$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer (raw, json) Hash identifier: M3N5+D5k0kroh3F5WEURBoY7qkd7NSGHhSyiR4f/FfI= Subject key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1133599227D702D7BCAD15E50236645DBB558A62 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft caRepository: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 15:11:02 +0000 Certificate not after: Fri 06 Mar 2026 15:16:02 +0000 Subordinate resources: AS: 267546 IP: 45.70.40.0/22 IP: 45.166.212.0/22 IP: 191.241.88.0/21 IP: 2804:4310::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 13:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:33:59:92:27:d7:02:d7:bc:ad:15:e5:02:36:64:5d:bb:55:8a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 15:11:02 2025 GMT Not After : Mar 6 15:16:02 2026 GMT Subject: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:80:0a:03:ee:12:35:85:4f:50:86:e4:1e: 3a:29:0f:cb:04:e3:85:3a:b2:fc:45:3f:8e:0d:ba: a0:bb:f6:0c:e6:54:fd:0a:ee:47:06:c9:67:75:0f: d7:d8:98:9e:c6:56:a7:b0:90:b2:ea:57:c4:1e:b3: 78:dc:4f:e5:8d:19:d8:e6:2c:c7:36:4c:9d:94:aa: e5:1a:d3:66:89:f7:a7:4d:68:3d:bb:95:67:00:e8: 60:f0:66:a2:d6:bb:95:a6:6d:53:a8:d9:4a:71:5f: 2f:12:02:de:23:de:d4:f6:27:7a:90:7f:9d:fd:c7: d3:ca:d9:2b:a4:21:20:1d:2d:f2:e3:47:2d:23:d7: 7e:95:b5:58:e5:44:73:49:de:e6:a6:e3:a9:6f:d8: 34:5f:fc:d6:28:b5:35:1e:65:23:95:55:72:60:22: e1:cf:8a:37:64:45:bc:44:e1:11:1e:a7:17:b1:f3: 78:bc:40:4c:2a:72:67:0b:e3:c6:a1:89:1b:ea:ea: 70:6c:10:7a:32:40:79:2f:c7:a0:a7:1a:5f:49:00: 8b:7c:49:c4:20:b0:87:7a:5e:7c:d2:09:10:70:93: 31:5e:dd:f1:34:17:b8:77:57:42:ae:7b:4f:8c:64: 06:2b:86:2a:a2:4e:83:1a:c1:c5:c6:fe:ab:53:1b: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.40.0/22 45.166.212.0/22 191.241.88.0/21 IPv6: 2804:4310::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267546 Signature Algorithm: sha256WithRSAEncryption 7c:26:6c:be:a1:6e:3b:c3:37:3e:12:cd:f8:66:62:f9:b6:90: a1:80:f6:d1:ff:99:32:90:b3:3b:81:83:df:07:b2:25:28:b4: c2:c6:0c:e3:2c:03:6a:fa:f4:bd:17:96:3e:07:c7:54:21:ec: af:2b:9d:10:52:1c:91:c7:0c:e8:33:3a:14:3c:2d:43:a6:98: 4f:3f:10:ff:f6:8b:d3:78:7c:cf:92:b5:47:28:f3:61:18:ce: cc:9f:11:76:83:f9:4b:7c:6f:30:64:d3:e8:64:5d:b6:32:4c: ae:fb:e4:87:7e:d7:04:8b:70:eb:0a:cf:7b:e2:b6:05:52:bf: d4:e3:da:56:8f:87:ad:32:d5:36:67:0b:e0:ae:a5:83:1c:74: e1:70:7d:85:5f:a3:af:8f:36:64:2e:f0:26:34:f5:82:fd:7f: 5f:0c:d8:18:0d:8f:5b:75:f6:99:35:5f:39:61:16:e6:a6:d9: 2a:8c:9f:d2:a0:fc:e9:f1:9c:4b:49:51:e7:92:4b:20:69:3d: 91:7f:2d:b7:a6:1c:0d:7a:3d:ca:4f:26:d9:89:da:71:17:9e: 5a:e5:58:72:da:79:98:06:45:4d:6d:52:b4:b4:3d:97:3c:96: b7:ef:a6:04:37:c2:f6:6d:0d:8e:67:8d:aa:b5:15:43:00:45: 58:b0:86:c0 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUETNZkifXAte8rRXlAjZkXbtVimIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNTExMDJaFw0yNjAzMDYxNTE2MDJaMDMxMTAvBgNV BAMTKDk4RDcwN0RBMEY2RDcyMUNBOTA1NkFFMEI3MTI2RUREMjE0QUQ3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4oAKA+4SNYVPUIbkHjopD8sE 44U6svxFP44NuqC79gzmVP0K7kcGyWd1D9fYmJ7GVqewkLLqV8Qes3jcT+WNGdjm LMc2TJ2UquUa02aJ96dNaD27lWcA6GDwZqLWu5WmbVOo2UpxXy8SAt4j3tT2J3qQ f539x9PK2SukISAdLfLjRy0j136VtVjlRHNJ3uam46lv2DRf/NYotTUeZSOVVXJg IuHPijdkRbxE4REepxex83i8QEwqcmcL48ahiRvq6nBsEHoyQHkvx6CnGl9JAIt8 ScQgsId6XnzSCRBwkzFe3fE0F7h3V0Kue0+MZAYrhiqiToMawcXG/qtTG02VAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSY1wfaD21yHKkF auC3Em7dIUrX1TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSExY YnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZnU00vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSExY YnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZnU00vMS85OEQ3 MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAItRigDBAItptQDBAO/8VgwDQQCAAIwBwMFACgEQxAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBUaMA0GCSqGSIb3DQEBCwUAA4IBAQB8 Jmy+oW47wzc+Es34ZmL5tpChgPbR/5kykLM7gYPfB7IlKLTCxgzjLANq+vS9F5Y+ B8dUIeyvK50QUhyRxwzoMzoUPC1DpphPPxD/9ovTeHzPkrVHKPNhGM7MnxF2g/lL fG8wZNPoZF22Mkyu++SHftcEi3DrCs974rYFUr/U49pWj4etMtU2ZwvgrqWDHHTh cH2FX6OvjzZkLvAmNPWC/X9fDNgYDY9bdfaZNV85YRbmptkqjJ/SoPzp8ZxLSVHn kksgaT2Rfy23phwNej3KTybZidpxF55a5Vhy2nmYBkVNbVK0tD2XPJa376YEN8L2 bQ2OZ42qtRVDAEVYsIbA -----END CERTIFICATE-----Generated at Sun Apr 27 14:51:25 2025 by rpki-client on console.sobornost.net