OSe1bI48hi9YPXPpVDW8gBICrSXTytO0eroUkwIFU/i SpkDEZH60tcwml7HH3Q0WVIF+DXjyNYQNKv73krN7Kms6a+9J07c8YxVvXClIc79 eNOA -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:11 2025 by rpki-client on console.sobornost.net