$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer (raw, json) Hash identifier: YGJpA3PmcandYzV8KMTzTA9WnlH0oHD1wP2fmYYcFDc= Subject key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 78E4124CA55D6D11997EB0E5F08CB92B16F09BB7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft caRepository: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:56:13 +0000 Certificate not after: Fri 06 Mar 2026 03:01:13 +0000 Subordinate resources: AS: 264992 IP: 170.84.96.0/22 IP: 2804:3118::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e4:12:4c:a5:5d:6d:11:99:7e:b0:e5:f0:8c:b9:2b:16:f0:9b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 02:56:13 2025 GMT Not After : Mar 6 03:01:13 2026 GMT Subject: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:0a:b2:48:4d:cd:4b:95:0b:b3:09:a8:31: ad:88:9e:2d:58:6c:b7:07:b6:1a:27:45:da:ca:8b: e3:f4:a0:5a:08:50:65:86:f0:49:4f:da:22:12:7b: fb:ce:df:9e:a9:31:7b:9a:cb:ca:ac:73:2e:53:1e: 79:78:b5:f8:43:64:da:a7:0e:6f:84:d6:9b:ed:6b: b1:6b:c9:4e:78:06:4c:d3:65:50:e3:ca:9e:90:86: ab:0e:3e:eb:a7:4f:67:1b:36:b0:ce:59:0d:ae:6b: af:f6:c1:a3:3c:24:a7:6f:c0:8d:f3:35:e3:66:b6: 46:ef:1e:87:92:90:00:1d:cf:16:36:85:31:94:36: f8:7f:2b:36:7c:53:8e:33:63:c8:5f:7e:cd:7b:d3: 29:2f:c0:26:52:13:5a:ab:fb:3d:85:eb:07:47:17: 9d:03:10:97:80:c2:4c:2d:38:7d:ee:e2:38:25:e8: 62:2a:d8:92:5a:fe:07:a0:a7:26:c4:d2:74:b2:c3: a3:84:0a:e7:11:09:9e:2a:0f:a6:5d:0f:9a:c2:62: b7:e8:cc:45:7a:27:1f:49:21:57:13:59:2b:e6:e5: 24:a2:d9:48:3a:c1:35:e8:6b:bc:67:39:ec:cb:ff: 9a:a0:53:ee:8e:d0:09:15:6e:73:f6:25:ce:7c:fd: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.96.0/22 IPv6: 2804:3118::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264992 Signature Algorithm: sha256WithRSAEncryption db:ad:fb:b5:45:8d:de:3a:13:6f:04:c3:ea:de:d2:ad:55:c2: 69:1a:60:6d:6a:9b:c6:20:89:88:0f:f0:4a:20:9f:2f:52:15: 77:f6:b2:3f:49:d3:67:86:0c:14:a5:25:bb:7d:75:9d:18:bc: a7:0a:13:28:7d:aa:59:9c:d1:da:68:b9:18:cb:01:bf:d9:fe: 1b:ff:96:8c:eb:49:bf:66:db:b1:1e:7b:ee:0a:9a:37:40:13: 84:84:da:26:19:a7:e7:26:cf:1c:63:04:b8:1f:2b:51:a2:8e: de:1a:77:7c:0c:2a:80:52:a4:72:ad:eb:98:e9:3d:57:f9:34: e0:8d:13:d3:c6:a6:21:31:8f:93:db:f5:f2:b7:c2:a3:f4:0d: 68:91:50:b5:55:af:5e:18:88:5b:c3:a5:88:e6:e7:df:0d:e8: 2f:b3:8e:94:52:2b:55:b3:ac:af:77:e1:4b:df:0f:57:83:7c: b8:3f:b9:e4:bc:94:d7:b0:b9:2d:21:4f:3f:82:75:cd:c2:3d: 1b:36:69:95:db:d4:83:c6:db:cc:d5:91:c4:78:a2:40:c3:ff: 6f:bc:9a:56:03:a0:56:8e:e3:73:97:8c:98:2c:25:98:ce:70: bb:cd:51:aa:2e:17:83:34:38:80:01:84:0b:de:65:84:b1:bb: b9:d8:f6:c8 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUeOQSTKVdbRGZfrDl8Iy5Kxbwm7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcwMjU2MTNaFw0yNjAzMDYwMzAxMTNaMDMxMTAvBgNV BAMTKERBNDhDQUMxQUQ5Mjc2OEI1Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgQqySE3NS5ULswmoMa2Ini1Y bLcHthonRdrKi+P0oFoIUGWG8ElP2iISe/vO356pMXuay8qscy5THnl4tfhDZNqn Dm+E1pvta7FryU54BkzTZVDjyp6QhqsOPuunT2cbNrDOWQ2ua6/2waM8JKdvwI3z NeNmtkbvHoeSkAAdzxY2hTGUNvh/KzZ8U44zY8hffs170ykvwCZSE1qr+z2F6wdH F50DEJeAwkwtOH3u4jgl6GIq2JJa/gegpybE0nSyw6OECucRCZ4qD6ZdD5rCYrfo zEV6Jx9JIVcTWSvm5SSi2Ug6wTXoa7xnOezL/5qgU+6O0AkVbnP2Jc58/aAbAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaSMrBrZJ2i1y8 YSGdum/rzYoiPzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRO b3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRO b3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9EQTQ4 Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqVGAwDQQCAAIwBwMFACgEMRgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAsgMA0GCSqGSIb3DQEBCwUAA4IBAQDbrfu1RY3eOhNvBMPq 3tKtVcJpGmBtapvGIImID/BKIJ8vUhV39rI/SdNnhgwUpSW7fXWdGLynChMofapZ nNHaaLkYywG/2f4b/5aM60m/ZtuxHnvuCpo3QBOEhNomGafnJs8cYwS4HytRoo7e Gnd8DCqAUqRyreuY6T1X+TTgjRPTxqYhMY+T2/Xyt8Kj9A1okVC1Va9eGIhbw6WI 5uffDegvs46UUitVs6yvd+FL3w9Xg3y4P7nkvJTXsLktIU8/gnXNwj0bNmmV29SD xtvM1ZHEeKJAw/9vvJpWA6BWjuNzl4yYLCWYznC7zVGqLheDNDiAAYQL3mWEsbu5 2PbI -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:25 2025 by rpki-client on console.sobornost.net