$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer File: FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer (raw, json) Hash identifier: zGjZL35jFYqXOIFlfTU9fJiLL08xIISwm/0h3berHac= Subject key identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 09372D74CA70D9371AA49704688D7DE4BDAE961B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft caRepository: rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 16:49:48 +0000 Certificate not after: Thu 05 Mar 2026 16:54:48 +0000 Subordinate resources: AS: 270277 IP: 200.124.164.0/22 IP: 2804:698c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:37:2d:74:ca:70:d9:37:1a:a4:97:04:68:8d:7d:e4:bd:ae:96:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 16:49:48 2025 GMT Not After : Mar 5 16:54:48 2026 GMT Subject: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:11:70:02:cf:52:ae:4f:ca:90:24:e9:57: 1b:98:95:bf:fa:69:da:e9:06:6e:8d:45:b5:18:f7: e5:ab:17:c4:d8:8c:92:a4:5a:7c:5f:e1:07:bb:79: c3:57:51:b5:ac:e9:06:1b:03:1d:34:0f:bc:27:03: 6d:02:7a:76:a9:46:cb:cb:1e:fd:3a:8d:90:51:3e: 3d:70:cf:08:73:04:04:11:63:36:98:1e:81:89:a4: f8:38:df:23:20:c3:c2:0e:78:6e:13:76:b7:74:24: c7:37:ec:35:97:c8:8e:96:55:17:4f:ff:20:0d:5c: 7b:15:68:fc:75:17:2c:71:e7:77:21:0c:83:c3:84: 0b:4b:6a:8c:be:7c:62:a2:39:fc:b3:76:e5:b5:b7: 31:9d:a8:ce:30:df:48:0d:32:03:28:42:f6:75:2d: 54:59:c0:20:66:bd:6a:b8:a7:1f:30:9b:b4:47:6c: b5:c6:ef:91:0b:f6:2b:18:67:98:a3:28:d0:7a:06: 06:72:2f:79:05:4e:65:59:f4:5f:28:95:7b:12:09: 56:7b:44:8c:c8:0f:5c:e3:25:42:b8:47:0c:28:e7: 5e:37:c7:4f:7f:42:46:51:11:83:f8:5a:ed:62:9d: 51:81:95:56:5c:0b:1e:83:33:8d:60:a4:1d:65:1e: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.124.164.0/22 IPv6: 2804:698c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270277 Signature Algorithm: sha256WithRSAEncryption 6f:6a:8a:ac:49:ec:91:ca:49:bb:86:c8:c9:4d:fe:7c:58:39: e6:f8:5f:55:76:33:18:7c:76:90:0f:10:4c:fb:a6:f4:29:a0: 83:f2:1f:c6:03:82:9b:df:7b:67:02:02:53:41:35:46:c0:1f: 62:55:da:3f:31:0c:bb:7f:2a:a1:d6:58:dd:a4:1b:f4:51:5e: d2:d8:6c:37:a0:0a:c7:e1:b9:9b:2b:69:e9:ab:40:3b:24:f0: 89:fb:19:a5:98:77:7c:72:7c:9a:2b:bd:61:3e:be:54:f0:6d: 28:a2:18:68:fd:4d:4a:83:14:9d:0b:e5:26:6b:aa:9f:31:16: 15:e6:cc:07:f1:84:0a:44:4a:73:a8:cd:26:3a:a0:dc:a8:e7: 87:c2:5e:9e:7b:c4:aa:11:63:dd:56:40:2c:bf:a7:2b:71:56: 7b:e0:58:2c:87:46:66:23:77:97:85:87:f9:cf:8a:45:24:02: 50:f8:ab:c7:5f:53:65:b5:df:99:9b:03:37:64:9c:22:7c:ea: 61:56:43:78:af:6b:59:b0:c2:df:6e:55:f0:97:52:cd:0a:d5: c3:e3:39:d2:bc:c0:ac:19:da:ec:43:91:fe:92:29:8a:53:df: 0c:5c:81:24:9f:68:29:a1:57:3b:eb:19:2e:94:9b:b4:1b:1b: 24:fa:60:54 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUCTctdMpw2TcapJcEaI195L2ulhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNjQ5NDhaFw0yNjAzMDUxNjU0NDhaMDMxMTAvBgNV BAMTKEZEM0M4NDY0M0NGMENGREVDM0YzMkRFNUFFNjNFODhCQ0ZBOUY3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxhFwAs9Srk/KkCTpVxuYlb/6 adrpBm6NRbUY9+WrF8TYjJKkWnxf4Qe7ecNXUbWs6QYbAx00D7wnA20CenapRsvL Hv06jZBRPj1wzwhzBAQRYzaYHoGJpPg43yMgw8IOeG4Tdrd0JMc37DWXyI6WVRdP /yANXHsVaPx1Fyxx53chDIPDhAtLaoy+fGKiOfyzduW1tzGdqM4w30gNMgMoQvZ1 LVRZwCBmvWq4px8wm7RHbLXG75EL9isYZ5ijKNB6BgZyL3kFTmVZ9F8olXsSCVZ7 RIzID1zjJUK4Rwwo5143x09/QkZREYP4Wu1inVGBlVZcCx6DM41gpB1lHpjnAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9PIRkPPDP3sPz LeWuY+iLz6n3yTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUFr MzZXaVlNZjg4dHV5N1d0VkpCRXhrNlVvMm1iWUZHZ1lhQllMc1VFa3ovMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUFr MzZXaVlNZjg4dHV5N1d0VkpCRXhrNlVvMm1iWUZHZ1lhQllMc1VFa3ovMS9GRDND ODQ2NDNDRjBDRkRFQzNGMzJERTVBRTYzRTg4QkNGQTlGN0M5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALIfKQwDQQCAAIwBwMFACgEaYwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBB/FMA0GCSqGSIb3DQEBCwUAA4IBAQBvaoqsSeyRykm7hsjJ Tf58WDnm+F9VdjMYfHaQDxBM+6b0KaCD8h/GA4Kb33tnAgJTQTVGwB9iVdo/MQy7 fyqh1ljdpBv0UV7S2Gw3oArH4bmbK2npq0A7JPCJ+xmlmHd8cnyaK71hPr5U8G0o ohho/U1KgxSdC+Uma6qfMRYV5swH8YQKREpzqM0mOqDcqOeHwl6ee8SqEWPdVkAs v6crcVZ74Fgsh0ZmI3eXhYf5z4pFJAJQ+KvHX1Nltd+ZmwM3ZJwifOphVkN4r2tZ sMLfblXwl1LNCtXD4znSvMCsGdrsQ5H+kimKU98MXIEkn2gpoVc76xkulJu0Gxsk +mBU -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:56 2025 by rpki-client on console.sobornost.net