$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer File: AF84903523F7C1089CC2308CEEC9C1B4F2624F76.cer (raw, json) Hash identifier: sCZM8Hgeqrfne7nSubNDOo5+vKbYUhdM5o2jn7etCo0= Subject key identifier: AF:84:90:35:23:F7:C1:08:9C:C2:30:8C:EE:C9:C1:B4:F2:62:4F:76 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1E6172560744BB13811BE58239DB7A43830139F5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft caRepository: rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 23 Mar 2025 14:19:52 +0000 Certificate not after: Sun 22 Mar 2026 14:24:52 +0000 Subordinate resources: AS: 269025 IP: 45.178.128.0/22 IP: 2804:5e50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:61:72:56:07:44:bb:13:81:1b:e5:82:39:db:7a:43:83:01:39:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 14:19:52 2025 GMT Not After : Mar 22 14:24:52 2026 GMT Subject: CN=AF84903523F7C1089CC2308CEEC9C1B4F2624F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:fc:63:e7:18:97:8a:f9:13:a8:db:99:13: 30:da:85:6d:f1:49:03:e5:49:97:f8:26:c6:93:d1: c6:ae:30:32:6d:0b:8d:db:e4:17:b8:50:45:df:70: 08:31:01:0e:61:a8:74:a0:5f:cc:54:74:7e:84:50: 9e:5c:7d:db:f3:58:1d:34:c7:57:84:d6:1d:29:79: ea:3d:65:65:02:53:c6:79:d8:df:c9:aa:c6:dc:26: cc:4d:35:df:0c:14:c9:7d:56:ad:90:96:07:e7:4c: 12:90:c0:05:54:b8:4d:fb:df:7a:c3:95:70:99:64: fc:ac:02:ed:fe:82:8d:90:8b:38:8d:e3:47:2f:f3: e6:c9:f7:e1:60:3e:ad:e1:7a:76:fa:40:34:c9:41: 46:eb:f4:76:a3:fd:68:ee:02:a9:bb:a6:c4:9c:1b: 2b:8d:cf:cd:38:21:05:a4:65:54:c8:2d:03:04:11: 21:2c:33:67:44:21:67:30:5c:c7:3e:8c:9d:de:26: 8a:b3:34:83:ad:c5:34:ca:4c:05:b4:83:09:62:19: a2:6d:08:98:f6:cb:a3:f1:0f:6c:c0:e8:7c:cf:ea: 3b:fd:bc:ce:db:2b:d6:4f:22:e7:4d:63:04:b3:36: 3b:50:77:1c:52:0e:fd:3d:c1:e6:84:4b:18:6a:a0: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:84:90:35:23:F7:C1:08:9C:C2:30:8C:EE:C9:C1:B4:F2:62:4F:76 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HqfTtKwd1YHMHUpF5w28Bsi8bgCDPsyKHNPb9y16HQqd/0/AF84903523F7C1089CC2308CEEC9C1B4F2624F76.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.178.128.0/22 IPv6: 2804:5e50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269025 Signature Algorithm: sha256WithRSAEncryption 58:25:27:cf:01:d8:a5:18:a0:3e:5b:b5:e8:c2:29:01:76:5e: ab:fe:1a:f7:90:b3:91:ab:8d:e6:82:27:f9:8b:13:f9:37:f6: 59:3d:93:25:86:e0:87:8c:45:7c:8c:5a:d1:ef:ed:bc:18:a3: 54:8d:6b:6a:72:f0:bc:19:28:4d:00:ca:59:49:61:e0:cb:3c: f5:9a:7c:8d:66:c6:21:35:37:c1:49:20:aa:c3:ba:29:f5:73: 0e:77:fb:d3:ad:16:d0:a6:9a:bc:2f:0d:79:a5:78:cf:dc:e7: 45:f2:b1:1e:7d:d2:be:a6:35:91:75:b8:fe:6d:d5:a3:86:1f: 40:84:f0:44:a0:ef:93:19:16:3f:06:6b:bf:1d:96:8e:e6:78: 8f:d4:ee:87:af:f1:bc:87:f6:bb:2d:00:8d:dc:41:86:94:e6: 7b:57:45:4d:40:c0:11:d4:1e:cb:93:ee:d3:19:b8:f8:12:ae: d3:8d:39:68:b9:8c:07:35:6c:f3:00:b2:9b:eb:07:34:2c:41: 95:d4:63:67:1a:de:12:2d:2b:a8:ef:e6:f1:f5:9e:33:fe:61: 35:9f:7e:88:e1:8a:fb:68:3d:01:d7:88:05:0c:1b:0e:93:b1: a2:5e:7d:ae:86:fc:03:82:fb:f5:72:fc:8a:18:32:8d:e1:b2: 81:cb:f1:64 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHmFyVgdEuxOBG+WCOdt6Q4MBOfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjMxNDE5NTJaFw0yNjAzMjIxNDI0NTJaMDMxMTAvBgNV BAMTKEFGODQ5MDM1MjNGN0MxMDg5Q0MyMzA4Q0VFQzlDMUI0RjI2MjRGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUfxj5xiXivkTqNuZEzDahW3x SQPlSZf4JsaT0cauMDJtC43b5Be4UEXfcAgxAQ5hqHSgX8xUdH6EUJ5cfdvzWB00 x1eE1h0peeo9ZWUCU8Z52N/JqsbcJsxNNd8MFMl9Vq2QlgfnTBKQwAVUuE3733rD lXCZZPysAu3+go2QiziN40cv8+bJ9+FgPq3henb6QDTJQUbr9Haj/WjuAqm7psSc GyuNz804IQWkZVTILQMEESEsM2dEIWcwXMc+jJ3eJoqzNIOtxTTKTAW0gwliGaJt CJj2y6PxD2zA6HzP6jv9vM7bK9ZPIudNYwSzNjtQdxxSDv09weaESxhqoDJtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvhJA1I/fBCJzC MIzuycG08mJPdjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHFm VHRLd2QxWUhNSFVwRjV3MjhCc2k4YmdDRFBzeUtITlBiOXkxNkhRcWQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hx ZlR0S3dkMVlITUhVcEY1dzI4QnNpOGJnQ0RQc3lLSE5QYjl5MTZIUXFkLzAvQUY4 NDkwMzUyM0Y3QzEwODlDQzIzMDhDRUVDOUMxQjRGMjYyNEY3Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbKAMA0EAgACMAcDBQAoBF5QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQa4TANBgkqhkiG9w0BAQsFAAOCAQEAWCUnzwHYpRigPlu1 6MIpAXZeq/4a95CzkauN5oIn+YsT+Tf2WT2TJYbgh4xFfIxa0e/tvBijVI1ranLw vBkoTQDKWUlh4Ms89Zp8jWbGITU3wUkgqsO6KfVzDnf7060W0KaavC8NeaV4z9zn RfKxHn3SvqY1kXW4/m3Vo4YfQITwRKDvkxkWPwZrvx2WjuZ4j9Tuh6/xvIf2uy0A jdxBhpTme1dFTUDAEdQey5Pu0xm4+BKu0405aLmMBzVs8wCym+sHNCxBldRjZxre Ei0rqO/m8fWeM/5hNZ9+iOGK+2g9AdeIBQwbDpOxol59rob8A4L79XL8ihgyjeGy gcvxZA== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:38 2025 by rpki-client on console.sobornost.net