$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer File: 7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer (raw, json) Hash identifier: mRQwVP8IxE+wRZcIncdGvJX/F1/Ul3/n/5pwhma5brM= Subject key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5CDFD4166871FE74FB10B180C254D2C455573728 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft caRepository: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Feb 2025 18:57:48 +0000 Certificate not after: Fri 06 Feb 2026 19:02:48 +0000 Subordinate resources: AS: 52527 IP: 177.152.80.0/21 IP: 200.150.252.0/22 IP: 2804:dec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:df:d4:16:68:71:fe:74:fb:10:b1:80:c2:54:d2:c4:55:57:37:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 7 18:57:48 2025 GMT Not After : Feb 6 19:02:48 2026 GMT Subject: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:ff:ae:ef:53:61:17:f9:d5:9b:6e:13:c0: c5:9d:62:4e:a2:bb:07:8e:db:a9:8f:ba:3b:d3:a0: 52:f9:33:d4:a0:4a:93:1e:e4:23:34:f2:3f:5e:68: f4:d2:27:8b:14:47:55:e0:6b:18:f2:ca:04:97:45: af:1e:be:77:60:fb:86:05:c9:04:ff:db:39:11:07: 8c:17:bc:f5:d2:12:b2:2d:b8:e0:16:da:a7:5c:74: cc:e8:ec:79:df:ca:40:cc:8b:10:ee:ac:1a:de:34: 05:6e:23:b7:4b:e4:ee:fa:7b:44:58:94:a8:c7:45: ff:3d:99:36:ba:5c:8c:93:ce:15:6f:1e:f4:47:6e: ba:5e:9e:07:5a:f2:7a:38:32:e8:a6:b6:11:66:19: 3f:c9:72:c4:1b:b4:b9:4b:ae:4c:10:dd:e1:4a:6a: ba:35:b5:ab:02:b2:66:4c:7b:f4:f7:ed:c7:96:4c: a9:dc:2d:b5:06:82:9d:a4:81:a6:8c:d2:c6:b2:52: da:1e:d4:0d:27:39:13:71:c7:30:83:36:26:24:16: 06:b9:6b:63:fc:0c:b3:2d:6e:54:66:45:d5:c2:1e: 97:7f:53:c5:61:68:63:c1:b0:99:de:d1:fa:b9:24: 14:c1:bd:ee:00:12:08:e1:a8:da:4f:16:5f:6b:0c: 54:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.152.80.0/21 200.150.252.0/22 IPv6: 2804:dec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52527 Signature Algorithm: sha256WithRSAEncryption 9c:1d:f6:8a:05:df:5c:d5:51:3b:6b:a2:c7:b7:31:59:00:4e: 83:48:0a:d1:0c:36:1e:c9:4d:f9:21:31:12:b0:30:53:8f:07: 40:52:9e:23:5e:49:4a:64:c4:7d:ad:a5:3d:f2:22:1f:ae:56: e6:ea:f3:cd:b1:49:d3:b2:a4:02:39:0f:cd:72:ac:02:18:a2: 97:77:c4:b5:67:58:e9:2c:11:58:ac:d5:62:67:73:22:22:9a: 4d:8e:34:13:2f:d5:bd:56:71:26:5d:45:1e:bb:52:d6:0d:4e: 28:eb:a4:38:31:96:77:34:39:99:9d:90:f6:4c:3b:6e:2e:32: 49:c6:b8:cb:2b:c1:75:fe:e5:ee:4b:7c:23:c9:18:a7:da:cd: 18:03:37:cc:c2:5a:f9:45:25:46:12:cc:0a:09:7f:b0:65:b6: 97:8d:24:c5:84:04:6f:df:84:f3:9e:3e:18:83:97:a1:8c:bd: 99:0f:06:6e:b4:70:78:97:f4:c5:73:35:b7:47:e4:67:55:36: 03:cc:8c:68:70:57:4c:ed:fc:60:e3:65:0f:6c:b7:9f:d0:6a: 9e:b4:d9:d5:ae:d1:17:7a:1b:3c:e5:62:c9:57:d4:16:58:85: 5c:01:41:a0:70:5c:d5:6a:87:4b:34:16:fb:28:e2:8f:e0:58: 8a:04:e4:9e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXN/UFmhx/nT7ELGAwlTSxFVXNygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMDcxODU3NDhaFw0yNjAyMDYxOTAyNDhaMDMxMTAvBgNV BAMTKDdBRUI5NTkxNTA0NTZFQzE2NzRFOTFFMDg0RjJDNEVGNUIxQTdFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIP+u71NhF/nVm24TwMWdYk6i uweO26mPujvToFL5M9SgSpMe5CM08j9eaPTSJ4sUR1XgaxjyygSXRa8evndg+4YF yQT/2zkRB4wXvPXSErItuOAW2qdcdMzo7HnfykDMixDurBreNAVuI7dL5O76e0RY lKjHRf89mTa6XIyTzhVvHvRHbrpengda8no4MuimthFmGT/JcsQbtLlLrkwQ3eFK aro1tasCsmZMe/T37ceWTKncLbUGgp2kgaaM0sayUtoe1A0nORNxxzCDNiYkFga5 a2P8DLMtblRmRdXCHpd/U8VhaGPBsJne0fq5JBTBve4AEgjhqNpPFl9rDFQPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR665WRUEVuwWdO keCE8sTvWxp+tDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSExY WEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2daSkovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hM WFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAvN0FF Qjk1OTE1MDQ1NkVDMTY3NEU5MUUwODRGMkM0RUY1QjFBN0VCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsZhQAwQCyJb8MA0EAgACMAcDBQAoBA3sMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNLzANBgkqhkiG9w0BAQsFAAOCAQEAnB32igXf XNVRO2uix7cxWQBOg0gK0Qw2HslN+SExErAwU48HQFKeI15JSmTEfa2lPfIiH65W 5urzzbFJ07KkAjkPzXKsAhiil3fEtWdY6SwRWKzVYmdzIiKaTY40Ey/VvVZxJl1F HrtS1g1OKOukODGWdzQ5mZ2Q9kw7bi4ySca4yyvBdf7l7kt8I8kYp9rNGAM3zMJa +UUlRhLMCgl/sGW2l40kxYQEb9+E854+GIOXoYy9mQ8GbrRweJf0xXM1t0fkZ1U2 A8yMaHBXTO38YONlD2y3n9BqnrTZ1a7RF3obPOViyVfUFliFXAFBoHBc1WqHSzQW +yjij+BYigTkng== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:08 2025 by rpki-client on console.sobornost.net