$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer File: A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer (raw, json) Hash identifier: iHi4s3VluGhxiAa9Z9SdlSSmaASAYtwfrRqeHqttkj8= Subject key identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FAF17694890750D7250ECB32FC82A7419AA049E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft caRepository: rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:56:11 +0000 Certificate not after: Fri 06 Mar 2026 03:01:11 +0000 Subordinate resources: AS: 266341 IP: 170.239.60.0/22 IP: 2804:3650::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:af:17:69:48:90:75:0d:72:50:ec:b3:2f:c8:2a:74:19:aa:04:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:56:11 2025 GMT Not After : Mar 6 03:01:11 2026 GMT Subject: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:2e:82:c8:3a:1d:e0:ee:fc:3b:8b:b1:02: 94:bc:3f:5d:56:ea:46:d8:53:c5:19:0d:f6:38:17: 33:ca:68:d6:63:cb:e8:19:73:ca:02:a0:42:f6:0a: 57:d8:36:8b:2f:ec:7e:13:8b:de:46:f5:62:ce:01: e8:c0:09:bc:a2:95:db:f5:c0:92:10:44:25:f2:07: ad:2a:20:61:bc:66:b5:eb:8b:28:ca:5b:f8:7b:f9: b8:60:02:e2:7e:22:e8:7b:e4:8d:7e:04:f5:c5:39: 98:a5:2f:6f:89:a2:87:4b:52:b9:43:4d:46:b9:7b: 39:0b:7f:4b:d4:96:09:79:bc:38:b2:67:f6:60:c0: 3e:34:ba:bb:4d:05:f4:61:11:cd:a0:2a:ad:88:a7: 7e:70:e0:4e:37:79:1e:44:96:90:2c:bd:99:44:31: d6:0d:46:7c:71:00:b7:d0:a5:f2:9c:cc:21:de:c3: 01:b2:86:6c:07:03:27:52:22:78:86:d4:d8:be:34: 52:4e:77:6c:23:90:05:ee:a8:b2:88:43:12:7c:5a: 3c:58:30:55:6f:bd:c3:44:79:de:49:63:b0:cb:83: 59:d1:d2:bf:ce:3c:75:5b:97:82:84:42:26:44:9a: b7:63:2b:70:f9:7b:b4:7f:25:d1:76:93:a1:62:10: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.239.60.0/22 IPv6: 2804:3650::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266341 Signature Algorithm: sha256WithRSAEncryption 96:04:cd:31:e9:af:f8:1e:3e:bf:19:b6:c5:f6:6b:24:47:0b: ca:59:eb:1d:1a:45:cd:1f:ee:60:18:28:f2:08:cc:4e:15:90: e1:b8:3a:36:8b:23:07:d4:52:75:10:28:9e:08:19:48:17:f8: 79:87:2a:a9:47:3c:c9:f2:5c:69:e1:2d:1e:d7:be:b5:7b:c2: 6c:ba:cd:86:48:d3:fa:7e:8e:50:6d:85:fe:90:b7:52:26:ea: ef:85:e3:a4:eb:6c:b8:61:27:76:1d:84:31:91:72:5f:35:fc: 87:c7:08:7d:35:d8:c6:69:a7:6b:d1:65:1f:52:24:bf:f4:d2: b4:e6:f1:08:02:b8:42:2e:9d:78:64:62:3e:1c:ee:0e:4d:80: 20:dc:ec:db:71:8a:93:87:1b:99:4f:bc:2d:75:e7:3b:3d:03: 7d:1a:75:86:70:60:d4:0f:c0:e1:68:07:c4:6b:12:cb:cb:55: f4:1d:94:ac:29:d8:7f:64:2a:4a:11:eb:55:7f:c9:ed:67:14: 2e:f8:1c:3e:a2:0a:f3:48:ef:e5:ac:fd:73:28:cd:c5:2a:fc: 4c:49:d3:18:f8:69:c4:2a:4f:dd:73:40:fa:1f:a1:66:a4:cd: 76:9b:59:2e:3a:a3:9f:65:34:ef:c4:df:3b:96:ca:03:e2:b3: ec:e9:cd:58 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUP68XaUiQdQ1yUOyzL8gqdBmqBJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjU2MTFaFw0yNjAzMDYwMzAxMTFaMDMxMTAvBgNV BAMTKEE1RTZDNDA5ODUzQzREQkM1MDhENEUxMjRGMDNCMUVBMjcxMEEwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEji6CyDod4O78O4uxApS8P11W 6kbYU8UZDfY4FzPKaNZjy+gZc8oCoEL2ClfYNosv7H4Ti95G9WLOAejACbyildv1 wJIQRCXyB60qIGG8ZrXriyjKW/h7+bhgAuJ+Iuh75I1+BPXFOZilL2+JoodLUrlD TUa5ezkLf0vUlgl5vDiyZ/ZgwD40urtNBfRhEc2gKq2Ip35w4E43eR5ElpAsvZlE MdYNRnxxALfQpfKczCHewwGyhmwHAydSIniG1Ni+NFJOd2wjkAXuqLKIQxJ8WjxY MFVvvcNEed5JY7DLg1nR0r/OPHVbl4KEQiZEmrdjK3D5e7R/JdF2k6FiEK9hAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSl5sQJhTxNvFCN ThJPA7HqJxCgpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpD amJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJvb2gvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWpD amJKemR4eGlUNjMySG84ZzdlVlozWnh0UVJQRDRpcWZYb2txTXJvb2gvMS9BNUU2 QzQwOTg1M0M0REJDNTA4RDRFMTI0RjAzQjFFQTI3MTBBMEE2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKq7zwwDQQCAAIwBwMFACgENlAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBBlMA0GCSqGSIb3DQEBCwUAA4IBAQCWBM0x6a/4Hj6/GbbF 9mskRwvKWesdGkXNH+5gGCjyCMxOFZDhuDo2iyMH1FJ1ECieCBlIF/h5hyqpRzzJ 8lxp4S0e1761e8Jsus2GSNP6fo5QbYX+kLdSJurvheOk62y4YSd2HYQxkXJfNfyH xwh9NdjGaadr0WUfUiS/9NK05vEIArhCLp14ZGI+HO4OTYAg3OzbcYqThxuZT7wt dec7PQN9GnWGcGDUD8DhaAfEaxLLy1X0HZSsKdh/ZCpKEetVf8ntZxQu+Bw+ogrz SO/lrP1zKM3FKvxMSdMY+GnEKk/dc0D6H6FmpM12m1kuOqOfZTTvxN87lsoD4rPs 6c1Y -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:22 2025 by rpki-client on console.sobornost.net