$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer File: D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer (raw, json) Hash identifier: uRqh+ap4iPth6C4KnIl6mViBa2y49TIxMTzbaMA9W8E= Subject key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12E663DF915EB3CC657F0CD5622D5DBF8E40E013 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft caRepository: rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 19:55:16 +0000 Certificate not after: Wed 04 Mar 2026 20:00:16 +0000 Subordinate resources: AS: 263900 IP: 138.204.148.0/22 IP: 2804:276c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e6:63:df:91:5e:b3:cc:65:7f:0c:d5:62:2d:5d:bf:8e:40:e0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 19:55:16 2025 GMT Not After : Mar 4 20:00:16 2026 GMT Subject: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:1e:a3:36:6d:f2:5a:0c:91:74:7a:7f:d6: 5a:60:31:26:7f:03:c3:ed:aa:8b:47:c7:68:89:df: cd:c3:d3:2f:e5:54:0e:e4:9a:a3:89:a3:1b:ed:e2: a0:b1:35:d0:52:a2:db:ca:56:fa:c5:3a:1b:4c:00: c3:51:ed:bf:e4:83:85:03:21:26:ed:52:09:c9:4f: d2:4d:09:ec:d8:f1:8c:42:f0:3f:15:17:9e:81:1b: 3f:31:cb:a8:fa:cf:67:b1:23:b4:81:e5:90:dc:31: 51:d6:32:c9:fc:3a:01:89:56:90:bd:34:2c:04:94: 17:51:10:d0:4c:98:ae:e2:8f:1f:d5:70:ec:63:cf: 2f:0a:b5:b8:48:db:ca:8b:6f:93:5f:9f:ad:98:01: 51:28:3a:ac:f3:42:d8:db:42:a1:ac:eb:8e:cb:03: 13:33:e9:d6:77:9e:9c:ee:ed:08:44:fa:41:14:11: 38:60:81:d3:41:7d:5a:a9:5a:27:36:59:6d:69:84: bc:82:1f:99:3b:4c:ac:b5:05:d2:d2:5e:45:42:07: 0d:00:5f:44:8f:bd:b4:36:32:01:c7:c5:fc:c6:23: 21:67:05:8c:8a:c4:6f:f7:e0:b6:0b:3f:bc:84:80: d2:38:56:e7:5a:dc:57:0d:0c:d7:9a:34:1d:7c:84: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.148.0/22 IPv6: 2804:276c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263900 Signature Algorithm: sha256WithRSAEncryption 92:09:c0:cc:77:3d:55:66:d6:17:fa:23:24:09:8f:69:a2:31: 3f:37:08:cd:ff:db:86:ba:cf:19:b7:9b:d9:2e:d6:ba:93:96: 55:57:dd:a9:34:5d:69:cb:ca:71:03:be:c1:10:dc:15:dd:65: fa:aa:d5:a8:f2:0a:d0:dd:2c:23:65:0f:a4:c4:fd:a6:ae:4d: a6:5b:27:ee:f0:08:3f:e3:90:3f:29:7c:3f:81:a1:4a:96:c7: 6d:86:2f:f3:e9:dc:97:ce:80:35:2f:01:58:2f:54:5f:31:aa: 1a:67:75:80:31:2a:75:af:be:98:c4:d9:bd:58:0c:96:64:37: b2:8a:6f:d4:3d:97:5f:03:2e:3a:b5:68:26:30:36:33:6f:42: e9:95:cd:a1:aa:47:9c:32:be:b3:d3:5f:64:b4:d8:56:92:db: 4b:93:0f:0e:b8:40:7e:b6:4e:92:c9:1e:e0:35:e8:9b:3c:10: a9:1d:d9:b9:6e:e7:bb:6d:21:56:e1:2a:93:26:e8:b2:b9:bd: 03:f2:ee:b8:5d:0b:be:b8:fc:4e:03:18:81:d0:1e:c8:2f:dc: e0:b8:5e:e4:72:42:86:86:83:67:11:45:3f:9b:eb:bf:0c:23: c0:05:c1:bb:9f:00:35:bc:15:b8:6e:17:38:b5:26:e6:4a:f8: 5a:46:ac:7f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEuZj35Fes8xlfwzVYi1dv45A4BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxOTU1MTZaFw0yNjAzMDQyMDAwMTZaMDMxMTAvBgNV BAMTKEQxMDhBNkE0OThCMzgzOUI0RjNGODA1QUNDQUU5MzRGOENGNzlEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyh6jNm3yWgyRdHp/1lpgMSZ/ A8PtqotHx2iJ383D0y/lVA7kmqOJoxvt4qCxNdBSotvKVvrFOhtMAMNR7b/kg4UD ISbtUgnJT9JNCezY8YxC8D8VF56BGz8xy6j6z2exI7SB5ZDcMVHWMsn8OgGJVpC9 NCwElBdRENBMmK7ijx/VcOxjzy8KtbhI28qLb5Nfn62YAVEoOqzzQtjbQqGs647L AxMz6dZ3npzu7QhE+kEUEThggdNBfVqpWic2WW1phLyCH5k7TKy1BdLSXkVCBw0A X0SPvbQ2MgHHxfzGIyFnBYyKxG/34LYLP7yEgNI4Vuda3FcNDNeaNB18hCJ/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRCKakmLODm08/ gFrMrpNPjPedkDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlJS TVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55QzlSanFtanY1dXovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZS Uk1SWnA3ekNYTVVWVVpTV05yczNxc1BvUDNiN1hOeUM5UmpxbWp2NXV6LzIvRDEw OEE2QTQ5OEIzODM5QjRGM0Y4MDVBQ0NBRTkzNEY4Q0Y3OUQ5MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCisyUMA0EAgACMAcDBQAoBCdsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQG3DANBgkqhkiG9w0BAQsFAAOCAQEAkgnAzHc9VWbWF/oj JAmPaaIxPzcIzf/bhrrPGbeb2S7WupOWVVfdqTRdacvKcQO+wRDcFd1l+qrVqPIK 0N0sI2UPpMT9pq5Nplsn7vAIP+OQPyl8P4GhSpbHbYYv8+ncl86ANS8BWC9UXzGq Gmd1gDEqda++mMTZvVgMlmQ3sopv1D2XXwMuOrVoJjA2M29C6ZXNoapHnDK+s9Nf ZLTYVpLbS5MPDrhAfrZOkske4DXomzwQqR3ZuW7nu20hVuEqkybosrm9A/LuuF0L vrj8TgMYgdAeyC/c4Lhe5HJChoaDZxFFP5vrvwwjwAXBu58ANbwVuG4XOLUm5kr4 Wkasfw== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:46 2025 by rpki-client on console.sobornost.net