$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer File: 7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer (raw, json) Hash identifier: Pq02kA7FrfjDg0aQIsjelj032Hy61AfFJ1c3kxFI20w= Subject key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21F14F6BE78912F45FBD2D1D9BD42DC739FC5C50 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft caRepository: rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 18 Apr 2025 10:46:46 +0000 Certificate not after: Fri 17 Apr 2026 10:51:46 +0000 Subordinate resources: AS: 263338 IP: 170.78.244.0/22 IP: 191.36.184.0/21 IP: 2804:1494::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f1:4f:6b:e7:89:12:f4:5f:bd:2d:1d:9b:d4:2d:c7:39:fc:5c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 18 10:46:46 2025 GMT Not After : Apr 17 10:51:46 2026 GMT Subject: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:66:84:2a:7b:14:03:45:8c:04:5f:13:0f: e5:1b:54:fc:28:01:4c:7e:14:f3:af:ea:b6:e9:05: d9:16:ae:21:db:fe:4f:aa:80:dd:38:96:15:26:f3: 7f:8c:e3:72:c0:da:6e:45:09:be:da:a0:23:bf:86: 1e:25:92:03:8b:a4:f7:9a:7d:c8:f3:cd:5b:a4:78: 40:d1:0d:62:e9:23:f8:35:49:65:ed:8d:d8:53:cf: 9e:ea:8e:28:df:68:ac:15:81:f3:32:84:51:2b:ef: a5:59:24:67:0f:ba:f5:e0:27:8c:d8:03:59:f0:7c: 05:94:5b:c0:76:a7:a7:7c:ee:cd:ab:7e:4b:7a:ff: e3:42:44:48:2c:cb:62:a6:69:fb:75:9b:67:f6:ff: 60:87:ba:d8:ee:05:c4:d2:47:f7:c6:86:02:df:2a: d0:98:aa:af:37:bc:92:8a:f0:5a:ed:8e:e7:55:fd: e2:e3:9c:f1:67:81:26:ea:b1:6d:fb:02:f0:c1:d4: 8c:d7:0d:13:9b:68:55:3b:3e:ab:28:1f:81:30:0c: 63:65:fb:5f:c8:c4:aa:c8:1a:ee:1d:2d:a9:4a:99: 59:0f:e1:89:8d:32:bf:83:db:1c:21:a5:c4:1e:b3: bf:09:28:1b:39:73:fe:b6:af:a4:2a:b6:78:5d:66: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.78.244.0/22 191.36.184.0/21 IPv6: 2804:1494::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263338 Signature Algorithm: sha256WithRSAEncryption 94:2d:c2:e3:5d:45:f5:62:06:7a:99:62:c9:01:91:90:bb:00: 7b:f2:f3:3c:86:63:34:2b:f1:4b:6b:fd:f1:7d:f2:e6:7e:87: 61:a3:98:e3:df:f6:ac:27:b7:45:3f:d3:79:92:35:d3:f1:5b: 00:a4:9f:62:d3:11:48:0b:66:99:0a:29:14:c2:1f:3f:54:44: 34:fb:f2:8d:7d:cf:78:a7:a0:41:fe:62:5b:21:1e:5d:af:36: de:f7:67:fe:fb:c9:58:c8:32:ad:12:9f:bd:c1:ec:52:35:d2: 1a:fe:19:87:f8:fa:ad:fd:f0:52:6c:23:d4:c8:25:4e:24:86: 94:e6:24:8b:63:37:86:79:bc:ae:68:78:ac:a0:af:bb:e3:96: e2:56:f3:1f:cd:8d:77:78:3f:0e:c4:2f:de:b4:8d:b1:4d:55: bb:dc:6e:e9:9e:50:a9:35:df:48:a7:e8:83:09:81:ca:6b:d6: 4a:d5:9c:49:29:14:b5:b6:a7:d4:f4:82:f3:78:a7:fe:af:47: a3:d6:e5:4b:06:67:d9:2a:a5:be:5d:65:76:c7:e4:8e:9f:8f: 1b:a1:a0:11:97:7c:87:6e:19:16:14:d5:b3:73:6e:ca:2a:ce: 1a:1f:53:7e:a6:39:64:25:ca:6a:05:27:51:a4:0e:49:d0:1a: c4:60:00:9a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIfFPa+eJEvRfvS0dm9Qtxzn8XFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTgxMDQ2NDZaFw0yNjA0MTcxMDUxNDZaMDMxMTAvBgNV BAMTKDdCNDYzODUzRUE0QUMwMTJCRDlGMzE5NENGQTMzQUYzMjU5MURGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrH2aEKnsUA0WMBF8TD+UbVPwo AUx+FPOv6rbpBdkWriHb/k+qgN04lhUm83+M43LA2m5FCb7aoCO/hh4lkgOLpPea fcjzzVukeEDRDWLpI/g1SWXtjdhTz57qjijfaKwVgfMyhFEr76VZJGcPuvXgJ4zY A1nwfAWUW8B2p6d87s2rfkt6/+NCREgsy2Kmaft1m2f2/2CHutjuBcTSR/fGhgLf KtCYqq83vJKK8FrtjudV/eLjnPFngSbqsW37AvDB1IzXDRObaFU7PqsoH4EwDGNl +1/IxKrIGu4dLalKmVkP4YmNMr+D2xwhpcQes78JKBs5c/62r6QqtnhdZuGJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7RjhT6krAEr2f MZTPozrzJZHfCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXZw OXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAxUEQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F2 cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAvN0I0 NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMyNTkxREYwQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk70AwQDvyS4MA0EAgACMAcDBQAoBBSUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEqjANBgkqhkiG9w0BAQsFAAOCAQEAlC3C411F 9WIGepliyQGRkLsAe/LzPIZjNCvxS2v98X3y5n6HYaOY49/2rCe3RT/TeZI10/Fb AKSfYtMRSAtmmQopFMIfP1RENPvyjX3PeKegQf5iWyEeXa823vdn/vvJWMgyrRKf vcHsUjXSGv4Zh/j6rf3wUmwj1MglTiSGlOYki2M3hnm8rmh4rKCvu+OW4lbzH82N d3g/DsQv3rSNsU1Vu9xu6Z5QqTXfSKfogwmBymvWStWcSSkUtban1PSC83in/q9H o9blSwZn2Sqlvl1ldsfkjp+PG6GgEZd8h24ZFhTVs3NuyirOGh9TfqY5ZCXKagUn UaQOSdAaxGAAmg== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:08 2025 by rpki-client on console.sobornost.net