$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8132D5957E193240246C2622115FA8F1706B3CE2.cer File: 8132D5957E193240246C2622115FA8F1706B3CE2.cer (raw, json) Hash identifier: kqi9rmakjYs0gI+fH7IYg94owpri7smTkHbuwzjv4cE= Subject key identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 48D03741896A85AFAF441BE5C792C2B4DEACE266 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft caRepository: rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:34 +0000 Certificate not after: Wed 04 Mar 2026 18:40:34 +0000 Subordinate resources: AS: 262995 IP: 143.0.112.0/22 IP: 186.219.176.0/21 IP: 2804:9d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d0:37:41:89:6a:85:af:af:44:1b:e5:c7:92:c2:b4:de:ac:e2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:34 2025 GMT Not After : Mar 4 18:40:34 2026 GMT Subject: CN=8132D5957E193240246C2622115FA8F1706B3CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:19:a5:59:43:a0:13:bd:06:d7:0d:40:fb:da: 7b:90:1c:1b:a9:39:f1:9f:e5:cd:fb:98:aa:5e:1e: 73:0a:ea:68:83:be:f0:c9:4b:d7:e2:54:c0:b7:56: 59:24:d9:8a:00:3c:28:37:54:cc:b9:37:33:17:75: 73:9f:9e:de:a1:5f:a1:50:04:32:a9:f1:52:ce:e5: c7:98:b8:ff:45:18:68:64:04:6e:26:a7:bc:19:a9: a4:3e:df:0b:d8:c1:e5:68:de:a4:fe:60:83:92:0f: 10:a8:ee:6b:27:30:74:b3:77:b1:64:2f:97:ab:e7: 03:16:98:2f:39:b2:68:a0:74:37:4b:e9:bd:85:a8: 21:f9:56:b2:63:a4:7c:78:2b:bf:a4:94:b8:d8:6c: e0:df:d9:14:55:2c:c4:7b:93:fc:35:27:2f:6a:58: ce:88:70:fb:9c:c4:db:a3:42:19:66:52:73:af:37: 98:0c:72:c0:2d:b6:c9:d1:2d:0a:82:a9:6e:8a:38: 68:54:a9:66:f9:f9:a4:ed:1a:e8:f8:c2:30:4d:0d: b6:a4:61:32:bd:30:e2:e5:59:27:02:19:67:d5:6b: 74:5c:67:c4:5b:47:57:d1:64:0c:74:8a:b7:f0:91: ce:4e:ca:d6:cf:42:37:38:1a:c3:95:7e:8f:40:0f: a6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:32:D5:95:7E:19:32:40:24:6C:26:22:11:5F:A8:F1:70:6B:3C:E2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/1/8132D5957E193240246C2622115FA8F1706B3CE2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.112.0/22 186.219.176.0/21 IPv6: 2804:9d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262995 Signature Algorithm: sha256WithRSAEncryption b9:4a:dc:7d:8c:c8:dd:1f:c6:ed:f0:0e:ad:ac:c0:2c:1a:04: 22:c8:2e:28:35:2e:aa:d9:b0:93:23:f2:8c:29:aa:68:c7:5e: 97:1b:ad:eb:36:17:15:67:b1:8f:fc:97:c3:59:83:93:cf:ab: 08:80:f5:d3:63:d6:ec:3c:ac:ce:aa:f6:b9:bc:38:7c:e7:3c: bf:aa:4c:0b:35:f9:99:a3:9f:b5:fb:e1:f8:c6:cf:b1:70:3f: 08:7c:f7:bd:e4:22:1e:88:2d:05:02:76:51:df:d2:45:7c:bd: 13:67:59:14:f1:c5:92:81:95:2d:d0:cd:87:92:bc:ac:2c:54: 70:73:7f:41:62:df:26:c4:4b:a5:de:19:4a:a0:7e:63:46:ec: 77:b1:90:da:a8:9f:01:ba:8e:c1:21:ae:c7:ad:c7:60:c7:1b: 8a:5a:7e:bc:fe:72:22:06:6a:d8:18:0b:d7:dc:48:44:ec:ce: 1a:04:b5:33:9b:cf:d6:86:52:94:6c:af:54:d0:bc:30:50:f5: 3e:40:c8:43:21:a9:93:1d:4e:fe:e2:48:36:6f:03:39:df:81: 1d:0f:c1:fd:aa:b9:61:83:f0:52:05:b8:a9:c6:d8:94:1f:82: de:0a:de:7d:c4:43:01:6e:d2:d9:7f:d0:7d:50:c3:92:5b:7e: 0e:23:16:43 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSNA3QYlqha+vRBvlx5LCtN6s4mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzRaFw0yNjAzMDQxODQwMzRaMDMxMTAvBgNV BAMTKDgxMzJENTk1N0UxOTMyNDAyNDZDMjYyMjExNUZBOEYxNzA2QjNDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGaVZQ6ATvQbXDUD72nuQHBup OfGf5c37mKpeHnMK6miDvvDJS9fiVMC3Vlkk2YoAPCg3VMy5NzMXdXOfnt6hX6FQ BDKp8VLO5ceYuP9FGGhkBG4mp7wZqaQ+3wvYweVo3qT+YIOSDxCo7msnMHSzd7Fk L5er5wMWmC85smigdDdL6b2FqCH5VrJjpHx4K7+klLjYbODf2RRVLMR7k/w1Jy9q WM6IcPucxNujQhlmUnOvN5gMcsAttsnRLQqCqW6KOGhUqWb5+aTtGuj4wjBNDbak YTK9MOLlWScCGWfVa3RcZ8RbR1fRZAx0irfwkc5OytbPQjc4GsOVfo9AD6atAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBMtWVfhkyQCRs JiIRX6jxcGs84jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnBM VzRCTXduSG5QOWJXRVUyRzkyWW95YUtCZGpUWnpGUU02eWhIVDluSjQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJw TFc0Qk13bkhuUDliV0VVMkc5MllveWFLQmRqVFp6RlFNNnloSFQ5bko0LzEvODEz MkQ1OTU3RTE5MzI0MDI0NkMyNjIyMTE1RkE4RjE3MDZCM0NFMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCjwBwAwQDutuwMA0EAgACMAcDBQAoBAnQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDUzANBgkqhkiG9w0BAQsFAAOCAQEAuUrcfYzI 3R/G7fAOrazALBoEIsguKDUuqtmwkyPyjCmqaMdelxut6zYXFWexj/yXw1mDk8+r CID102PW7Dyszqr2ubw4fOc8v6pMCzX5maOftfvh+MbPsXA/CHz3veQiHogtBQJ2 Ud/SRXy9E2dZFPHFkoGVLdDNh5K8rCxUcHN/QWLfJsRLpd4ZSqB+Y0bsd7GQ2qif AbqOwSGux63HYMcbilp+vP5yIgZq2BgL19xIROzOGgS1M5vP1oZSlGyvVNC8MFD1 PkDIQyGpkx1O/uJINm8DOd+BHQ/B/aq5YYPwUgW4qcbYlB+C3grefcRDAW7S2X/Q fVDDklt+DiMWQw== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:29 2025 by rpki-client on console.sobornost.net