$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer File: CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.cer (raw, json) Hash identifier: QzOIvkQdgP5SVzRkkqYdjqY9EgQDR4psHzoBkqNxgsQ= Subject key identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E1E6B076D73AD35AA8F1B62107D18EE543BFFA3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft caRepository: rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:48 +0000 Certificate not after: Wed 04 Mar 2026 18:41:48 +0000 Subordinate resources: AS: 263265 IP: 179.107.8.0/21 IP: 2804:1610::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1e:6b:07:6d:73:ad:35:aa:8f:1b:62:10:7d:18:ee:54:3b:ff:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:48 2025 GMT Not After : Mar 4 18:41:48 2026 GMT Subject: CN=CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e6:04:2f:b3:a2:fd:c6:3e:80:7b:28:7b:00: c6:7a:dd:c7:da:f8:69:70:51:04:1f:8b:09:bf:9a: 09:52:c0:8d:c3:cd:e4:60:65:85:db:af:7f:ac:6e: f7:bb:ba:42:80:c1:cf:3c:d9:54:b8:22:a8:46:76: 85:8b:7a:84:1e:be:4c:ed:c3:27:bd:e8:ed:98:98: b9:21:96:84:cb:da:c2:6e:7e:6e:9c:25:9e:8f:37: 0a:26:b3:d7:73:81:3d:c8:07:c5:da:c0:d4:aa:6e: bf:81:51:ea:d4:72:55:ae:ec:1f:5a:86:4c:ad:50: b8:6d:0e:71:1f:58:ba:c8:49:8c:06:f1:e3:9d:be: b0:e6:ee:26:b4:6f:9e:01:b6:86:20:b5:7c:9b:35: 33:0d:6b:aa:cf:32:41:f3:93:e6:90:36:19:a9:af: d4:24:bd:ef:33:a1:c6:be:3a:fc:5c:72:d9:9a:df: be:54:52:5e:5e:e6:6a:05:c8:dc:42:59:0c:2b:ee: 57:40:88:19:58:99:94:63:32:a5:67:be:93:8b:59: 77:56:6a:1a:0c:29:94:36:7c:24:45:dd:c8:b8:98: f8:7d:9b:f1:15:bd:1a:6c:92:6c:b7:b3:f6:a1:2a: 32:60:4c:8a:82:22:27:b2:6f:b0:ea:9f:88:b9:79: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:59:E2:41:FF:AA:C5:9F:A0:BA:1D:08:D9:8F:B8:1A:87:C5:D1:7E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8y2o5537cC6YcCsBAN8vWMBU5aQMJc5mzhKB4utNmaUz/1/CB59E241FFAAC59FA0BA1D08D98FB81A87C5D17E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.107.8.0/21 IPv6: 2804:1610::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263265 Signature Algorithm: sha256WithRSAEncryption 77:a5:b9:a4:78:c4:e3:5b:fc:81:2f:72:56:9f:d5:0c:5b:08: f9:7a:ec:74:bf:02:0d:6d:29:76:11:25:ce:a4:6e:90:ad:0b: 95:40:a2:80:f7:8b:8a:c8:5a:ad:66:91:18:ac:91:8d:a8:49: 19:e3:c2:77:82:bd:27:bc:c4:de:10:60:4c:61:59:9e:67:fd: 22:b5:5c:43:bd:30:f9:2e:23:0d:17:2d:14:51:37:fd:5a:64: fc:f6:11:8e:0e:91:b2:4f:93:9d:5e:a7:9c:46:22:bb:68:73: c8:3d:b1:58:6a:81:3f:6d:59:69:15:ef:e6:ad:fa:4c:57:4e: 83:8f:1c:c6:1c:03:ea:0f:b3:47:74:58:a4:ef:89:bd:ef:6c: 8b:64:5d:8f:ac:0a:bb:54:4d:53:6b:b8:42:7f:93:0f:f6:87: 0d:c3:77:bc:79:54:fc:2a:5e:e4:af:eb:84:ad:b8:70:39:fc: 2c:f3:1c:90:29:43:cf:33:03:43:a5:de:68:d5:9a:f9:2c:01: 83:5b:77:37:19:b5:56:e2:ad:b1:48:63:90:ea:0a:03:14:7c: fa:a2:2a:90:e3:32:85:d2:e4:5e:86:a7:9e:b3:32:81:60:9c: 0f:25:94:fe:09:a7:14:f8:13:ef:01:6f:f2:38:04:5b:d4:c9: 5f:af:bf:42 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULh5rB21zrTWqjxtiEH0Y7lQ7/6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2NDhaFw0yNjAzMDQxODQxNDhaMDMxMTAvBgNV BAMTKENCNTlFMjQxRkZBQUM1OUZBMEJBMUQwOEQ5OEZCODFBODdDNUQxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5gQvs6L9xj6Aeyh7AMZ63cfa +GlwUQQfiwm/mglSwI3DzeRgZYXbr3+sbve7ukKAwc882VS4IqhGdoWLeoQevkzt wye96O2YmLkhloTL2sJufm6cJZ6PNwoms9dzgT3IB8XawNSqbr+BUerUclWu7B9a hkytULhtDnEfWLrISYwG8eOdvrDm7ia0b54BtoYgtXybNTMNa6rPMkHzk+aQNhmp r9Qkve8zoca+Ovxcctma375UUl5e5moFyNxCWQwr7ldAiBlYmZRjMqVnvpOLWXdW ahoMKZQ2fCRF3ci4mPh9m/EVvRpskmy3s/ahKjJgTIqCIieyb7Dqn4i5eV5XAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLWeJB/6rFn6C6 HQjZj7gah8XRfjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHky bzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1hVXovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHky bzU1MzdjQzZZY0NzQkFOOHZXTUJVNWFRTUpjNW16aEtCNHV0Tm1hVXovMS9DQjU5 RTI0MUZGQUFDNTlGQTBCQTFEMDhEOThGQjgxQTg3QzVEMTdFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAOzawgwDQQCAAIwBwMFACgEFhAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBARhMA0GCSqGSIb3DQEBCwUAA4IBAQB3pbmkeMTjW/yBL3JW n9UMWwj5eux0vwINbSl2ESXOpG6QrQuVQKKA94uKyFqtZpEYrJGNqEkZ48J3gr0n vMTeEGBMYVmeZ/0itVxDvTD5LiMNFy0UUTf9WmT89hGODpGyT5OdXqecRiK7aHPI PbFYaoE/bVlpFe/mrfpMV06DjxzGHAPqD7NHdFik74m972yLZF2PrAq7VE1Ta7hC f5MP9ocNw3e8eVT8Kl7kr+uErbhwOfws8xyQKUPPMwNDpd5o1Zr5LAGDW3c3GbVW 4q2xSGOQ6goDFHz6oiqQ4zKF0uRehqeeszKBYJwPJZT+CacU+BPvAW/yOARb1Mlf r79C -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:29 2025 by rpki-client on console.sobornost.net