$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer File: CC9F42C3A1E6623612312417013AA12DC19734C3.cer (raw, json) Hash identifier: esiqf0HP9ntCZoW67PHzP8+ML4sTyKp0Fq02HZpRPBc= Subject key identifier: CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 032375EBE50BC7924AB97885600D3C2DD9C189F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft caRepository: rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 10 Apr 2025 17:45:20 +0000 Certificate not after: Thu 09 Apr 2026 17:50:20 +0000 Subordinate resources: AS: 268016 IP: 45.167.148.0/22 IP: 2804:56a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:23:75:eb:e5:0b:c7:92:4a:b9:78:85:60:0d:3c:2d:d9:c1:89:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 10 17:45:20 2025 GMT Not After : Apr 9 17:50:20 2026 GMT Subject: CN=CC9F42C3A1E6623612312417013AA12DC19734C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:e7:fe:a0:88:39:c6:13:86:75:8c:8c:86: e1:2a:da:06:5d:8b:71:ff:8b:c9:b6:b3:8a:b9:29: 5e:ea:47:c8:85:76:3a:04:8a:47:ed:df:37:a6:fa: c3:1e:5f:9e:a7:d8:61:d8:63:26:7e:62:e9:88:96: 5b:2f:4e:b6:a9:f1:33:75:18:26:6b:50:19:83:60: af:79:f6:36:65:40:98:65:3a:eb:9d:e3:54:f5:53: 06:ab:22:b8:69:98:b6:02:54:af:03:53:6a:75:34: ee:83:52:2e:b8:96:36:32:c3:e8:ec:73:00:7a:57: b8:31:a9:45:f0:51:d4:aa:4c:7a:70:e5:1b:33:9a: 6d:c3:13:90:34:f6:c2:98:f0:15:07:e8:08:f7:be: fa:50:cb:1f:7e:11:ec:32:51:80:88:d7:04:8c:78: 4b:87:2f:68:38:bc:52:7b:84:8b:3e:66:6f:19:ae: 70:32:ae:8c:71:94:0e:2b:b6:84:5b:02:23:95:47: 70:b1:fa:f2:f2:15:e3:53:09:d0:4d:da:ea:42:ea: 1d:00:4b:86:78:29:55:a7:61:f5:dd:cc:41:c8:e2: d0:10:80:93:bb:47:4e:86:b6:27:1d:19:e5:b0:13: e7:b4:f9:70:75:40:d2:ae:d4:25:c0:1d:bb:40:ca: 90:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.148.0/22 IPv6: 2804:56a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268016 Signature Algorithm: sha256WithRSAEncryption 8b:7e:38:4a:ad:1a:61:39:29:32:33:30:fd:e7:bf:0f:86:bb: f1:c1:74:f4:91:89:e5:b1:d9:13:6e:89:c9:de:96:e2:11:67: f5:9f:f4:7c:fc:d1:f6:8e:eb:07:a2:8a:e1:8a:1c:b7:2a:f9: 0d:a9:31:79:31:13:b1:bc:ac:62:da:26:11:e8:77:1f:b7:52: 8b:5d:df:36:c5:ec:ea:d2:6a:0c:20:3a:d6:5c:f2:57:f1:f9: 25:f2:59:a3:94:71:c6:a3:54:6d:34:e4:cb:57:b6:eb:7e:7b: 24:60:64:9c:f0:95:78:c3:57:74:fb:2a:9f:20:0c:e9:4d:a3: ab:3f:51:32:07:6c:b9:4b:bc:43:f1:2b:4d:83:f8:4e:c8:75: 5d:f2:b0:b9:fb:22:d2:84:84:6d:07:93:db:cf:64:b3:6d:92: fd:8b:fa:49:70:81:c3:8e:f2:b4:7b:6c:8c:8b:b4:ca:25:5c: 3a:80:ba:72:17:e4:a1:85:0b:70:f6:5b:e2:f6:1e:7d:70:53: f1:2f:e9:0f:82:1e:55:6c:ab:e0:3a:18:e9:30:d1:76:9e:c7: 35:af:ba:60:98:42:a2:c0:a1:f8:ea:db:62:66:b5:10:77:5a: 1e:2d:16:fd:a5:f7:50:59:05:83:f0:6b:78:45:86:97:41:22: 4d:02:f3:54 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUAyN16+ULx5JKuXiFYA08LdnBifEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTAxNzQ1MjBaFw0yNjA0MDkxNzUwMjBaMDMxMTAvBgNV BAMTKENDOUY0MkMzQTFFNjYyMzYxMjMxMjQxNzAxM0FBMTJEQzE5NzM0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ouf+oIg5xhOGdYyMhuEq2gZd i3H/i8m2s4q5KV7qR8iFdjoEikft3zem+sMeX56n2GHYYyZ+YumIllsvTrap8TN1 GCZrUBmDYK959jZlQJhlOuud41T1UwarIrhpmLYCVK8DU2p1NO6DUi64ljYyw+js cwB6V7gxqUXwUdSqTHpw5Rszmm3DE5A09sKY8BUH6Aj3vvpQyx9+EewyUYCI1wSM eEuHL2g4vFJ7hIs+Zm8ZrnAyroxxlA4rtoRbAiOVR3Cx+vLyFeNTCdBN2upC6h0A S4Z4KVWnYfXdzEHI4tAQgJO7R06GticdGeWwE+e0+XB1QNKu1CXAHbtAypCJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMn0LDoeZiNhIx JBcBOqEtwZc0wzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlBX Q3lMTUIxSjdvZEhTdVpjNDJrc0JveEg5RVJSQWpvc3h5Tnl1R2hkb3gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJQ V0N5TE1CMUo3b2RIU3VaYzQya3NCb3hIOUVSUkFqb3N4eU55dUdoZG94LzAvQ0M5 RjQyQzNBMUU2NjIzNjEyMzEyNDE3MDEzQUExMkRDMTk3MzRDMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaeUMA0EAgACMAcDBQAoBFaoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQW8DANBgkqhkiG9w0BAQsFAAOCAQEAi344Sq0aYTkpMjMw /ee/D4a78cF09JGJ5bHZE26Jyd6W4hFn9Z/0fPzR9o7rB6KK4Yoctyr5DakxeTET sbysYtomEeh3H7dSi13fNsXs6tJqDCA61lzyV/H5JfJZo5RxxqNUbTTky1e26357 JGBknPCVeMNXdPsqnyAM6U2jqz9RMgdsuUu8Q/ErTYP4Tsh1XfKwufsi0oSEbQeT 289ks22S/Yv6SXCBw47ytHtsjIu0yiVcOoC6chfkoYULcPZb4vYefXBT8S/pD4Ie VWyr4DoY6TDRdp7HNa+6YJhCosCh+OrbYma1EHdaHi0W/aX3UFkFg/BreEWGl0Ei TQLzVA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:29 2025 by rpki-client on console.sobornost.net