$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer (raw, json) Hash identifier: 8bh7CC19b9E9Pkj0dGbhyvAfnFxmdpmoPq5PCafcI90= Subject key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 15F3E19119AE6DC11D84C4212FFC4E5A5A3B4FA4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft caRepository: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:30 +0000 Certificate not after: Wed 04 Mar 2026 18:40:30 +0000 Subordinate resources: AS: 271489 IP: 181.232.200.0/22 IP: 2804:7c54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f3:e1:91:19:ae:6d:c1:1d:84:c4:21:2f:fc:4e:5a:5a:3b:4f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:30 2025 GMT Not After : Mar 4 18:40:30 2026 GMT Subject: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:63:45:02:e3:0d:21:92:49:c4:07:62:b5: df:01:22:fc:8c:46:ad:3d:73:08:96:65:f5:d1:a6: 80:ad:f1:a7:13:ac:2a:5b:45:15:b5:ce:e5:33:d0: 15:e8:b4:f5:2c:64:dd:d8:5d:63:40:95:04:5f:fd: 84:3a:38:a9:57:9a:2c:83:d8:e5:73:2e:67:84:7b: de:14:d6:c9:5c:65:4d:86:bc:97:12:ff:99:ef:36: 3b:89:c6:04:91:6f:3d:28:a3:ca:23:c7:e4:39:a7: b0:d1:32:80:2d:43:48:5a:5f:ef:e3:7c:dc:50:cb: 19:00:04:71:83:68:df:dc:7b:0e:90:ec:1d:1b:2b: 58:09:27:9e:94:47:bc:48:89:61:15:40:e9:48:01: fd:b6:ab:75:88:88:58:30:b6:d9:a6:d3:61:5f:87: 52:19:5f:b1:12:d4:f1:2f:9f:77:18:6a:d1:11:47: b5:fa:30:58:a2:f0:9b:0b:f2:eb:f6:76:1d:87:68: a7:0f:91:84:ae:98:f3:33:3f:96:5d:c3:85:80:90: 6f:ce:f5:ab:f5:09:94:33:45:64:25:72:07:6e:20: 21:56:7d:a3:f3:f6:0d:56:40:8a:e4:9d:34:e4:99: 9f:af:b5:70:f3:67:34:10:9c:b7:e5:5e:71:29:f5: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.200.0/22 IPv6: 2804:7c54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271489 Signature Algorithm: sha256WithRSAEncryption 64:a8:ca:d1:d1:d4:c6:d6:ef:a2:8b:bb:44:8d:17:0a:09:e1: 31:6c:89:42:77:90:16:0e:f4:b7:e7:24:ae:0d:bd:12:d2:ab: d1:78:9b:5e:de:e8:7e:25:71:8c:9d:5b:a4:7c:c6:87:22:9e: 66:45:8c:54:90:59:f8:28:92:d5:54:98:56:07:78:02:ab:7d: ea:d9:ab:45:e4:4a:da:6e:ef:9d:9f:36:b6:2a:6b:11:7c:4a: de:6b:02:79:4f:2f:11:1a:df:6f:ac:e7:cb:95:ee:7f:58:e9: 82:5a:70:01:ce:aa:c4:56:5c:df:fe:34:c8:79:7c:6c:43:4f: 92:f5:c7:54:51:b5:39:eb:6c:60:33:30:37:b0:e8:5b:68:34: 6a:0c:82:b3:b9:5f:70:25:ff:24:0a:55:15:83:00:d1:70:93: e3:3b:77:97:09:36:af:08:66:89:65:3a:56:48:66:af:60:ac: 3c:f2:a9:5e:62:3e:59:e2:9e:47:76:e6:2b:88:ca:31:3e:2f: 3c:50:9d:b3:22:18:36:63:fb:44:b1:3b:f8:e6:87:9b:18:11: 4c:de:c8:16:8f:0e:38:5b:a0:9a:b5:50:68:15:e6:4a:0c:65: 41:99:7c:16:97:79:a9:a3:04:b1:4e:a4:c4:0a:9b:bc:48:ea: 05:83:b5:57 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUFfPhkRmubcEdhMQhL/xOWlo7T6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MzBaFw0yNjAzMDQxODQwMzBaMDMxMTAvBgNV BAMTKERDRDdBMUFERDRERUJEMjNCMUM1RkFENUU2MEJDMjY5RDJBRDEwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40WNFAuMNIZJJxAditd8BIvyM Rq09cwiWZfXRpoCt8acTrCpbRRW1zuUz0BXotPUsZN3YXWNAlQRf/YQ6OKlXmiyD 2OVzLmeEe94U1slcZU2GvJcS/5nvNjuJxgSRbz0oo8ojx+Q5p7DRMoAtQ0haX+/j fNxQyxkABHGDaN/cew6Q7B0bK1gJJ56UR7xIiWEVQOlIAf22q3WIiFgwttmm02Ff h1IZX7ES1PEvn3cYatERR7X6MFii8JsL8uv2dh2HaKcPkYSumPMzP5Zdw4WAkG/O 9av1CZQzRWQlcgduICFWfaPz9g1WQIrknTTkmZ+vtXDzZzQQnLflXnEp9WCXAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTc16Gt1N69I7HF +tXmC8Jp0q0QDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3NI a0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3NI a0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9EQ0Q3 QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK16MgwDQQCAAIwBwMFACgEfFQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCSBMA0GCSqGSIb3DQEBCwUAA4IBAQBkqMrR0dTG1u+ii7tE jRcKCeExbIlCd5AWDvS35ySuDb0S0qvReJte3uh+JXGMnVukfMaHIp5mRYxUkFn4 KJLVVJhWB3gCq33q2atF5Erabu+dnza2KmsRfEreawJ5Ty8RGt9vrOfLle5/WOmC WnABzqrEVlzf/jTIeXxsQ0+S9cdUUbU562xgMzA3sOhbaDRqDIKzuV9wJf8kClUV gwDRcJPjO3eXCTavCGaJZTpWSGavYKw88qleYj5Z4p5HduYriMoxPi88UJ2zIhg2 Y/tEsTv45oebGBFM3sgWjw44W6CatVBoFeZKDGVBmXwWl3mpowSxTqTECpu8SOoF g7VX -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:49 2025 by rpki-client on console.sobornost.net