$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer File: AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer (raw, json) Hash identifier: fPAnFlhR05S0c3dlGrtZui3SZzdjgcDSo0vmQ92JKFM= Subject key identifier: AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 53DD33D5C312898131AFD47C52F59BC0C3914B29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft caRepository: rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 17:32:14 +0000 Certificate not after: Thu 02 Apr 2026 17:37:14 +0000 Subordinate resources: AS: 265170 IP: 167.249.120.0/22 IP: 2804:2bb4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:dd:33:d5:c3:12:89:81:31:af:d4:7c:52:f5:9b:c0:c3:91:4b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 17:32:14 2025 GMT Not After : Apr 2 17:37:14 2026 GMT Subject: CN=AE4918B47F20CB240F597D2AFBC73EF5DA714C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:5d:70:24:c6:0a:58:6f:05:4b:4f:fb:b6: 0f:47:5b:4c:9a:e6:72:68:05:4d:db:b4:d2:7b:8b: 87:0c:fd:39:7e:4b:63:61:6d:00:c8:fc:ca:bc:ec: cd:40:75:ab:42:93:bc:ca:f0:21:0c:05:78:99:1b: 28:3c:c4:e3:6c:45:e4:24:39:16:d1:66:bc:1f:91: bf:96:17:9a:27:ea:26:bb:b7:76:26:4a:fa:1f:ec: 88:25:8b:75:3f:ba:cf:65:47:69:fc:e2:0f:67:48: 2e:3d:50:1f:c0:0d:3a:2d:fa:82:f1:7c:19:75:e0: fb:10:49:94:e0:ea:47:8b:8c:5a:d4:a5:96:1e:e6: 4a:d0:f4:f5:50:c3:6f:c5:9d:3b:a6:03:eb:de:c6: 49:ff:39:13:86:7a:55:8b:65:34:67:cd:a3:21:34: e4:fb:2d:f7:3d:0b:c2:87:27:00:07:6f:a7:20:c0: ab:22:17:73:95:9c:fd:4f:4b:b0:f1:26:00:a2:30: ad:e8:b0:26:f7:65:a8:e2:2b:d4:8c:0a:e5:f4:a0: 94:da:8d:cb:6e:ff:50:2e:17:a6:f2:13:5e:ad:eb: 56:23:e1:38:ca:a1:fe:3f:54:0f:86:0b:4c:e0:05: cb:3a:08:79:23:4e:56:4a:48:42:c8:c4:65:03:30: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.249.120.0/22 IPv6: 2804:2bb4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265170 Signature Algorithm: sha256WithRSAEncryption cd:0d:bc:4b:86:bb:b1:a3:4a:15:cd:bd:d8:0f:49:48:de:b5: c7:dd:cb:8f:9d:17:6b:2c:a6:aa:2a:32:d2:e7:c0:fe:8b:72: b2:a9:a9:b4:4d:94:2d:67:5c:1a:09:18:fc:2f:26:1b:1e:bc: a7:39:e7:a6:96:92:51:10:01:4a:58:5f:de:76:06:59:18:82: b6:8f:5c:91:32:d6:8f:17:0b:79:66:76:84:33:5b:14:f1:a9: ab:89:b7:1e:0c:1f:17:f0:09:be:b2:a9:c8:6e:33:ee:9b:20: 29:0a:96:22:26:af:ee:c6:dd:21:66:2c:9f:4c:80:9b:53:a3: db:f4:a2:6b:ad:ac:47:b2:f7:22:3e:87:d8:2c:c8:e9:76:34: 5a:3a:37:06:42:65:2a:0c:8a:4c:89:83:9c:65:34:20:81:21: e5:35:e9:df:59:e0:c6:44:21:e7:f2:8d:56:12:ac:f8:9b:3b: f4:43:99:1f:d6:e2:99:81:27:bc:8b:ee:4b:06:4b:47:d5:e9: 2d:88:66:83:75:99:f5:cb:2e:ca:b0:75:87:c0:7c:ae:3a:33: 3a:8b:35:c4:67:62:6a:d5:21:97:5d:74:73:ea:24:1d:56:a9: b9:1e:69:1d:6d:f5:ac:5a:21:b4:31:33:d0:24:e1:62:47:51: cc:5c:6d:2d -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUU90z1cMSiYExr9R8UvWbwMORSykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDMxNzMyMTRaFw0yNjA0MDIxNzM3MTRaMDMxMTAvBgNV BAMTKEFFNDkxOEI0N0YyMENCMjQwRjU5N0QyQUZCQzczRUY1REE3MTRDMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8L11wJMYKWG8FS0/7tg9HW0ya 5nJoBU3btNJ7i4cM/Tl+S2NhbQDI/Mq87M1AdatCk7zK8CEMBXiZGyg8xONsReQk ORbRZrwfkb+WF5on6ia7t3YmSvof7Igli3U/us9lR2n84g9nSC49UB/ADTot+oLx fBl14PsQSZTg6keLjFrUpZYe5krQ9PVQw2/FnTumA+vexkn/OROGelWLZTRnzaMh NOT7Lfc9C8KHJwAHb6cgwKsiF3OVnP1PS7DxJgCiMK3osCb3ZajiK9SMCuX0oJTa jctu/1AuF6byE16t61Yj4TjKof4/VA+GC0zgBcs6CHkjTlZKSELIxGUDMEmhAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSuSRi0fyDLJA9Z fSr7xz712nFMCTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzNV S3ZFcDR3WXJKUkhid1NLZ2R1ODhjVUZpTVZtMUdyVmZXdTFRem1DTVovMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzNV S3ZFcDR3WXJKUkhid1NLZ2R1ODhjVUZpTVZtMUdyVmZXdTFRem1DTVovMC9BRTQ5 MThCNDdGMjBDQjI0MEY1OTdEMkFGQkM3M0VGNURBNzE0QzA5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKn+XgwDQQCAAIwBwMFACgEK7QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAvSMA0GCSqGSIb3DQEBCwUAA4IBAQDNDbxLhruxo0oVzb3Y D0lI3rXH3cuPnRdrLKaqKjLS58D+i3Kyqam0TZQtZ1waCRj8LyYbHrynOeemlpJR EAFKWF/edgZZGIK2j1yRMtaPFwt5ZnaEM1sU8amribceDB8X8Am+sqnIbjPumyAp CpYiJq/uxt0hZiyfTICbU6Pb9KJrraxHsvciPofYLMjpdjRaOjcGQmUqDIpMiYOc ZTQggSHlNenfWeDGRCHn8o1WEqz4mzv0Q5kf1uKZgSe8i+5LBktH1ektiGaDdZn1 yy7KsHWHwHyuOjM6izXEZ2Jq1SGXXXRz6iQdVqm5HmkdbfWsWiG0MTPQJOFiR1HM XG0t -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:23 2025 by rpki-client on console.sobornost.net