$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer File: D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.cer (raw, json) Hash identifier: xW/8GQcmpISq6aLaiOgwaxiAzXsi2XZGRu1k3OsdYMk= Subject key identifier: D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E63D6FD942F39B3A8F7B9DC3FB9BF5B49C2134E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft caRepository: rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 26 Mar 2025 16:59:39 +0000 Certificate not after: Wed 25 Mar 2026 17:04:39 +0000 Subordinate resources: AS: 273473 IP: 2804:8f2c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:63:d6:fd:94:2f:39:b3:a8:f7:b9:dc:3f:b9:bf:5b:49:c2:13:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 26 16:59:39 2025 GMT Not After : Mar 25 17:04:39 2026 GMT Subject: CN=D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:60:d1:dd:3a:67:fd:d6:b7:e2:8f:f2:f9: f6:8e:6d:f2:2b:0c:16:1b:6e:93:5b:b4:1e:21:e7: 3f:b6:1d:5c:28:ae:ef:6c:bd:6d:3d:aa:8a:53:53: 60:d1:60:d3:67:dc:80:34:ce:d5:69:68:92:9d:17: f8:25:d1:4c:89:80:ee:1e:04:14:ce:dc:2d:2b:03: c4:e5:8c:e9:11:73:34:f2:96:4b:a2:7f:7d:b7:a1: 51:c4:7f:e9:2b:fd:4f:7f:e0:a3:95:bd:3b:74:a8: 73:13:fc:bb:da:71:be:04:7a:18:97:a3:b6:1a:bc: 7c:b6:22:a8:8d:9c:fe:5f:40:2b:73:a3:c3:ad:94: 67:8e:12:a0:70:cb:2c:d9:02:a7:99:34:48:8e:fd: a4:01:76:40:48:6b:a0:aa:7f:b0:74:67:e3:51:c2: d1:db:3a:e0:af:50:97:84:59:de:6d:9e:fc:7e:e3: 4e:64:e3:93:bb:aa:1c:1b:0c:b3:1a:7a:ed:3d:72: a7:a2:2c:60:96:75:e2:a5:f0:32:50:8d:d6:92:84: 66:7c:f4:fc:05:72:0c:0d:80:19:f4:bb:c1:c5:30: 18:95:09:9a:56:6b:4b:42:cd:66:5e:1a:3a:91:64: c8:ba:6c:49:d8:b1:5d:51:b5:fe:81:0c:5e:36:00: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:5B:B5:57:0E:42:F8:BC:CE:4A:4B:F2:F0:DF:8D:11:73:0E:E0:13 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GKJKB2GYD2MJBCMwwrN6CpTuXS5PdWq4AfZmAoPwQwVB/0/D15BB5570E42F8BCCE4A4BF2F0DF8D11730EE013.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8f2c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273473 Signature Algorithm: sha256WithRSAEncryption 2f:75:2d:2b:23:55:5a:fd:ab:6e:ee:d4:e3:56:7b:63:fe:1d: d3:10:be:3f:6c:0c:c4:2f:71:3f:a0:13:5a:f4:7a:d5:b3:74: 1d:ff:58:0c:e7:31:09:5e:98:19:94:99:13:fd:16:77:9e:70: 2f:0b:2a:0f:9b:3d:37:00:41:46:b1:d9:38:a9:1a:a7:2f:7c: dd:42:05:92:96:8f:ac:5e:ec:d0:60:5b:15:0e:4f:be:b0:47: 1f:b6:c0:d9:7e:85:65:31:7a:ef:6c:ce:7a:67:f9:ae:0b:29: 42:0c:d7:7c:5c:38:72:21:f8:82:3d:3b:d6:54:48:91:e4:f0: 21:85:29:59:ee:c4:2b:04:27:43:13:cf:7a:38:8e:04:22:cf: 16:39:b4:84:31:11:75:35:4b:35:9c:a0:aa:37:8f:ae:51:74: e4:1e:8e:fc:3a:37:51:db:40:52:d0:5e:5e:fe:93:87:e1:85: aa:1d:ac:d1:03:ed:6e:ff:01:16:ff:33:b0:3c:55:38:ae:44: 6d:35:c4:67:77:5e:10:a9:fd:49:49:94:bf:08:d0:bc:13:1c: 2d:7e:68:f8:fe:80:11:e6:35:a7:8f:88:50:53:76:79:6a:6d: 0b:32:22:7f:c9:5a:69:1b:57:d6:73:14:5c:f3:d9:49:94:c5: fe:94:4a:d4 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUTmPW/ZQvObOo97ncP7m/W0nCE04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjYxNjU5MzlaFw0yNjAzMjUxNzA0MzlaMDMxMTAvBgNV BAMTKEQxNUJCNTU3MEU0MkY4QkNDRTRBNEJGMkYwREY4RDExNzMwRUUwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyN2DR3Tpn/da34o/y+faObfIr DBYbbpNbtB4h5z+2HVworu9svW09qopTU2DRYNNn3IA0ztVpaJKdF/gl0UyJgO4e BBTO3C0rA8TljOkRczTylkuif323oVHEf+kr/U9/4KOVvTt0qHMT/Lvacb4EehiX o7YavHy2IqiNnP5fQCtzo8OtlGeOEqBwyyzZAqeZNEiO/aQBdkBIa6Cqf7B0Z+NR wtHbOuCvUJeEWd5tnvx+405k45O7qhwbDLMaeu09cqeiLGCWdeKl8DJQjdaShGZ8 9PwFcgwNgBn0u8HFMBiVCZpWa0tCzWZeGjqRZMi6bEnYsV1Rtf6BDF42AJ8HAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRW7VXDkL4vM5K S/Lw340Rcw7gEzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0tK S0IyR1lEMk1KQkNNd3dyTjZDcFR1WFM1UGRXcTRBZlptQW9Qd1F3VkIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dL SktCMkdZRDJNSkJDTXd3ck42Q3BUdVhTNVBkV3E0QWZabUFvUHdRd1ZCLzAvRDE1 QkI1NTcwRTQyRjhCQ0NFNEE0QkYyRjBERjhEMTE3MzBFRTAxMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASPLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LEEwDQYJKoZIhvcNAQELBQADggEBAC91LSsjVVr9q27u1ONWe2P+HdMQvj9sDMQv cT+gE1r0etWzdB3/WAznMQlemBmUmRP9FneecC8LKg+bPTcAQUax2TipGqcvfN1C BZKWj6xe7NBgWxUOT76wRx+2wNl+hWUxeu9sznpn+a4LKUIM13xcOHIh+II9O9ZU SJHk8CGFKVnuxCsEJ0MTz3o4jgQizxY5tIQxEXU1SzWcoKo3j65RdOQejvw6N1Hb QFLQXl7+k4fhhaodrNED7W7/ARb/M7A8VTiuRG01xGd3XhCp/UlJlL8I0LwTHC1+ aPj+gBHmNaePiFBTdnlqbQsyIn/JWmkbV9ZzFFzz2UmUxf6UStQ= -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:30 2025 by rpki-client on console.sobornost.net