$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer File: 01848C66A25335A0075484FBC32617363F3B8550.cer (raw, json) Hash identifier: kvvo+GaVRnJrISkKfDJPPveYhctkf78ZgMJpOf2JxFY= Subject key identifier: 01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6FD70EAA8C6D4C500918C366CE1C888D067B0B26 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft caRepository: rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 08:11:33 +0000 Certificate not after: Tue 24 Mar 2026 08:16:33 +0000 Subordinate resources: AS: 264461 IP: 132.255.28.0/22 IP: 201.182.32.0/22 IP: 2804:2008::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d7:0e:aa:8c:6d:4c:50:09:18:c3:66:ce:1c:88:8d:06:7b:0b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 25 08:11:33 2025 GMT Not After : Mar 24 08:16:33 2026 GMT Subject: CN=01848C66A25335A0075484FBC32617363F3B8550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:eb:0d:73:fb:7e:70:17:15:31:43:c4:12: 35:6f:2a:f7:24:f5:94:9e:5f:e0:9d:e5:3e:82:f1: d6:8a:85:4f:85:87:d1:71:55:31:66:42:77:7c:9c: c7:87:63:1c:3b:84:bf:5b:22:a1:17:e5:25:2c:c6: 53:2e:72:68:9e:04:69:f7:e4:49:1e:c6:e5:ca:40: 78:73:c5:91:da:94:de:45:e6:6d:68:a9:18:2b:1c: 69:08:14:b8:a3:7a:5e:39:59:9b:8c:2e:ca:7d:92: 2b:21:42:5b:b0:4c:94:21:8f:39:2d:1c:2c:63:1f: 0f:8b:8e:78:1a:73:9b:ac:c4:18:ad:9f:4d:af:b2: 78:9c:24:ff:28:a5:7c:7a:10:8a:ee:88:2a:73:37: 85:c0:97:87:53:be:bb:7f:cd:0e:95:b0:70:cc:29: 31:3d:63:76:d7:7f:72:b4:cd:44:74:99:d7:b7:5c: 48:78:22:16:08:77:60:d3:b7:38:31:e0:f0:ec:10: cc:47:24:bf:3a:24:50:a6:f3:09:b5:61:3d:08:81: ae:bc:5a:0f:fb:97:88:c4:7e:98:ac:7a:0a:01:aa: 12:ce:3a:34:0d:f4:db:8f:2b:fd:d4:27:fe:e6:ec: be:c4:be:b3:cd:78:c5:06:13:a2:9a:c9:2f:1c:5f: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.255.28.0/22 201.182.32.0/22 IPv6: 2804:2008::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264461 Signature Algorithm: sha256WithRSAEncryption 2f:ef:21:5d:cb:84:04:68:83:14:da:f4:ab:01:6a:a5:8e:31: 40:b7:a6:78:12:4d:53:9e:e3:cb:ea:cd:5f:e1:1c:cf:0d:8b: 3a:2c:ca:ac:55:52:e1:b5:a1:7d:7c:3c:5e:29:eb:87:5f:ad: 08:3b:6b:33:00:8b:39:36:45:5b:5a:4c:a0:fc:fb:b4:b7:f8: ca:9d:e6:5b:4f:77:69:0b:0c:fb:23:35:e9:01:34:0e:eb:e3: 13:66:e4:4a:5f:e8:ae:1a:b3:98:c0:30:99:9e:d3:d1:48:f3: fa:33:5d:ea:3f:bf:77:c5:8c:f8:40:f9:3c:0e:a6:6c:ef:ba: d5:68:5d:6b:51:ff:f6:57:b0:f4:cf:75:25:31:1f:6e:63:fa: 3b:f9:32:2d:d1:0d:da:3b:e8:20:da:db:de:fd:9f:99:6e:6c: da:ac:03:05:0e:00:48:f4:bc:57:0e:99:f4:2f:96:de:97:1d: 25:14:3d:24:6f:b1:d6:8a:81:67:a6:a0:f4:6b:c2:cf:47:e1: 0b:d9:db:50:8b:41:c2:9d:ae:e3:35:d8:78:83:98:33:38:13: 54:32:30:3c:9e:8d:6d:46:2f:79:09:76:e3:57:20:f3:c7:26: 67:b3:7e:d0:a4:2d:31:8c:f8:7e:f3:fd:47:52:00:3e:64:49: 78:68:95:59 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUb9cOqoxtTFAJGMNmzhyIjQZ7CyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjUwODExMzNaFw0yNjAzMjQwODE2MzNaMDMxMTAvBgNV BAMTKDAxODQ4QzY2QTI1MzM1QTAwNzU0ODRGQkMzMjYxNzM2M0YzQjg1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODesNc/t+cBcVMUPEEjVvKvck 9ZSeX+Cd5T6C8daKhU+Fh9FxVTFmQnd8nMeHYxw7hL9bIqEX5SUsxlMucmieBGn3 5EkexuXKQHhzxZHalN5F5m1oqRgrHGkIFLijel45WZuMLsp9kishQluwTJQhjzkt HCxjHw+Ljngac5usxBitn02vsnicJP8opXx6EIruiCpzN4XAl4dTvrt/zQ6VsHDM KTE9Y3bXf3K0zUR0mde3XEh4IhYId2DTtzgx4PDsEMxHJL86JFCm8wm1YT0Iga68 Wg/7l4jEfpisegoBqhLOOjQN9NuPK/3UJ/7m7L7EvrPNeMUGE6KayS8cXxuvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBhIxmolM1oAdU hPvDJhc2PzuFUDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm9l Q2VWQmM0N2FVZjh3ZVFBQ1VrMlpvTm5hWFBjcVhKa1NpVGo2QmZ4d2svMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jv ZUNlVkJjNDdhVWY4d2VRQUNVazJab05uYVhQY3FYSmtTaVRqNkJmeHdrLzAvMDE4 NDhDNjZBMjUzMzVBMDA3NTQ4NEZCQzMyNjE3MzYzRjNCODU1MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQChP8cAwQCybYgMA0EAgACMAcDBQAoBCAIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJDTANBgkqhkiG9w0BAQsFAAOCAQEAL+8hXcuE BGiDFNr0qwFqpY4xQLemeBJNU57jy+rNX+Eczw2LOizKrFVS4bWhfXw8Xinrh1+t CDtrMwCLOTZFW1pMoPz7tLf4yp3mW093aQsM+yM16QE0DuvjE2bkSl/orhqzmMAw mZ7T0Ujz+jNd6j+/d8WM+ED5PA6mbO+61Whda1H/9lew9M91JTEfbmP6O/kyLdEN 2jvoINrb3v2fmW5s2qwDBQ4ASPS8Vw6Z9C+W3pcdJRQ9JG+x1oqBZ6ag9GvCz0fh C9nbUItBwp2u4zXYeIOYMzgTVDIwPJ6NbUYveQl241cg88cmZ7N+0KQtMYz4fvP9 R1IAPmRJeGiVWQ== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:03 2025 by rpki-client on console.sobornost.net