$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer File: D7F3F67EA800504F23795E22991815F9E686C811.cer (raw, json) Hash identifier: aSjFgs9PdhAA/GxRp3PZr8sb5mjIvTgHBCwAMqhFO3Y= Subject key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 41AA515B0A743288322A37D0DED5FD0E2DAE2B96 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft caRepository: rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:50 +0000 Certificate not after: Wed 04 Mar 2026 18:40:50 +0000 Subordinate resources: AS: 263492 IP: 191.243.36.0/22 IP: 2804:12b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 13:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:aa:51:5b:0a:74:32:88:32:2a:37:d0:de:d5:fd:0e:2d:ae:2b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:50 2025 GMT Not After : Mar 4 18:40:50 2026 GMT Subject: CN=D7F3F67EA800504F23795E22991815F9E686C811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:7f:06:34:94:35:a4:bc:67:ea:04:19:3c: 0f:b6:38:23:57:cd:90:4c:09:08:58:b3:a0:5f:66: 89:2b:96:a5:21:f1:81:21:63:03:48:85:a8:e2:2c: af:f9:79:6e:17:bc:4f:4e:08:aa:3e:fa:b0:65:55: 93:bb:35:bf:7f:92:1a:cf:27:32:e4:dd:4a:0a:e3: e3:be:8e:f0:9c:b3:6a:bb:84:8b:ce:95:c5:be:6b: ad:57:87:d3:3a:9a:e2:37:88:79:2f:ea:f3:97:c4: bb:3c:f9:db:07:a9:25:f1:0d:ee:bb:7c:c9:42:e4: fe:cd:21:c8:cf:ab:24:b5:2b:ed:23:5a:6c:73:ef: 98:7e:69:8c:32:b5:34:50:31:7b:16:9a:62:46:a8: 2b:7f:46:ed:4b:56:45:9c:b9:b4:e1:04:f8:e0:dc: 3a:c9:ef:08:ec:b9:e9:d5:e0:77:af:75:bf:f5:22: 44:04:fa:75:2f:20:0c:59:2a:76:5a:26:bf:8b:25: ef:3f:c1:60:b5:26:68:b2:05:fb:e6:65:55:b9:98: c9:c8:fb:81:09:eb:0f:22:08:2d:24:66:4a:e5:56: 8c:4d:32:d4:1f:1d:1f:5a:9f:87:bf:86:e4:a7:fe: 96:78:a0:cf:9b:8f:36:9a:fd:fd:ea:1e:8e:31:9d: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.243.36.0/22 IPv6: 2804:12b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263492 Signature Algorithm: sha256WithRSAEncryption 16:45:16:3c:f2:d5:6d:26:76:97:9b:1a:a2:5b:63:0a:7f:18: e9:d0:3c:af:44:10:30:0e:d5:9c:51:cc:db:5b:39:3a:fe:72: 05:4d:65:4c:0b:1b:6f:f8:5d:fe:5a:40:da:3a:6b:06:33:6a: 73:85:26:89:4f:83:c4:ab:a9:aa:d0:07:96:25:ce:ae:44:31: d9:4f:23:66:ea:19:35:ce:05:4e:df:e0:01:1a:e9:44:e3:b3: 69:08:41:ed:7d:29:2a:32:c6:75:6a:c3:28:d6:13:e7:03:c9: 4d:b9:ce:a7:3f:b6:15:7d:6e:ae:e2:65:f8:83:74:86:14:bc: 32:b6:a7:cc:54:80:93:6d:eb:a9:8d:ef:de:8e:59:ea:af:c7: c6:e0:49:42:d9:5b:78:08:a9:f1:2a:88:9e:9e:63:9c:ec:b7: b6:2f:63:d6:c0:19:56:64:89:a9:ca:12:d9:63:5c:44:93:e1: f6:cb:83:84:d1:9e:dc:7a:fb:89:02:7b:cd:02:ee:d8:e7:fd: f9:a7:77:ab:16:64:13:2f:35:5c:1b:cb:a2:c5:62:cd:13:a2: d4:c4:11:aa:7b:dc:8b:a3:ee:6b:df:f5:11:14:3a:75:42:1d: 87:43:01:52:12:e0:94:7a:82:92:a8:4b:0c:13:1d:b0:29:a6: 43:8b:88:69 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUQapRWwp0MogyKjfQ3tX9Di2uK5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NTBaFw0yNjAzMDQxODQwNTBaMDMxMTAvBgNV BAMTKEQ3RjNGNjdFQTgwMDUwNEYyMzc5NUUyMjk5MTgxNUY5RTY4NkM4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIn8GNJQ1pLxn6gQZPA+2OCNX zZBMCQhYs6BfZokrlqUh8YEhYwNIhajiLK/5eW4XvE9OCKo++rBlVZO7Nb9/khrP JzLk3UoK4+O+jvCcs2q7hIvOlcW+a61Xh9M6muI3iHkv6vOXxLs8+dsHqSXxDe67 fMlC5P7NIcjPqyS1K+0jWmxz75h+aYwytTRQMXsWmmJGqCt/Ru1LVkWcubThBPjg 3DrJ7wjsuenV4Hevdb/1IkQE+nUvIAxZKnZaJr+LJe8/wWC1JmiyBfvmZVW5mMnI +4EJ6w8iCC0kZkrlVoxNMtQfHR9an4e/huSn/pZ4oM+bjzaa/f3qHo4xnfZhAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTX8/Z+qABQTyN5 XiKZGBX55obIETAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRk1m UG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdxdWUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRk1m UG9rVHJ0OUVmRzFVbWlaNUFRM2t2eW15NUF4dHRzbkRpTmlOaHdxdWUvMS9EN0Yz RjY3RUE4MDA1MDRGMjM3OTVFMjI5OTE4MTVGOUU2ODZDODExLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK/8yQwDQQCAAIwBwMFACgEErAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAVEMA0GCSqGSIb3DQEBCwUAA4IBAQAWRRY88tVtJnaXmxqi W2MKfxjp0DyvRBAwDtWcUczbWzk6/nIFTWVMCxtv+F3+WkDaOmsGM2pzhSaJT4PE q6mq0AeWJc6uRDHZTyNm6hk1zgVO3+ABGulE47NpCEHtfSkqMsZ1asMo1hPnA8lN uc6nP7YVfW6u4mX4g3SGFLwytqfMVICTbeupje/ejlnqr8fG4ElC2Vt4CKnxKoie nmOc7Le2L2PWwBlWZImpyhLZY1xEk+H2y4OE0Z7cevuJAnvNAu7Y5/35p3erFmQT LzVcG8uixWLNE6LUxBGqe9yLo+5r3/URFDp1Qh2HQwFSEuCUeoKSqEsMEx2wKaZD i4hp -----END CERTIFICATE-----Generated at Fri Apr 25 12:55:16 2025 by rpki-client on console.sobornost.net