$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer File: C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer (raw, json) Hash identifier: 8JE0f6ctTUaEB7hj4ljmKl90F1GDUrgZ7TRQZM8k100= Subject key identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 78F702269AF2290128C8E221A7A09EDE934D9204 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft caRepository: rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:34 +0000 Certificate not after: Wed 04 Mar 2026 18:41:34 +0000 Subordinate resources: AS: 267322 IP: 192.144.72.0/23 IP: 2801:80:2380::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f7:02:26:9a:f2:29:01:28:c8:e2:21:a7:a0:9e:de:93:4d:92:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:34 2025 GMT Not After : Mar 4 18:41:34 2026 GMT Subject: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:aa:35:68:25:93:00:db:7a:b5:52:b2:48: 9b:6c:b2:32:4e:20:7f:4b:ea:d9:bb:68:2d:19:9d: 78:46:de:3b:65:ea:c2:3c:c8:9a:d2:55:e9:4f:53: 41:95:a6:ae:a0:61:31:3b:18:55:f0:b2:12:66:20: b7:17:5f:3f:95:bc:9e:1a:f9:3f:9a:80:7d:ca:b3: 90:ff:e1:38:2e:16:55:7c:8f:df:22:22:c4:0c:cf: d2:bc:e5:d9:f2:17:0c:4c:04:97:98:60:a2:a9:15: 81:84:77:2d:40:3e:49:d6:19:37:05:05:92:88:b0: ef:29:42:17:ed:19:46:1e:40:7c:44:98:92:22:8a: 9d:c9:91:4d:17:69:1b:2f:29:70:fc:7a:6d:83:45: 88:43:ae:69:08:a1:69:19:a4:48:d3:f7:65:d0:60: 73:6c:04:a2:af:b7:bd:9c:46:03:a0:d6:85:c0:fa: ff:f3:6d:e2:f1:43:53:56:85:20:07:7f:49:81:81: 32:92:86:1a:d8:ec:d7:0d:e9:f3:a6:e2:b3:38:4e: a5:a6:44:22:b1:4b:61:0d:dd:34:c7:c3:b7:0a:6e: 53:81:dc:2f:35:a2:d5:85:f8:a7:75:3b:22:85:ef: d8:8f:91:e4:12:36:9d:20:f3:c8:0d:6d:c3:b0:03: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.144.72.0/23 IPv6: 2801:80:2380::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267322 Signature Algorithm: sha256WithRSAEncryption 55:2c:f5:0c:64:7c:fa:a5:cb:d8:37:d8:84:65:18:d8:40:7b: 4d:44:86:e4:d5:38:61:a2:ff:1a:8a:07:b9:f2:1b:02:dc:ea: e9:49:cc:13:93:66:77:01:14:ae:fd:c6:38:ae:e0:1e:aa:e8: 92:ab:9a:9d:64:6b:7d:a8:7d:e5:8e:e1:82:37:6e:3e:6d:cd: 3f:3e:5c:a0:ed:e9:82:e1:d6:2e:e9:7a:2c:c6:d9:42:65:0e: 02:63:4f:bb:ee:33:ae:bc:0a:c6:91:49:92:fe:94:66:f9:f7: 21:12:ed:65:57:88:e3:69:fb:b1:d7:53:63:52:38:85:ac:62: f1:02:3d:3e:be:e4:0b:11:d5:b8:c6:6a:7b:b7:c6:91:b2:3b: c3:9e:dc:8b:40:49:60:ca:53:ec:b7:90:c2:f1:56:71:86:5a: f7:c5:a1:e1:8f:6a:b8:bd:86:a0:aa:c7:50:72:ef:87:fd:13: 65:d6:24:58:80:14:84:f2:63:fa:73:5d:e7:2c:c2:5f:20:3c: 39:56:dd:de:ac:44:93:fd:11:b9:f1:a9:ca:19:21:51:d2:16: 95:9c:e2:27:72:7e:51:d0:ae:96:9d:bd:0f:5c:4a:b2:f4:18: b3:c0:82:cc:3d:0d:24:21:b3:e7:21:e7:18:cf:83:8d:c7:34: a4:87:bd:2e -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIUePcCJpryKQEoyOIhp6Ce3pNNkgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2MzRaFw0yNjAzMDQxODQxMzRaMDMxMTAvBgNV BAMTKEMxQzdGODM0MzA5MjA1REYwOTQ0QkE1QzA1RkU2MkQ2NTYwN0Y2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpKo1aCWTANt6tVKySJtssjJO IH9L6tm7aC0ZnXhG3jtl6sI8yJrSVelPU0GVpq6gYTE7GFXwshJmILcXXz+VvJ4a +T+agH3Ks5D/4TguFlV8j98iIsQMz9K85dnyFwxMBJeYYKKpFYGEdy1APknWGTcF BZKIsO8pQhftGUYeQHxEmJIiip3JkU0XaRsvKXD8em2DRYhDrmkIoWkZpEjT92XQ YHNsBKKvt72cRgOg1oXA+v/zbeLxQ1NWhSAHf0mBgTKShhrY7NcN6fOm4rM4TqWm RCKxS2EN3TTHw7cKblOB3C81otWF+Kd1OyKF79iPkeQSNp0g88gNbcOwA3KLAgMB AAGjggM7MIIDNzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBx/g0MJIF3wlE ulwF/mLWVgf2wDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnZQ UGcyS0RZM0RlNG1EQTdFaXljNmZGNndLaDNhUlN5UTVmYUpRWjhtZkQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnZQ UGcyS0RZM0RlNG1EQTdFaXljNmZGNndLaDNhUlN5UTVmYUpRWjhtZkQvMS9DMUM3 RjgzNDMwOTIwNURGMDk0NEJBNUMwNUZFNjJENjU2MDdGNkMwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcB Af8EITAfMAwEAgABMAYDBAHAkEgwDwQCAAIwCQMHACgBAIAjgDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMEFDowDQYJKoZIhvcNAQELBQADggEBAFUs9QxkfPqly9g3 2IRlGNhAe01EhuTVOGGi/xqKB7nyGwLc6ulJzBOTZncBFK79xjiu4B6q6JKrmp1k a32ofeWO4YI3bj5tzT8+XKDt6YLh1i7peizG2UJlDgJjT7vuM668CsaRSZL+lGb5 9yES7WVXiONp+7HXU2NSOIWsYvECPT6+5AsR1bjGanu3xpGyO8Oe3ItASWDKU+y3 kMLxVnGGWvfFoeGPari9hqCqx1By74f9E2XWJFiAFITyY/pzXecswl8gPDlW3d6s RJP9EbnxqcoZIVHSFpWc4idyflHQrpadvQ9cSrL0GLPAgsw9DSQhs+ch5xjPg43H NKSHvS4= -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:27 2025 by rpki-client on console.sobornost.net