$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.cer File: E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.cer (raw, json) Hash identifier: qp+Rsu7s+L5AcTElM+cd9dDlTbekkNu4oJe4h2Cibqg= Subject key identifier: E2:03:42:16:C3:D3:3D:C4:B6:6B:DC:1F:9C:8C:CF:14:BA:AE:19:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FAB861A455A76CAC2D43A749B7F59CDAE2A6B97 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.mft caRepository: rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:43 +0000 Certificate not after: Wed 04 Mar 2026 18:40:43 +0000 Subordinate resources: AS: 52934 IP: 177.11.60.0/22 IP: 2804:b04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ab:86:1a:45:5a:76:ca:c2:d4:3a:74:9b:7f:59:cd:ae:2a:6b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:43 2025 GMT Not After : Mar 4 18:40:43 2026 GMT Subject: CN=E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:fa:7d:30:e1:19:7f:54:0c:7d:71:8b:4e: ae:6a:ba:43:23:c6:4c:ad:8c:a4:85:26:7c:92:e9: 2f:ba:9e:70:d8:6d:45:f5:85:e4:a6:04:06:29:6a: d6:96:ae:06:65:80:7d:c1:24:bf:9e:ff:2c:11:50: 64:99:c4:c9:c7:07:8b:b7:8a:45:33:16:02:14:95: 6e:6c:3d:d1:a8:40:6c:6c:eb:c8:85:80:17:89:56: a2:34:34:b4:55:0a:b1:aa:76:97:b8:e9:12:db:d8: 88:f9:65:c8:f9:64:5a:f4:59:13:d5:45:ba:eb:2a: 3e:cd:8e:29:1b:05:96:7b:d8:da:a0:94:b1:6a:9b: ee:ae:dc:00:76:bf:6a:8d:5f:c5:e9:d2:ef:b8:2e: 16:ce:89:87:22:1b:cf:1a:41:24:01:e7:8a:d5:0e: 0f:c7:7e:92:45:79:00:3f:11:4e:dc:02:64:8f:2b: 79:59:8b:1f:69:03:cf:51:34:90:34:97:2f:c4:12: 4a:b4:c9:58:f9:fd:de:af:04:f5:03:04:3b:28:f6: d5:32:e9:11:94:5b:30:57:50:ed:44:40:b4:7e:a5: 0c:ef:0d:ae:1c:d5:a5:82:01:f4:39:e5:76:6b:de: d4:19:c6:24:f8:f3:c2:3c:24:8c:2a:73:60:41:83: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:03:42:16:C3:D3:3D:C4:B6:6B:DC:1F:9C:8C:CF:14:BA:AE:19:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQT5S9bX8eGBQUzJLen886rLgJSSpjrtryGzQzRTAPyL/1/E2034216C3D33DC4B66BDC1F9C8CCF14BAAE19E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.11.60.0/22 IPv6: 2804:b04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52934 Signature Algorithm: sha256WithRSAEncryption bf:a1:1e:43:6b:0c:33:a9:66:3f:fa:e2:18:35:07:95:99:fc: d3:2a:85:d9:4a:5b:f3:19:34:64:2e:48:76:3a:d9:ae:b1:8a: 44:da:58:87:b9:55:df:5b:39:d6:ed:6b:50:1f:ee:9e:f0:45: 35:ae:e9:4a:64:a8:60:76:ad:52:6b:30:e4:2e:4a:4a:9d:6f: f0:af:b3:eb:48:e2:54:08:79:06:a7:00:93:ea:0e:6d:24:27: 7f:d7:2e:29:27:da:df:b9:53:b8:3b:b0:be:b3:60:14:ef:cc: bf:e8:4b:51:a1:d0:ee:2c:71:3f:25:a6:45:44:03:9a:bd:61: 43:14:be:a6:f6:47:57:f6:bf:c2:49:07:f3:4f:0e:45:5b:2f: 7e:d6:da:f3:9b:a8:23:90:6e:ee:a3:63:6b:8b:a6:78:d6:90: a0:50:4b:e1:a7:47:9d:7a:3b:60:8b:cd:e9:f2:84:9c:4c:66: 6b:34:a0:8a:15:e2:e4:d3:4d:1f:52:a6:ac:25:10:d0:ec:60: e8:3d:5e:aa:39:de:30:3d:29:ec:ce:e6:80:8a:5f:0a:d7:8b: 9d:19:5a:a4:2c:0c:07:6f:f2:4d:c8:49:3c:72:23:76:13:2a: dc:d4:e1:dd:07:cb:4a:45:bf:2c:48:75:b6:5d:75:15:d2:53: 4b:3d:8e:90 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUP6uGGkVadsrC1Dp0m39Zza4qa5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NDNaFw0yNjAzMDQxODQwNDNaMDMxMTAvBgNV BAMTKEUyMDM0MjE2QzNEMzNEQzRCNjZCREMxRjlDOENDRjE0QkFBRTE5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhfp9MOEZf1QMfXGLTq5qukMj xkytjKSFJnyS6S+6nnDYbUX1heSmBAYpataWrgZlgH3BJL+e/ywRUGSZxMnHB4u3 ikUzFgIUlW5sPdGoQGxs68iFgBeJVqI0NLRVCrGqdpe46RLb2Ij5Zcj5ZFr0WRPV RbrrKj7NjikbBZZ72NqglLFqm+6u3AB2v2qNX8Xp0u+4LhbOiYciG88aQSQB54rV Dg/HfpJFeQA/EU7cAmSPK3lZix9pA89RNJA0ly/EEkq0yVj5/d6vBPUDBDso9tUy 6RGUWzBXUO1EQLR+pQzvDa4c1aWCAfQ55XZr3tQZxiT488I8JIwqc2BBg/CHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTiA0IWw9M9xLZr 3B+cjM8Uuq4Z5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1FU NVM5Ylg4ZUdCUVV6Skxlbjg4NnJMZ0pTU3BqcnRyeUd6UXpSVEFQeUwvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dR VDVTOWJYOGVHQlFVekpMZW44ODZyTGdKU1NwanJ0cnlHelF6UlRBUHlMLzEvRTIw MzQyMTZDM0QzM0RDNEI2NkJEQzFGOUM4Q0NGMTRCQUFFMTlFNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsQs8MA0EAgACMAcDBQAoBAsEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDOxjANBgkqhkiG9w0BAQsFAAOCAQEAv6EeQ2sMM6lmP/ri GDUHlZn80yqF2Upb8xk0ZC5IdjrZrrGKRNpYh7lV31s51u1rUB/unvBFNa7pSmSo YHatUmsw5C5KSp1v8K+z60jiVAh5BqcAk+oObSQnf9cuKSfa37lTuDuwvrNgFO/M v+hLUaHQ7ixxPyWmRUQDmr1hQxS+pvZHV/a/wkkH808ORVsvftba85uoI5Bu7qNj a4umeNaQoFBL4adHnXo7YIvN6fKEnExmazSgihXi5NNNH1KmrCUQ0Oxg6D1eqjne MD0p7M7mgIpfCteLnRlapCwMB2/yTchJPHIjdhMq3NTh3QfLSkW/LEh1tl11FdJT Sz2OkA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:34 2025 by rpki-client on console.sobornost.net