$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer File: B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.cer (raw, json) Hash identifier: ZxNANlE5/fJgWqTvou80v/lm91c7xjT9RPfDSsNiwxk= Subject key identifier: B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E508E9BF97A53BD9B924563F79616580FC67A78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft caRepository: rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 16:50:21 +0000 Certificate not after: Tue 21 Apr 2026 16:55:21 +0000 Subordinate resources: AS: 269704 IP: 45.189.160.0/22 IP: 45.191.104.0/22 IP: 2804:689c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:50:8e:9b:f9:7a:53:bd:9b:92:45:63:f7:96:16:58:0f:c6:7a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 16:50:21 2025 GMT Not After : Apr 21 16:55:21 2026 GMT Subject: CN=B0C3C6B983747F871BB1AE8CE992EAC776B76AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ef:23:bb:ab:8f:3e:4c:8a:78:85:12:53:67: ad:93:0f:aa:fb:01:74:f7:03:6f:bb:c0:0f:33:88: e5:82:c2:ee:14:d1:cd:05:12:15:73:b1:f2:11:9f: 7f:1d:d9:21:9d:a9:1c:09:d2:a2:21:ba:d0:f1:cd: d3:6e:0d:0e:10:61:84:15:2e:01:33:16:33:65:8b: 9f:4e:c4:84:2e:87:93:0f:e2:bd:4b:d7:7c:14:97: 5f:68:c9:39:47:fa:b8:eb:3d:2d:4a:be:3c:01:9e: 76:f7:92:8b:c2:ab:0f:74:da:2a:c0:7f:6d:49:50: a5:7b:ee:f3:a6:52:2f:9a:38:87:d1:73:cd:ea:a8: 3a:0a:bf:61:be:c9:b6:89:a9:11:9b:bf:b8:ab:d1: d2:3e:30:75:cb:ad:7e:7b:12:2d:d8:a2:ab:de:21: 44:35:66:10:8a:0c:8e:0f:49:87:9f:44:10:4c:5f: 5a:ce:92:ac:e8:a2:df:e2:6b:d1:7e:f5:8f:30:07: fc:bf:6b:c5:bf:5c:8e:38:9a:86:5b:88:a2:6c:5e: 7a:54:17:01:de:f1:bb:6f:6f:9d:cf:20:c4:ce:49: 60:6d:a9:0e:60:5b:7d:d5:d4:34:aa:df:49:d5:22: c2:09:39:1b:39:45:75:b5:ff:8c:b5:e0:e0:ee:bc: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:C3:C6:B9:83:74:7F:87:1B:B1:AE:8C:E9:92:EA:C7:76:B7:6A:B3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Zrika1qUUPkEfi5YNPVqF5d3YjffWv2NgKEVsd2HYcA/1/B0C3C6B983747F871BB1AE8CE992EAC776B76AB3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.160.0/22 45.191.104.0/22 IPv6: 2804:689c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269704 Signature Algorithm: sha256WithRSAEncryption 26:45:a2:29:10:72:d5:14:74:df:d6:4b:1c:9e:30:99:6d:d5: a6:c5:40:cc:05:ba:dd:8f:08:08:5a:97:a8:35:36:4f:1a:a9: 15:76:5f:e1:75:4c:ec:4c:f1:96:fa:76:3b:5a:0d:6a:b3:f9: f6:b2:ff:eb:25:29:ad:62:28:75:c6:1c:13:21:37:37:a6:47: c9:c7:85:c4:23:e7:d7:85:f6:2d:fa:26:d5:4c:1a:50:3f:6f: 40:52:86:e6:8d:47:6b:90:7b:66:55:ec:fd:01:66:10:3f:c3: b7:bb:fe:54:cf:9c:fe:6f:da:53:67:30:a7:76:e7:95:e6:32: 32:0f:a3:73:d9:e8:f5:40:19:01:5d:c1:88:94:14:e6:10:88: e5:df:bc:fb:74:15:7b:a9:f0:0e:21:cb:02:fb:1a:1f:2b:26: d6:16:4c:4f:1a:e3:c9:b8:3a:13:09:cf:be:cb:43:f5:70:e3: da:1a:84:29:f9:f9:a9:f0:2d:44:59:74:f9:98:38:0d:19:b9: d9:48:06:3d:14:cb:30:72:ba:f9:1b:5b:71:96:c6:9f:97:34: a2:a6:20:4a:53:dd:20:4d:a4:94:6a:aa:38:d6:1b:2b:f9:e4: 4d:8f:cd:f5:f1:27:9b:2a:e8:83:2a:5a:a0:30:72:82:12:d3: 9c:f1:65:a3 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIULlCOm/l6U72bkkVj95YWWA/GengwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIxNjUwMjFaFw0yNjA0MjExNjU1MjFaMDMxMTAvBgNV BAMTKEIwQzNDNkI5ODM3NDdGODcxQkIxQUU4Q0U5OTJFQUM3NzZCNzZBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7yO7q48+TIp4hRJTZ62TD6r7 AXT3A2+7wA8ziOWCwu4U0c0FEhVzsfIRn38d2SGdqRwJ0qIhutDxzdNuDQ4QYYQV LgEzFjNli59OxIQuh5MP4r1L13wUl19oyTlH+rjrPS1KvjwBnnb3kovCqw902irA f21JUKV77vOmUi+aOIfRc83qqDoKv2G+ybaJqRGbv7ir0dI+MHXLrX57Ei3Yoqve IUQ1ZhCKDI4PSYefRBBMX1rOkqzoot/ia9F+9Y8wB/y/a8W/XI44moZbiKJsXnpU FwHe8btvb53PIMTOSWBtqQ5gW33V1DSq30nVIsIJORs5RXW1/4y14ODuvL6rAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSww8a5g3R/hxux rozpkurHdrdqszAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1py aWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZY0EvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1py aWthMXFVVVBrRWZpNVlOUFZxRjVkM1lqZmZXdjJOZ0tFVnNkMkhZY0EvMS9CMEMz QzZCOTgzNzQ3Rjg3MUJCMUFFOENFOTkyRUFDNzc2Qjc2QUIzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItvaADBAItv2gwDQQCAAIwBwMFACgEaJwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBB2IMA0GCSqGSIb3DQEBCwUAA4IBAQAmRaIpEHLV FHTf1kscnjCZbdWmxUDMBbrdjwgIWpeoNTZPGqkVdl/hdUzsTPGW+nY7Wg1qs/n2 sv/rJSmtYih1xhwTITc3pkfJx4XEI+fXhfYt+ibVTBpQP29AUobmjUdrkHtmVez9 AWYQP8O3u/5Uz5z+b9pTZzCndueV5jIyD6Nz2ej1QBkBXcGIlBTmEIjl37z7dBV7 qfAOIcsC+xofKybWFkxPGuPJuDoTCc++y0P1cOPaGoQp+fmp8C1EWXT5mDgNGbnZ SAY9FMswcrr5G1txlsaflzSipiBKU90gTaSUaqo41hsr+eRNj8318SebKuiDKlqg MHKCEtOc8WWj -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:38 2025 by rpki-client on console.sobornost.net