$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer File: 11CAB655737FE08C031052B869B67F7F82CCE9CC.cer (raw, json) Hash identifier: XCYlxxWkCqXBmtCcPiiqpT5+7g9xo0rGW/aY/JAlTzI= Subject key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 22CDFFEC65E72835806AD4500A5685D3422AC866 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft caRepository: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 22 Jan 2025 14:50:25 +0000 Certificate not after: Wed 21 Jan 2026 14:55:25 +0000 Subordinate resources: AS: 265933 IP: 45.4.80.0/22 IP: 164.163.0.0/22 IP: 2804:4014::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:cd:ff:ec:65:e7:28:35:80:6a:d4:50:0a:56:85:d3:42:2a:c8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 22 14:50:25 2025 GMT Not After : Jan 21 14:55:25 2026 GMT Subject: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:1f:3b:76:be:e4:f1:1a:bd:06:df:87:79: 19:60:13:bc:5d:25:80:18:77:dc:53:66:63:5e:92: 69:2a:5d:66:0b:dd:69:47:85:66:57:fb:6c:e1:35: 12:0d:c7:21:34:9f:71:36:26:2a:0d:f1:8d:eb:46: 41:26:b7:a4:42:ce:59:4a:4d:6e:a1:8a:1c:29:cb: f5:92:8b:13:a8:5b:c1:e0:fe:1e:a2:fc:55:5e:85: c5:f8:08:44:23:a4:95:42:74:bc:6f:fa:86:f6:91: 26:49:d6:df:07:60:d7:d3:7d:c8:87:ad:c4:4f:82: 47:04:c5:2a:23:65:6f:ab:e6:46:0a:a0:5e:1e:f2: 38:09:ef:02:b2:e1:af:c4:89:7d:1f:29:41:b8:96: d1:3b:60:21:d2:da:3a:d4:58:56:89:71:2b:fe:cb: 1c:04:7c:b0:82:a6:3c:ba:5f:36:f0:73:9b:2c:13: 79:af:bb:8b:23:64:2b:c7:69:c6:58:f7:f9:6a:4b: 7f:3d:d9:26:1e:47:56:ef:d9:69:4b:2b:b8:d6:cc: 2a:3d:aa:82:28:25:d0:8e:00:cf:d8:b4:73:d2:34: 74:9c:c3:32:0c:2f:67:4c:95:83:56:29:24:c6:ac: 7f:26:d1:3c:6c:12:46:43:3f:2f:d4:e3:dc:26:15: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.80.0/22 164.163.0.0/22 IPv6: 2804:4014::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265933 Signature Algorithm: sha256WithRSAEncryption ae:e5:fc:5a:5b:2a:0f:fe:6b:59:00:0e:78:82:90:fd:ba:c9: 25:85:2e:f7:67:e2:63:9e:7b:8a:6e:e5:6c:a9:9f:91:8f:3d: c3:54:e8:61:97:a8:61:b7:b1:c3:cf:7a:1b:d6:a7:59:e5:cd: cd:bb:4d:26:16:51:78:51:19:b9:90:2b:50:ab:44:1f:d0:b0: 39:ca:c0:ab:38:d2:b8:66:b6:79:ca:68:7f:b6:8b:05:21:7b: da:8d:f3:90:8f:de:e5:c6:29:bc:22:4c:6b:41:19:84:c7:c3: 62:16:d1:12:bc:fb:a2:72:3c:09:51:cb:c9:8b:ad:b6:e2:33: 18:41:3b:b4:06:34:db:30:06:1c:81:a8:2f:8d:1b:45:e4:fd: 7c:9b:06:64:ce:c3:54:65:e0:22:f3:0e:e9:70:6e:21:6a:96: db:9c:8d:fa:06:37:fe:50:33:5d:6f:b8:85:31:7c:50:73:3e: ab:d2:1a:53:da:4c:a7:c0:23:80:3c:34:3b:04:9c:dc:d4:21: 39:b6:4b:b4:2f:87:38:f5:51:de:27:3e:46:1b:f6:89:77:af: 63:81:ad:8b:bc:f9:9f:f8:22:4f:da:13:49:c2:7a:d5:d0:39: 1b:4d:fe:ca:58:6e:8a:60:8a:c7:ce:5d:9b:be:a4:5c:4f:71: 2c:bb:19:f7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIs3/7GXnKDWAatRQClaF00IqyGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMjIxNDUwMjVaFw0yNjAxMjExNDU1MjVaMDMxMTAvBgNV BAMTKDExQ0FCNjU1NzM3RkUwOEMwMzEwNTJCODY5QjY3RjdGODJDQ0U5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbh87dr7k8Rq9Bt+HeRlgE7xd JYAYd9xTZmNekmkqXWYL3WlHhWZX+2zhNRINxyE0n3E2JioN8Y3rRkEmt6RCzllK TW6hihwpy/WSixOoW8Hg/h6i/FVehcX4CEQjpJVCdLxv+ob2kSZJ1t8HYNfTfciH rcRPgkcExSojZW+r5kYKoF4e8jgJ7wKy4a/EiX0fKUG4ltE7YCHS2jrUWFaJcSv+ yxwEfLCCpjy6Xzbwc5ssE3mvu4sjZCvHacZY9/lqS3892SYeR1bv2WlLK7jWzCo9 qoIoJdCOAM/YtHPSNHScwzIML2dMlYNWKSTGrH8m0TxsEkZDPy/U49wmFX8FAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQRyrZVc3/gjAMQ Urhptn9/gszpzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFlO blF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhZ Tm5RdUE1TUdZajFKV3BFUHhVVEtIWTlmR2lpdmR0N1liQ3lhQmludERxLzAvMTFD QUI2NTU3MzdGRTA4QzAzMTA1MkI4NjlCNjdGN0Y4MkNDRTlDQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQRQAwQCpKMAMA0EAgACMAcDBQAoBEAUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQOzTANBgkqhkiG9w0BAQsFAAOCAQEAruX8Wlsq D/5rWQAOeIKQ/brJJYUu92fiY557im7lbKmfkY89w1ToYZeoYbexw896G9anWeXN zbtNJhZReFEZuZArUKtEH9CwOcrAqzjSuGa2ecpof7aLBSF72o3zkI/e5cYpvCJM a0EZhMfDYhbRErz7onI8CVHLyYuttuIzGEE7tAY02zAGHIGoL40bReT9fJsGZM7D VGXgIvMO6XBuIWqW25yN+gY3/lAzXW+4hTF8UHM+q9IaU9pMp8AjgDw0OwSc3NQh ObZLtC+HOPVR3ic+Rhv2iXevY4Gti7z5n/giT9oTScJ61dA5G03+ylhuimCKx85d m76kXE9xLLsZ9w== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:50 2025 by rpki-client on console.sobornost.net