$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer File: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer (raw, json) Hash identifier: B9r9ft3GX0bey0IMpfvKMms1Fp2s6yg2x1zFrgqfpEI= Subject key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1194CD941064DA979921B179C4AB81F2DBDDCDE5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft caRepository: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:50:59 +0000 Certificate not after: Fri 06 Mar 2026 14:55:59 +0000 Subordinate resources: AS: 266387 IP: 170.81.20.0/22 IP: 191.37.140.0/22 IP: 2804:3710::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:94:cd:94:10:64:da:97:99:21:b1:79:c4:ab:81:f2:db:dd:cd:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:50:59 2025 GMT Not After : Mar 6 14:55:59 2026 GMT Subject: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:f0:66:21:d7:63:40:b4:8e:20:ce:4d:62: 3e:60:45:76:22:5a:09:07:bb:b9:dc:ac:a3:1e:f8: 4b:36:b3:0f:88:07:3d:e6:c4:ac:23:4c:4a:29:97: bf:7a:4e:a5:a3:ad:af:d7:03:0c:e6:61:ba:ae:ff: 51:04:87:23:a8:58:81:d3:2e:2e:c7:5a:a5:bb:d9: c1:7d:25:24:45:ee:64:a9:4a:5c:66:c1:59:e5:9f: 25:ef:8b:09:8e:cb:9a:fb:72:7c:be:23:9b:18:12: 52:06:6c:b4:25:b9:a0:37:d0:cb:51:c2:6a:27:d6: be:0f:07:b9:e0:bf:f1:7d:d3:31:aa:8e:d9:8a:d0: 58:e2:05:66:61:89:27:91:ac:bd:12:c9:d4:b9:2c: 58:63:8e:3a:27:bc:27:e7:47:d9:8d:ee:0c:ba:2a: 28:a0:5e:c4:2b:e7:fe:03:37:91:f0:39:24:81:8e: 39:f9:5a:a6:ef:46:14:92:d7:7e:5b:4e:7e:e9:0e: 36:ef:db:05:e5:23:2a:22:c4:b9:c9:27:27:3d:1b: 93:9c:a1:a1:ad:b0:1e:af:bf:74:ee:20:a3:c7:d8: 85:35:59:85:3c:ca:94:c3:e7:62:bc:8e:da:7b:f2: 66:04:82:4c:b6:f6:14:7b:2a:7c:07:49:de:5d:1b: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.81.20.0/22 191.37.140.0/22 IPv6: 2804:3710::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266387 Signature Algorithm: sha256WithRSAEncryption 89:2f:a2:c2:2f:68:2b:4c:1f:92:8f:22:05:0d:48:5e:c2:2f: 25:28:3d:bb:3e:6a:71:6e:c9:ff:7d:ff:37:e1:7b:2d:75:5a: a2:60:92:cb:d3:27:38:a3:ca:97:b3:e4:29:e7:e7:2c:94:0e: 02:e3:6e:5f:a6:b4:d1:ab:11:c3:6a:c6:b8:67:3d:46:30:07: 51:75:30:43:2e:2f:e1:5a:fa:92:46:cd:db:99:cb:51:0a:e3: 95:9c:e9:02:1f:f2:fd:ac:c2:d5:fa:f2:1f:f2:a4:df:a8:4c: 8c:dc:54:fd:07:b4:74:cd:41:da:75:ef:04:22:8b:74:ec:3e: 95:f5:2a:c0:7d:f7:56:7f:ea:e1:ea:32:1c:c5:79:9a:48:e2: 9a:86:96:7f:dd:ff:91:e2:20:64:2a:a0:23:ad:a8:f7:c8:92: 10:d1:03:e3:37:b8:ac:da:7a:89:f8:93:fb:4d:ba:70:e9:c6: 9c:71:2d:cd:e7:0a:49:45:5e:d6:59:3b:b0:2b:cb:6b:0f:ee: 5f:b3:8f:b1:70:93:1f:77:5e:a9:26:f7:1b:8c:80:7d:b1:27: bd:cb:4c:67:97:5a:16:67:96:1a:24:b1:d5:fc:5b:4e:0e:49: 7a:ee:8e:5c:95:e0:41:22:8c:37:23:0d:ce:9b:2c:3e:68:06: 18:d8:d3:01 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEZTNlBBk2peZIbF5xKuB8tvdzeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDUwNTlaFw0yNjAzMDYxNDU1NTlaMDMxMTAvBgNV BAMTKEEyOEYwQzFFRDE4RjQ4QTY2OUM3NkJBMzRDRDcyRjJBMTQ1NkE0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw8PBmIddjQLSOIM5NYj5gRXYi WgkHu7ncrKMe+Es2sw+IBz3mxKwjTEopl796TqWjra/XAwzmYbqu/1EEhyOoWIHT Li7HWqW72cF9JSRF7mSpSlxmwVnlnyXviwmOy5r7cny+I5sYElIGbLQluaA30MtR wmon1r4PB7ngv/F90zGqjtmK0FjiBWZhiSeRrL0SydS5LFhjjjonvCfnR9mN7gy6 KiigXsQr5/4DN5HwOSSBjjn5WqbvRhSS135bTn7pDjbv2wXlIyoixLnJJyc9G5Oc oaGtsB6vv3TuIKPH2IU1WYU8ypTD52K8jtp78mYEgky29hR7KnwHSd5dG3BBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSijwwe0Y9IpmnH a6NM1y8qFFakGDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHZH alJYcm1hN2pOR2FqczZtQUNTYjVrQmZZczZrdUd0NXJUVjNleGp2SDkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R2 R2pSWHJtYTdqTkdhanM2bUFDU2I1a0JmWXM2a3VHdDVyVFYzZXhqdkg5LzEvQTI4 RjBDMUVEMThGNDhBNjY5Qzc2QkEzNENENzJGMkExNDU2QTQxOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlEUAwQCvyWMMA0EAgACMAcDBQAoBDcQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQQkzANBgkqhkiG9w0BAQsFAAOCAQEAiS+iwi9o K0wfko8iBQ1IXsIvJSg9uz5qcW7J/33/N+F7LXVaomCSy9MnOKPKl7PkKefnLJQO AuNuX6a00asRw2rGuGc9RjAHUXUwQy4v4Vr6kkbN25nLUQrjlZzpAh/y/azC1fry H/Kk36hMjNxU/Qe0dM1B2nXvBCKLdOw+lfUqwH33Vn/q4eoyHMV5mkjimoaWf93/ keIgZCqgI62o98iSENED4ze4rNp6ifiT+026cOnGnHEtzecKSUVe1lk7sCvLaw/u X7OPsXCTH3deqSb3G4yAfbEnvctMZ5daFmeWGiSx1fxbTg5Jeu6OXJXgQSKMNyMN zpssPmgGGNjTAQ== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:36 2025 by rpki-client on console.sobornost.net