$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer File: B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer (raw, json) Hash identifier: n3/vxPeXpuegW6opeqOTu9intHXjAla2uqI8vWG1LNs= Subject key identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 67EF637FEAA456E010971E06CC587D4F0553388F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft caRepository: rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 09:57:33 +0000 Certificate not after: Thu 05 Mar 2026 10:02:33 +0000 Subordinate resources: AS: 265130 IP: 143.208.152.0/22 IP: 170.254.200.0/22 IP: 2804:2b00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ef:63:7f:ea:a4:56:e0:10:97:1e:06:cc:58:7d:4f:05:53:38:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 09:57:33 2025 GMT Not After : Mar 5 10:02:33 2026 GMT Subject: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:3c:40:1f:f4:5c:10:bb:71:72:11:f7:c4: 5f:e4:11:e7:fc:70:f5:1e:1b:88:21:c4:9a:7e:46: 29:8f:ee:6d:22:e4:5c:e0:dd:cd:c1:44:b4:d8:03: 1c:5f:76:fe:53:94:56:01:30:0c:1e:fc:29:38:01: 75:b0:1f:57:f7:97:cd:64:d2:7f:bd:2e:d7:f1:d4: 85:b7:ff:e3:e5:35:83:b2:bb:3c:2b:e7:b5:e6:be: b4:3d:ca:de:b0:9a:10:6d:5b:c8:c9:b3:5b:4d:28: bf:39:86:30:1f:8a:b0:26:0b:fb:0f:79:1f:d2:5e: f2:d5:14:6a:e8:73:6a:be:86:dd:58:72:f4:a8:03: 44:9e:dd:22:2a:71:78:69:f0:d4:fa:e9:1c:08:ec: 3b:18:80:49:33:90:1d:18:6a:38:76:0f:cd:07:f1: 43:24:21:5f:25:ac:1d:4f:47:c6:ac:7c:e2:a1:68: aa:36:c3:a9:5a:08:a1:4d:98:c6:a6:57:34:f0:f2: e7:97:e8:04:e9:bc:1a:91:fb:99:d5:17:e1:b9:4a: a6:a4:fd:96:b6:9d:ae:94:3a:04:24:31:64:30:f2: 49:ae:c4:77:14:99:ef:97:af:2a:49:81:17:2e:d4: 39:fc:c5:14:a5:59:05:1c:aa:a1:9a:91:22:c5:af: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.152.0/22 170.254.200.0/22 IPv6: 2804:2b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265130 Signature Algorithm: sha256WithRSAEncryption bc:02:19:2c:76:be:19:e0:10:15:e0:30:af:d0:6c:b0:b9:48: 19:23:10:e7:18:57:21:ab:8b:0a:3d:d6:51:ef:a9:87:68:6f: 12:da:bd:33:73:e9:8a:4b:85:99:77:d0:63:d5:48:02:64:22: 57:08:06:c6:f2:d8:49:3b:2c:ea:d3:57:13:cb:7b:88:58:b9: 61:fc:60:43:51:27:e5:f5:62:97:ba:ea:79:fb:09:cd:8a:70: b9:cf:65:1d:6c:24:bc:8a:2d:ef:83:49:a2:fc:bd:71:7d:de: e1:ea:37:aa:1c:f0:e4:2f:a6:98:7a:ff:85:69:a5:8c:43:2e: 05:81:ad:f8:3c:b3:b3:1f:00:00:d0:b0:13:c0:85:f1:d2:d6: 48:ab:e4:36:24:73:c1:83:25:f0:3d:b5:5c:ec:b1:83:f7:58: d9:57:51:bc:8a:56:c5:86:9a:73:8e:e6:a3:4b:9c:91:65:a2: 9c:1b:fc:be:23:fa:4f:b0:98:8b:b3:61:d2:c2:37:d7:0c:bb: f5:06:ea:72:78:0e:04:2b:04:1c:45:65:b8:f8:f3:2f:6e:20: aa:d7:68:09:a6:2b:64:db:f9:14:84:aa:a3:63:68:25:61:a9: a7:44:be:dc:4e:cd:37:2d:ef:77:db:f1:7e:34:41:fb:2c:90: 76:69:77:20 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUZ+9jf+qkVuAQlx4GzFh9TwVTOI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwOTU3MzNaFw0yNjAzMDUxMDAyMzNaMDMxMTAvBgNV BAMTKEI0RjAyMjk5QTJFREU1QkRGNTNGNkRFQ0FDNTI5QzI5RjZFOTI4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3zxAH/RcELtxchH3xF/kEef8 cPUeG4ghxJp+RimP7m0i5Fzg3c3BRLTYAxxfdv5TlFYBMAwe/Ck4AXWwH1f3l81k 0n+9Ltfx1IW3/+PlNYOyuzwr57XmvrQ9yt6wmhBtW8jJs1tNKL85hjAfirAmC/sP eR/SXvLVFGroc2q+ht1YcvSoA0Se3SIqcXhp8NT66RwI7DsYgEkzkB0Yajh2D80H 8UMkIV8lrB1PR8asfOKhaKo2w6laCKFNmMamVzTw8ueX6ATpvBqR+5nVF+G5Sqak /Za2na6UOgQkMWQw8kmuxHcUme+XrypJgRcu1Dn8xRSlWQUcqqGakSLFr/55AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS08CKZou3lvfU/ beysUpwp9ukogTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOERk MnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1eHcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOERk MnlhZlFFRFJ5TFNuRWhYd2g2Q21TWXdCdUpFNXEzNXpLRFZCbVk1eHcvMS9CNEYw MjI5OUEyRURFNUJERjUzRjZERUNBQzUyOUMyOUY2RTkyODgxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP0JgDBAKq/sgwDQQCAAIwBwMFACgEKwAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAuqMA0GCSqGSIb3DQEBCwUAA4IBAQC8Ahksdr4Z 4BAV4DCv0GywuUgZIxDnGFchq4sKPdZR76mHaG8S2r0zc+mKS4WZd9Bj1UgCZCJX CAbG8thJOyzq01cTy3uIWLlh/GBDUSfl9WKXuup5+wnNinC5z2UdbCS8ii3vg0mi /L1xfd7h6jeqHPDkL6aYev+FaaWMQy4Fga34PLOzHwAA0LATwIXx0tZIq+Q2JHPB gyXwPbVc7LGD91jZV1G8ilbFhppzjuajS5yRZaKcG/y+I/pPsJiLs2HSwjfXDLv1 BupyeA4EKwQcRWW4+PMvbiCq12gJpitk2/kUhKqjY2glYamnRL7cTs03Le932/F+ NEH7LJB2aXcg -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:18 2025 by rpki-client on console.sobornost.net