$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer File: FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer (raw, json) Hash identifier: F4tP7lt0PeD/PmmGFs7SIniLZOWz33rdWOTl0CrKL08= Subject key identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66A6CFC02814375DA573B3BAAA8912281AA270C4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft caRepository: rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 15:36:59 +0000 Certificate not after: Fri 06 Mar 2026 15:41:59 +0000 Subordinate resources: AS: 267614 IP: 45.71.108.0/22 IP: 2804:43fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a6:cf:c0:28:14:37:5d:a5:73:b3:ba:aa:89:12:28:1a:a2:70:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 15:36:59 2025 GMT Not After : Mar 6 15:41:59 2026 GMT Subject: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:11:cd:da:69:02:4d:ef:d0:29:6b:dc:69: c6:04:da:43:9d:94:ea:b5:67:27:ac:6c:54:85:95: 4c:00:0b:63:ab:ac:b1:bb:12:f4:4a:06:1c:54:1c: 05:58:d8:d3:6b:4c:49:e0:d0:6e:73:ac:a3:10:0b: 4d:4c:98:14:40:62:b5:38:33:30:f4:81:77:55:fb: 28:23:40:ca:7d:cb:25:77:76:2d:9c:79:6c:7a:81: ba:c4:a5:b5:6f:54:da:9b:77:71:8f:27:2f:71:cf: a1:22:80:25:ae:0b:15:1e:ca:28:e9:41:23:f0:b7: 4d:8a:7f:be:d0:4c:35:57:f5:e8:12:1b:c4:1f:87: a8:a2:25:52:58:98:ad:2c:1b:73:dc:6a:1a:a5:96: 3f:9e:31:01:e2:2e:b0:bc:89:a6:7b:0f:bd:86:f7: c7:e7:c1:da:90:2d:11:a5:ba:56:9a:4a:3b:18:b7: 14:ea:84:e1:b7:fc:fc:84:26:42:d0:af:f4:d6:36: db:c8:ae:59:5a:58:7c:12:36:7a:a9:cf:fc:21:17: 1b:b0:0e:82:99:ed:1d:ef:e6:9a:71:7b:32:fa:e0: 40:9e:b6:2a:16:5d:73:9c:3c:6d:94:db:6c:0c:a2: 78:2c:e4:a7:90:83:da:03:00:79:42:82:65:83:f1: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.108.0/22 IPv6: 2804:43fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267614 Signature Algorithm: sha256WithRSAEncryption 96:45:af:6e:7b:35:8b:ed:f3:0b:d9:3a:a7:f9:35:60:00:61: d2:a2:37:9d:0c:09:dc:41:3f:c1:0d:3b:dd:d1:1c:35:ff:c0: e1:9a:e9:a9:58:3a:7a:19:a5:30:e2:d7:fc:c2:92:c0:60:8f: e8:96:7b:b7:0c:cd:7a:1e:fd:9a:41:88:9c:e3:f2:6d:68:e1: 54:4e:49:d8:07:b1:54:7f:c4:ab:4c:85:a8:2c:a8:10:ae:27: 6c:a8:9f:2c:33:62:aa:12:8a:22:cd:f5:64:d9:64:8e:51:90: 2e:81:ed:c3:75:3f:e5:30:e9:4f:e3:89:16:8b:eb:6b:ed:dc: 4a:d2:fb:ac:e2:0c:2d:64:b7:e4:10:76:c6:44:44:37:b3:1c: 58:36:ca:6c:a6:34:5c:02:84:20:d7:d5:e5:15:d6:12:6e:6e: 3f:db:c0:7d:bb:46:01:15:14:52:68:ea:d7:5e:f7:1b:07:66: 38:63:09:56:6e:52:b0:f9:77:7a:2f:af:f1:e0:00:b9:b6:22: fc:da:62:ac:f7:1a:32:e1:d6:33:36:54:36:47:8b:35:61:da: 9d:55:3d:91:af:e9:09:d5:84:10:6d:44:4c:7a:46:c0:f5:5e: f6:f1:0a:ae:a3:a2:9e:80:0c:5b:e9:84:4c:69:0b:b8:e5:59: 5e:5b:63:6b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUZqbPwCgUN12lc7O6qokSKBqicMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNTM2NTlaFw0yNjAzMDYxNTQxNTlaMDMxMTAvBgNV BAMTKEZCMjdFQTM4OEE3OTQxMUJCQjIyRjMyRjVGQ0Q1QUVBMDg0NEJGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lxHN2mkCTe/QKWvcacYE2kOd lOq1ZyesbFSFlUwAC2OrrLG7EvRKBhxUHAVY2NNrTEng0G5zrKMQC01MmBRAYrU4 MzD0gXdV+ygjQMp9yyV3di2ceWx6gbrEpbVvVNqbd3GPJy9xz6EigCWuCxUeyijp QSPwt02Kf77QTDVX9egSG8Qfh6iiJVJYmK0sG3Pcahqllj+eMQHiLrC8iaZ7D72G 98fnwdqQLRGlulaaSjsYtxTqhOG3/PyEJkLQr/TWNtvIrllaWHwSNnqpz/whFxuw DoKZ7R3v5ppxezL64ECetioWXXOcPG2U22wMongs5KeQg9oDAHlCgmWD8ZlPAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7J+o4inlBG7si 8y9fzVrqCES/rzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1NN NzJ6Y2hXNHRhbmlveGJweTc4UFJkSmduc2lOTkpja0JGdEdhMTFiSEIvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1NN NzJ6Y2hXNHRhbmlveGJweTc4UFJkSmduc2lOTkpja0JGdEdhMTFiSEIvMS9GQjI3 RUEzODhBNzk0MTFCQkIyMkYzMkY1RkNENUFFQTA4NDRCRkFGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItR2wwDQQCAAIwBwMFACgEQ/wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBVeMA0GCSqGSIb3DQEBCwUAA4IBAQCWRa9uezWL7fML2Tqn +TVgAGHSojedDAncQT/BDTvd0Rw1/8DhmumpWDp6GaUw4tf8wpLAYI/olnu3DM16 Hv2aQYic4/JtaOFUTknYB7FUf8SrTIWoLKgQridsqJ8sM2KqEooizfVk2WSOUZAu ge3DdT/lMOlP44kWi+tr7dxK0vus4gwtZLfkEHbGREQ3sxxYNspspjRcAoQg19Xl FdYSbm4/28B9u0YBFRRSaOrXXvcbB2Y4YwlWblKw+Xd6L6/x4AC5tiL82mKs9xoy 4dYzNlQ2R4s1YdqdVT2Rr+kJ1YQQbURMekbA9V728Qquo6KegAxb6YRMaQu45Vle W2Nr -----END CERTIFICATE-----Generated at Sun Apr 27 05:35:15 2025 by rpki-client on console.sobornost.net