$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.cer File: B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.cer (raw, json) Hash identifier: HClDml7/5Cg1x0V/gyP8X0u8CUZWQIzLWkYjVfmOMnA= Subject key identifier: B0:1C:0A:2D:1B:A3:62:A7:84:73:A2:F4:FC:F2:33:7F:67:AC:B5:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2EA4B02DD79C3660743003222C4ACEE1A8C1593F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.mft caRepository: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 Jan 2025 13:37:37 +0000 Certificate not after: Fri 23 Jan 2026 13:42:37 +0000 Subordinate resources: AS: 268669 IP: 45.164.100.0/22 IP: 2804:54c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a4:b0:2d:d7:9c:36:60:74:30:03:22:2c:4a:ce:e1:a8:c1:59:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 24 13:37:37 2025 GMT Not After : Jan 23 13:42:37 2026 GMT Subject: CN=B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:b8:fb:71:ad:ba:e3:18:3e:ff:c1:5d:fe: 2d:a4:ca:da:f5:69:b6:be:4b:12:70:b5:03:4a:e2: 8b:d1:50:2d:a1:38:58:3d:60:fb:94:84:0d:bb:82: ec:67:5a:10:3d:67:e1:b9:28:32:b8:81:ca:87:48: 3d:23:5f:2e:22:4d:80:28:bc:98:93:fc:96:85:f1: 2c:22:1f:e1:89:bb:f4:a7:1a:2c:2b:70:80:2b:60: c6:f3:df:d9:29:4f:e6:85:18:82:41:f9:e8:79:d2: 66:32:3b:d4:4f:88:38:dd:02:1b:5e:0d:e9:a6:5f: db:5b:ec:dc:47:c3:46:97:d3:2c:09:3a:7e:f2:0a: 22:67:50:15:d8:f8:31:d0:4f:d8:f8:7f:34:69:2f: 6b:53:a9:25:67:e6:3c:6e:4d:98:bf:a9:8e:a9:43: d4:b1:ec:22:ca:5b:3b:9f:6d:46:53:ed:63:07:d7: 52:8e:67:28:62:41:07:49:b0:90:a8:5d:99:13:67: fb:bb:c3:22:8b:c5:fb:4b:31:b8:6f:8d:1c:85:8f: 4b:33:46:fd:17:68:18:5a:40:d0:a1:b3:8a:f0:12: fd:ee:df:db:e9:89:53:aa:12:fe:d5:78:6c:1e:71: 46:0c:4d:95:e0:34:48:da:fb:23:9a:73:be:69:d7: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:1C:0A:2D:1B:A3:62:A7:84:73:A2:F4:FC:F2:33:7F:67:AC:B5:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/B01C0A2D1BA362A78473A2F4FCF2337F67ACB58F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.100.0/22 IPv6: 2804:54c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268669 Signature Algorithm: sha256WithRSAEncryption a3:32:cc:69:06:06:48:7c:71:b5:4b:be:b4:15:bc:57:f6:6c: df:d5:8c:4b:3f:9b:69:92:83:1f:77:c6:ac:0f:1d:75:a1:c6: ad:66:13:2f:ee:41:4a:3a:0a:8a:cf:a1:e6:5b:02:55:6b:16: 4c:65:03:b7:74:c5:f8:be:ad:b6:57:d1:ed:7e:ba:02:33:d1: 12:60:0c:6b:63:86:76:7c:be:4f:e0:7e:e3:1c:7e:73:7f:47: eb:51:7a:c9:ac:c8:75:f0:d8:7e:99:27:50:33:ab:a2:7f:d8: 80:4f:ec:b4:b8:b6:2f:db:95:c4:6c:82:b5:87:4a:e8:e6:cb: 50:cc:9f:8f:07:95:51:09:ce:4d:e8:8d:bf:89:11:68:23:a0: 88:81:0d:6c:23:9d:b7:65:80:59:dd:5d:e3:2c:a6:1a:00:ad: 0a:62:db:b1:1f:be:e1:92:8f:78:17:73:f7:e6:d2:45:b3:4f: 6b:8d:31:a4:7e:27:c2:a8:5e:70:63:73:4a:41:4d:0e:36:ea: e8:b1:d6:88:4c:39:52:b5:9e:d7:b7:a1:de:35:33:26:cc:12: a0:5e:99:62:7d:4f:eb:8e:3e:c1:81:4b:64:4c:fe:30:c7:73: fd:ce:95:67:65:38:49:bf:01:f7:39:ab:30:16:f3:c0:ca:48: ab:30:5d:a4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULqSwLdecNmB0MAMiLErO4ajBWT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjQxMzM3MzdaFw0yNjAxMjMxMzQyMzdaMDMxMTAvBgNV BAMTKEIwMUMwQTJEMUJBMzYyQTc4NDczQTJGNEZDRjIzMzdGNjdBQ0I1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nrj7ca264xg+/8Fd/i2kytr1 aba+SxJwtQNK4ovRUC2hOFg9YPuUhA27guxnWhA9Z+G5KDK4gcqHSD0jXy4iTYAo vJiT/JaF8SwiH+GJu/SnGiwrcIArYMbz39kpT+aFGIJB+eh50mYyO9RPiDjdAhte DemmX9tb7NxHw0aX0ywJOn7yCiJnUBXY+DHQT9j4fzRpL2tTqSVn5jxuTZi/qY6p Q9Sx7CLKWzufbUZT7WMH11KOZyhiQQdJsJCoXZkTZ/u7wyKLxftLMbhvjRyFj0sz Rv0XaBhaQNChs4rwEv3u39vpiVOqEv7VeGwecUYMTZXgNEja+yOac75p14WXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwHAotG6Nip4Rz ovT88jN/Z6y1jzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2g3 aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZzdUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNo N2hXRnJqWUdMOVJMN2dxa2tzWkZoMlpERlJ1aHBxWjFVNk1WTnlWc3VDLzAvQjAx QzBBMkQxQkEzNjJBNzg0NzNBMkY0RkNGMjMzN0Y2N0FDQjU4Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaRkMA0EAgACMAcDBQAoBFTEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZfTANBgkqhkiG9w0BAQsFAAOCAQEAozLMaQYGSHxxtUu+ tBW8V/Zs39WMSz+baZKDH3fGrA8ddaHGrWYTL+5BSjoKis+h5lsCVWsWTGUDt3TF +L6ttlfR7X66AjPREmAMa2OGdny+T+B+4xx+c39H61F6yazIdfDYfpknUDOron/Y gE/stLi2L9uVxGyCtYdK6ObLUMyfjweVUQnOTeiNv4kRaCOgiIENbCOdt2WAWd1d 4yymGgCtCmLbsR++4ZKPeBdz9+bSRbNPa40xpH4nwqhecGNzSkFNDjbq6LHWiEw5 UrWe17eh3jUzJswSoF6ZYn1P644+wYFLZEz+MMdz/c6VZ2U4Sb8B9zmrMBbzwMpI qzBdpA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:24 2025 by rpki-client on console.sobornost.net