$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer File: B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer (raw, json) Hash identifier: 7j3snTQ4+GscWxiLVcLfRVEcObNc12n1tA0MQTwL/uM= Subject key identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2C414FF2D7C79DE587607D20151BC8FCCC821EE4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft caRepository: rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:50 +0000 Certificate not after: Wed 04 Mar 2026 18:40:50 +0000 Subordinate resources: AS: 270994 IP: 138.59.136.0/22 IP: 2804:74a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:41:4f:f2:d7:c7:9d:e5:87:60:7d:20:15:1b:c8:fc:cc:82:1e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:50 2025 GMT Not After : Mar 4 18:40:50 2026 GMT Subject: CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:af:53:1b:90:6a:30:7d:d5:7b:6b:67:dc: 0a:82:67:fe:e2:e1:ea:e0:00:d2:24:ec:65:35:82: d3:f7:6c:89:de:80:14:bb:63:2d:01:bf:9f:47:a2: 0f:3d:16:97:64:3b:75:b9:95:72:2e:3c:d9:c1:b8: 80:9b:ed:e1:a3:7c:11:f6:01:1f:e6:df:da:5b:6a: 0e:92:f2:33:9d:91:e7:16:74:31:5d:ce:cd:3a:86: 1f:42:cb:ef:86:f0:dd:ef:ee:2c:9c:bf:9a:0a:a2: 38:b7:f4:a6:bd:76:5a:a6:5c:79:09:b7:e7:3d:c8: 32:03:e4:cf:90:25:b3:7a:de:dd:f8:bc:52:9b:e0: 75:1b:db:73:a0:37:e1:3d:6e:73:4c:9b:eb:df:24: fd:cf:55:7a:90:6e:ff:02:6c:d5:6f:63:55:25:99: 6a:ac:a0:5b:34:db:23:c9:8e:ee:e2:48:a8:35:5e: c4:8a:21:4e:33:cc:ca:94:36:6e:c1:a8:54:75:af: 02:db:eb:1c:51:e5:bd:ce:95:0d:23:da:05:ee:23: ef:7b:1d:69:87:16:93:02:c8:41:a6:3e:d0:53:0d: eb:c8:12:46:d7:d3:2a:97:f0:98:76:a7:9a:0c:a2: f5:ef:3e:ce:cd:14:9b:81:8f:e6:25:41:67:89:e4: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.59.136.0/22 IPv6: 2804:74a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270994 Signature Algorithm: sha256WithRSAEncryption a0:a2:c3:4b:72:07:25:52:52:2f:bb:f3:84:90:77:81:8f:d0: ee:8f:41:86:3a:ae:fa:83:ae:a7:00:6a:46:53:95:54:34:d0: 4d:a8:b9:f4:56:36:3c:bf:8e:8e:39:6d:2e:4b:25:b6:41:81: d6:01:a2:07:8a:18:f1:1e:d5:ea:b1:30:4b:92:e0:a2:5e:de: f5:aa:2b:54:31:d4:19:42:96:da:66:13:4c:34:d2:29:62:da: 83:28:7c:83:5a:bb:8a:00:2c:e8:3d:e6:02:cb:fe:4d:06:66: ea:be:72:a5:96:f5:23:27:78:d9:1d:1f:1e:57:93:af:37:cf: 81:ec:a1:4b:da:82:6b:d2:fd:ee:0f:54:98:38:a6:6b:6a:6d: 70:02:85:b6:18:3b:f9:67:39:46:10:18:a8:a9:2d:03:ba:09: 6f:91:8e:90:26:e0:cf:84:3c:b8:99:21:72:a9:80:12:08:cd: 51:83:6e:41:7a:ea:26:17:d0:93:b3:0d:bb:0d:a1:ca:fa:d8: 54:1c:80:c2:5c:e7:2a:23:c4:be:9a:70:49:86:e5:70:5f:e9: 98:fc:d4:2b:44:05:dd:85:80:47:4e:21:8f:e9:5d:80:6f:1a: d0:a0:05:73:73:00:5e:7f:40:c2:37:1b:06:49:cb:81:f8:e9: 04:e8:4e:ec -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULEFP8tfHneWHYH0gFRvI/MyCHuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NTBaFw0yNjAzMDQxODQwNTBaMDMxMTAvBgNV BAMTKEIyRDA0NkQxNEZFN0I3N0Y2MkRFODk2RUJGMEE4MTU0MTNBNTg5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kq9TG5BqMH3Ve2tn3AqCZ/7i 4ergANIk7GU1gtP3bInegBS7Yy0Bv59Hog89FpdkO3W5lXIuPNnBuICb7eGjfBH2 AR/m39pbag6S8jOdkecWdDFdzs06hh9Cy++G8N3v7iycv5oKoji39Ka9dlqmXHkJ t+c9yDID5M+QJbN63t34vFKb4HUb23OgN+E9bnNMm+vfJP3PVXqQbv8CbNVvY1Ul mWqsoFs02yPJju7iSKg1XsSKIU4zzMqUNm7BqFR1rwLb6xxR5b3OlQ0j2gXuI+97 HWmHFpMCyEGmPtBTDevIEkbX0yqX8Jh2p5oMovXvPs7NFJuBj+YlQWeJ5COBAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSy0EbRT+e3f2Le iW6/CoFUE6WJvzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRllu SzdMRTVXaUtGQzdjZWhuTjV0YUxRY2pDSHZ1aG9Yb0pCUGl3cEJaYjkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRllu SzdMRTVXaUtGQzdjZWhuTjV0YUxRY2pDSHZ1aG9Yb0pCUGl3cEJaYjkvMS9CMkQw NDZEMTRGRTdCNzdGNjJERTg5NkVCRjBBODE1NDEzQTU4OUJGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKO4gwDQQCAAIwBwMFACgEdKQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCKSMA0GCSqGSIb3DQEBCwUAA4IBAQCgosNLcgclUlIvu/OE kHeBj9Duj0GGOq76g66nAGpGU5VUNNBNqLn0VjY8v46OOW0uSyW2QYHWAaIHihjx HtXqsTBLkuCiXt71qitUMdQZQpbaZhNMNNIpYtqDKHyDWruKACzoPeYCy/5NBmbq vnKllvUjJ3jZHR8eV5OvN8+B7KFL2oJr0v3uD1SYOKZram1wAoW2GDv5ZzlGEBio qS0DuglvkY6QJuDPhDy4mSFyqYASCM1Rg25BeuomF9CTsw27DaHK+thUHIDCXOcq I8S+mnBJhuVwX+mY/NQrRAXdhYBHTiGP6V2AbxrQoAVzcwBef0DCNxsGScuB+OkE 6E7s -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:24 2025 by rpki-client on console.sobornost.net