$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer File: D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer (raw, json) Hash identifier: E5cD1mgVa0ki++97c6EYKpgMf6J1vp5touTENPT8Kzk= Subject key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 772A0F17EEFB95BE254382A5C4FA56A458CAAA17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft caRepository: rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Apr 2025 16:55:08 +0000 Certificate not after: Tue 21 Apr 2026 17:00:08 +0000 Subordinate resources: AS: 271293 IP: 170.233.240.0/22 IP: 2804:793c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2a:0f:17:ee:fb:95:be:25:43:82:a5:c4:fa:56:a4:58:ca:aa:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 16:55:08 2025 GMT Not After : Apr 21 17:00:08 2026 GMT Subject: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:74:f4:64:47:c3:d6:45:50:74:94:fc:b8:01: bb:49:02:ae:aa:da:36:07:00:a9:86:d8:62:35:2f: c5:7d:2e:49:ea:43:01:30:41:1e:29:15:10:3d:e1: 5e:78:33:93:77:ee:81:a5:55:30:a6:c6:7c:7a:b9: 67:0c:9b:5c:55:98:e8:7f:c0:2c:f4:c7:d1:0a:4e: d2:c6:fa:b6:8d:d3:22:28:b3:35:9a:89:23:ed:e7: be:26:cb:78:60:83:c0:62:cd:a9:67:2d:ca:8d:2a: 7f:3b:52:46:7d:99:15:77:23:df:f6:b8:e9:63:51: a7:22:37:88:8b:83:8b:7a:2b:1a:34:47:e5:05:63: bc:a2:51:5f:58:e7:af:cf:2f:71:a0:51:5c:04:3f: 03:57:01:62:bb:c4:fd:89:86:82:8d:56:b5:50:e5: 2d:23:68:4f:8c:0f:18:c5:23:52:66:3d:0d:16:c7: 8b:7d:34:3d:2d:e6:5a:fd:bd:f1:f7:aa:f6:3b:b5: 29:2d:21:33:13:06:82:60:8f:17:fc:01:d3:cb:79: 9b:5e:bf:87:f6:ea:06:86:79:c8:f0:58:18:19:e3: 5a:59:65:86:6f:63:90:02:29:31:63:31:80:66:70: 25:ef:81:36:a8:26:4a:71:02:4d:a2:23:35:a9:1f: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.240.0/22 IPv6: 2804:793c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271293 Signature Algorithm: sha256WithRSAEncryption 94:df:4c:e0:0c:07:7a:2a:ad:a7:66:91:71:a3:e4:f9:29:aa: 3f:6a:60:7c:f6:f6:12:90:be:69:80:16:47:55:b8:30:8f:35: 4f:ca:1d:59:97:ae:70:81:df:18:07:05:7c:79:0a:92:53:ac: 2d:d9:ef:a9:8c:a8:6e:09:e3:58:1c:0f:55:cd:bc:2c:8b:e5: ae:86:de:54:8b:38:24:02:bd:db:a0:39:2e:a4:48:6a:26:32: 80:c3:21:80:33:39:11:2e:eb:95:d7:2c:fe:97:f5:d5:8d:ff: ac:08:7f:3d:9f:36:8c:63:76:60:17:4f:ea:c5:ae:8b:1e:d1: 16:4b:70:aa:a2:47:c0:1d:c1:bf:00:3d:27:71:86:07:73:a2: 20:ba:4c:7a:2f:f5:11:0d:9e:de:4b:9f:65:89:f4:6a:05:b6: 86:fb:3e:ef:ac:ad:e2:90:ba:14:35:9c:4c:7b:e4:a1:46:31: 60:9e:c0:14:c9:4b:64:0b:bc:7d:3c:3d:a3:25:1a:35:a4:54: fa:17:69:7c:06:b0:9d:d0:85:3a:5c:c5:0a:61:bd:4d:37:11: 0c:b9:bd:30:43:99:27:d1:67:29:a3:b0:dd:3f:c3:d0:36:7b: 63:6b:47:a0:31:41:a5:c5:7e:d9:b5:c2:2c:51:df:56:88:3d: ed:20:d0:59 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdyoPF+77lb4lQ4KlxPpWpFjKqhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjIxNjU1MDhaFw0yNjA0MjExNzAwMDhaMDMxMTAvBgNV BAMTKEQ4NTNDNEQ1NTY4RDIwQjA5MTlDMkUyOTgwNEUyRjQ5ODNCQ0ZERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmdPRkR8PWRVB0lPy4AbtJAq6q 2jYHAKmG2GI1L8V9LknqQwEwQR4pFRA94V54M5N37oGlVTCmxnx6uWcMm1xVmOh/ wCz0x9EKTtLG+raN0yIoszWaiSPt574my3hgg8BizalnLcqNKn87UkZ9mRV3I9/2 uOljUaciN4iLg4t6Kxo0R+UFY7yiUV9Y56/PL3GgUVwEPwNXAWK7xP2JhoKNVrVQ 5S0jaE+MDxjFI1JmPQ0Wx4t9ND0t5lr9vfH3qvY7tSktITMTBoJgjxf8AdPLeZte v4f26gaGecjwWBgZ41pZZYZvY5ACKTFjMYBmcCXvgTaoJkpxAk2iIzWpH8UpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYU8TVVo0gsJGc LimATi9Jg7z98zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXBw VGRqUDNmdlNDVHR5SllOZXVQcFRhVXIyZzIzQVVIeG80dzMyZ3VjWDgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw cFRkalAzZnZTQ1R0eUpZTmV1UHBUYVVyMmcyM0FVSHhvNHczMmd1Y1g4LzAvRDg1 M0M0RDU1NjhEMjBCMDkxOUMyRTI5ODA0RTJGNDk4M0JDRkRGMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqunwMA0EAgACMAcDBQAoBHk8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQjvTANBgkqhkiG9w0BAQsFAAOCAQEAlN9M4AwHeiqtp2aR caPk+SmqP2pgfPb2EpC+aYAWR1W4MI81T8odWZeucIHfGAcFfHkKklOsLdnvqYyo bgnjWBwPVc28LIvlrobeVIs4JAK926A5LqRIaiYygMMhgDM5ES7rldcs/pf11Y3/ rAh/PZ82jGN2YBdP6sWuix7RFktwqqJHwB3BvwA9J3GGB3OiILpMei/1EQ2e3kuf ZYn0agW2hvs+76yt4pC6FDWcTHvkoUYxYJ7AFMlLZAu8fTw9oyUaNaRU+hdpfAaw ndCFOlzFCmG9TTcRDLm9MEOZJ9FnKaOw3T/D0DZ7Y2tHoDFBpcV+2bXCLFHfVog9 7SDQWQ== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:48 2025 by rpki-client on console.sobornost.net