$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer File: AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer (raw, json) Hash identifier: oSgEJC+rndUrVkKdbHz7tVK85XX4P7trSU1F/eJEmpQ= Subject key identifier: AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 37E37E2A0A07FADAC77D276B08AE4BAD0F52E16C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft caRepository: rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 13:59:14 +0000 Certificate not after: Fri 06 Mar 2026 14:04:14 +0000 Subordinate resources: AS: 268458 IP: 45.161.100.0/22 IP: 2804:5188::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e3:7e:2a:0a:07:fa:da:c7:7d:27:6b:08:ae:4b:ad:0f:52:e1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 13:59:14 2025 GMT Not After : Mar 6 14:04:14 2026 GMT Subject: CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:46:89:d7:eb:3e:94:cd:4c:b4:bc:49:67: 87:90:c3:a3:1c:8e:3d:f2:37:14:34:df:f3:67:df: 60:2d:8e:4d:b5:a1:2b:2a:f5:37:50:30:10:3b:d8: 5f:65:08:4d:44:9c:9b:21:69:e0:7c:28:cc:c4:29: 48:18:01:db:14:c3:f7:82:da:7a:a1:83:12:e7:45: 8d:4f:7a:58:c3:56:49:4d:dc:09:43:f8:7f:4f:23: 43:83:fc:62:64:5c:c2:a4:c9:2c:db:e7:18:84:7a: 83:60:fd:25:93:0f:30:33:e2:e5:41:dd:f1:1b:ab: 7b:30:36:0c:80:86:66:3a:d9:6c:ed:68:0d:03:45: cf:aa:1b:e2:f1:0b:8e:fc:b7:47:d4:f0:c7:68:1f: 0a:c1:2b:54:5c:9c:9a:24:7e:3e:8f:1f:d3:2d:6b: 4b:3d:11:90:23:d2:9c:24:ef:30:e9:67:a3:9c:f5: c8:bb:ac:84:7f:8b:1a:b8:53:78:ee:fa:b2:7d:69: ae:6b:16:60:1e:09:57:6b:9d:bf:2a:ae:8b:c3:b2: c2:9e:cf:69:a9:26:a2:19:79:60:45:35:e5:e3:27: 34:00:cf:e7:70:7f:12:2a:69:7d:d2:5d:eb:41:e3: ce:d2:1f:b3:29:7d:a3:b1:4b:30:2c:36:de:5f:24: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.100.0/22 IPv6: 2804:5188::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268458 Signature Algorithm: sha256WithRSAEncryption 89:78:71:ee:7a:56:25:a0:b1:17:69:f2:4b:4c:48:e1:a1:46: c6:78:11:31:e3:eb:5a:4b:fa:18:9d:df:36:c4:15:4e:13:99: 61:bc:43:46:1a:6b:6d:cb:2b:55:e6:1f:5e:6f:39:1a:1c:ed: b7:d6:0d:c0:ea:b6:39:3b:a1:d4:2e:98:e2:2a:16:8f:f4:84: 6f:be:50:dd:41:e2:2c:26:10:af:9b:c3:03:5a:03:a5:14:35: 98:dc:d8:e4:af:fa:b6:d4:9c:ed:d3:8c:47:b3:9e:ab:7d:e0: ef:0d:f2:b5:4e:91:f2:20:e9:c0:08:d7:9d:fc:61:39:4e:11: 08:04:d0:07:01:34:f5:01:d3:d4:53:5f:73:a2:46:f9:ea:0f: 65:83:42:3a:b9:d4:a8:ff:cf:b1:94:bd:90:50:e2:9f:18:c9: f5:60:7e:47:d7:4a:f2:ab:4d:2e:65:36:b6:16:cc:99:d2:33: 20:a9:d2:e2:57:20:d3:4f:65:c2:74:a5:16:c4:27:be:de:15: 8f:9c:1c:f4:e2:d7:08:94:d2:4d:95:da:d6:23:54:67:7a:4d: 53:3a:05:f6:f0:17:f7:0d:92:23:ec:03:f8:77:8c:eb:5f:9d: 80:21:cd:11:f0:87:59:3f:9f:d5:24:5e:e8:5f:ee:cf:0f:0b: a7:c9:7f:10 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUN+N+KgoH+trHfSdrCK5LrQ9S4WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxMzU5MTRaFw0yNjAzMDYxNDA0MTRaMDMxMTAvBgNV BAMTKEFDNDY5Mjk4RTRFNTY5ODM0MzlBQTQ0MUI0QjZDQUZCQjA0RjhGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUEaJ1+s+lM1MtLxJZ4eQw6Mc jj3yNxQ03/Nn32Atjk21oSsq9TdQMBA72F9lCE1EnJshaeB8KMzEKUgYAdsUw/eC 2nqhgxLnRY1PeljDVklN3AlD+H9PI0OD/GJkXMKkySzb5xiEeoNg/SWTDzAz4uVB 3fEbq3swNgyAhmY62WztaA0DRc+qG+LxC478t0fU8MdoHwrBK1RcnJokfj6PH9Mt a0s9EZAj0pwk7zDpZ6Oc9ci7rIR/ixq4U3ju+rJ9aa5rFmAeCVdrnb8qrovDssKe z2mpJqIZeWBFNeXjJzQAz+dwfxIqaX3SXetB487SH7MpfaOxSzAsNt5fJHt1AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSsRpKY5OVpg0Oa pEG0tsr7sE+PKDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXFy UHdqS2VVc1cxZHk0WERCWk1kWTdXU0w3UTNOM3RuSHhtOTFUY3RZQkMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlx clB3aktlVXNXMWR5NFhEQlpNZFk3V1NMN1EzTjN0bkh4bTkxVGN0WUJDLzEvQUM0 NjkyOThFNEU1Njk4MzQzOUFBNDQxQjRCNkNBRkJCMDRGOEYyOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaFkMA0EAgACMAcDBQAoBFGIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYqjANBgkqhkiG9w0BAQsFAAOCAQEAiXhx7npWJaCxF2ny S0xI4aFGxngRMePrWkv6GJ3fNsQVThOZYbxDRhprbcsrVeYfXm85Ghztt9YNwOq2 OTuh1C6Y4ioWj/SEb75Q3UHiLCYQr5vDA1oDpRQ1mNzY5K/6ttSc7dOMR7Oeq33g 7w3ytU6R8iDpwAjXnfxhOU4RCATQBwE09QHT1FNfc6JG+eoPZYNCOrnUqP/PsZS9 kFDinxjJ9WB+R9dK8qtNLmU2thbMmdIzIKnS4lcg009lwnSlFsQnvt4Vj5wc9OLX CJTSTZXa1iNUZ3pNUzoF9vAX9w2SI+wD+HeM61+dgCHNEfCHWT+f1SRe6F/uzw8L p8l/EA== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:16 2025 by rpki-client on console.sobornost.net