$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer File: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer (raw, json) Hash identifier: kE/JUgSmwhbcG6YO1MOcZuYtE1UD2rfV6dHcMm+kIb0= Subject key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1872D80CF2FDF16A1DE9C2CB1ADF6751CD2093E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft caRepository: rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 23:34:18 +0000 Certificate not after: Thu 05 Mar 2026 23:39:18 +0000 Subordinate resources: AS: 270340 IP: 190.83.84.0/22 IP: 2804:6a80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:72:d8:0c:f2:fd:f1:6a:1d:e9:c2:cb:1a:df:67:51:cd:20:93:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 23:34:18 2025 GMT Not After : Mar 5 23:39:18 2026 GMT Subject: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:19:4d:7d:87:a2:c1:6f:f4:6a:05:71:ab: f2:8d:43:6a:f9:f6:e3:db:3b:b3:2b:b9:72:2d:cb: ce:ba:26:19:28:e4:9a:a7:19:ed:c5:26:96:02:66: 63:94:15:b4:2c:77:10:2c:6a:7c:4d:3a:f4:c9:25: 2b:60:f7:77:af:af:9a:95:3a:3b:14:3a:d3:92:6e: 7c:78:35:85:d8:ed:34:b7:51:ca:cd:74:c7:d3:e1: ce:26:31:d6:d2:ca:8b:5d:9b:02:44:bb:41:82:be: af:de:a4:64:a2:ba:8c:f3:01:dc:84:32:0b:cb:29: f0:97:a6:1b:78:19:2c:f1:a9:af:c5:c2:14:cf:0c: bc:11:12:8f:12:4f:fb:95:6b:a1:2b:ec:89:f1:f5: 58:2c:53:fc:68:44:b0:18:b5:d9:01:e2:c1:c5:9c: 46:ed:6e:69:d3:47:7e:60:10:3c:b9:9f:61:1a:8b: f3:1f:38:14:64:e3:6e:cc:37:03:33:7d:a2:e5:3f: 0a:ce:99:44:69:84:76:82:60:25:bb:dd:5b:97:50: a9:61:0e:e3:46:57:94:eb:c3:cb:5f:98:f4:63:f2: 17:bc:39:fd:0a:b8:f1:5a:14:bb:b3:6a:e6:fc:b8: 0d:12:40:6b:dd:8e:71:3e:5e:64:6f:6d:8c:25:d6: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.83.84.0/22 IPv6: 2804:6a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270340 Signature Algorithm: sha256WithRSAEncryption ab:28:40:68:3e:0f:0f:a5:ef:e1:bd:2c:d9:40:88:ab:79:f9: bd:f5:84:f2:e3:a5:31:60:a6:c8:d0:39:fa:7e:ed:48:c2:32: 8c:43:26:38:33:d7:ab:55:b1:4c:b5:57:c1:6a:1c:43:0e:e8: 91:95:26:a0:58:eb:45:ef:88:91:9c:30:25:49:52:26:15:5d: 59:db:bc:3a:42:f7:97:ba:76:56:4a:64:83:26:ef:f9:94:3d: 51:b5:87:d0:97:19:23:16:df:d3:28:9c:61:0f:7f:90:53:30: 1f:49:21:32:3b:f2:55:64:6e:3c:9a:78:5f:e8:be:1b:a9:cd: 50:0f:14:18:ea:10:1f:af:ec:d7:3d:24:3a:dc:ca:d4:e5:55: 3b:88:ae:5a:da:4f:b2:f9:4b:14:2d:0b:ef:9f:a7:12:d0:96: 5e:4a:a1:26:72:bc:16:d2:a0:8a:ea:89:a9:a5:2d:29:b8:93: 65:01:a0:9e:7b:2e:7b:48:69:21:d1:07:df:cc:8e:26:72:b3: 2e:62:e3:e1:9e:ae:c6:1b:d4:76:9b:35:7e:32:f6:ab:25:a6: 38:30:83:7c:71:72:27:a4:e0:9c:39:4f:9e:4c:ae:4e:ed:9d: 21:77:e6:91:5d:25:6a:c7:3c:90:79:ed:96:cf:23:05:10:1b: 41:60:13:20 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGHLYDPL98Wod6cLLGt9nUc0gk+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMzM0MThaFw0yNjAzMDUyMzM5MThaMDMxMTAvBgNV BAMTKDcxQTM0RThERjAwOTY1Q0EyMUMxQUE0RTNDMzdBQzJBMzExOUE4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7BlNfYeiwW/0agVxq/KNQ2r5 9uPbO7MruXIty866Jhko5JqnGe3FJpYCZmOUFbQsdxAsanxNOvTJJStg93evr5qV OjsUOtOSbnx4NYXY7TS3UcrNdMfT4c4mMdbSyotdmwJEu0GCvq/epGSiuozzAdyE MgvLKfCXpht4GSzxqa/FwhTPDLwREo8ST/uVa6Er7Inx9VgsU/xoRLAYtdkB4sHF nEbtbmnTR35gEDy5n2Eai/MfOBRk427MNwMzfaLlPwrOmURphHaCYCW73VuXUKlh DuNGV5Trw8tfmPRj8he8Of0KuPFaFLuzaub8uA0SQGvdjnE+XmRvbYwl1n15AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxo06N8AllyiHB qk48N6wqMRmorzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0hM Q1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29iY2MvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNI TENTMUU0UHgxR3YzUFQxcFFrcjNydUVDRVFxUlBDUTNaYzRncENvYmNjLzEvNzFB MzRFOERGMDA5NjVDQTIxQzFBQTRFM0MzN0FDMkEzMTE5QThBRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvlNUMA0EAgACMAcDBQAoBGqAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgBDANBgkqhkiG9w0BAQsFAAOCAQEAqyhAaD4PD6Xv4b0s 2UCIq3n5vfWE8uOlMWCmyNA5+n7tSMIyjEMmODPXq1WxTLVXwWocQw7okZUmoFjr Re+IkZwwJUlSJhVdWdu8OkL3l7p2Vkpkgybv+ZQ9UbWH0JcZIxbf0yicYQ9/kFMw H0khMjvyVWRuPJp4X+i+G6nNUA8UGOoQH6/s1z0kOtzK1OVVO4iuWtpPsvlLFC0L 75+nEtCWXkqhJnK8FtKgiuqJqaUtKbiTZQGgnnsue0hpIdEH38yOJnKzLmLj4Z6u xhvUdps1fjL2qyWmODCDfHFyJ6TgnDlPnkyuTu2dIXfmkV0lasc8kHntls8jBRAb QWATIA== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:06 2025 by rpki-client on console.sobornost.net