$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.cer File: 7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.cer (raw, json) Hash identifier: vWNea957u7zgnkPKdsHJXJc2PnGUf/zNhQzdBHV4vuI= Subject key identifier: 7C:F1:1E:9A:95:C2:2F:03:48:D9:4E:FA:1A:4E:95:5D:DE:4E:6D:10 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 032E6DA4A80CA7D56CD0B400D722DADAADEF27BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft caRepository: rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 16:37:33 +0000 Certificate not after: Tue 24 Mar 2026 16:42:33 +0000 Subordinate resources: AS: 265138 IP: 143.208.72.0/22 IP: 2804:2b28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2e:6d:a4:a8:0c:a7:d5:6c:d0:b4:00:d7:22:da:da:ad:ef:27:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 16:37:33 2025 GMT Not After : Mar 24 16:42:33 2026 GMT Subject: CN=7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:f9:bf:1f:e6:f3:2a:c3:18:72:e4:dd:15: 14:02:69:a9:27:17:db:25:ab:10:35:e5:3e:9a:13: 4c:9d:2a:0a:23:e1:98:4c:76:c8:31:7b:ea:2f:69: 4a:c9:da:a5:c4:f6:12:31:30:96:e6:66:ea:96:6a: c6:1a:45:5c:a6:d6:02:17:e4:86:72:3b:54:13:11: 87:8f:75:b2:cc:55:4f:e1:1a:8f:a1:e6:a5:4c:c8: 5a:f2:80:ec:a1:22:33:63:d5:35:de:a8:21:e7:71: 54:81:a3:80:50:1b:19:d6:df:bd:fe:06:3a:d7:1e: 51:a6:45:68:e0:2d:1d:3a:64:f4:33:c1:3b:3b:6d: 5a:53:b0:74:fa:b5:a1:64:35:80:ec:77:3a:a3:0b: f6:e6:90:dc:47:b7:ab:04:fb:2c:16:31:7a:01:b6: 3d:99:96:c8:cf:91:fe:3d:2e:37:09:1c:d7:2d:47: 3e:b9:fd:12:b7:57:88:aa:cf:b3:63:44:a6:b1:f2: c3:6a:e9:1f:ac:3e:b8:ea:f3:6d:bb:e6:a5:af:44: 1e:ae:95:72:f5:a4:60:ad:52:e7:32:28:39:a9:28: 61:35:80:b6:02:a7:17:48:05:22:db:6e:9d:0d:44: e3:47:4e:2c:55:cb:5b:90:eb:dc:94:36:36:c9:8a: de:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:F1:1E:9A:95:C2:2F:03:48:D9:4E:FA:1A:4E:95:5D:DE:4E:6D:10 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.72.0/22 IPv6: 2804:2b28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265138 Signature Algorithm: sha256WithRSAEncryption 91:6d:ff:68:9e:90:23:a2:76:03:38:40:93:3f:a2:a5:f1:64: bc:7c:44:9c:6c:bb:a4:fe:9a:81:ad:c8:8d:2f:a7:29:1a:a1: 95:26:3f:33:3c:60:20:1d:c6:45:b9:55:3a:97:52:7e:19:ec: 6e:2e:7d:81:03:c2:7f:4e:2f:13:18:2d:ce:1a:55:15:42:d5: 73:88:35:bd:6c:e7:20:b7:72:dd:76:61:9c:9d:cd:67:2b:56: a2:dc:40:42:63:d5:93:f1:74:16:1e:0e:2f:95:5f:3d:2d:51: 39:6d:dd:b1:98:40:09:38:04:98:07:00:33:84:17:be:af:e2: e7:9d:a5:d3:89:87:85:75:d3:a0:e7:2a:3b:b8:c6:e2:99:8a: 69:b0:c5:00:03:82:b5:bd:29:e8:f6:8b:63:79:48:ad:a7:aa: 35:bb:7d:62:76:b8:e6:ca:b2:38:50:13:a6:85:77:25:73:b1: 02:5a:63:8c:cb:8d:1c:5a:33:bd:48:29:94:18:81:d8:9b:9c: 6b:72:4a:43:74:00:fc:31:98:68:5c:56:a4:61:6f:5d:2b:a1: fd:3f:80:88:2e:32:4a:b0:5f:f4:89:7e:8e:4d:f7:8e:26:cd: 96:b5:cb:23:6b:1f:2e:4c:ed:bb:3d:ba:ea:88:d3:a0:2b:5a: c8:78:4e:31 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUAy5tpKgMp9Vs0LQA1yLa2q3vJ70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjUxNjM3MzNaFw0yNjAzMjQxNjQyMzNaMDMxMTAvBgNV BAMTKDdDRjExRTlBOTVDMjJGMDM0OEQ5NEVGQTFBNEU5NTVEREU0RTZEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cPm/H+bzKsMYcuTdFRQCaakn F9slqxA15T6aE0ydKgoj4ZhMdsgxe+ovaUrJ2qXE9hIxMJbmZuqWasYaRVym1gIX 5IZyO1QTEYePdbLMVU/hGo+h5qVMyFrygOyhIjNj1TXeqCHncVSBo4BQGxnW373+ BjrXHlGmRWjgLR06ZPQzwTs7bVpTsHT6taFkNYDsdzqjC/bmkNxHt6sE+ywWMXoB tj2ZlsjPkf49LjcJHNctRz65/RK3V4iqz7NjRKax8sNq6R+sPrjq82275qWvRB6u lXL1pGCtUucyKDmpKGE1gLYCpxdIBSLbbp0NRONHTixVy1uQ69yUNjbJit75AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR88R6alcIvA0jZ TvoaTpVd3k5tEDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmtR MW5kcWN6QnlvWGhXcjJ2dlduZnp4TXV5QVp3cFJlaDZSY1VlTU12ZUEvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmtR MW5kcWN6QnlvWGhXcjJ2dlduZnp4TXV5QVp3cFJlaDZSY1VlTU12ZUEvMC83Q0Yx MUU5QTk1QzIyRjAzNDhEOTRFRkExQTRFOTU1RERFNEU2RDEwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKP0EgwDQQCAAIwBwMFACgEKygwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAuyMA0GCSqGSIb3DQEBCwUAA4IBAQCRbf9onpAjonYDOECT P6Kl8WS8fEScbLuk/pqBrciNL6cpGqGVJj8zPGAgHcZFuVU6l1J+GexuLn2BA8J/ Ti8TGC3OGlUVQtVziDW9bOcgt3LddmGcnc1nK1ai3EBCY9WT8XQWHg4vlV89LVE5 bd2xmEAJOASYBwAzhBe+r+LnnaXTiYeFddOg5yo7uMbimYppsMUAA4K1vSno9otj eUitp6o1u31idrjmyrI4UBOmhXclc7ECWmOMy40cWjO9SCmUGIHYm5xrckpDdAD8 MZhoXFakYW9dK6H9P4CILjJKsF/0iX6OTfeOJs2Wtcsjax8uTO27PbrqiNOgK1rI eE4x -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:28 2025 by rpki-client on console.sobornost.net