$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer File: B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer (raw, json) Hash identifier: +X+fRZGo3NKPPhRMCZulSpz8GKZ4NnbstOVU/9oZiiM= Subject key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 39723EC722AEE3D3CB2968D4A9C4CF5ED29FEBD7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft caRepository: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:12 +0000 Certificate not after: Fri 06 Mar 2026 14:42:12 +0000 Subordinate resources: AS: 52758 IP: 177.38.184.0/21 IP: 201.131.240.0/21 IP: 2804:b38::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:72:3e:c7:22:ae:e3:d3:cb:29:68:d4:a9:c4:cf:5e:d2:9f:eb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:12 2025 GMT Not After : Mar 6 14:42:12 2026 GMT Subject: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:69:65:8b:fa:d1:cc:45:ca:9f:72:91:12: c9:45:d8:26:fa:17:59:3c:76:0e:2b:18:78:ce:09: 39:bb:23:34:2f:4b:63:bd:32:7d:f9:87:6f:8c:90: 46:99:56:c2:38:50:e9:ce:28:d8:d0:17:79:f9:04: bb:6b:b1:61:ed:b7:a0:7f:e0:a8:f1:ae:33:a8:c5: e8:15:2f:a4:bc:39:3c:1e:e0:d0:7e:04:d9:42:86: 1a:f8:ee:3b:6e:93:1c:59:71:e7:64:f3:02:43:03: 44:11:f1:b5:39:89:23:70:51:cb:04:f7:7b:ef:fc: d4:6c:99:23:dc:d4:3d:a7:d0:6f:67:34:62:ef:f4: 36:d4:c3:c3:f3:61:0b:a7:0c:18:98:0f:3f:3c:04: 7e:43:9a:c5:b2:96:c3:97:2e:36:0e:dd:36:65:6b: 04:7d:67:a0:db:47:2b:71:40:8f:5d:ad:f6:38:77: c2:c4:36:02:a1:8f:66:20:f4:de:5b:ff:67:81:28: bf:02:89:12:42:d7:21:74:d1:9b:b3:74:72:a6:21: 6c:de:1c:85:c7:57:7a:fc:95:85:7b:02:6f:f1:f3: 3d:82:b0:b3:d3:85:80:d2:35:08:f4:d9:a5:99:1d: ac:b9:d1:fd:10:ba:7b:73:15:00:29:e6:b6:7d:1e: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.38.184.0/21 201.131.240.0/21 IPv6: 2804:b38::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52758 Signature Algorithm: sha256WithRSAEncryption 24:99:83:e8:81:6f:fa:a2:fa:fb:7a:5c:77:a1:03:b9:bc:3e: d3:3b:cf:e5:ec:92:4f:61:d7:aa:ad:f3:ce:c8:e9:e5:7a:58: 4a:31:61:17:7a:e2:d8:02:e2:dc:c1:8a:95:73:f1:11:dd:22: c0:a8:bf:97:9b:e7:c8:22:a5:40:dd:dc:51:bd:76:5f:c9:64: 99:9b:51:49:73:80:11:8b:e9:b7:17:b9:d3:89:60:65:94:94: a9:a8:ab:92:9d:22:a2:9a:ac:73:0e:c1:9a:0d:35:ee:44:ed: dd:7f:df:b9:c5:05:90:bd:aa:a8:c2:b6:9d:a5:33:32:c9:34: 68:db:3f:d9:d8:8e:2b:e5:2b:e1:9b:b7:71:42:9b:8c:32:c9: f0:69:72:42:d3:dc:7b:84:d2:77:51:ef:c9:7b:f8:06:3d:16: fb:65:ed:f6:5f:40:70:2f:1e:69:97:dd:42:db:9c:89:d8:cc: 0a:90:db:be:1b:ea:1c:12:88:48:1b:8b:f5:c7:38:ab:05:ba: 7d:fb:dd:b8:c8:4c:93:7f:d4:31:d2:06:92:9e:63:0f:33:89: a6:ea:4b:a9:f0:73:ab:19:75:24:fd:46:49:af:72:3c:8a:26: c4:9b:cb:5f:c6:b3:f0:47:34:06:60:a4:f6:f4:2c:7e:fc:61: ee:68:9a:3e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOXI+xyKu49PLKWjUqcTPXtKf69cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MTJaFw0yNjAzMDYxNDQyMTJaMDMxMTAvBgNV BAMTKEIzRTQ1RkYzRkQyMUZCNzc1Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88Wlli/rRzEXKn3KREslF2Cb6 F1k8dg4rGHjOCTm7IzQvS2O9Mn35h2+MkEaZVsI4UOnOKNjQF3n5BLtrsWHtt6B/ 4KjxrjOoxegVL6S8OTwe4NB+BNlChhr47jtukxxZcedk8wJDA0QR8bU5iSNwUcsE 93vv/NRsmSPc1D2n0G9nNGLv9DbUw8PzYQunDBiYDz88BH5DmsWylsOXLjYO3TZl awR9Z6DbRytxQI9drfY4d8LENgKhj2Yg9N5b/2eBKL8CiRJC1yF00ZuzdHKmIWze HIXHV3r8lYV7Am/x8z2CsLPThYDSNQj02aWZHay50f0QuntzFQAp5rZ9HmYPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSz5F/z/SH7d191 Awt7JMAk43DG2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR25y REU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1c2gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0du ckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEvQjNF NDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRFMzcwQzZEQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsSa4AwQDyYPwMA0EAgACMAcDBQAoBAs4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOFjANBgkqhkiG9w0BAQsFAAOCAQEAJJmD6IFv +qL6+3pcd6EDubw+0zvP5eyST2HXqq3zzsjp5XpYSjFhF3ri2ALi3MGKlXPxEd0i wKi/l5vnyCKlQN3cUb12X8lkmZtRSXOAEYvptxe504lgZZSUqairkp0iopqscw7B mg017kTt3X/fucUFkL2qqMK2naUzMsk0aNs/2diOK+Ur4Zu3cUKbjDLJ8GlyQtPc e4TSd1HvyXv4Bj0W+2Xt9l9AcC8eaZfdQtucidjMCpDbvhvqHBKISBuL9cc4qwW6 ffvduMhMk3/UMdIGkp5jDzOJpupLqfBzqxl1JP1GSa9yPIomxJvLX8az8Ec0BmCk 9vQsfvxh7miaPg== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:24 2025 by rpki-client on console.sobornost.net