$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.cer File: A3DCF2E734FAC32DE040D3A1F4190A800C964B09.cer (raw, json) Hash identifier: r2eYYCSkE3Hc+BlmR639pUwWnSKaNRtoMArIthpGbW0= Subject key identifier: A3:DC:F2:E7:34:FA:C3:2D:E0:40:D3:A1:F4:19:0A:80:0C:96:4B:09 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A99520801B1A3975D31030C5210D6393F1DA689 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.mft caRepository: rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Mar 2025 12:54:10 +0000 Certificate not after: Thu 26 Mar 2026 12:59:10 +0000 Subordinate resources: AS: 262856 IP: 177.10.208.0/21 IP: 2804:4050::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:99:52:08:01:b1:a3:97:5d:31:03:0c:52:10:d6:39:3f:1d:a6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 12:54:10 2025 GMT Not After : Mar 26 12:59:10 2026 GMT Subject: CN=A3DCF2E734FAC32DE040D3A1F4190A800C964B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:a2:d4:98:ca:47:85:9b:9a:1e:48:dc:63: 3e:2b:b4:b6:1a:79:06:fe:f4:e3:ba:ca:ec:fe:6d: 2a:54:94:be:d6:49:52:dd:2b:a4:b8:5a:23:50:60: dd:eb:86:9a:cd:6c:7b:5e:ac:e9:3a:39:7f:ee:49: 0b:9f:95:7f:e0:14:60:bc:2b:ce:b9:8e:1c:92:17: d6:96:4c:16:1b:5f:af:6a:b1:57:54:01:92:56:4b: 1c:06:45:63:5a:76:fc:4a:f4:e7:2c:37:02:82:c4: 7d:ca:70:ed:72:b4:32:4a:bf:91:bd:ca:d7:c8:a9: 37:21:6d:fe:5e:c5:78:e5:a9:2f:23:66:54:b8:97: de:08:a1:68:be:3b:d4:8a:ae:e7:d0:16:91:b3:b2: 61:53:b3:6c:cf:21:eb:ae:ca:74:4a:e2:16:4e:cd: 55:ef:2f:48:ec:b1:d8:fe:3e:90:d3:55:f2:a1:12: ee:61:a2:3a:79:2b:fc:95:10:8f:da:b1:af:83:3b: 8b:78:d0:a3:7e:94:c0:56:5f:db:1f:3b:33:5a:7b: e2:09:81:5f:25:af:44:07:c5:69:69:99:ed:c1:6b: 36:fd:68:43:b7:bc:cf:3a:71:a3:3e:64:c7:a6:a7: d1:2c:b4:59:e6:11:a9:52:8f:c2:4e:28:2b:06:ea: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:DC:F2:E7:34:FA:C3:2D:E0:40:D3:A1:F4:19:0A:80:0C:96:4B:09 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.10.208.0/21 IPv6: 2804:4050::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262856 Signature Algorithm: sha256WithRSAEncryption 34:5d:dc:57:b4:4c:23:dd:c4:92:45:c9:0d:85:83:19:fc:4f: 59:4d:1b:e0:75:0c:fc:d1:60:7f:0f:0a:c6:af:2e:55:a3:12: 00:30:57:63:8e:32:26:4f:fd:1e:c1:07:e0:e1:83:ac:8a:2c: fe:ae:64:e7:46:ca:f7:3b:0f:fb:4e:f1:bf:d4:d9:a3:c6:79: a0:61:5f:6e:41:dc:e8:f5:8e:45:eb:7b:2c:02:67:36:86:7a: e7:2b:ae:ae:80:b1:5b:bf:a5:77:eb:5e:fc:6d:d4:6c:a0:c6: aa:d7:8c:d6:de:c5:6e:7a:8e:44:aa:b7:69:4e:22:08:2d:73: 9f:e2:03:08:2b:a0:d1:7b:8d:c2:c1:5f:bd:3b:f0:f6:cb:d3: cf:66:50:79:33:00:5c:10:b4:46:a4:29:a5:18:b4:83:85:18: 4e:7a:38:fa:e3:01:1e:89:33:a8:d9:91:86:05:34:93:56:11: 57:02:77:3d:bb:56:21:51:7d:56:c5:0a:aa:5d:cb:ec:ca:5d: 65:ce:3e:87:db:47:5c:cc:8e:de:8a:ed:93:cc:17:56:3b:d6: cb:61:29:f3:64:1b:5a:7b:0b:a6:2c:0b:55:54:46:e1:67:54: 6f:e6:b7:ad:bb:1d:a8:25:2e:d8:99:69:d1:4f:c2:79:1c:57: 57:aa:b9:c8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOplSCAGxo5ddMQMMUhDWOT8dpokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjcxMjU0MTBaFw0yNjAzMjYxMjU5MTBaMDMxMTAvBgNV BAMTKEEzRENGMkU3MzRGQUMzMkRFMDQwRDNBMUY0MTkwQTgwMEM5NjRCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZoqLUmMpHhZuaHkjcYz4rtLYa eQb+9OO6yuz+bSpUlL7WSVLdK6S4WiNQYN3rhprNbHterOk6OX/uSQuflX/gFGC8 K865jhySF9aWTBYbX69qsVdUAZJWSxwGRWNadvxK9OcsNwKCxH3KcO1ytDJKv5G9 ytfIqTchbf5exXjlqS8jZlS4l94IoWi+O9SKrufQFpGzsmFTs2zPIeuuynRK4hZO zVXvL0jssdj+PpDTVfKhEu5hojp5K/yVEI/asa+DO4t40KN+lMBWX9sfOzNae+IJ gV8lr0QHxWlpme3Bazb9aEO3vM86caM+ZMemp9EstFnmEalSj8JOKCsG6hHDAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSj3PLnNPrDLeBA 06H0GQqADJZLCTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Va SkxWTm94NDJUWW5FQlR3YTVmaEpKdFk0d0tHd0xrQXJuN0pZY0NzNDQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdl WkpMVk5veDQyVFluRUJUd2E1ZmhKSnRZNHdLR3dMa0FybjdKWWNDczQ0LzAvQTNE Q0YyRTczNEZBQzMyREUwNDBEM0ExRjQxOTBBODAwQzk2NEIwOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsQrQMA0EAgACMAcDBQAoBEBQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQCyDANBgkqhkiG9w0BAQsFAAOCAQEANF3cV7RMI93EkkXJ DYWDGfxPWU0b4HUM/NFgfw8Kxq8uVaMSADBXY44yJk/9HsEH4OGDrIos/q5k50bK 9zsP+07xv9TZo8Z5oGFfbkHc6PWORet7LAJnNoZ65yuuroCxW7+ld+te/G3UbKDG qteM1t7FbnqORKq3aU4iCC1zn+IDCCug0XuNwsFfvTvw9svTz2ZQeTMAXBC0RqQp pRi0g4UYTno4+uMBHokzqNmRhgU0k1YRVwJ3PbtWIVF9VsUKql3L7MpdZc4+h9tH XMyO3ortk8wXVjvWy2Ep82QbWnsLpiwLVVRG4WdUb+a3rbsdqCUu2Jlp0U/CeRxX V6q5yA== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:36 2025 by rpki-client on console.sobornost.net