$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer File: 149DF6958A59FCFA910071567BAB07904ED0751D.cer (raw, json) Hash identifier: SkP51y8iN0f622uSiwUrCgNeI83keIrHxNI22fzIAc4= Subject key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7F081C28C22360D6B4AB9AFAA8676776809EF174 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft caRepository: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 09 Jan 2025 20:05:06 +0000 Certificate not after: Thu 08 Jan 2026 20:10:06 +0000 Subordinate resources: AS: 4230 IP: 179.68.0.0/16 IP: 179.237.0.0 -- 179.237.25.255 IP: 186.249.160.0/20 IP: 187.28.0.0 -- 187.30.255.255 IP: 187.43.0.0/16 IP: 189.2.0.0/15 IP: 189.16.0.0/15 IP: 189.22.0.0/15 IP: 189.42.0.0/15 IP: 189.52.0.0/15 IP: 189.86.0.0 -- 189.88.255.255 IP: 191.38.0.0/15 IP: 191.56.0.0/13 IP: 200.10.159.0/24 IP: 200.139.192.0/18 IP: 200.166.0.0/15 IP: 200.172.0.0 -- 200.174.255.255 IP: 200.178.0.0/15 IP: 200.182.0.0/15 IP: 200.190.0.0 -- 200.192.63.255 IP: 200.200.0.0/16 IP: 200.208.0.0 -- 200.214.255.255 IP: 200.227.0.0 -- 200.228.255.255 IP: 200.230.0.0/15 IP: 200.241.0.0 -- 200.255.255.255 IP: 201.30.0.0/15 IP: 201.38.0.0/15 IP: 201.44.0.0/15 IP: 201.56.0.0/15 IP: 201.64.0.0/15 IP: 201.72.0.0/15 IP: 201.90.0.0/16 IP: 2804:a8::/32 IP: 2804:17c::/32 IP: 2804:1388::/30 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:08:1c:28:c2:23:60:d6:b4:ab:9a:fa:a8:67:67:76:80:9e:f1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 9 20:05:06 2025 GMT Not After : Jan 8 20:10:06 2026 GMT Subject: CN=149DF6958A59FCFA910071567BAB07904ED0751D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:80:6a:85:84:fc:54:ea:56:5d:f3:08:38: b0:e4:4e:8a:b2:ae:29:79:ee:d8:4a:43:d6:41:92: a1:02:2f:7c:70:d6:ea:ac:f3:56:20:19:41:53:cf: 78:cf:77:48:84:b1:30:d5:7d:c6:2d:b7:05:eb:84: 59:67:a2:24:59:4b:a9:81:42:67:ff:8a:cb:68:81: 6b:61:f8:6e:f1:71:cb:77:1c:57:9b:84:44:f9:c4: 54:e4:b1:62:a6:2b:53:04:e7:c2:2c:cc:ef:80:e8: 36:e3:80:14:92:98:30:37:8b:2e:5c:35:a2:29:61: 5c:0b:82:0c:5d:2d:5d:34:69:30:b3:10:de:c5:97: 76:0d:49:2c:97:ae:e0:2f:8d:6f:f1:c3:00:e4:46: 6f:94:8e:eb:51:28:39:c1:1c:ad:69:3d:84:2a:2d: 09:e8:8d:a7:80:81:51:4c:9a:0d:49:f6:e2:d7:21: 8f:ec:21:30:41:d0:95:00:17:5c:d4:ca:f5:d3:a7: 13:0c:12:21:21:b3:cf:06:6a:30:c5:a7:fc:a1:75: f4:c4:55:88:ad:91:f3:da:80:1f:64:89:a0:bb:93: ed:3b:8d:e9:25:7e:80:d0:77:11:6b:cf:fb:ab:e7: b9:72:d7:97:d0:cb:3b:3d:08:e9:c6:0b:50:9c:85: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.68.0.0/16 179.237.0.0-179.237.25.255 186.249.160.0/20 187.28.0.0-187.30.255.255 187.43.0.0/16 189.2.0.0/15 189.16.0.0/15 189.22.0.0/15 189.42.0.0/15 189.52.0.0/15 189.86.0.0-189.88.255.255 191.38.0.0/15 191.56.0.0/13 200.10.159.0/24 200.139.192.0/18 200.166.0.0/15 200.172.0.0-200.174.255.255 200.178.0.0/15 200.182.0.0/15 200.190.0.0-200.192.63.255 200.200.0.0/16 200.208.0.0-200.214.255.255 200.227.0.0-200.228.255.255 200.230.0.0/15 200.241.0.0-200.255.255.255 201.30.0.0/15 201.38.0.0/15 201.44.0.0/15 201.56.0.0/15 