$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer File: 72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer (raw, json) Hash identifier: CRFYPNyvpS6RknRNKiYgqGn0gdkk6aLHD3SQoWL79nU= Subject key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3125C7244C4DA03981E4768F2E8DFA8D4B4F663C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft caRepository: rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Apr 2025 11:28:14 +0000 Certificate not after: Wed 22 Apr 2026 11:33:14 +0000 Subordinate resources: AS: 53225 IP: 177.137.16.0/20 IP: 186.251.128.0/20 IP: 2804:644::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:25:c7:24:4c:4d:a0:39:81:e4:76:8f:2e:8d:fa:8d:4b:4f:66:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 23 11:28:14 2025 GMT Not After : Apr 22 11:33:14 2026 GMT Subject: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5e:f4:ea:33:f2:07:5d:a9:ce:8c:19:4c:be: a9:e7:c6:38:cc:17:73:6c:bb:15:68:fb:3b:29:72: 1c:8d:82:3e:7d:dc:1c:7a:27:0d:12:18:e9:12:09: 1e:88:5f:51:d4:5e:b1:6e:c8:76:0b:14:2a:8a:26: cd:35:e6:6d:fe:55:46:8c:83:d4:44:f5:9e:b3:d1: 04:74:9e:c2:e6:ae:82:df:96:47:ac:92:c9:39:52: 89:91:21:a4:4d:66:ba:49:43:6d:1e:bd:d7:6e:dd: 79:d1:27:7e:22:2f:b2:e1:cb:dc:0d:48:43:ea:3d: 16:fa:cb:8c:71:50:7a:0d:9c:ed:7c:40:de:fb:8c: 4f:f3:38:83:7d:20:44:9f:ca:9c:8c:5a:c1:95:92: a0:fe:f8:7c:72:10:4b:03:68:2a:6d:3a:f5:06:86: 82:48:b7:9b:60:87:fa:e1:e8:a7:2f:3f:a3:37:2e: 8c:3e:0b:cc:cb:8d:13:8a:e8:02:fa:fb:6f:75:7e: 10:fb:4d:a5:2e:f9:3c:d7:c8:c1:8c:28:67:c6:91: 72:74:84:da:be:6f:60:9f:db:ca:93:7c:95:4b:cd: 8c:6f:61:50:8e:da:b2:1f:6c:ba:28:78:ac:15:aa: 6f:7f:43:06:0f:6d:68:6b:ee:4b:9b:58:bf:23:cf: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.137.16.0/20 186.251.128.0/20 IPv6: 2804:644::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53225 Signature Algorithm: sha256WithRSAEncryption 7b:9a:6b:24:20:89:24:5d:dc:83:ff:5f:fa:3d:83:1e:3d:de: 85:cb:eb:4d:e0:13:12:85:b8:fe:5d:2f:33:71:91:a4:d2:f7: 17:05:67:ce:bf:cf:d5:78:00:1c:b4:77:98:e4:69:7c:2b:95: 0f:ca:80:44:f8:35:f4:ba:e0:f6:a3:c0:10:46:23:bf:55:ff: ae:db:8b:9a:70:70:67:d9:c1:92:ba:15:32:6a:4f:9e:ec:3d: 13:6d:7f:59:d6:2e:32:bd:51:9d:97:4e:4b:f8:5b:a2:ad:60: 98:12:d7:6f:9c:77:ca:ea:b8:42:7a:53:f6:23:02:45:a2:32: 99:a2:b6:6a:96:6e:25:fe:b8:1d:77:8c:e7:c9:12:d3:18:20: 4e:39:a4:36:d9:6e:44:de:d9:1f:84:67:bf:fe:13:1c:ca:19: 70:e2:76:fe:4f:fc:22:50:21:ad:65:db:a3:56:fb:07:b3:ea: 44:b5:1a:2b:42:12:33:50:58:e1:1d:e2:68:fb:26:19:1b:99: 99:c3:d1:0e:2c:00:00:1d:34:63:ca:da:2a:d8:f2:d7:be:60: 39:b6:bf:19:7f:c2:93:9b:48:16:bf:d6:91:ea:38:0f:19:db: 2d:f1:9a:b0:a1:5b:b4:40:24:fb:03:9f:31:6c:f7:ce:74:55: 44:30:ae:06 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMSXHJExNoDmB5HaPLo36jUtPZjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjMxMTI4MTRaFw0yNjA0MjIxMTMzMTRaMDMxMTAvBgNV BAMTKDcyRDIxNTY1QzBBNTA4RkMyQkRFQTc3NjhEMEY0QUVGRDZDRDE5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOXvTqM/IHXanOjBlMvqnnxjjM F3NsuxVo+zspchyNgj593Bx6Jw0SGOkSCR6IX1HUXrFuyHYLFCqKJs015m3+VUaM g9RE9Z6z0QR0nsLmroLflkesksk5UomRIaRNZrpJQ20evddu3XnRJ34iL7Lhy9wN SEPqPRb6y4xxUHoNnO18QN77jE/zOIN9IESfypyMWsGVkqD++HxyEEsDaCptOvUG hoJIt5tgh/rh6KcvP6M3Low+C8zLjROK6AL6+291fhD7TaUu+TzXyMGMKGfGkXJ0 hNq+b2Cf28qTfJVLzYxvYVCO2rIfbLooeKwVqm9/QwYPbWhr7kubWL8jz42PAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRy0hVlwKUI/Cve p3aND0rv1s0Z8TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlNm b2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZTUFEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZT Zm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzAvNzJE MjE1NjVDMEE1MDhGQzJCREVBNzc2OEQwRjRBRUZENkNEMTlGMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsYkQAwQEuvuAMA0EAgACMAcDBQAoBAZEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDP6TANBgkqhkiG9w0BAQsFAAOCAQEAe5prJCCJ JF3cg/9f+j2DHj3ehcvrTeATEoW4/l0vM3GRpNL3FwVnzr/P1XgAHLR3mORpfCuV D8qARPg19Lrg9qPAEEYjv1X/rtuLmnBwZ9nBkroVMmpPnuw9E21/WdYuMr1RnZdO S/hboq1gmBLXb5x3yuq4QnpT9iMCRaIymaK2apZuJf64HXeM58kS0xggTjmkNtlu RN7ZH4Rnv/4THMoZcOJ2/k/8IlAhrWXbo1b7B7PqRLUaK0ISM1BY4R3iaPsmGRuZ mcPRDiwAAB00Y8raKtjy175gOba/GX/Ck5tIFr/Wkeo4DxnbLfGasKFbtEAk+wOf MWz3znRVRDCuBg== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:06 2025 by rpki-client on console.sobornost.net