$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D8C50517FC609A5F814DC8A799CB96FFF01E6964.cer File: D8C50517FC609A5F814DC8A799CB96FFF01E6964.cer (raw, json) Hash identifier: 8pdQx/PqvU3FVm52ekrfQnBiQ8bfPl/12PmAVdKPEbc= Subject key identifier: D8:C5:05:17:FC:60:9A:5F:81:4D:C8:A7:99:CB:96:FF:F0:1E:69:64 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0B79E8595B8E49DC8D0A94DADA892DCC55BE379B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/D8C50517FC609A5F814DC8A799CB96FFF01E6964.mft caRepository: rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 21 Feb 2025 02:17:55 +0000 Certificate not after: Fri 20 Feb 2026 02:22:55 +0000 Subordinate resources: AS: 273798 IP: 187.109.121.0/24 IP: 2804:8c5c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:79:e8:59:5b:8e:49:dc:8d:0a:94:da:da:89:2d:cc:55:be:37:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 21 02:17:55 2025 GMT Not After : Feb 20 02:22:55 2026 GMT Subject: CN=D8C50517FC609A5F814DC8A799CB96FFF01E6964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:21:89:84:53:55:3d:76:84:f4:01:83:7a: a5:52:ef:36:dd:30:7f:9b:bc:df:46:a2:ac:1f:48: 4d:ce:9b:2d:31:97:68:f8:f5:9c:7c:f2:a4:d6:b3: 9c:73:79:f9:a8:ce:6a:04:a8:f6:14:52:a2:0f:98: 94:06:22:6f:54:e4:2f:a3:18:18:a8:e8:3f:9b:b1: 73:89:07:53:7e:45:b5:e1:90:01:55:ea:d7:81:53: 44:21:f1:f5:b1:7f:e1:a4:e8:68:d8:79:33:67:d7: f6:2a:a5:df:5f:2e:da:31:8b:1c:d0:a7:5b:aa:2b: bb:6d:b7:c6:d6:2e:50:6a:24:75:82:72:db:e5:57: be:4a:4b:b9:02:ed:d9:d4:8e:87:82:ba:f0:37:d7: 08:b4:de:de:43:99:4b:97:71:a9:27:be:6d:cc:e8: c5:da:1c:ac:d0:26:bd:11:c3:0d:a7:38:52:e8:e8: 00:da:6d:8b:90:00:5e:60:c1:62:bd:31:0d:2f:05: 35:22:8c:58:bd:16:4b:50:13:3f:86:94:2d:2b:5d: 3d:bf:6a:e5:f8:83:06:4a:ec:a5:e4:24:42:d5:43: 3e:24:4c:e3:22:e4:6b:5f:e7:36:11:20:d4:0a:72: 68:58:52:a4:14:6f:75:e3:93:3f:98:92:5c:4a:53: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:C5:05:17:FC:60:9A:5F:81:4D:C8:A7:99:CB:96:FF:F0:1E:69:64 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/D8C50517FC609A5F814DC8A799CB96FFF01E6964.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.109.121.0/24 IPv6: 2804:8c5c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273798 Signature Algorithm: sha256WithRSAEncryption 32:fd:a2:e8:2b:3d:c8:38:ec:19:e0:2d:c5:d8:3e:55:56:56: 4c:7a:6c:62:72:ce:dd:e4:4c:6d:56:19:50:e3:94:de:c5:77: fb:7e:f2:19:a9:e8:6f:9b:0d:b8:cf:7d:f9:8a:81:cb:21:15: 62:c4:17:f3:1b:2f:82:14:dd:51:55:39:1c:ca:e9:89:20:ab: 05:9f:ab:dc:0f:83:25:55:17:6c:6b:60:91:23:00:ce:ff:09: eb:f2:6b:eb:fe:21:47:b0:d6:b4:60:6a:2b:10:9c:73:ab:79: 0a:5c:28:c5:47:56:26:56:66:9d:f6:a8:4f:31:9a:b1:1f:0e: 3a:46:52:57:53:ca:d0:66:74:8b:8a:89:1a:96:1c:3a:c2:71: e6:9b:ed:23:f8:e1:97:e0:02:e1:8c:25:bf:c1:60:ef:9e:cd: 56:0d:62:ca:e1:37:c6:2b:78:93:08:39:a8:46:7e:54:d9:0e: 3d:26:73:a1:1f:5c:68:64:95:0b:b3:5e:63:b1:76:61:38:f4: c7:e7:78:1c:ab:17:30:bf:13:81:a3:17:61:28:a0:40:e5:39: 27:2f:4d:46:18:d7:a3:e0:9e:f6:03:33:cd:3e:d8:3d:9e:5b: 2e:30:bb:35:4e:db:38:5b:3b:21:a7:10:4c:5b:13:b3:ac:54: 1d:84:b2:7c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUC3noWVuOSdyNCpTa2oktzFW+N5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjEwMjE3NTVaFw0yNjAyMjAwMjIyNTVaMDMxMTAvBgNV BAMTKEQ4QzUwNTE3RkM2MDlBNUY4MTREQzhBNzk5Q0I5NkZGRjAxRTY5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOSGJhFNVPXaE9AGDeqVS7zbd MH+bvN9GoqwfSE3Omy0xl2j49Zx88qTWs5xzefmozmoEqPYUUqIPmJQGIm9U5C+j GBio6D+bsXOJB1N+RbXhkAFV6teBU0Qh8fWxf+Gk6GjYeTNn1/Yqpd9fLtoxixzQ p1uqK7ttt8bWLlBqJHWCctvlV75KS7kC7dnUjoeCuvA31wi03t5DmUuXcaknvm3M 6MXaHKzQJr0Rww2nOFLo6ADabYuQAF5gwWK9MQ0vBTUijFi9FktQEz+GlC0rXT2/ auX4gwZK7KXkJELVQz4kTOMi5Gtf5zYRINQKcmhYUqQUb3Xjkz+YklxKU1yzAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTYxQUX/GCaX4FN yKeZy5b/8B5pZDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTJI Nk1hMlNIRmdCdHJDRW41QWtHN05DWExDa2dBR3pIcmFSTEhpbWs1Y3EvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Uy SDZNYTJTSEZnQnRyQ0VuNUFrRzdOQ1hMQ2tnQUd6SHJhUkxIaW1rNWNxLzAvRDhD NTA1MTdGQzYwOUE1RjgxNERDOEE3OTlDQjk2RkZGMDFFNjk2NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQAu215MA0EAgACMAcDBQAoBIxcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQthjANBgkqhkiG9w0BAQsFAAOCAQEAMv2i6Cs9yDjsGeAt xdg+VVZWTHpsYnLO3eRMbVYZUOOU3sV3+37yGanob5sNuM99+YqByyEVYsQX8xsv ghTdUVU5HMrpiSCrBZ+r3A+DJVUXbGtgkSMAzv8J6/Jr6/4hR7DWtGBqKxCcc6t5 ClwoxUdWJlZmnfaoTzGasR8OOkZSV1PK0GZ0i4qJGpYcOsJx5pvtI/jhl+AC4Ywl v8Fg757NVg1iyuE3xit4kwg5qEZ+VNkOPSZzoR9caGSVC7NeY7F2YTj0x+d4HKsX ML8TgaMXYSigQOU5Jy9NRhjXo+Ce9gMzzT7YPZ5bLjC7NU7bOFs7IacQTFsTs6xU HYSyfA== -----END CERTIFICATE-----Generated at Fri Apr 25 10:37:56 2025 by rpki-client on console.sobornost.net