$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer File: A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer (raw, json) Hash identifier: n04ZglocClOSLY2NVES1BCxVDWrFHNviV7pEIj0NaGI= Subject key identifier: A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F7A65FB1CFEEA9AB9B763EEC66FFD590A652E54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft caRepository: rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 00:28:10 +0000 Certificate not after: Fri 06 Mar 2026 00:33:10 +0000 Subordinate resources: AS: 270466 IP: 200.106.136.0/22 IP: 2804:6c68::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7a:65:fb:1c:fe:ea:9a:b9:b7:63:ee:c6:6f:fd:59:0a:65:2e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 00:28:10 2025 GMT Not After : Mar 6 00:33:10 2026 GMT Subject: CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b4:c2:91:c3:2b:66:47:58:e2:1b:4c:03:25: dc:e7:fd:31:88:90:40:f9:0e:87:c6:54:7c:05:4e: a6:2a:43:c1:98:5e:27:89:22:3d:3b:25:07:7c:07: 9f:b9:a6:47:41:43:80:a1:3c:62:53:a9:3a:6c:91: 77:f5:4b:ea:37:d2:d0:65:b7:5c:ab:89:64:48:c9: 55:8a:ad:95:72:38:96:8f:f2:fc:e3:5a:aa:17:59: c1:9e:45:a0:0f:c5:a2:ca:0c:61:e4:a7:82:c5:80: a6:29:47:b0:c7:7d:80:20:e3:eb:67:30:ce:41:a4: 94:fb:88:20:10:a9:f2:b9:f3:fa:3a:2b:3e:d6:34: a5:e1:92:9c:6e:8d:53:44:54:e0:05:86:dc:e0:49: 22:25:e0:72:01:f0:c5:13:25:bd:2d:1d:64:33:e6: 29:a2:48:22:a3:ce:3f:e0:5f:ff:dd:93:0f:c3:f2: 96:28:62:2e:4a:7b:60:f7:4b:ba:59:64:02:84:80: 45:bf:e6:89:92:26:bb:9e:88:3f:82:37:ed:59:ff: 62:70:f3:bb:09:c1:b3:c7:b7:fb:99:04:b6:9d:c7: 8e:b5:6d:e5:58:4d:d0:fd:a6:e5:4e:f8:5a:02:31: 43:9c:c4:17:7a:73:2d:c9:2b:d8:95:ab:c6:c6:0b: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.106.136.0/22 IPv6: 2804:6c68::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270466 Signature Algorithm: sha256WithRSAEncryption 67:2d:af:06:a4:46:9c:76:ea:65:23:73:ea:7e:e8:07:72:a3: 9e:a7:f0:31:a1:64:6c:1d:fb:fc:6f:0d:b3:ff:b2:05:e0:f9: 5c:38:53:95:57:a1:c6:a2:c2:18:e9:fe:2e:69:9c:47:f4:97: 8d:8f:2f:93:35:1f:a0:78:78:71:fa:2e:df:86:65:a5:94:84: 8f:30:c0:17:99:bd:d8:f4:99:81:5d:43:82:2f:2a:df:a3:55: a3:c3:63:b5:37:e7:75:73:e9:82:11:11:ef:45:bd:e4:a6:e4: 16:32:f4:5b:6c:f7:72:90:80:06:ee:85:f6:6f:1b:c1:b4:89: a1:27:de:47:c1:f5:45:87:c1:3e:7b:9d:44:04:3f:f1:09:d0: 02:32:a9:87:f9:c4:89:6a:1d:b5:25:80:fc:50:aa:04:50:cc: 03:f2:82:9e:4b:1f:d1:bc:b9:99:1e:e4:47:78:14:a8:58:b6: 27:c9:ee:c3:9d:2b:db:b4:13:f7:44:ef:eb:12:5b:1b:00:99: 3c:d2:63:1c:aa:06:d4:61:4b:d0:6e:7f:2c:d5:d1:34:b0:35: 39:b0:60:8d:1e:bc:19:a3:c9:ae:b4:24:1f:e9:07:8e:f0:e9: 58:e5:7b:53:73:95:96:ef:e0:3e:dd:f8:00:ab:b4:61:b6:90: a3:ae:60:74 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUX3pl+xz+6pq5t2Puxm/9WQplLlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMDI4MTBaFw0yNjAzMDYwMDMzMTBaMDMxMTAvBgNV BAMTKEEwRDQ4QTQ4MUFGQUI1RjFEOERBMTZGRDMxMDFBQzQwMUY3QTE2QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tMKRwytmR1jiG0wDJdzn/TGI kED5DofGVHwFTqYqQ8GYXieJIj07JQd8B5+5pkdBQ4ChPGJTqTpskXf1S+o30tBl t1yriWRIyVWKrZVyOJaP8vzjWqoXWcGeRaAPxaLKDGHkp4LFgKYpR7DHfYAg4+tn MM5BpJT7iCAQqfK58/o6Kz7WNKXhkpxujVNEVOAFhtzgSSIl4HIB8MUTJb0tHWQz 5imiSCKjzj/gX//dkw/D8pYoYi5Ke2D3S7pZZAKEgEW/5omSJrueiD+CN+1Z/2Jw 87sJwbPHt/uZBLadx461beVYTdD9puVO+FoCMUOcxBd6cy3JK9iVq8bGC3m1AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSg1IpIGvq18dja Fv0xAaxAH3oWyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREE3 TXFyRHBGeDlKazhOOGtHRVpEYjJqaWo4eWd2ZlpuaEN0eFk2QlZBdWEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREE3 TXFyRHBGeDlKazhOOGtHRVpEYjJqaWo4eWd2ZlpuaEN0eFk2QlZBdWEvMS9BMEQ0 OEE0ODFBRkFCNUYxRDhEQTE2RkQzMTAxQUM0MDFGN0ExNkM4Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALIaogwDQQCAAIwBwMFACgEbGgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCCCMA0GCSqGSIb3DQEBCwUAA4IBAQBnLa8GpEacduplI3Pq fugHcqOep/AxoWRsHfv8bw2z/7IF4PlcOFOVV6HGosIY6f4uaZxH9JeNjy+TNR+g eHhx+i7fhmWllISPMMAXmb3Y9JmBXUOCLyrfo1Wjw2O1N+d1c+mCERHvRb3kpuQW MvRbbPdykIAG7oX2bxvBtImhJ95HwfVFh8E+e51EBD/xCdACMqmH+cSJah21JYD8 UKoEUMwD8oKeSx/RvLmZHuRHeBSoWLYnye7DnSvbtBP3RO/rElsbAJk80mMcqgbU YUvQbn8s1dE0sDU5sGCNHrwZo8mutCQf6QeO8OlY5XtTc5WW7+A+3fgAq7RhtpCj rmB0 -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:35 2025 by rpki-client on console.sobornost.net