$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD595D204511E7BF9500B295B9BA709FBECD3FA3.cer File: AD595D204511E7BF9500B295B9BA709FBECD3FA3.cer (raw, json) Hash identifier: J0K/tm/9l0HeColp3SyNCFntHPpSo0Z4T9E1/0BjUcI= Subject key identifier: AD:59:5D:20:45:11:E7:BF:95:00:B2:95:B9:BA:70:9F:BE:CD:3F:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 04063DE43D97B4BE6D0D59BECB02E5CB8C9683FD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/AD595D204511E7BF9500B295B9BA709FBECD3FA3.mft caRepository: rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 24 Feb 2025 12:51:21 +0000 Certificate not after: Mon 23 Feb 2026 12:56:21 +0000 Subordinate resources: AS: 274688 IP: 2804:9214::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:06:3d:e4:3d:97:b4:be:6d:0d:59:be:cb:02:e5:cb:8c:96:83:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 24 12:51:21 2025 GMT Not After : Feb 23 12:56:21 2026 GMT Subject: CN=AD595D204511E7BF9500B295B9BA709FBECD3FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:60:31:70:1a:62:0b:56:b3:e0:5c:85:16: 16:46:a4:18:c9:bb:04:5f:89:54:77:0c:46:69:f3: 76:e8:fb:18:8d:13:02:c3:13:36:9f:ef:e3:43:b7: 93:a0:6b:4a:de:90:95:9d:41:9a:45:60:68:fb:cd: 52:8d:3a:13:0a:0f:c2:17:02:97:18:20:d0:f0:04: 8e:ab:cf:83:3a:dd:55:48:2e:7b:d9:21:eb:14:9a: 97:ac:91:77:b5:1f:89:c6:fa:4d:84:43:51:1b:e6: 7a:19:c9:f7:62:ef:55:a6:79:f6:d9:16:13:ad:b4: 0f:84:b3:8a:38:23:04:a9:fc:f3:24:44:ef:f9:57: c1:f7:8d:61:3b:57:ff:6a:9b:1e:ba:b2:ba:17:e0: b6:d7:90:d1:f7:7b:c5:84:21:10:26:9b:76:32:a4: 5d:17:0b:f4:ff:af:90:25:cd:d5:b3:d4:ae:8c:d1: ba:da:03:5c:9e:cb:e1:1c:77:a8:22:72:ba:d0:22: cb:63:40:57:4e:17:21:f4:22:e5:0f:5f:7d:61:ef: 37:dc:b8:65:c1:33:12:b5:43:6d:e6:1a:89:83:8e: 00:72:a4:c3:6c:d8:e1:00:7f:e8:45:67:1a:92:f0: 86:a0:ec:27:4c:f6:53:77:50:88:6c:c7:a2:e0:60: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:59:5D:20:45:11:E7:BF:95:00:B2:95:B9:BA:70:9F:BE:CD:3F:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/AD595D204511E7BF9500B295B9BA709FBECD3FA3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:9214::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274688 Signature Algorithm: sha256WithRSAEncryption 90:cd:40:a2:9e:63:a6:57:ee:36:46:b4:4b:fe:bf:65:b2:e0: 30:01:d8:ac:ca:9c:d4:06:b3:1b:2d:f3:a2:d6:81:5f:5b:99: 40:a7:db:0f:b8:7e:d6:58:0b:71:02:7a:88:b4:47:94:ae:a8: 09:d8:f9:57:de:0d:15:00:a7:da:6b:f1:18:93:07:84:61:78: 08:12:02:fa:27:fb:76:b2:b6:25:80:2b:2d:fd:1b:18:6e:a0: 0b:a8:60:64:36:d1:1b:a0:0f:fe:27:20:81:60:d9:07:46:17: 03:22:cb:63:67:6b:22:3d:b7:01:b2:f1:9d:48:c2:52:24:02: 5c:b2:1d:f0:92:9d:86:40:41:c0:b4:d2:11:ba:fa:e8:65:a8: 34:d7:ab:a9:72:5f:d3:26:35:60:c9:7a:3b:4b:23:45:bb:67: 41:74:c7:0e:41:0a:31:0e:1f:5a:1a:4f:56:7b:a3:7b:ff:95: 8e:3c:8f:4b:50:d4:bd:82:ad:99:ba:71:e9:0c:90:cc:27:96: 60:b8:b9:43:2a:24:d1:f7:21:dc:1c:78:6f:82:f6:f3:b4:90: 85:68:b3:32:aa:9b:97:19:3c:29:66:91:4c:58:01:87:c3:31: 66:c0:cb:35:95:7f:1f:a9:ca:9e:0c:ce:18:f4:74:ff:ea:ae: b2:fa:59:54 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUBAY95D2XtL5tDVm+ywLly4yWg/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjQxMjUxMjFaFw0yNjAyMjMxMjU2MjFaMDMxMTAvBgNV BAMTKEFENTk1RDIwNDUxMUU3QkY5NTAwQjI5NUI5QkE3MDlGQkVDRDNGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ1GAxcBpiC1az4FyFFhZGpBjJ uwRfiVR3DEZp83bo+xiNEwLDEzaf7+NDt5Oga0rekJWdQZpFYGj7zVKNOhMKD8IX ApcYINDwBI6rz4M63VVILnvZIesUmpeskXe1H4nG+k2EQ1Eb5noZyfdi71WmefbZ FhOttA+Es4o4IwSp/PMkRO/5V8H3jWE7V/9qmx66sroX4LbXkNH3e8WEIRAmm3Yy pF0XC/T/r5AlzdWz1K6M0braA1yey+Ecd6gicrrQIstjQFdOFyH0IuUPX31h7zfc uGXBMxK1Q23mGomDjgBypMNs2OEAf+hFZxqS8Iag7CdM9lN3UIhsx6LgYLeFAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStWV0gRRHnv5UA spW5unCfvs0/ozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhZ aUJVVGp2dnVwVWtrOHBCQ2lKOFIyVld0elRMWXU5SnlRTWJyQ2g0Tk0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4 WWlCVVRqdnZ1cFVrazhwQkNpSjhSMlZXdHpUTFl1OUp5UU1ickNoNE5NLzAvQUQ1 OTVEMjA0NTExRTdCRjk1MDBCMjk1QjlCQTcwOUZCRUNEM0ZBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASSFDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME MQAwDQYJKoZIhvcNAQELBQADggEBAJDNQKKeY6ZX7jZGtEv+v2Wy4DAB2KzKnNQG sxst86LWgV9bmUCn2w+4ftZYC3ECeoi0R5SuqAnY+VfeDRUAp9pr8RiTB4RheAgS Avon+3aytiWAKy39GxhuoAuoYGQ20RugD/4nIIFg2QdGFwMiy2NnayI9twGy8Z1I wlIkAlyyHfCSnYZAQcC00hG6+uhlqDTXq6lyX9MmNWDJejtLI0W7Z0F0xw5BCjEO H1oaT1Z7o3v/lY48j0tQ1L2CrZm6cekMkMwnlmC4uUMqJNH3IdwceG+C9vO0kIVo szKqm5cZPClmkUxYAYfDMWbAyzWVfx+pyp4Mzhj0dP/qrrL6WVQ= -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:23 2025 by rpki-client on console.sobornost.net