$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer File: CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.cer (raw, json) Hash identifier: 96OHX/6v97+AkGmd1lMfe+6TCbDRDBfR5edWr4okZBA= Subject key identifier: CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7390C55C3A5B04A8928C894A68A859777A8DDC61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft caRepository: rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 28 Feb 2025 11:46:42 +0000 Certificate not after: Fri 27 Feb 2026 11:51:42 +0000 Subordinate resources: AS: 262690 IP: 187.87.240.0/20 IP: 2804:7348::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:90:c5:5c:3a:5b:04:a8:92:8c:89:4a:68:a8:59:77:7a:8d:dc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 28 11:46:42 2025 GMT Not After : Feb 27 11:51:42 2026 GMT Subject: CN=CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:99:73:39:03:79:87:5a:1b:02:cb:b8:ba: 69:c8:32:44:0f:4c:5b:3d:3e:80:9c:9d:c8:6c:b5: d2:88:5a:a4:05:07:68:cd:9e:87:74:01:1d:f8:af: 3c:bc:ab:3c:6d:f0:ba:f1:0a:2c:a3:12:9f:10:51: ca:97:3b:7c:33:df:f0:a4:6a:6a:38:34:e4:d1:e3: 5a:09:33:fe:70:fb:42:f0:07:05:70:ce:e4:f4:97: bd:00:54:99:a0:c2:8c:25:b2:08:ae:88:e1:41:12: c5:84:61:55:d5:dd:56:03:5c:52:98:84:c8:cd:4d: db:6f:8d:dd:e8:7f:0f:d9:2b:bd:d0:a5:a2:a5:f6: b6:42:e1:7d:4c:94:5a:8a:ee:b6:95:ab:0f:0b:fd: 3d:75:b4:2b:67:8d:61:60:c4:25:af:d8:a0:07:1b: 01:02:df:df:f0:27:8b:f0:3c:f9:7f:95:43:87:17: b1:42:46:6f:c7:e1:06:f9:77:ed:96:7e:60:7d:24: f6:50:96:a5:0f:c6:be:c1:0d:61:c7:ff:70:54:53: 5e:1e:92:62:0b:53:65:28:94:4d:b5:fb:ce:f8:79: 16:dc:10:6f:91:41:30:ab:e9:d7:53:89:7c:26:22: 17:51:1c:cc:8b:27:51:5d:06:b5:f4:b6:9a:0f:15: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:2A:ED:58:0B:E4:5A:E6:DD:57:D4:E6:A5:5A:C9:2C:70:7F:CD:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/2/CD2AED580BE45AE6DD57D4E6A55AC92C707FCDBC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.87.240.0/20 IPv6: 2804:7348::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262690 Signature Algorithm: sha256WithRSAEncryption 31:13:28:3a:50:11:be:77:8f:80:c4:0f:99:62:ae:f4:f3:a6: 14:44:c9:21:86:af:ff:00:6e:db:04:4d:4a:a2:68:6a:f5:7a: 72:05:0d:9d:bf:65:90:fc:ef:0f:02:25:3a:63:15:b3:93:5d: 09:8f:c9:60:24:e8:44:7d:9d:d8:9c:e0:ff:36:96:6b:99:96: ae:b1:18:97:0f:fc:17:5d:1a:23:f8:d8:5f:34:02:b3:da:cf: 7e:df:a6:79:8d:b3:48:66:c0:d4:8d:10:aa:0e:3e:b7:58:b5: fd:b5:df:80:ca:8c:5c:d2:d8:6b:2b:a7:c4:f1:2e:b8:c5:93: 4b:ae:09:17:9d:5d:6b:b2:39:d3:c4:14:71:8f:ea:6f:49:f9: 09:14:78:5c:1f:51:37:52:75:8b:5e:0a:6f:07:6e:7e:fa:56: 7f:7d:f8:4e:60:99:28:da:60:b0:2a:e1:86:6a:e4:e4:db:26: 72:76:c6:11:e3:eb:2b:2b:e1:05:c3:2b:6c:de:6f:10:4c:c1: d5:0c:53:22:47:43:51:05:20:e5:c4:4b:bc:16:ec:a0:56:53: 08:99:62:25:90:53:b5:47:a5:29:2f:c5:67:31:fa:a2:0a:82: cd:63:e3:22:88:d1:d9:77:73:e0:cf:a5:69:1e:5e:87:9f:e4: 40:63:1c:fc -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUc5DFXDpbBKiSjIlKaKhZd3qN3GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjgxMTQ2NDJaFw0yNjAyMjcxMTUxNDJaMDMxMTAvBgNV BAMTKENEMkFFRDU4MEJFNDVBRTZERDU3RDRFNkE1NUFDOTJDNzA3RkNEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGZlzOQN5h1obAsu4umnIMkQP TFs9PoCcnchstdKIWqQFB2jNnod0AR34rzy8qzxt8LrxCiyjEp8QUcqXO3wz3/Ck amo4NOTR41oJM/5w+0LwBwVwzuT0l70AVJmgwowlsgiuiOFBEsWEYVXV3VYDXFKY hMjNTdtvjd3ofw/ZK73QpaKl9rZC4X1MlFqK7raVqw8L/T11tCtnjWFgxCWv2KAH GwEC39/wJ4vwPPl/lUOHF7FCRm/H4Qb5d+2WfmB9JPZQlqUPxr7BDWHH/3BUU14e kmILU2UolE21+874eRbcEG+RQTCr6ddTiXwmIhdRHMyLJ1FdBrX0tpoPFdbXAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTNKu1YC+Ra5t1X 1OalWskscH/NvDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODJ6 cnVhU1RkYWNVMWFQc0FDSkc4bXFXY1A3a1c2SlF4ZkZ5WG15cnBObVovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgy enJ1YVNUZGFjVTFhUHNBQ0pHOG1xV2NQN2tXNkpReGZGeVhteXJwTm1aLzIvQ0Qy QUVENTgwQkU0NUFFNkRENTdENEU2QTU1QUM5MkM3MDdGQ0RCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEu1fwMA0EAgACMAcDBQAoBHNIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQCIjANBgkqhkiG9w0BAQsFAAOCAQEAMRMoOlARvnePgMQP mWKu9POmFETJIYav/wBu2wRNSqJoavV6cgUNnb9lkPzvDwIlOmMVs5NdCY/JYCTo RH2d2Jzg/zaWa5mWrrEYlw/8F10aI/jYXzQCs9rPft+meY2zSGbA1I0Qqg4+t1i1 /bXfgMqMXNLYayunxPEuuMWTS64JF51da7I508QUcY/qb0n5CRR4XB9RN1J1i14K bwdufvpWf334TmCZKNpgsCrhhmrk5NsmcnbGEePrKyvhBcMrbN5vEEzB1QxTIkdD UQUg5cRLvBbsoFZTCJliJZBTtUelKS/FZzH6ogqCzWPjIojR2Xdz4M+laR5eh5/k QGMc/A== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:29 2025 by rpki-client on console.sobornost.net