$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer File: A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer (raw, json) Hash identifier: hpLSyefPFbol01JBqcsYi976SY5vOSHuSoEyDX+0Kok= Subject key identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 37886C4219C0EE6BD3AAFF0FB0F06C4DE68F30AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft caRepository: rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 22:36:50 +0000 Certificate not after: Fri 06 Mar 2026 22:41:50 +0000 Subordinate resources: AS: 265890 IP: 131.196.4.0/22 IP: 2804:3f64::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:88:6c:42:19:c0:ee:6b:d3:aa:ff:0f:b0:f0:6c:4d:e6:8f:30:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 22:36:50 2025 GMT Not After : Mar 6 22:41:50 2026 GMT Subject: CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:5b:ee:cb:d5:8f:de:d4:fd:40:d8:0e:69: 8a:5b:15:6b:30:58:0e:18:52:2a:6f:bd:f4:c3:b7: 38:ec:9e:8e:ab:80:f5:42:f5:90:52:08:af:90:9b: 9b:56:76:38:ca:1d:f6:cd:09:96:bf:02:c5:3f:71: c9:37:44:4c:04:20:42:ae:a1:8f:08:32:b1:21:5b: 8c:06:a5:db:ec:ee:bc:b8:62:db:29:40:86:55:b7: 23:3f:f0:e9:7d:6d:9c:8f:89:d3:76:68:05:af:95: ff:b0:dd:ad:a6:c4:62:71:eb:a9:0f:8f:4d:4c:9d: 57:a9:0f:14:10:71:08:6a:59:bb:95:2a:d6:a1:ac: d3:e4:af:d6:b0:05:ef:5d:9c:6e:a0:69:cd:8f:0a: 69:6b:7f:f4:6e:69:ce:6b:06:52:0b:83:06:2e:7b: 29:aa:8f:e0:46:99:80:88:83:ba:5b:70:d6:3a:69: 33:0e:4a:ee:f3:4d:fe:a2:56:98:75:4b:ac:c6:c8: e3:8f:41:47:f0:55:a8:37:37:17:67:83:5b:b0:f9: 2f:1d:f2:f4:a5:9a:f1:93:c9:cd:85:2b:b7:9d:eb: 37:5a:35:86:9b:a4:a1:a7:3c:78:1d:9c:bb:cf:9e: f9:69:03:1c:88:3d:d4:42:90:b2:b1:ad:54:5a:78: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.4.0/22 IPv6: 2804:3f64::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265890 Signature Algorithm: sha256WithRSAEncryption ae:cf:62:fd:91:5b:f6:24:47:da:8f:be:9d:0f:b7:1d:01:60: b8:09:81:a3:5b:11:40:63:e9:fd:b7:4a:36:07:8a:88:ca:c9: 31:aa:f4:1a:cd:94:10:7d:58:6c:d2:a6:4f:d6:d7:d1:1a:48: f7:ff:06:81:76:65:df:7c:a7:0f:d8:00:fe:58:62:8d:86:7f: 17:a5:17:1f:ca:0d:78:fa:9c:bb:5a:bf:55:6c:ad:3c:04:a0: 26:f9:7b:07:e7:f6:8b:1e:1a:11:3a:93:30:27:e6:e1:f8:d8: 24:80:16:a4:ca:8f:e7:98:9d:6c:62:a8:90:4e:9b:f5:d8:d1: 5d:5e:d6:f3:10:ac:e5:55:73:5e:03:82:c3:83:13:29:4b:f4: cc:6c:00:c5:af:9f:39:2a:d1:a7:1e:85:99:07:ab:9e:7c:20: 4c:18:7e:d5:76:e5:44:1e:d2:ce:91:7a:52:d1:67:8c:3a:c6: d0:0d:bb:39:32:2d:b8:95:7d:46:13:48:b4:29:04:4a:d9:f0: 8c:64:e8:4d:2b:c6:b4:b7:61:17:a0:a7:73:5b:4e:2e:39:9f: 41:dc:c9:4f:32:e0:67:9e:db:74:f7:fc:6c:e0:b6:4e:8c:49: f9:8b:c2:bd:98:18:de:11:ef:32:f1:8b:27:91:d7:47:4b:85: 22:a2:e6:67 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUN4hsQhnA7mvTqv8PsPBsTeaPMKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcyMjM2NTBaFw0yNjAzMDYyMjQxNTBaMDMxMTAvBgNV BAMTKEE4ODM5RDYzQzNFMTEyRDBCODNDQkIwMTBBRERFNUI0QzMzQjBDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPVvuy9WP3tT9QNgOaYpbFWsw WA4YUipvvfTDtzjsno6rgPVC9ZBSCK+Qm5tWdjjKHfbNCZa/AsU/cck3REwEIEKu oY8IMrEhW4wGpdvs7ry4YtspQIZVtyM/8Ol9bZyPidN2aAWvlf+w3a2mxGJx66kP j01MnVepDxQQcQhqWbuVKtahrNPkr9awBe9dnG6gac2PCmlrf/Ruac5rBlILgwYu eymqj+BGmYCIg7pbcNY6aTMOSu7zTf6iVph1S6zGyOOPQUfwVag3Nxdng1uw+S8d 8vSlmvGTyc2FK7ed6zdaNYabpKGnPHgdnLvPnvlpAxyIPdRCkLKxrVRaeJEdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSog51jw+ES0Lg8 uwEK3eW0wzsMTDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGpZ eUZDOURCcEhRRE5aY2ttZ0dqVDN5UVRMS3ZGYlNzQ3phM004V1E4cUEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hq WXlGQzlEQnBIUUROWmNrbWdHalQzeVFUTEt2RmJTc0N6YTNNOFdROHFBLzEvQTg4 MzlENjNDM0UxMTJEMEI4M0NCQjAxMEFEREU1QjRDMzNCMEM0Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCg8QEMA0EAgACMAcDBQAoBD9kMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQOojANBgkqhkiG9w0BAQsFAAOCAQEArs9i/ZFb9iRH2o++ nQ+3HQFguAmBo1sRQGPp/bdKNgeKiMrJMar0Gs2UEH1YbNKmT9bX0RpI9/8GgXZl 33ynD9gA/lhijYZ/F6UXH8oNePqcu1q/VWytPASgJvl7B+f2ix4aETqTMCfm4fjY JIAWpMqP55idbGKokE6b9djRXV7W8xCs5VVzXgOCw4MTKUv0zGwAxa+fOSrRpx6F mQernnwgTBh+1XblRB7SzpF6UtFnjDrG0A27OTItuJV9RhNItCkEStnwjGToTSvG tLdhF6Cnc1tOLjmfQdzJTzLgZ57bdPf8bOC2ToxJ+YvCvZgY3hHvMvGLJ5HXR0uF IqLmZw== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:16 2025 by rpki-client on console.sobornost.net