$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer File: E3C11484C8B4CD3F766170F9E324672A733D9604.cer (raw, json) Hash identifier: 3BLtvv5wkoHQr8Dnw+f4/CGdNj3kLh/v+J0kCviIE6w= Subject key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1D1746FC9250581CCD9753A98F2A4F5F7DAE2D5D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft caRepository: rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 18:20:24 +0000 Certificate not after: Thu 05 Mar 2026 18:25:24 +0000 Subordinate resources: AS: 264128 IP: 138.97.52.0/22 IP: 170.78.240.0/22 IP: 2804:22e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:17:46:fc:92:50:58:1c:cd:97:53:a9:8f:2a:4f:5f:7d:ae:2d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 18:20:24 2025 GMT Not After : Mar 5 18:25:24 2026 GMT Subject: CN=E3C11484C8B4CD3F766170F9E324672A733D9604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:8b:c1:e4:cc:38:80:04:01:d3:f2:62:e8: ad:92:2a:d1:8d:8f:a3:bc:a4:08:3e:9f:10:ff:63: 88:fd:28:e8:18:5d:af:2c:8b:a0:a3:6a:ad:5b:5e: a2:d1:87:df:3f:29:26:e7:51:8f:4d:ad:27:cc:5a: 68:4f:12:dd:25:a0:7c:db:81:d0:02:b2:04:cb:74: de:2d:32:d7:7c:fa:3b:db:54:f4:4d:89:84:d5:7d: 11:44:90:d9:f4:28:69:1a:c6:57:0a:b5:9e:d1:74: 55:4a:1f:71:1c:cb:b8:9f:6c:c3:96:d7:ba:2d:16: a2:aa:10:12:8b:51:0b:34:a0:e9:af:87:2e:fb:6e: 5a:cd:a8:32:34:71:0b:36:4b:d4:aa:f2:e7:0c:50: 15:96:e3:48:9a:f6:99:3d:2b:79:4c:26:e5:56:3a: 78:e3:fa:fb:7e:1c:cf:8f:6f:4f:25:09:ad:65:f8: 37:42:15:0c:2e:cd:6d:c3:47:ff:56:2d:10:c0:27: e2:93:68:b9:a0:a4:ce:30:6a:2b:88:61:84:12:ce: 72:59:17:18:b3:33:28:17:b5:1c:e7:f0:4e:7d:df: 0c:22:a7:01:49:9a:8c:0d:e9:1f:50:4f:63:63:34: 1a:70:5c:2f:43:1f:01:54:c2:5a:86:04:bb:8d:51: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.52.0/22 170.78.240.0/22 IPv6: 2804:22e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264128 Signature Algorithm: sha256WithRSAEncryption 01:f2:b0:1a:25:10:bc:ce:07:19:42:3a:e5:6b:29:db:08:fb: df:93:e6:ed:7a:ef:05:f0:f2:38:9b:72:6e:b0:b6:fa:cb:85: aa:72:4a:90:62:8c:bc:39:98:e2:a3:b0:1b:b8:c6:8c:77:51: e1:ce:f2:16:ff:1e:9e:eb:0d:cf:2a:18:f0:45:4f:be:55:71: 41:3b:88:38:a2:64:7d:99:8e:a5:be:72:b4:49:5f:a5:32:ed: 26:e6:33:9f:31:3a:fe:e0:46:47:2d:5f:73:5e:67:f3:21:66: c7:85:7a:60:6a:72:18:c6:84:43:30:ed:b0:4c:96:4e:6e:30: a9:bc:5d:c8:e7:e2:86:4e:6d:50:3a:bc:84:77:d7:0c:cd:c0: 39:51:74:cf:dd:5b:82:39:cf:89:c1:6f:a9:0e:c5:36:a1:69: d5:38:76:25:70:f0:38:27:41:c9:2d:38:cd:0a:c3:c5:11:60: 5c:66:61:56:95:52:1e:8f:a4:1e:7d:b3:bb:8a:94:14:ab:71: 08:a1:fc:3a:7e:3f:63:a8:7d:ee:23:30:70:10:41:8d:4f:e5: f0:c0:0d:70:51:bd:f2:34:4b:a7:eb:76:4f:ba:81:b7:53:bb: 2e:ec:37:42:1e:68:b4:b0:9b:ba:9e:be:07:da:33:7f:b3:6c: 32:a4:43:d0 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUHRdG/JJQWBzNl1OpjypPX32uLV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxODIwMjRaFw0yNjAzMDUxODI1MjRaMDMxMTAvBgNV BAMTKEUzQzExNDg0QzhCNENEM0Y3NjYxNzBGOUUzMjQ2NzJBNzMzRDk2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUf4vB5Mw4gAQB0/Ji6K2SKtGN j6O8pAg+nxD/Y4j9KOgYXa8si6Cjaq1bXqLRh98/KSbnUY9NrSfMWmhPEt0loHzb gdACsgTLdN4tMtd8+jvbVPRNiYTVfRFEkNn0KGkaxlcKtZ7RdFVKH3Ecy7ifbMOW 17otFqKqEBKLUQs0oOmvhy77blrNqDI0cQs2S9Sq8ucMUBWW40ia9pk9K3lMJuVW Onjj+vt+HM+Pb08lCa1l+DdCFQwuzW3DR/9WLRDAJ+KTaLmgpM4waiuIYYQSznJZ FxizMygXtRzn8E593wwipwFJmowN6R9QT2NjNBpwXC9DHwFUwlqGBLuNUWGNAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjwRSEyLTNP3Zh cPnjJGcqcz2WBDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEdv bVJSRmNUZ1FWeExmU3NoYWpRTG4xdEtiblZxN3kyN3pjRXlSSGVYRUgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRH b21SUkZjVGdRVnhMZlNzaGFqUUxuMXRLYm5WcTd5Mjd6Y0V5UkhlWEVILzEvRTND MTE0ODRDOEI0Q0QzRjc2NjE3MEY5RTMyNDY3MkE3MzNEOTYwNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimE0AwQCqk7wMA0EAgACMAcDBQAoBCLgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHwDANBgkqhkiG9w0BAQsFAAOCAQEAAfKwGiUQ vM4HGUI65Wsp2wj735Pm7XrvBfDyOJtybrC2+suFqnJKkGKMvDmY4qOwG7jGjHdR 4c7yFv8enusNzyoY8EVPvlVxQTuIOKJkfZmOpb5ytElfpTLtJuYznzE6/uBGRy1f c15n8yFmx4V6YGpyGMaEQzDtsEyWTm4wqbxdyOfihk5tUDq8hHfXDM3AOVF0z91b gjnPicFvqQ7FNqFp1Th2JXDwOCdByS04zQrDxRFgXGZhVpVSHo+kHn2zu4qUFKtx CKH8On4/Y6h97iMwcBBBjU/l8MANcFG98jRLp+t2T7qBt1O7Luw3Qh5otLCbup6+ B9ozf7NsMqRD0A== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:34 2025 by rpki-client on console.sobornost.net