$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer (raw, json) Hash identifier: 1/+QClDDmhdtOaHLHcK3JzgroghQ6nChfk8lZ+F2xZg= Subject key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4F711EADF242B49440D7693EB279035E5E7C9FE0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft caRepository: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 03 Feb 2025 15:09:24 +0000 Certificate not after: Mon 02 Feb 2026 15:14:24 +0000 Subordinate resources: AS: 264880 IP: 168.227.56.0/22 IP: 170.246.184.0/22 IP: 2804:2f40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:71:1e:ad:f2:42:b4:94:40:d7:69:3e:b2:79:03:5e:5e:7c:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 3 15:09:24 2025 GMT Not After : Feb 2 15:14:24 2026 GMT Subject: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:e7:23:a9:63:00:29:d8:b7:74:9c:fb:b5: b1:4e:54:fa:45:01:63:d2:97:54:b9:34:9c:26:f0: b1:29:4b:17:03:98:0e:54:41:2c:b2:bb:09:0e:bf: 8d:dd:85:3a:ba:9b:d5:8e:a1:0b:0f:30:de:c5:d3: d1:cb:71:91:18:cb:71:ae:61:d8:2c:9f:da:fe:8d: 56:f8:96:bd:2b:a6:42:8c:80:90:90:b1:6c:2f:99: b6:9d:f4:81:37:f8:bd:cd:dd:b6:f7:bd:db:73:0b: ce:8f:66:5b:29:93:4a:0e:a6:98:3f:90:64:f5:f0: 5c:ea:18:dc:af:07:19:d5:d5:c4:41:df:15:82:1a: a8:ae:88:83:86:a4:4c:bf:52:32:19:b4:77:d0:41: ce:9e:ca:44:42:af:fa:42:f5:8c:9b:e3:88:7e:24: 4c:ef:f4:43:e2:0e:4f:da:d8:c6:ca:55:02:1c:88: 6a:64:2e:4a:87:1e:76:c7:92:84:a2:f5:46:b9:af: 17:28:28:06:4d:af:f4:1a:f7:91:be:16:a5:8d:f9: ec:0f:73:7c:15:c2:e4:7c:b5:e8:d2:8e:31:75:47: 97:4d:e7:3b:6c:4c:61:59:89:e0:83:c0:fa:74:99: 58:75:03:70:28:3e:da:06:8e:4e:56:98:91:69:3b: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.56.0/22 170.246.184.0/22 IPv6: 2804:2f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264880 Signature Algorithm: sha256WithRSAEncryption 78:f7:c7:1c:63:72:04:d0:64:92:8d:1f:ba:a9:2f:77:26:1a: 7c:18:4d:08:43:fa:e9:0b:2b:ae:4c:c6:c2:3e:22:9e:56:33: 9c:7e:ec:9e:fe:bc:0f:72:90:23:ee:57:66:d7:67:a6:46:5b: a2:ba:6b:01:d7:6e:b3:17:3d:3e:d0:b4:59:be:28:c7:14:c1: fe:3d:0f:81:67:5f:a9:f0:c2:f5:51:bd:dc:a2:26:bf:96:55: a1:84:1b:50:8e:b5:22:7b:68:94:d7:37:3f:9e:96:9e:09:a4: 2b:8d:53:41:00:60:21:03:93:16:98:65:9c:0c:a7:9c:8b:c8: 8e:6d:80:e0:ad:85:b6:c4:f3:2d:91:89:92:12:1d:66:50:31: ff:02:5a:7e:2e:15:89:9d:ce:03:bb:b2:cf:3a:f3:e4:c5:7d: be:92:db:b7:0f:14:fb:3c:c5:08:e7:4a:bd:c1:be:8e:f2:e0: 9e:3a:e0:ef:2f:32:47:a8:ee:b4:e7:37:b0:aa:17:ad:23:48: cf:4f:be:a7:66:e4:6f:07:81:e1:91:03:17:f3:b9:e9:56:ea: 35:ae:63:f6:2f:51:75:94:f9:5c:87:db:02:ac:9b:41:31:a8: 03:71:28:72:2e:65:c4:2a:d3:e0:75:51:72:87:6f:15:f3:d6: d2:3d:1f:1f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUT3EerfJCtJRA12k+snkDXl58n+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMDMxNTA5MjRaFw0yNjAyMDIxNTE0MjRaMDMxMTAvBgNV BAMTKDlBMzJDRDkxRkNFOUNBREJGMjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjOcjqWMAKdi3dJz7tbFOVPpF AWPSl1S5NJwm8LEpSxcDmA5UQSyyuwkOv43dhTq6m9WOoQsPMN7F09HLcZEYy3Gu Ydgsn9r+jVb4lr0rpkKMgJCQsWwvmbad9IE3+L3N3bb3vdtzC86PZlspk0oOppg/ kGT18FzqGNyvBxnV1cRB3xWCGqiuiIOGpEy/UjIZtHfQQc6eykRCr/pC9Yyb44h+ JEzv9EPiDk/a2MbKVQIciGpkLkqHHnbHkoSi9Ua5rxcoKAZNr/Qa95G+FqWN+ewP c3wVwuR8tejSjjF1R5dN5ztsTGFZieCDwPp0mVh1A3AoPtoGjk5WmJFpOxhxAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSaMs2R/OnK2/KL 7fTHIOZ7ea+5zDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0Fz M0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNB czNCZDVvb3NGdE5oUXREdHhUd1h6dGt3UEFoY0UxSmZxOXJTQjdidUNoLzAvOUEz MkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3OUFGQjlDQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOM4AwQCqva4MA0EAgACMAcDBQAoBC9AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQKsDANBgkqhkiG9w0BAQsFAAOCAQEAePfHHGNy BNBkko0fuqkvdyYafBhNCEP66QsrrkzGwj4inlYznH7snv68D3KQI+5XZtdnpkZb orprAddusxc9PtC0Wb4oxxTB/j0PgWdfqfDC9VG93KImv5ZVoYQbUI61IntolNc3 P56WngmkK41TQQBgIQOTFphlnAynnIvIjm2A4K2FtsTzLZGJkhIdZlAx/wJafi4V iZ3OA7uyzzrz5MV9vpLbtw8U+zzFCOdKvcG+jvLgnjrg7y8yR6jutOc3sKoXrSNI z0++p2bkbweB4ZEDF/O56VbqNa5j9i9RdZT5XIfbAqybQTGoA3Eoci5lxCrT4HVR codvFfPW0j0fHw== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:13 2025 by rpki-client on console.sobornost.net