$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.cer File: DF45F3BB0F8ED9426CD418F08B572024F3B57C47.cer (raw, json) Hash identifier: EuTGUjB2RmgV8tpxf4QFtZmrzUUiiljrcvssaTsqB3c= Subject key identifier: DF:45:F3:BB:0F:8E:D9:42:6C:D4:18:F0:8B:57:20:24:F3:B5:7C:47 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E9E103887D02CCF485685E5A6A2E19403E40A56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.mft caRepository: rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 31 Jan 2025 00:19:47 +0000 Certificate not after: Fri 30 Jan 2026 00:24:47 +0000 Subordinate resources: AS: 265244 IP: 168.0.36.0/22 IP: 2804:2ccc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9e:10:38:87:d0:2c:cf:48:56:85:e5:a6:a2:e1:94:03:e4:0a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 31 00:19:47 2025 GMT Not After : Jan 30 00:24:47 2026 GMT Subject: CN=DF45F3BB0F8ED9426CD418F08B572024F3B57C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:24:99:9a:8f:ca:05:97:d6:0d:a3:9a:03: 84:97:69:73:2b:9a:88:7d:53:45:44:b3:dd:9a:21: 77:f3:11:01:fb:eb:62:54:f3:fa:aa:97:98:d5:b0: ba:f9:e4:fc:d1:91:0a:ac:d3:39:8a:35:a4:13:43: 22:74:e9:6b:d6:d3:33:c3:f9:e8:54:42:74:21:0c: f2:43:44:e6:06:82:eb:ea:b2:58:fb:47:5e:81:12: e4:4b:9f:f3:b6:f7:0a:4e:c1:62:6a:94:32:db:7e: ed:24:4f:d0:da:b2:73:3a:5a:44:9f:cf:bc:76:55: c6:cf:f7:d4:3b:cd:d2:41:2e:3e:87:cc:5f:d8:cd: 71:28:b8:11:75:be:02:94:0b:3d:89:e2:68:6a:df: 20:c4:36:cc:ac:a6:41:d0:c9:8b:ab:b5:3b:e3:13: fd:48:d2:f9:24:06:d8:aa:3a:a0:a5:89:e3:6e:a1: 47:7d:7a:6f:7b:01:a1:3a:d7:ab:76:aa:31:85:93: fa:a1:23:a2:a8:15:9d:21:78:3c:03:37:2d:41:d3: 37:86:c6:b3:56:00:ae:77:65:53:e2:90:fc:b0:1b: d0:94:30:f9:67:57:3a:36:51:60:e9:2a:90:71:cc: 92:be:da:85:f0:d9:bd:c0:56:4a:1c:cb:08:0c:ac: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:45:F3:BB:0F:8E:D9:42:6C:D4:18:F0:8B:57:20:24:F3:B5:7C:47 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.36.0/22 IPv6: 2804:2ccc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265244 Signature Algorithm: sha256WithRSAEncryption 0e:99:e8:73:35:04:23:cc:86:a5:92:11:79:34:24:51:64:eb: a1:59:ae:98:8a:24:88:23:07:9e:f8:c1:79:65:76:78:dd:aa: 98:cb:a9:72:58:e3:5d:61:23:b6:b1:f1:dc:77:f7:81:5d:9e: 13:67:e4:7a:9e:0d:9b:bb:49:a0:7a:2d:cd:a6:10:9d:54:07: 46:96:93:97:50:a4:13:ba:87:9b:d1:00:d4:66:da:bd:04:bf: 88:d9:d7:60:a9:f3:fe:0e:33:b5:b7:9e:f2:68:67:a4:73:ec: 6b:45:86:dd:38:e5:55:91:71:1f:64:69:df:8d:11:e5:c1:1b: e9:52:04:b7:2a:cb:d7:ad:d5:50:a8:6f:a7:2e:5b:52:31:35: cf:a3:cc:53:7b:9e:80:1d:fd:4e:0f:5a:31:d2:6c:4d:8f:91: b4:08:93:96:32:f9:5a:77:7e:b6:05:7a:8d:e5:c7:24:8f:d1: f5:a0:0b:a5:a5:6f:3d:8a:6c:1d:40:ad:99:38:84:15:16:8f: ea:1d:51:3d:2c:19:49:a3:ed:79:5c:61:33:4c:84:a1:fd:7d: ea:ad:a6:1c:57:64:da:05:02:e0:0e:3f:e4:df:6b:9c:f9:5c: f3:e1:6b:78:30:13:0d:b5:dd:5e:ee:b7:5c:14:09:a4:80:d0: 34:8c:00:ec -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPp4QOIfQLM9IVoXlpqLhlAPkClYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMzEwMDE5NDdaFw0yNjAxMzAwMDI0NDdaMDMxMTAvBgNV BAMTKERGNDVGM0JCMEY4RUQ5NDI2Q0Q0MThGMDhCNTcyMDI0RjNCNTdDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGviSZmo/KBZfWDaOaA4SXaXMr moh9U0VEs92aIXfzEQH762JU8/qql5jVsLr55PzRkQqs0zmKNaQTQyJ06WvW0zPD +ehUQnQhDPJDROYGguvqslj7R16BEuRLn/O29wpOwWJqlDLbfu0kT9DasnM6WkSf z7x2VcbP99Q7zdJBLj6HzF/YzXEouBF1vgKUCz2J4mhq3yDENsyspkHQyYurtTvj E/1I0vkkBtiqOqClieNuoUd9em97AaE616t2qjGFk/qhI6KoFZ0heDwDNy1B0zeG xrNWAK53ZVPikPywG9CUMPlnVzo2UWDpKpBxzJK+2oXw2b3AVkocywgMrFxvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfRfO7D47ZQmzU GPCLVyAk87V8RzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmFi dG03QVlVWXZ4Mmk5SktlTmNNU0NiR01WNkZaNDVpdXRXWGhERXUxSzcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jh YnRtN0FZVVl2eDJpOUpLZU5jTVNDYkdNVjZGWjQ1aXV0V1hoREV1MUs3LzAvREY0 NUYzQkIwRjhFRDk0MjZDRDQxOEYwOEI1NzIwMjRGM0I1N0M0Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqAAkMA0EAgACMAcDBQAoBCzMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMHDANBgkqhkiG9w0BAQsFAAOCAQEADpnoczUEI8yGpZIR eTQkUWTroVmumIokiCMHnvjBeWV2eN2qmMupcljjXWEjtrHx3Hf3gV2eE2fkep4N m7tJoHotzaYQnVQHRpaTl1CkE7qHm9EA1GbavQS/iNnXYKnz/g4ztbee8mhnpHPs a0WG3TjlVZFxH2Rp340R5cEb6VIEtyrL163VUKhvpy5bUjE1z6PMU3uegB39Tg9a MdJsTY+RtAiTljL5Wnd+tgV6jeXHJI/R9aALpaVvPYpsHUCtmTiEFRaP6h1RPSwZ SaPteVxhM0yEof196q2mHFdk2gUC4A4/5N9rnPlc8+FreDATDbXdXu63XBQJpIDQ NIwA7A== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:33 2025 by rpki-client on console.sobornost.net