$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer File: CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer (raw, json) Hash identifier: 7Q2T9FcGfAMML1UHYKqKrmXrCTP7jOLRGpW9eeSXf0s= Subject key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0CAA6F2BC4AE74DEE4BDC2B0B5A2DC9DA7710449 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft caRepository: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 21:24:50 +0000 Certificate not after: Tue 21 Apr 2026 21:29:50 +0000 Subordinate resources: AS: 268640 IP: 45.164.196.0/22 IP: 2804:5448::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:aa:6f:2b:c4:ae:74:de:e4:bd:c2:b0:b5:a2:dc:9d:a7:71:04:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 21:24:50 2025 GMT Not After : Apr 21 21:29:50 2026 GMT Subject: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:dd:a5:57:ae:dc:4a:13:74:84:c1:45:be: ba:6b:f8:c1:c7:02:5a:f3:a8:ec:f4:26:83:4e:e6: 55:a2:7a:e9:0a:eb:98:41:57:8e:34:8b:be:84:89: db:42:71:c7:ee:39:12:fe:70:51:f1:41:62:40:90: 0c:9c:ac:b8:7c:d0:7a:39:38:86:49:e0:12:7d:e9: ec:3d:7d:1f:51:78:ef:90:cf:4c:fd:e3:8b:c4:0f: c6:29:83:9c:6e:af:d1:6f:fc:d3:bb:aa:bd:8b:31: 8c:96:d4:6e:9c:b8:a7:6b:73:53:2e:a8:0b:2a:24: 7a:b6:ae:57:e5:2d:82:98:1d:0d:98:e3:0c:e8:31: 00:62:b6:d0:e3:e4:3e:ed:9d:db:fb:b3:6e:40:4b: 67:34:00:19:93:65:cb:28:9c:44:b5:68:fc:cb:3d: a7:12:23:ee:e3:71:39:9d:ea:4b:1a:09:9a:d1:a0: a4:87:1a:0f:e4:27:c1:91:4e:df:3e:26:b0:19:60: eb:af:bc:23:0d:7e:00:13:4c:39:57:71:ae:a7:0c: 65:d1:ed:24:b4:cc:0a:78:4c:68:1a:33:53:07:4a: b7:7a:89:72:18:fd:f5:56:f9:6a:30:9d:3d:cb:d8: bb:ac:f2:69:8a:79:2c:d4:2e:50:01:2f:df:57:38: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.196.0/22 IPv6: 2804:5448::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268640 Signature Algorithm: sha256WithRSAEncryption 24:a8:b4:54:0e:f2:38:5b:61:83:63:37:12:28:e8:56:76:54: 3e:34:3d:09:b7:0e:aa:b9:36:17:3c:7f:1c:74:c1:02:3e:ac: bf:0a:49:e8:38:42:3d:1b:da:32:06:b8:da:cd:68:77:21:bd: a8:09:00:67:d1:ed:d6:d0:38:d8:7b:21:c6:da:98:69:b3:94: 5e:73:b5:39:43:22:a6:79:07:06:48:39:13:4c:2a:9e:64:40: 58:d8:93:3a:80:4c:0c:6b:38:95:39:5c:f1:61:fc:ca:42:0f: b3:d5:0c:6c:30:7a:ad:e4:c6:37:a0:2e:ba:4c:d7:8b:51:09: 7b:c1:12:c1:05:35:83:85:70:d3:19:c0:04:47:84:2a:39:9f: 4a:b4:a3:d7:79:f3:a2:dc:1a:d6:82:a4:aa:03:3b:26:a7:cf: 52:4e:d4:6f:64:26:89:02:7d:11:5c:ac:35:7b:df:98:9b:9b: 30:aa:23:08:4b:9e:bc:54:4d:76:7b:60:30:b7:9e:d1:c2:66: b6:a5:81:7a:fe:63:88:86:a5:7f:bb:9a:69:85:c4:3b:56:b9: 71:af:d4:37:3b:24:22:ca:d1:97:50:d6:50:17:44:7c:58:c1: 6a:1e:5e:50:43:fa:01:40:0a:30:d5:1c:51:5d:34:85:fe:15: e6:a0:45:0f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDKpvK8SudN7kvcKwtaLcnadxBEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIyMTI0NTBaFw0yNjA0MjEyMTI5NTBaMDMxMTAvBgNV BAMTKENCQTRBRkRFRjU3MEIzNDlBRjY4RUU5QTBBRDA3QkRERDdCMjMzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkht2lV67cShN0hMFFvrpr+MHH AlrzqOz0JoNO5lWieukK65hBV440i76EidtCccfuORL+cFHxQWJAkAycrLh80Ho5 OIZJ4BJ96ew9fR9ReO+Qz0z944vED8Ypg5xur9Fv/NO7qr2LMYyW1G6cuKdrc1Mu qAsqJHq2rlflLYKYHQ2Y4wzoMQBittDj5D7tndv7s25AS2c0ABmTZcsonES1aPzL PacSI+7jcTmd6ksaCZrRoKSHGg/kJ8GRTt8+JrAZYOuvvCMNfgATTDlXca6nDGXR 7SS0zAp4TGgaM1MHSrd6iXIY/fVW+WownT3L2Lus8mmKeSzULlABL99XOGBHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLpK/e9XCzSa9o 7poK0Hvd17Iz7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjNY cVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40Y3cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0oz WHFXVTRNaUpZbWVNSGNCS1o2QktBUDIydzFxQkpyeHF4Z2g0MlRONGN3LzAvQ0JB NEFGREVGNTcwQjM0OUFGNjhFRTlBMEFEMDdCREREN0IyMzNFRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaTEMA0EAgACMAcDBQAoBFRIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZYDANBgkqhkiG9w0BAQsFAAOCAQEAJKi0VA7yOFthg2M3 EijoVnZUPjQ9CbcOqrk2Fzx/HHTBAj6svwpJ6DhCPRvaMga42s1odyG9qAkAZ9Ht 1tA42HshxtqYabOUXnO1OUMipnkHBkg5E0wqnmRAWNiTOoBMDGs4lTlc8WH8ykIP s9UMbDB6reTGN6AuukzXi1EJe8ESwQU1g4Vw0xnABEeEKjmfSrSj13nzotwa1oKk qgM7JqfPUk7Ub2QmiQJ9EVysNXvfmJubMKojCEuevFRNdntgMLee0cJmtqWBev5j iIalf7uaaYXEO1a5ca/UNzskIsrRl1DWUBdEfFjBah5eUEP6AUAKMNUcUV00hf4V 5qBFDw== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:22 2025 by rpki-client on console.sobornost.net