$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer File: 78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer (raw, json) Hash identifier: fV2TSfN5WpIOCAhsWXFb4l5/7CP6qGXmKn8Sq4daI2A= Subject key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4C318242E4257FDE66227F0FDC98B5E4372B4581 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft caRepository: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 21 Apr 2025 13:11:10 +0000 Certificate not after: Mon 20 Apr 2026 13:16:10 +0000 Subordinate resources: AS: 266986 IP: 45.226.40.0/22 IP: 200.229.92.0/22 IP: 2804:4660::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:31:82:42:e4:25:7f:de:66:22:7f:0f:dc:98:b5:e4:37:2b:45:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 21 13:11:10 2025 GMT Not After : Apr 20 13:16:10 2026 GMT Subject: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:f2:1c:f3:43:b9:39:d2:e0:31:ce:d5:b1: 19:d6:fb:62:f5:a1:8b:50:89:9c:c0:69:5d:59:16: 1b:96:c2:26:91:68:08:d2:c8:b5:b1:5e:5e:af:9b: 9c:9e:8a:99:82:6b:30:7a:04:d7:6e:f8:38:2e:5d: e6:66:1e:7d:8b:a8:c6:b1:cc:94:48:e3:9a:04:87: 49:fe:94:6a:f3:8e:8f:7e:65:af:6b:a4:0d:52:01: ef:da:75:ea:ad:ce:87:d8:0f:5e:8b:37:75:bb:41: a3:50:f3:d2:ed:8f:74:bd:21:0c:1c:11:fc:09:01: 78:71:15:c3:ac:0a:5b:dd:75:34:21:40:d8:c0:5e: d9:79:2d:85:31:25:f2:af:e0:c5:48:e5:4b:93:26: f0:3f:0f:8f:70:7b:b8:dd:c9:63:86:fb:97:91:67: d3:d1:47:6e:a2:47:a8:7b:06:9c:16:08:89:35:5b: f0:af:37:2d:dd:8e:1e:c7:bc:4b:56:9c:8f:4a:3f: b5:7d:0d:93:1f:f2:a6:a9:a4:dc:30:1d:f9:dc:69: d0:70:b5:e8:6b:0b:5a:8a:8e:9d:1a:c5:e8:5c:56: 59:d4:a1:2b:61:26:3c:19:d8:53:1a:b4:53:06:c8: aa:32:3c:99:0e:e2:d4:ec:af:c2:42:13:b9:03:dc: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.40.0/22 200.229.92.0/22 IPv6: 2804:4660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266986 Signature Algorithm: sha256WithRSAEncryption 86:28:b1:99:a4:bc:8c:e9:34:8a:11:be:d7:b8:06:ab:ec:71: 22:35:cd:1c:e2:cc:01:ee:02:ff:da:b2:41:20:f8:73:43:0c: a3:2b:60:ba:27:b5:71:ff:1c:75:60:72:15:c9:78:4a:28:af: e1:c8:0c:a3:96:fb:ca:53:75:f7:0f:10:44:28:41:92:d7:23: aa:33:16:dc:0c:de:0e:40:7f:21:ee:ec:94:54:40:5c:17:6b: 22:25:84:12:27:04:10:df:e8:7f:29:ec:43:e9:48:df:d8:2d: 69:ef:a4:a9:56:a0:f8:7d:18:e0:eb:4b:28:13:29:12:87:69: aa:8a:04:8c:99:ad:4b:ff:97:f3:7d:17:8f:8d:b8:74:79:f1: 0b:ce:68:7b:60:65:7c:a7:8e:a7:93:87:c6:d3:54:6f:4f:9c: 47:3b:e3:37:6d:22:7f:7b:1a:8e:49:dd:c3:e3:d0:e5:10:b9: a3:19:f2:70:bb:7b:ab:6b:ee:b6:30:1f:ca:d3:ae:30:c6:6b: 93:0c:a9:30:7c:bb:1a:08:15:c0:8b:19:31:a6:b3:ed:06:71: 06:9b:72:1e:0f:63:4c:85:48:ac:91:93:61:de:9f:10:07:ac: 5a:9e:75:90:d7:3f:49:e0:69:88:16:7a:f2:c4:ab:a1:3b:7a: e7:4e:b5:aa -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUTDGCQuQlf95mIn8P3Ji15DcrRYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjExMzExMTBaFw0yNjA0MjAxMzE2MTBaMDMxMTAvBgNV BAMTKDc4QzMxRjg1Q0Y4QjZBODQxOEZBRDI1QTU1RjU5NDJGM0JBQ0RFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXfIc80O5OdLgMc7VsRnW+2L1 oYtQiZzAaV1ZFhuWwiaRaAjSyLWxXl6vm5yeipmCazB6BNdu+DguXeZmHn2LqMax zJRI45oEh0n+lGrzjo9+Za9rpA1SAe/adeqtzofYD16LN3W7QaNQ89Ltj3S9IQwc EfwJAXhxFcOsClvddTQhQNjAXtl5LYUxJfKv4MVI5UuTJvA/D49we7jdyWOG+5eR Z9PRR26iR6h7BpwWCIk1W/CvNy3djh7HvEtWnI9KP7V9DZMf8qappNwwHfncadBw tehrC1qKjp0axehcVlnUoSthJjwZ2FMatFMGyKoyPJkO4tTsr8JCE7kD3Ed1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4wx+Fz4tqhBj6 0lpV9ZQvO6zeDTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzhl Vlh2bUdvaG9iMWtBR1RpYUpEVUQxVVpuU1BFbTFtM1VkUTJ2cERBb1UvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M4 ZVZYdm1Hb2hvYjFrQUdUaWFKRFVEMVVablNQRW0xbTNVZFEydnBEQW9VLzEvNzhD MzFGODVDRjhCNkE4NDE4RkFEMjVBNTVGNTk0MkYzQkFDREUwRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeIoAwQCyOVcMA0EAgACMAcDBQAoBEZgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQS6jANBgkqhkiG9w0BAQsFAAOCAQEAhiixmaS8 jOk0ihG+17gGq+xxIjXNHOLMAe4C/9qyQSD4c0MMoytguie1cf8cdWByFcl4Siiv 4cgMo5b7ylN19w8QRChBktcjqjMW3AzeDkB/Ie7slFRAXBdrIiWEEicEEN/ofyns Q+lI39gtae+kqVag+H0Y4OtLKBMpEodpqooEjJmtS/+X830Xj424dHnxC85oe2Bl fKeOp5OHxtNUb0+cRzvjN20if3sajkndw+PQ5RC5oxnycLt7q2vutjAfytOuMMZr kwypMHy7GggVwIsZMaaz7QZxBptyHg9jTIVIrJGTYd6fEAesWp51kNc/SeBpiBZ6 8sSroTt65061qg== -----END CERTIFICATE-----Generated at Fri Apr 25 10:37:38 2025 by rpki-client on console.sobornost.net