$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer File: D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer (raw, json) Hash identifier: OJ7McNh73Z4dSra/DDlngoLF4e5U0zKye/WBkP+khzE= Subject key identifier: D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4683DE2045CD2BA0F4655384D602DB10C94F9201 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft caRepository: rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 10 Mar 2025 23:58:28 +0000 Certificate not after: Tue 10 Mar 2026 00:03:28 +0000 Subordinate resources: AS: 266523 IP: 170.244.228.0/22 IP: 2804:3914::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:83:de:20:45:cd:2b:a0:f4:65:53:84:d6:02:db:10:c9:4f:92:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 10 23:58:28 2025 GMT Not After : Mar 10 00:03:28 2026 GMT Subject: CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:9d:28:55:56:b2:de:eb:76:19:19:e8:67: bd:e0:6b:45:bf:20:90:38:95:af:92:9c:95:fe:13: a7:70:d9:b1:48:28:f9:c7:17:95:06:f3:de:a8:76: d9:f0:0e:ff:db:9e:a7:82:d4:01:39:64:f1:31:e4: 45:48:7e:f3:60:54:41:03:3d:bc:c0:7c:ea:37:66: c7:6a:83:8c:a2:ea:e5:6f:8d:ad:64:8a:f5:f7:b7: 20:5c:3e:90:5b:2b:f0:07:d1:13:5a:8d:fe:b9:95: 61:72:ac:f8:42:0a:06:69:f6:45:01:a6:b0:6c:a9: 3a:de:5c:5b:85:2b:c8:3e:78:45:87:a3:0e:85:63: 8c:50:b2:2b:25:c6:36:19:60:ba:65:18:d8:e7:74: a9:7e:89:0d:08:e7:c1:b1:eb:5f:c3:e6:ee:fa:87: d5:d0:66:46:54:55:93:3f:2b:e8:b0:07:9c:78:56: 25:1a:12:fe:93:8f:60:92:2c:03:d7:5b:74:9c:62: d0:d5:0d:79:68:0c:96:f3:85:21:af:c8:19:3d:af: 30:33:10:78:2d:f0:ac:4d:2d:e2:bc:db:07:70:e2: d3:64:7a:4e:a2:20:81:94:e7:5f:73:b0:d8:da:aa: bf:a3:84:42:5b:16:7b:56:33:cf:72:1e:c7:52:83: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.228.0/22 IPv6: 2804:3914::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266523 Signature Algorithm: sha256WithRSAEncryption 12:7d:cb:b6:49:f6:44:26:30:54:90:3d:2a:2a:83:f3:bf:0e: 2d:d2:4e:e6:d9:29:e5:d6:36:52:9b:2b:53:e1:69:1a:82:51: d9:a7:a5:c8:d6:33:85:ef:38:57:92:5b:7d:d3:eb:29:5b:56: 09:30:4e:cb:81:97:5a:a0:11:11:ef:ac:2a:e7:47:e6:03:79: 31:ad:d8:34:1d:b2:31:03:b8:ae:0e:05:f5:c0:0c:8a:28:ea: 1c:c7:45:fe:79:86:d4:67:ee:1b:1c:54:ff:3c:68:02:d4:5f: eb:49:5e:8a:fb:2b:f3:78:40:c4:47:55:86:54:f8:de:a3:e6: 79:34:fe:36:08:3b:2f:15:1e:60:32:ef:a8:56:21:76:95:e1: 0f:0c:d0:df:38:94:b9:a6:c6:1e:fa:b6:8c:db:98:17:da:3c: 95:22:f2:4a:0d:bd:2c:d0:83:90:c9:44:c0:3c:4b:07:f1:b3: fc:42:fb:68:d5:ac:ba:59:66:3c:2a:df:a2:51:4b:fb:41:35: 63:1a:2f:15:8a:f9:fa:42:0c:3e:f9:a4:52:84:9b:4c:d6:46: cb:b9:4d:82:70:af:23:89:34:95:80:60:5e:69:5a:e1:dc:8f: 04:59:8e:53:d8:99:2e:b0:af:2b:0b:49:79:05:0c:01:c7:f5: 33:2d:95:1e -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURoPeIEXNK6D0ZVOE1gLbEMlPkgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMTAyMzU4MjhaFw0yNjAzMTAwMDAzMjhaMDMxMTAvBgNV BAMTKEQzRTBGM0M2MTRCMjIyMEM4Rjc3QzE1MkUxQTY3RjRCMEJGQjE2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgfp0oVVay3ut2GRnoZ73ga0W/ IJA4la+SnJX+E6dw2bFIKPnHF5UG896odtnwDv/bnqeC1AE5ZPEx5EVIfvNgVEED PbzAfOo3Zsdqg4yi6uVvja1kivX3tyBcPpBbK/AH0RNajf65lWFyrPhCCgZp9kUB prBsqTreXFuFK8g+eEWHow6FY4xQsislxjYZYLplGNjndKl+iQ0I58Gx61/D5u76 h9XQZkZUVZM/K+iwB5x4ViUaEv6Tj2CSLAPXW3ScYtDVDXloDJbzhSGvyBk9rzAz EHgt8KxNLeK82wdw4tNkek6iIIGU519zsNjaqr+jhEJbFntWM89yHsdSg+GRAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTT4PPGFLIiDI93 wVLhpn9LC/sWJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR253 Z210Z0ZYbnlhelNNVmhYNzFMejYxdTN4dFFjUjVHTXU2aWNhTE5OTksvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR253 Z210Z0ZYbnlhelNNVmhYNzFMejYxdTN4dFFjUjVHTXU2aWNhTE5OTksvMS9EM0Uw RjNDNjE0QjIyMjBDOEY3N0MxNTJFMUE2N0Y0QjBCRkIxNjI1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKq9OQwDQQCAAIwBwMFACgEORQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBEbMA0GCSqGSIb3DQEBCwUAA4IBAQASfcu2SfZEJjBUkD0q KoPzvw4t0k7m2Snl1jZSmytT4WkaglHZp6XI1jOF7zhXklt90+spW1YJME7LgZda oBER76wq50fmA3kxrdg0HbIxA7iuDgX1wAyKKOocx0X+eYbUZ+4bHFT/PGgC1F/r SV6K+yvzeEDER1WGVPjeo+Z5NP42CDsvFR5gMu+oViF2leEPDNDfOJS5psYe+raM 25gX2jyVIvJKDb0s0IOQyUTAPEsH8bP8Qvto1ay6WWY8Kt+iUUv7QTVjGi8Vivn6 Qgw++aRShJtM1kbLuU2CcK8jiTSVgGBeaVrh3I8EWY5T2JkusK8rC0l5BQwBx/Uz LZUe -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:24 2025 by rpki-client on console.sobornost.net