$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer File: 8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer (raw, json) Hash identifier: zC2qvDXju1tdvx4BUDSSwNMlJ53OKiZEuEa6ClIg6W0= Subject key identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B97C5E07A106585C0BA684C7987B7B49E0CFCB2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft caRepository: rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:45:05 +0000 Certificate not after: Wed 04 Mar 2026 18:50:05 +0000 Subordinate resources: AS: 269700 IP: 45.191.76.0/22 IP: 2804:688c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:97:c5:e0:7a:10:65:85:c0:ba:68:4c:79:87:b7:b4:9e:0c:fc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:45:05 2025 GMT Not After : Mar 4 18:50:05 2026 GMT Subject: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:f5:d1:67:38:a4:39:fc:be:aa:0b:90:94: 52:b3:11:f2:54:b0:7e:5a:c3:53:53:52:66:23:09: 2a:1b:99:82:00:c2:4d:e9:d2:8a:c7:9a:9b:e6:9b: b4:95:49:45:8f:9c:be:da:62:1d:73:4d:86:76:df: a7:d4:51:44:bc:f3:b1:62:f6:f1:83:b5:11:ea:61: ab:2c:59:81:b3:f9:3f:67:9d:76:db:ef:bc:97:fa: 9c:30:46:30:33:3d:b1:e7:e4:46:54:68:df:43:fd: 02:25:27:66:1e:d1:f6:a0:4d:69:ad:c0:8d:46:a3: 47:f4:7d:7e:6b:26:78:42:3e:d9:95:a5:d4:20:93: 3d:35:eb:6c:4b:66:cf:2e:b3:1e:c0:77:11:f2:e1: 9c:cd:17:81:a8:77:b1:ef:f0:73:41:97:25:71:0c: 77:b6:56:45:13:0e:bd:05:3b:85:55:3c:64:2d:4f: 3f:0b:11:6f:42:b5:4a:69:1e:c0:f9:50:01:5f:8b: b9:4f:c7:b2:50:cd:62:c8:1d:f5:60:8d:0c:58:39: 92:e3:33:8e:bc:ef:e2:10:f0:9e:98:9f:f3:97:1b: c6:7c:cc:32:78:73:91:dd:c5:b3:9b:92:39:fb:ee: 4e:61:09:2a:0e:26:54:d7:dd:64:d1:b0:3f:0f:a7: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.76.0/22 IPv6: 2804:688c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269700 Signature Algorithm: sha256WithRSAEncryption 7e:f9:86:ce:40:9e:70:a4:d3:34:45:38:dc:bb:22:a1:ad:69: ee:c4:0d:06:29:c4:46:b2:be:fc:b2:72:4e:ee:3e:2c:df:95: 7f:ab:71:6a:2e:81:b6:db:2a:9d:25:40:d6:6d:5e:e8:99:ec: 26:aa:f4:d3:90:e3:bc:6a:c2:21:8e:e7:3c:14:01:e4:ec:90: 0c:d3:4c:b2:cf:17:14:9e:2a:18:cd:6d:00:b4:92:c0:a4:d5: e4:93:3e:08:45:f4:01:f4:da:47:35:c3:4f:a6:eb:8f:ed:ce: 76:61:62:0b:db:e6:96:3c:5f:98:30:88:b1:17:8c:34:4a:99: dc:f1:68:cd:69:9e:10:a6:75:32:70:9d:61:2c:a3:55:60:a5: 59:1e:95:39:fc:df:a1:9f:63:30:7d:c8:84:28:34:af:dc:71: 5e:6a:78:34:8d:b4:ca:af:35:d3:0c:3f:cb:12:53:11:ef:aa: 46:f2:19:e8:81:b0:28:ef:c8:c2:ad:32:15:b6:74:81:3e:33: 5e:1b:78:b6:3c:bb:98:5c:66:df:7c:96:c8:08:5c:5c:11:94: 2e:fc:45:66:84:ed:85:62:41:75:9a:a7:81:83:11:15:a1:49: b1:9f:5c:3a:40:69:5d:af:0a:90:5e:66:36:33:f6:ee:56:79: 5f:23:0c:d9 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUe5fF4HoQZYXAumhMeYe3tJ4M/LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODQ1MDVaFw0yNjAzMDQxODUwMDVaMDMxMTAvBgNV BAMTKDgzNzNDMTM0MDg2ODJFM0JBNDg2NTJBOUJFNTkwQzVFNEU0QTBDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kfXRZzikOfy+qguQlFKzEfJU sH5aw1NTUmYjCSobmYIAwk3p0orHmpvmm7SVSUWPnL7aYh1zTYZ236fUUUS887Fi 9vGDtRHqYassWYGz+T9nnXbb77yX+pwwRjAzPbHn5EZUaN9D/QIlJ2Ye0fagTWmt wI1Go0f0fX5rJnhCPtmVpdQgkz0162xLZs8usx7AdxHy4ZzNF4God7Hv8HNBlyVx DHe2VkUTDr0FO4VVPGQtTz8LEW9CtUppHsD5UAFfi7lPx7JQzWLIHfVgjQxYOZLj M4687+IQ8J6Yn/OXG8Z8zDJ4c5HdxbObkjn77k5hCSoOJlTX3WTRsD8Pp951AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDc8E0CGguO6SG Uqm+WQxeTkoM+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXJj QnJRcHpGdVRmRWtIVkZGcWhNa3ZVWXpBM1JoU1ZUbXQyc3ZNRDJLcXkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXJj QnJRcHpGdVRmRWtIVkZGcWhNa3ZVWXpBM1JoU1ZUbXQyc3ZNRDJLcXkvMS84Mzcz QzEzNDA4NjgyRTNCQTQ4NjUyQTlCRTU5MEM1RTRFNEEwQ0ZBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItv0wwDQQCAAIwBwMFACgEaIwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBB2EMA0GCSqGSIb3DQEBCwUAA4IBAQB++YbOQJ5wpNM0RTjc uyKhrWnuxA0GKcRGsr78snJO7j4s35V/q3FqLoG22yqdJUDWbV7omewmqvTTkOO8 asIhjuc8FAHk7JAM00yyzxcUnioYzW0AtJLApNXkkz4IRfQB9NpHNcNPpuuP7c52 YWIL2+aWPF+YMIixF4w0Spnc8WjNaZ4QpnUycJ1hLKNVYKVZHpU5/N+hn2MwfciE KDSv3HFeang0jbTKrzXTDD/LElMR76pG8hnogbAo78jCrTIVtnSBPjNeG3i2PLuY XGbffJbICFxcEZQu/EVmhO2FYkF1mqeBgxEVoUmxn1w6QGldrwqQXmY2M/buVnlf IwzZ -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:15 2025 by rpki-client on console.sobornost.net