$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer File: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer (raw, json) Hash identifier: wmafcWdGuZLqS6onshSuIJDWgaQAQ95dv2vApZS4E38= Subject key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 02D5D42FA4B02E90B735160A10947A8962360183 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft caRepository: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 15:00:29 +0000 Certificate not after: Fri 06 Mar 2026 15:05:29 +0000 Subordinate resources: AS: 263004 IP: 143.208.228.0/22 IP: 186.237.16.0/21 IP: 2804:2be4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d5:d4:2f:a4:b0:2e:90:b7:35:16:0a:10:94:7a:89:62:36:01:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 15:00:29 2025 GMT Not After : Mar 6 15:05:29 2026 GMT Subject: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:4b:bb:35:dc:b7:07:aa:7d:d9:ae:4c:90: f4:35:4e:a5:3f:eb:62:15:12:a0:0a:de:5f:af:13: c2:9c:65:dc:3b:4c:e1:5e:af:f3:4b:3e:fb:b3:25: ba:c5:10:f3:7b:5d:55:89:38:0f:57:66:ec:d2:cc: 74:ad:36:bb:35:08:aa:4e:e8:07:8d:77:a6:e3:98: 5e:34:18:1d:b3:77:54:89:35:1e:8e:86:f4:49:8e: b4:61:a4:96:f6:89:18:13:cb:c4:26:37:38:d3:78: c7:67:ce:57:2e:b6:9f:cf:e7:05:c9:5c:1d:0f:f0: d1:42:e8:4d:7f:14:39:39:6b:d6:6a:17:d9:4e:3b: ee:ec:80:bf:4d:d9:61:2a:01:12:16:c2:d4:0b:f4: 49:46:f1:f6:51:52:9c:2a:86:ad:bb:1b:f0:df:44: 1a:f2:d3:ca:3a:94:20:3e:27:2b:b1:c9:07:84:27: 8c:33:16:ba:7f:d5:56:29:26:a8:9b:54:00:9e:b1: 64:04:a4:bc:43:e4:e3:6a:8c:e3:5c:fb:fb:04:48: 22:ff:69:5c:33:a5:9f:2f:00:87:2c:a6:94:f9:e0: 04:d3:a1:64:bd:92:85:6c:2f:df:c4:79:0a:ce:0e: ab:51:a3:ac:9f:ef:4f:be:a8:75:1c:52:db:db:9e: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.228.0/22 186.237.16.0/21 IPv6: 2804:2be4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263004 Signature Algorithm: sha256WithRSAEncryption 0d:eb:aa:45:12:66:5d:b0:86:dc:16:05:70:ec:01:db:70:f0: 63:59:12:8d:a8:0e:d3:ff:15:5f:e6:d4:92:97:fb:26:36:51: 9f:ef:d7:fe:55:e9:28:37:d2:f6:8e:3a:cb:61:49:de:cf:86: 67:a5:c8:69:81:85:ab:9a:45:f9:cc:4e:04:d3:32:5a:db:c0: c7:ab:d6:3e:da:ab:30:15:d5:e3:e4:24:be:a1:3e:80:68:6e: 3f:3b:6a:93:a4:28:7c:df:26:2c:8b:d2:83:28:45:40:31:76: 15:ab:86:a5:ad:e4:1b:09:f5:1e:65:4d:a8:29:67:be:37:bc: bd:02:49:24:35:67:f7:92:97:a3:40:a9:c9:be:aa:90:64:16: 93:5c:6a:74:2d:b6:af:db:b4:1b:7e:6a:2f:54:ee:40:f6:ea: d9:0c:a9:ca:1d:f8:ef:ec:bb:d3:05:1d:7e:bf:d6:01:e8:a2: d4:8d:2f:9a:68:7b:65:99:fe:7b:11:de:a9:eb:04:05:77:fe: 36:4a:d8:1b:a5:4b:ec:0c:73:1f:df:86:62:32:1d:ad:8f:65: 3a:1c:0b:38:12:a1:91:ea:fb:be:fd:43:b8:ae:e8:82:71:25: 7d:d7:26:0d:a9:ca:71:24:fa:ab:ec:9e:9c:01:98:8b:47:d4: 41:7e:a1:1c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAtXUL6SwLpC3NRYKEJR6iWI2AYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNTAwMjlaFw0yNjAzMDYxNTA1MjlaMDMxMTAvBgNV BAMTKDcxRTMzNkFBMUVBREJFNEE2MTA4NjZFREI0MTQxRDM2QTVCNzdDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9Eu7Ndy3B6p92a5MkPQ1TqU/ 62IVEqAK3l+vE8KcZdw7TOFer/NLPvuzJbrFEPN7XVWJOA9XZuzSzHStNrs1CKpO 6AeNd6bjmF40GB2zd1SJNR6OhvRJjrRhpJb2iRgTy8QmNzjTeMdnzlcutp/P5wXJ XB0P8NFC6E1/FDk5a9ZqF9lOO+7sgL9N2WEqARIWwtQL9ElG8fZRUpwqhq27G/Df RBry08o6lCA+JyuxyQeEJ4wzFrp/1VYpJqibVACesWQEpLxD5ONqjONc+/sESCL/ aVwzpZ8vAIcsppT54ATToWS9koVsL9/EeQrODqtRo6yf70++qHUcUtvbnhPLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRx4zaqHq2+SmEI Zu20FB02pbd8UjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUc2 aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5Q3QvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlH Nmh3blhjeG9HVmpOMVlrZlVXcmIzVXloS0FwdEdMOXBZajN3QjlqOUN0LzEvNzFF MzM2QUExRUFEQkU0QTYxMDg2NkVEQjQxNDFEMzZBNUI3N0M1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj9DkAwQDuu0QMA0EAgACMAcDBQAoBCvkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDXDANBgkqhkiG9w0BAQsFAAOCAQEADeuqRRJm XbCG3BYFcOwB23DwY1kSjagO0/8VX+bUkpf7JjZRn+/X/lXpKDfS9o46y2FJ3s+G Z6XIaYGFq5pF+cxOBNMyWtvAx6vWPtqrMBXV4+QkvqE+gGhuPztqk6QofN8mLIvS gyhFQDF2FauGpa3kGwn1HmVNqClnvje8vQJJJDVn95KXo0Cpyb6qkGQWk1xqdC22 r9u0G35qL1TuQPbq2Qypyh347+y70wUdfr/WAeii1I0vmmh7ZZn+exHeqesEBXf+ NkrYG6VL7AxzH9+GYjIdrY9lOhwLOBKhker7vv1DuK7ognElfdcmDanKcST6q+ye nAGYi0fUQX6hHA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:34:47 2025 by rpki-client on console.sobornost.net