$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer File: E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer (raw, json) Hash identifier: y/BtMRpXMc4aABm0PdLN0ZlkSTn+7W1xvSstHRSBp3g= Subject key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5712BA43710928DAEB7364877FCED832DAE16077 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft caRepository: rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 01:54:54 +0000 Certificate not after: Tue 24 Mar 2026 01:59:54 +0000 Subordinate resources: AS: 270796 IP: 189.36.252.0/22 IP: 2804:718c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:12:ba:43:71:09:28:da:eb:73:64:87:7f:ce:d8:32:da:e1:60:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 01:54:54 2025 GMT Not After : Mar 24 01:59:54 2026 GMT Subject: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2e:b6:55:25:83:c0:91:12:f4:cb:53:20:eb: 75:af:36:0c:9b:3a:c4:78:09:20:42:57:f8:61:39: 93:c1:6d:ab:a3:69:ed:af:5c:35:20:ef:e1:5f:fe: 98:1f:76:08:1b:d7:66:98:9a:05:35:2a:1b:f3:92: 94:14:ea:42:ef:70:1e:a5:85:12:44:2a:65:26:99: bf:bf:43:6c:06:0c:43:da:8f:53:02:bc:69:bd:ed: a3:91:90:ab:11:b9:0c:05:fe:02:72:5f:c2:9d:d2: cd:15:6a:9d:67:0e:5b:d7:79:09:ee:00:62:92:50: 20:89:6f:de:34:52:d2:0e:0c:c8:01:ad:2a:a3:1e: bc:c9:7a:e6:4d:cb:7c:3f:01:02:02:08:f1:71:6f: b5:f2:66:71:4a:d4:33:89:06:9b:2c:b0:4b:88:a2: 84:4f:58:91:24:09:5f:83:16:72:8e:9d:c5:d4:8b: 74:13:5e:a5:fd:2a:43:e2:a1:1c:c1:25:e4:37:bc: 65:0e:63:63:be:60:7a:3f:34:c5:55:7c:25:1e:66: 8e:b3:8f:47:69:90:b9:87:6b:b2:a8:5b:bb:84:9e: 1b:5e:19:e1:ad:26:29:cf:44:ec:90:c9:4a:50:81: 6d:4d:86:d4:bd:98:eb:92:ae:f1:35:c0:8e:14:b2: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.36.252.0/22 IPv6: 2804:718c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270796 Signature Algorithm: sha256WithRSAEncryption 50:bf:bd:58:48:ce:8e:5f:8e:13:e6:f0:de:95:29:95:0f:7c: 3c:61:fe:95:63:6d:69:ce:bd:85:62:0a:bf:0e:3f:2a:33:66: 46:51:9e:59:20:02:a0:66:a7:14:06:b8:90:40:6e:c4:1c:86: f1:29:a6:d7:db:56:6d:e2:08:77:33:dc:15:b2:21:34:e8:d1: 68:00:d4:67:a4:fd:06:c6:4c:04:0a:9e:61:40:6f:02:d6:bd: 3b:87:30:f6:11:28:6d:3d:55:f2:cb:99:7b:c0:ad:25:fc:fe: d7:eb:a7:95:1a:4a:f0:70:5d:40:3d:29:c0:d9:13:21:26:11: dc:6a:53:0f:16:f0:e0:b4:99:fa:26:25:d8:c2:a0:38:98:0f: 8f:9b:c6:92:c1:f0:44:f9:69:9d:d9:60:bf:d1:87:43:bd:36: c6:02:a1:00:4d:5c:26:bf:b1:ef:80:74:c8:ef:55:51:b8:7f: e7:40:4b:b5:a9:66:91:a7:d0:e0:d8:1b:68:d9:a4:f7:d9:48: 54:5b:3b:36:9d:bc:0a:a2:da:05:62:82:33:89:2c:4b:dd:47: 3b:09:ad:b2:d1:ce:d7:bc:57:7e:63:5f:97:e0:3f:c0:d2:6e: 5f:18:c7:4a:a7:ec:be:27:a8:47:a1:e4:b7:68:4d:3a:44:b1: 4a:b9:7d:83 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVxK6Q3EJKNrrc2SHf87YMtrhYHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjUwMTU0NTRaFw0yNjAzMjQwMTU5NTRaMDMxMTAvBgNV BAMTKEUzMjBCMzQ1NEVFQjhFNDFGRDMxQzc3M0NGODNCM0M3Q0VFQTMzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsLrZVJYPAkRL0y1Mg63WvNgyb OsR4CSBCV/hhOZPBbaujae2vXDUg7+Ff/pgfdggb12aYmgU1KhvzkpQU6kLvcB6l hRJEKmUmmb+/Q2wGDEPaj1MCvGm97aORkKsRuQwF/gJyX8Kd0s0Vap1nDlvXeQnu AGKSUCCJb940UtIODMgBrSqjHrzJeuZNy3w/AQICCPFxb7XyZnFK1DOJBpsssEuI ooRPWJEkCV+DFnKOncXUi3QTXqX9KkPioRzBJeQ3vGUOY2O+YHo/NMVVfCUeZo6z j0dpkLmHa7KoW7uEnhteGeGtJinPROyQyUpQgW1NhtS9mOuSrvE1wI4Ush4rAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjILNFTuuOQf0x x3PPg7PHzuozUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUgy djdtTjVnN0tCTEg4UnZlNVpHbUJtSGc3TXZSQXFtcGF0OHpLanBaY0gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVI MnY3bU41ZzdLQkxIOFJ2ZTVaR21CbUhnN012UkFxbXBhdDh6S2pwWmNILzEvRTMy MEIzNDU0RUVCOEU0MUZEMzFDNzczQ0Y4M0IzQzdDRUVBMzM1Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvST8MA0EAgACMAcDBQAoBHGMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQhzDANBgkqhkiG9w0BAQsFAAOCAQEAUL+9WEjOjl+OE+bw 3pUplQ98PGH+lWNtac69hWIKvw4/KjNmRlGeWSACoGanFAa4kEBuxByG8Smm19tW beIIdzPcFbIhNOjRaADUZ6T9BsZMBAqeYUBvAta9O4cw9hEobT1V8suZe8CtJfz+ 1+unlRpK8HBdQD0pwNkTISYR3GpTDxbw4LSZ+iYl2MKgOJgPj5vGksHwRPlpndlg v9GHQ702xgKhAE1cJr+x74B0yO9VUbh/50BLtalmkafQ4NgbaNmk99lIVFs7Np28 CqLaBWKCM4ksS91HOwmtstHO17xXfmNfl+A/wNJuXxjHSqfsvieoR6Hkt2hNOkSx Srl9gw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:34 2025 by rpki-client on console.sobornost.net