201.64.0.0/15 201.72.0.0/15 201.90.0.0/16 IPv6: 2804:a8::/32 2804:17c::/32 2804:1388::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4230 Signature Algorithm: sha256WithRSAEncryption da:69:50:21:1b:80:aa:2b:74:cc:c6:24:45:12:4b:a9:33:96: d5:44:41:15:af:10:60:a6:3d:59:06:d8:fd:20:be:36:79:4a: 6f:9d:a6:d6:83:e2:e0:91:4d:58:b0:f0:10:d5:5b:49:41:8b: 33:f4:ed:fd:b0:a8:75:57:00:da:70:4e:49:28:43:30:76:85: 13:2a:13:c3:fc:a1:97:d6:47:6a:d2:02:eb:e5:ab:79:74:0b: 8b:83:d3:bb:c6:05:63:11:35:c5:2d:ec:10:c0:e2:e0:21:cc: 1c:2a:ed:65:32:db:39:03:59:e7:9f:5f:2c:c7:9c:05:cb:8b: ec:7f:41:86:2a:d8:ac:ea:d9:97:23:34:6f:78:84:d7:43:16: 45:97:f0:a6:55:97:82:06:87:2a:ab:ea:b6:e0:dc:09:26:4e: 77:91:09:cc:30:7b:0a:f8:fb:dc:20:20:ef:6f:37:4d:c0:d7: 3e:5c:80:5b:8e:ef:9e:74:cc:b9:c8:3d:ff:2b:64:dc:86:5d: 48:26:19:39:15:3e:c6:d8:20:8a:a9:82:99:85:05:ac:a5:04: 25:b5:b8:a6:a1:bd:b1:45:f2:76:43:02:72:c3:e3:a1:3e:be: 90:e8:4e:f6:92:33:a5:cb:a0:63:c6:a3:cc:6d:0b:f4:99:3e: b5:33:fa:93 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUfwgcKMIjYNa0q5r6qGdndoCe8XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMDkyMDA1MDZaFw0yNjAxMDgyMDEwMDZaMDMxMTAvBgNV BAMTKDE0OURGNjk1OEE1OUZDRkE5MTAwNzE1NjdCQUIwNzkwNEVEMDc1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEYBqhYT8VOpWXfMIOLDkToqy ril57thKQ9ZBkqECL3xw1uqs81YgGUFTz3jPd0iEsTDVfcYttwXrhFlnoiRZS6mB Qmf/istogWth+G7xcct3HFebhET5xFTksWKmK1ME58IszO+A6DbjgBSSmDA3iy5c NaIpYVwLggxdLV00aTCzEN7Fl3YNSSyXruAvjW/xwwDkRm+UjutRKDnBHK1pPYQq LQnojaeAgVFMmg1J9uLXIY/sITBB0JUAF1zUyvXTpxMMEiEhs88GajDFp/yhdfTE VYitkfPagB9kiaC7k+07jeklfoDQdxFrz/ur57ly15fQyzs9COnGC1CchUtHAgMB AAGjggQkMIIEIDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUnfaViln8+pEA cVZ7qweQTtB1HTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1VS NEplZHZaU25iOGhLbU1VZ1E2ODdiNE1YWG0zNW1TWkRNTFFOSFNGcHAvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1VS NEplZHZaU25iOGhLbU1VZ1E2ODdiNE1YWG0zNW1TWkRNTFFOSFNGcHAvMS8xNDlE RjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3NTFELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggEYBggrBgEFBQcB BwEB/wSCAQcwggEDMIHjBAIAATCB3AMDALNEMAsDAwCz7QMEAbPtGAMEBLr5oDAK AwMCuxwDAwC7HgMDALsrAwMBvQIDAwG9EAMDAb0WAwMBvSoDAwG9NDAKAwMBvVYD AwC9WAMDAb8mAwMDvzgDBADICp8DBAbIi8ADAwHIpjAKAwMCyKwDAwDIrgMDAciy AwMByLYwCwMDAci+AwQGyMAAAwMAyMgwCgMDBMjQAwMAyNYwCgMDAMjjAwMAyOQD AwHI5jAJAwMAyPEDAgDIAwMByR4DAwHJJgMDAcksAwMByTgDAwHJQAMDAclIAwMA yVowGwQCAAIwFQMFACgEAKgDBQAoBAF8AwUCKAQTiDAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgIQhjANBgkqhkiG9w0BAQsFAAOCAQEA2mlQIRuAqit0zMYkRRJLqTOW 1URBFa8QYKY9WQbY/SC+NnlKb52m1oPi4JFNWLDwENVbSUGLM/Tt/bCodVcA2nBO SShDMHaFEyoTw/yhl9ZHatIC6+WreXQLi4PTu8YFYxE1xS3sEMDi4CHMHCrtZTLb OQNZ559fLMecBcuL7H9BhirYrOrZlyM0b3iE10MWRZfwplWXggaHKqvqtuDcCSZO d5EJzDB7Cvj73CAg7283TcDXPlyAW47vnnTMucg9/ytk3IZdSCYZORU+xtggiqmC mYUFrKUEJbW4pqG9sUXydkMCcsPjoT6+kOhO9pIzpcugY8ajzG0L9Jk+tTP6kw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:51 2025 by rpki-client on console.sobornost.net