$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer File: F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.cer (raw, json) Hash identifier: oSMUdPMTlfH5fz2E7PsJbR9xiqYUm8WeczBoEa8Dh0A= Subject key identifier: F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5C0CCA85886BA0B430F56DD41C223873284FB2E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.mft caRepository: rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Apr 2025 14:45:58 +0000 Certificate not after: Wed 22 Apr 2026 14:50:58 +0000 Subordinate resources: AS: 262820 IP: 138.117.120.0/22 IP: 186.251.0.0/21 IP: 2804:288::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0c:ca:85:88:6b:a0:b4:30:f5:6d:d4:1c:22:38:73:28:4f:b2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 23 14:45:58 2025 GMT Not After : Apr 22 14:50:58 2026 GMT Subject: CN=F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:68:3e:ac:ce:3a:4d:2b:01:8a:9a:4c:77: 07:bb:e6:4c:f0:9f:55:71:68:b7:d9:38:5d:2b:9e: a0:03:b9:45:48:d7:88:a5:86:07:e6:5b:87:9e:25: 78:2e:56:40:31:df:c5:49:b7:cb:65:b8:58:31:07: ba:9a:5f:d4:7e:6b:89:35:ff:8d:74:50:0a:c0:f6: c8:87:c9:b6:b9:5a:7a:18:1f:06:d4:78:b1:ef:e4: b1:6f:0c:d5:21:d3:c5:be:e7:96:f0:6e:5d:dc:fc: 94:a8:6a:83:39:f0:78:d7:96:ac:09:e1:0a:d0:ac: 0c:0b:f7:d1:d3:0b:b4:ba:b6:f4:76:48:c7:89:c9: ac:e7:35:17:8d:5b:19:40:f8:cd:90:a3:25:21:64: a4:f9:6e:24:0c:67:49:0e:21:d5:44:70:e5:10:e3: be:d9:ff:80:54:52:68:fb:c9:af:85:05:80:d1:61: f3:04:e3:3d:14:78:73:e1:10:e6:48:78:6c:36:1f: 14:55:b3:46:37:b9:8f:b9:9c:58:81:0f:82:a2:ae: e4:21:b3:39:fb:9e:9e:6e:98:f9:62:ad:f4:60:fe: 09:a0:52:de:b9:da:41:5d:b4:86:ca:7f:bf:20:fa: d2:9a:fd:a7:a3:13:f1:3e:f3:0e:3b:6c:02:94:dd: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:0B:D1:92:CB:C1:DA:E1:97:78:FB:E5:38:B8:AC:B4:BF:16:A5:C6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/F20BD192CBC1DAE19778FBE538B8ACB4BF16A5C6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.120.0/22 186.251.0.0/21 IPv6: 2804:288::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262820 Signature Algorithm: sha256WithRSAEncryption 92:1d:2c:db:34:b5:4e:3b:68:63:7b:40:d2:23:8a:0d:2f:8a: ce:27:51:09:17:da:55:55:08:ec:c5:c6:de:4f:e6:6d:1c:1d: 11:e3:21:4f:61:e3:56:b1:55:8f:fe:6f:b3:87:2d:08:dc:0d: b5:66:46:cd:66:f7:92:74:fb:81:55:b7:2f:df:c4:a3:3f:b5: d6:38:16:60:72:83:1f:47:d8:fc:56:0f:d6:cd:b7:cf:b3:ec: 12:2b:5a:cb:84:fe:e5:74:11:54:3e:66:ac:70:16:ef:ed:bc: 38:4a:7d:3d:12:ce:18:ff:fb:72:b0:6b:b7:e0:cf:d7:0e:ec: dc:27:0d:1c:40:16:c6:ce:fb:c2:85:69:07:87:b7:e5:c6:f1: d8:73:83:19:33:1e:85:e0:c2:a1:53:31:eb:cb:c6:fa:e1:90: 0c:25:31:87:c7:d3:87:76:88:aa:a0:54:b2:d7:a6:83:0e:f6: e5:c0:0a:87:92:97:cd:35:6c:f6:ec:3b:b5:25:69:66:43:45: 39:8c:fa:69:eb:78:60:8c:74:e1:68:84:b9:54:32:b1:ef:4a: c1:ec:e0:4f:97:16:85:02:7f:a8:13:f8:6f:66:f4:51:78:c8: 58:db:73:6d:32:01:ef:24:4d:d4:81:30:10:63:ff:79:b1:99: 78:df:9e:93 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXAzKhYhroLQw9W3UHCI4cyhPsuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjMxNDQ1NThaFw0yNjA0MjIxNDUwNThaMDMxMTAvBgNV BAMTKEYyMEJEMTkyQ0JDMURBRTE5Nzc4RkJFNTM4QjhBQ0I0QkYxNkE1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaGg+rM46TSsBippMdwe75kzw n1VxaLfZOF0rnqADuUVI14ilhgfmW4eeJXguVkAx38VJt8tluFgxB7qaX9R+a4k1 /410UArA9siHyba5WnoYHwbUeLHv5LFvDNUh08W+55bwbl3c/JSoaoM58HjXlqwJ 4QrQrAwL99HTC7S6tvR2SMeJyaznNReNWxlA+M2QoyUhZKT5biQMZ0kOIdVEcOUQ 477Z/4BUUmj7ya+FBYDRYfME4z0UeHPhEOZIeGw2HxRVs0Y3uY+5nFiBD4KiruQh szn7np5umPlirfRg/gmgUt652kFdtIbKf78g+tKa/aejE/E+8w47bAKU3VCxAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyC9GSy8Ha4Zd4 ++U4uKy0vxalxjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Zw bTZQczdYY2pnYUc0SnVBMmd4VjhuZmtmdEdiVnk3OVlmNFc3dEhrUkwvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdm cG02UHM3WGNqZ2FHNEp1QTJneFY4bmZrZnRHYlZ5NzlZZjRXN3RIa1JMLzAvRjIw QkQxOTJDQkMxREFFMTk3NzhGQkU1MzhCOEFDQjRCRjE2QTVDNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinV4AwQDuvsAMA0EAgACMAcDBQAoBAKIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCpDANBgkqhkiG9w0BAQsFAAOCAQEAkh0s2zS1 TjtoY3tA0iOKDS+KzidRCRfaVVUI7MXG3k/mbRwdEeMhT2HjVrFVj/5vs4ctCNwN tWZGzWb3knT7gVW3L9/Eoz+11jgWYHKDH0fY/FYP1s23z7PsEitay4T+5XQRVD5m rHAW7+28OEp9PRLOGP/7crBrt+DP1w7s3CcNHEAWxs77woVpB4e35cbx2HODGTMe heDCoVMx68vG+uGQDCUxh8fTh3aIqqBUstemgw725cAKh5KXzTVs9uw7tSVpZkNF OYz6aet4YIx04WiEuVQyse9KwezgT5cWhQJ/qBP4b2b0UXjIWNtzbTIB7yRN1IEw EGP/ebGZeN+ekw== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:30 2025 by rpki-client on console.sobornost.net