$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer File: A99D272225729B303C95F28914878741C6AE29BE.cer (raw, json) Hash identifier: d7uC2UGEKFJkX1NtNmPXZoHv5RnuAeSd8fpAYpSfgJY= Subject key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66391C4A7451123ACBFDA026B24710814ECF1011 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft caRepository: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 26 Mar 2025 18:51:07 +0000 Certificate not after: Wed 25 Mar 2026 18:56:07 +0000 Subordinate resources: AS: 28204 IP: 189.91.48.0/20 IP: 2804:414c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:39:1c:4a:74:51:12:3a:cb:fd:a0:26:b2:47:10:81:4e:cf:10:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 26 18:51:07 2025 GMT Not After : Mar 25 18:56:07 2026 GMT Subject: CN=A99D272225729B303C95F28914878741C6AE29BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:07:07:22:86:9c:0e:04:b1:4f:ad:bb:1d: 57:6a:2e:8a:3a:1b:f8:e4:85:31:91:f7:7a:0e:37: 87:a5:c1:51:a4:20:09:d4:11:c9:b9:c1:e8:c7:b4: fe:80:1f:13:b2:d7:cd:ff:7c:82:9d:3e:9e:a3:e2: 9b:f9:6c:e1:ad:74:1b:27:6e:52:49:65:76:de:4b: 29:ba:0e:88:9a:6a:2e:7a:59:3f:56:89:90:a5:2a: 61:4a:62:06:ec:ad:a9:01:e5:97:70:ad:fc:b3:66: ac:a4:bc:d1:bc:38:79:29:b4:7b:eb:9a:9e:2e:bb: 50:8c:b0:c1:f4:6c:37:0a:bd:72:ba:82:59:b1:35: 13:ee:0b:b3:16:41:c3:3d:4c:d2:cb:66:c7:ec:99: 95:aa:a8:0e:16:5e:06:e4:c4:fb:10:f5:da:16:d0: 0b:6f:cd:b1:a4:0b:27:c9:f0:a8:1e:2a:82:2a:c8: 11:0d:03:c3:59:bd:c5:10:9d:18:2f:71:59:ba:4a: a6:9a:92:30:3b:0b:58:b2:4b:6b:73:5c:a0:94:76: cf:23:45:bb:db:05:5d:4b:b7:cb:f4:1a:77:98:c0: d9:2b:28:33:9e:73:4c:78:87:a6:3a:4e:dd:57:f5: 12:54:f5:25:1c:e4:d5:1d:b6:04:82:4f:2b:29:c5: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.91.48.0/20 IPv6: 2804:414c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28204 Signature Algorithm: sha256WithRSAEncryption 7a:be:0f:59:27:0a:71:36:22:8b:08:a2:c4:4f:09:81:5b:9f: 90:dd:7a:30:1d:44:24:5c:1f:e2:4a:e9:26:bb:17:c4:c0:fb: b3:eb:1d:39:e4:a6:5d:50:a2:13:5c:f6:50:d8:69:bb:9f:28: 19:de:9c:ad:4c:24:22:58:d0:38:85:4c:f1:88:af:79:50:78: 6c:38:44:b3:ab:47:c7:23:81:95:e9:ba:1c:13:d7:53:fb:ee: bf:5c:83:c3:47:69:3b:2e:fe:60:6c:3f:99:cc:4f:9c:42:9c: 34:c1:1d:50:ac:9c:18:a9:66:d1:da:9e:87:bf:a6:28:b2:18: 42:b5:a4:6f:7e:31:7b:9b:de:46:1c:ed:96:2f:73:9e:9d:25: f4:1d:21:a0:8f:df:1d:62:9e:dd:b8:6e:e8:a9:bc:b6:54:f7: c1:e3:4f:1f:c8:fa:0f:7c:43:a9:0f:86:c2:0f:2d:3c:76:57: ed:c2:fa:6b:bb:1f:e2:8b:e3:53:55:e2:81:6a:16:bc:76:1f: bd:09:01:43:99:2a:41:70:95:14:63:5b:96:a4:cb:e2:69:02: 27:4b:97:a2:06:be:f0:41:02:e0:45:c0:b4:30:94:6e:cb:fa: f9:f7:12:cd:79:19:a1:a0:b8:50:4e:ab:0c:d1:7d:91:d5:46: 72:e3:5a:75 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUZjkcSnRREjrL/aAmskcQgU7PEBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjYxODUxMDdaFw0yNjAzMjUxODU2MDdaMDMxMTAvBgNV BAMTKEE5OUQyNzIyMjU3MjlCMzAzQzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85QcHIoacDgSxT627HVdqLoo6 G/jkhTGR93oON4elwVGkIAnUEcm5wejHtP6AHxOy183/fIKdPp6j4pv5bOGtdBsn blJJZXbeSym6Doiaai56WT9WiZClKmFKYgbsrakB5ZdwrfyzZqykvNG8OHkptHvr mp4uu1CMsMH0bDcKvXK6glmxNRPuC7MWQcM9TNLLZsfsmZWqqA4WXgbkxPsQ9doW 0AtvzbGkCyfJ8KgeKoIqyBENA8NZvcUQnRgvcVm6SqaakjA7C1iyS2tzXKCUds8j RbvbBV1Lt8v0GneYwNkrKDOec0x4h6Y6Tt1X9RJU9SUc5NUdtgSCTyspxXWTAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpnSciJXKbMDyV 8okUh4dBxq4pvjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRD a2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0 Q2tod3lUTkh3TEIxWUxuaU1mTU44dFJhazZUUUxZM2t0NkpwV0RQTUZoLzAvQTk5 RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFDNkFFMjlCRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEvVswMA0EAgACMAcDBQAoBEFMMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm4sMA0GCSqGSIb3DQEBCwUAA4IBAQB6vg9ZJwpxNiKLCKLE TwmBW5+Q3XowHUQkXB/iSukmuxfEwPuz6x055KZdUKITXPZQ2Gm7nygZ3pytTCQi WNA4hUzxiK95UHhsOESzq0fHI4GV6bocE9dT++6/XIPDR2k7Lv5gbD+ZzE+cQpw0 wR1QrJwYqWbR2p6Hv6YoshhCtaRvfjF7m95GHO2WL3OenSX0HSGgj98dYp7duG7o qby2VPfB408fyPoPfEOpD4bCDy08dlftwvprux/ii+NTVeKBaha8dh+9CQFDmSpB cJUUY1uWpMviaQInS5eiBr7wQQLgRcC0MJRuy/r59xLNeRmhoLhQTqsM0X2R1UZy 41p1 -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:22 2025 by rpki-client on console.sobornost.net