$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer File: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer (raw, json) Hash identifier: DO+1EPFCIjKCdEhiPRfIa4B5d8EeYTuGRW7Hb3RvqoY= Subject key identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 44F64EEB499D293C038F81D6C3CFB987589EEC82 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft caRepository: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 07:12:11 +0000 Certificate not after: Fri 06 Mar 2026 07:17:11 +0000 Subordinate resources: AS: 267328 IP: 45.233.152.0/22 IP: 2804:4bc4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f6:4e:eb:49:9d:29:3c:03:8f:81:d6:c3:cf:b9:87:58:9e:ec:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 07:12:11 2025 GMT Not After : Mar 6 07:17:11 2026 GMT Subject: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:48:2f:e5:18:4e:e3:2e:97:5e:0e:cd:9f: 45:91:51:fa:a0:43:a6:58:c4:86:01:cb:66:ba:16: bc:8f:af:de:76:29:7a:85:d2:f3:f1:6b:9d:5a:69: 55:b6:a5:84:70:45:4b:15:bf:ac:5d:9d:a7:0c:c7: 84:d8:9a:20:8c:04:a6:6e:a1:26:ce:f8:64:9f:98: b3:de:72:38:fc:16:92:4a:22:b5:43:1b:26:60:50: ae:e3:6c:cc:20:a0:03:ed:51:cf:63:13:92:d4:b0: 57:84:60:90:8c:45:d7:6f:54:ac:84:85:81:55:3c: 87:9a:67:4d:2e:ab:cb:5b:5a:4f:1d:67:f2:b9:50: 90:bc:6e:39:ff:bb:34:e0:9b:de:50:40:c6:4f:6a: 95:bb:be:48:66:8b:78:3a:08:a0:23:27:35:d6:a0: e5:e7:3f:8a:5f:93:ae:31:42:6d:75:4e:a4:19:e5: 70:ef:90:14:00:6c:12:bc:e7:51:a2:94:b3:46:7e: 4a:c1:a7:0c:5a:49:12:38:66:9a:65:f3:23:0c:8c: 16:dd:6c:41:71:95:21:20:b8:6d:8d:77:c3:ae:0f: b0:5a:39:8f:63:59:c2:89:32:7c:49:1e:13:d9:e5: a4:25:d6:12:54:5a:a1:ba:54:bb:2e:10:80:14:94: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.152.0/22 IPv6: 2804:4bc4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267328 Signature Algorithm: sha256WithRSAEncryption d0:d5:50:40:68:d4:44:1c:78:b8:f0:90:1b:77:77:70:be:fb: 51:1e:41:1c:0b:ca:cf:7f:6f:2e:a1:67:de:26:76:f3:ab:ca: 89:c7:4b:f3:69:4a:3e:ec:09:70:1d:3e:b0:21:e8:70:c2:01: 76:e8:8c:0e:06:9b:a7:8e:94:3b:7e:df:1c:c9:c7:8f:36:04: cb:01:76:5a:da:3d:f9:28:4e:24:ed:15:63:8e:c0:42:81:a7: 48:9f:df:b1:ad:d9:7f:8b:3e:03:d0:23:14:ba:e6:8f:19:2a: 92:d7:ac:9e:d3:ef:43:52:7d:9d:bb:e2:65:a6:0c:6d:4a:41: 3f:97:84:0d:c7:1e:1d:ea:6e:eb:48:3f:0f:d3:53:57:5f:b5: b6:76:fc:3a:97:34:ec:57:02:a8:e3:70:43:de:6c:7d:95:28: 82:29:0f:1d:84:92:7a:cc:0a:8a:c3:97:6b:a6:d0:8b:f4:5c: dc:e6:72:da:5d:e8:b2:b0:f5:c6:3e:b1:5e:47:b2:62:7b:0e: 80:b5:1d:d6:1a:e0:22:79:94:97:6d:98:fd:b2:15:33:60:6b: 3f:81:0a:72:e3:b5:a0:cd:c2:8f:b0:5d:9d:5a:4a:1f:34:20: 74:80:c9:5d:7f:71:f4:9b:c9:cf:e4:87:1c:41:f0:ad:70:68: ff:d4:d9:d2 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURPZO60mdKTwDj4HWw8+5h1ie7IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwNzEyMTFaFw0yNjAzMDYwNzE3MTFaMDMxMTAvBgNV BAMTKDlBQTY5MzIyNEU3ODVGM0QwMzc2RkEwMUNDRDQ2RTdBN0RBNENFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9akgv5RhO4y6XXg7Nn0WRUfqg Q6ZYxIYBy2a6FryPr952KXqF0vPxa51aaVW2pYRwRUsVv6xdnacMx4TYmiCMBKZu oSbO+GSfmLPecjj8FpJKIrVDGyZgUK7jbMwgoAPtUc9jE5LUsFeEYJCMRddvVKyE hYFVPIeaZ00uq8tbWk8dZ/K5UJC8bjn/uzTgm95QQMZPapW7vkhmi3g6CKAjJzXW oOXnP4pfk64xQm11TqQZ5XDvkBQAbBK851GilLNGfkrBpwxaSRI4Zppl8yMMjBbd bEFxlSEguG2Nd8OuD7BaOY9jWcKJMnxJHhPZ5aQl1hJUWqG6VLsuEIAUlJTtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSappMiTnhfPQN2 +gHM1G56faTOYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNURZ WkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhnQVUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVE WVpHYlA4cmZNSlg5TWNMZ1NmQ0FMOFlGU2FkRXdzZ0g1WlBhMkJoZ0FVLzEvOUFB NjkzMjI0RTc4NUYzRDAzNzZGQTAxQ0NENDZFN0E3REE0Q0U2MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLemYMA0EAgACMAcDBQAoBEvEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUQDANBgkqhkiG9w0BAQsFAAOCAQEA0NVQQGjURBx4uPCQ G3d3cL77UR5BHAvKz39vLqFn3iZ286vKicdL82lKPuwJcB0+sCHocMIBduiMDgab p46UO37fHMnHjzYEywF2Wto9+ShOJO0VY47AQoGnSJ/fsa3Zf4s+A9AjFLrmjxkq ktesntPvQ1J9nbviZaYMbUpBP5eEDcceHepu60g/D9NTV1+1tnb8Opc07FcCqONw Q95sfZUogikPHYSSeswKisOXa6bQi/Rc3OZy2l3osrD1xj6xXkeyYnsOgLUd1hrg InmUl22Y/bIVM2BrP4EKcuO1oM3Cj7BdnVpKHzQgdIDJXX9x9JvJz+SHHEHwrXBo /9TZ0g== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:34 2025 by rpki-client on console.sobornost.net