$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer File: F241E143F0F3AEFE61D034C829AC452A653FD855.cer (raw, json) Hash identifier: iSdKEx3O7Y0+ro1bJe+rSpwnt8hRKaXsCQQM1rQIKpY= Subject key identifier: F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3FC34DB4046FBF375A2C043AC464CAEDE61F53AF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.mft caRepository: rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 15 Apr 2025 16:20:42 +0000 Certificate not after: Tue 14 Apr 2026 16:25:42 +0000 Subordinate resources: AS: 267992 IP: 45.167.68.0/22 IP: 2804:5658::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c3:4d:b4:04:6f:bf:37:5a:2c:04:3a:c4:64:ca:ed:e6:1f:53:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 15 16:20:42 2025 GMT Not After : Apr 14 16:25:42 2026 GMT Subject: CN=F241E143F0F3AEFE61D034C829AC452A653FD855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:27:98:0d:89:00:e8:ad:de:6e:4f:00:bd: ae:7a:db:03:a3:e0:1b:03:37:23:cf:52:ec:67:5f: a9:9c:43:e2:eb:36:33:67:8a:a9:a8:0b:07:4c:b0: d2:94:6c:43:15:a1:57:3e:9a:51:a3:9f:8e:27:54: 7d:71:8f:4c:7a:25:6a:f5:63:69:f8:33:d0:18:50: c6:7c:93:64:4b:1f:2c:9a:e1:49:5a:8d:86:b6:8e: 99:bf:d8:e6:a5:c4:58:43:3c:32:78:e3:b9:ea:f3: 94:89:ed:68:11:29:eb:a9:40:fe:ae:2c:7e:20:76: 95:4d:f7:c9:4e:9f:91:45:ed:af:78:b2:0a:b3:68: 98:ee:e5:63:93:4d:9d:47:00:2c:71:dc:79:24:d6: a6:13:7b:11:cf:23:fb:a3:84:ba:c9:b4:eb:e8:bf: 9b:e6:bd:87:80:0f:c9:8d:4e:86:91:35:50:34:43: 08:fc:a3:4b:df:1b:40:e7:c3:91:8d:34:42:fb:94: 56:65:fb:55:bf:49:67:0f:a1:28:08:6d:9a:e9:aa: 0e:d6:ea:44:14:5e:32:86:3d:43:8b:30:47:60:41: 3a:07:dc:00:c1:26:7e:d4:cc:90:a1:2b:d5:b4:c5: 3f:63:96:27:b5:4a:0a:e7:16:76:98:6e:9b:e8:be: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.68.0/22 IPv6: 2804:5658::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267992 Signature Algorithm: sha256WithRSAEncryption 79:9f:3d:1b:25:89:ad:a0:21:be:9f:53:2d:e3:aa:06:30:9e: b7:96:81:81:fd:3d:b5:f8:a3:a6:ad:70:cc:65:a4:69:93:9c: ef:85:eb:eb:e1:3a:4e:16:2b:4b:21:c6:63:79:66:db:1d:8f: 94:be:d4:15:c4:be:08:e4:e0:71:18:f4:44:0a:ee:ca:82:63: 6b:90:63:88:8e:ab:59:48:9f:61:9c:14:57:45:90:6e:83:95: df:cc:67:c6:8b:c3:a5:22:11:a2:c4:d3:99:4b:82:72:18:3f: 32:22:ef:0a:19:74:bb:a1:5e:ac:56:1e:c9:d8:63:f9:14:8c: 38:f3:94:d7:9c:66:53:1a:08:b7:f9:c1:e2:f7:07:09:72:0b: b0:9c:4a:b5:1c:1d:ed:f5:3b:74:98:54:b9:97:c8:e7:b5:44: a5:70:e6:af:11:80:b3:d2:25:f8:07:e3:95:88:58:13:6d:9d: 00:ff:10:65:c1:5c:fa:f2:c8:21:86:16:5d:32:49:b8:cf:e1: e0:af:b5:e8:9d:61:b5:4a:3e:e5:a9:b3:17:08:40:b7:58:6f: 4a:b3:0e:c9:dd:30:0b:7e:ac:2a:a1:8b:43:c2:05:9a:3a:3b: d8:0c:84:df:0d:eb:27:fd:38:db:d1:4c:96:75:7c:c6:7a:f2: 0f:fc:7c:90 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUP8NNtARvvzdaLAQ6xGTK7eYfU68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MTUxNjIwNDJaFw0yNjA0MTQxNjI1NDJaMDMxMTAvBgNV BAMTKEYyNDFFMTQzRjBGM0FFRkU2MUQwMzRDODI5QUM0NTJBNjUzRkQ4NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2ieYDYkA6K3ebk8Ava562wOj 4BsDNyPPUuxnX6mcQ+LrNjNniqmoCwdMsNKUbEMVoVc+mlGjn44nVH1xj0x6JWr1 Y2n4M9AYUMZ8k2RLHyya4UlajYa2jpm/2OalxFhDPDJ447nq85SJ7WgRKeupQP6u LH4gdpVN98lOn5FF7a94sgqzaJju5WOTTZ1HACxx3Hkk1qYTexHPI/ujhLrJtOvo v5vmvYeAD8mNToaRNVA0Qwj8o0vfG0Dnw5GNNEL7lFZl+1W/SWcPoSgIbZrpqg7W 6kQUXjKGPUOLMEdgQToH3ADBJn7UzJChK9W0xT9jlie1SgrnFnaYbpvovkcrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyQeFD8POu/mHQ NMgprEUqZT/YVTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0Jz aTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1bmEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dC c2kyTDVNMVBaSnQzZ0xicW1peDFDclJ1V0FBWFpubURkd3FRa013dW5hLzAvRjI0 MUUxNDNGMEYzQUVGRTYxRDAzNEM4MjlBQzQ1MkE2NTNGRDg1NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLadEMA0EAgACMAcDBQAoBFZYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQW2DANBgkqhkiG9w0BAQsFAAOCAQEAeZ89GyWJraAhvp9T LeOqBjCet5aBgf09tfijpq1wzGWkaZOc74Xr6+E6ThYrSyHGY3lm2x2PlL7UFcS+ COTgcRj0RAruyoJja5BjiI6rWUifYZwUV0WQboOV38xnxovDpSIRosTTmUuCchg/ MiLvChl0u6FerFYeydhj+RSMOPOU15xmUxoIt/nB4vcHCXILsJxKtRwd7fU7dJhU uZfI57VEpXDmrxGAs9Il+AfjlYhYE22dAP8QZcFc+vLIIYYWXTJJuM/h4K+16J1h tUo+5amzFwhAt1hvSrMOyd0wC36sKqGLQ8IFmjo72AyE3w3rJ/0429FMlnV8xnry D/x8kA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:38 2025 by rpki-client on console.sobornost.net