$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer File: 14F1CE0C1643DCFD066F662CE9E3074379A6732B.cer (raw, json) Hash identifier: bf83SB6A3mrNRv2lrkyvHTUHG264qDTErPChEEruuKY= Subject key identifier: 14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 53BCB708FD711841391E5EEDDD7B8C93C3D90EED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft caRepository: rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Dec 2024 15:44:07 +0000 Certificate not after: Mon 22 Dec 2025 15:49:07 +0000 Subordinate resources: AS: 266332 IP: 170.238.188.0/22 IP: 2804:3630::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 09:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:bc:b7:08:fd:71:18:41:39:1e:5e:ed:dd:7b:8c:93:c3:d9:0e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 23 15:44:07 2024 GMT Not After : Dec 22 15:49:07 2025 GMT Subject: CN=14F1CE0C1643DCFD066F662CE9E3074379A6732B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:dc:88:94:0b:f7:bb:52:5f:22:d0:f9:23: c8:e4:17:e5:5f:2b:57:e1:58:12:a7:39:96:7f:26: 07:64:38:b3:62:f1:99:7d:c3:7c:00:76:65:82:0b: f0:56:38:b5:d4:5e:1a:6a:22:39:3b:92:ba:3f:6b: 37:6f:9f:a1:4e:07:f5:32:f4:e3:d4:4a:32:25:e2: 8e:3d:9d:86:e9:74:03:dd:da:6b:28:7c:f4:66:1d: 45:e4:cc:d2:2d:5a:b3:bb:d5:40:5a:34:c4:5f:49: 53:4a:06:01:13:df:f5:38:fb:11:d1:b3:7b:86:17: f8:a1:74:f9:91:07:4d:96:f2:80:87:d4:36:42:61: e5:09:5b:9f:74:da:44:32:84:82:6e:7c:ad:15:9c: 27:dd:39:ef:42:90:0e:6b:87:fb:37:e3:3c:b4:3c: 17:4a:f3:5c:80:6c:bf:3e:d9:95:ab:70:05:01:13: 42:22:69:79:7b:e8:b8:f4:81:39:63:7c:e2:71:6a: 45:f6:51:de:85:ec:b8:bb:cd:3d:db:77:ab:ce:ad: a6:53:4e:7b:fd:b4:1b:d9:08:b1:4d:ad:54:f8:a0: 84:0d:4c:0a:3c:bf:2b:12:98:d5:5a:f0:01:00:af: 53:fa:f3:f3:71:d6:7e:01:3a:90:c9:4a:14:7c:a3: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:F1:CE:0C:16:43:DC:FD:06:6F:66:2C:E9:E3:07:43:79:A6:73:2B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3caMr6Qf5sYrtQni7JhC913G1ZPcVwywnBTiXwC4VAkH/0/14F1CE0C1643DCFD066F662CE9E3074379A6732B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.238.188.0/22 IPv6: 2804:3630::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266332 Signature Algorithm: sha256WithRSAEncryption 53:0c:ed:42:e6:35:bb:80:dc:57:b2:3b:21:a5:d1:a1:d9:d6: 94:da:23:c2:03:a2:2c:38:10:f3:20:07:f2:26:11:40:e2:42: 06:8a:c9:c3:27:32:1d:96:c0:6e:d7:2f:e2:81:5e:26:26:0e: 64:4f:3e:19:ad:ed:69:6d:b4:c5:e1:89:76:00:35:a4:2f:e8: 84:b0:39:9f:a6:2f:e5:5a:f8:1f:58:62:cb:a9:12:8b:9e:da: e4:58:f0:ba:9f:8c:aa:66:9b:17:26:b0:8b:7d:36:ff:2e:52: a0:29:db:69:b8:4b:36:71:cb:e8:dd:ff:45:ec:15:0e:76:e5: 01:1a:a2:f8:26:df:37:6a:b3:a7:73:cc:7e:01:26:93:46:8d: a8:b5:a1:30:3a:4d:13:f1:bb:30:8e:30:e9:da:35:d7:19:8d: a4:f7:2c:d5:11:72:d8:78:02:3d:95:7a:82:1e:a4:9c:82:69: 5e:9a:59:76:ea:08:9f:03:f6:d8:54:ab:15:38:ac:3a:0e:b3: 8a:2e:90:ad:05:4f:fb:89:35:b2:c6:29:0a:f6:5c:15:2f:34: 95:14:54:84:aa:c2:01:27:48:b5:d4:b3:da:cd:ce:c8:35:21: 4a:d5:b4:14:4e:a8:57:3f:64:31:d7:c1:d5:d2:79:45:33:d5: e2:bf:06:10 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUU7y3CP1xGEE5Hl7t3XuMk8PZDu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMjMxNTQ0MDdaFw0yNTEyMjIxNTQ5MDdaMDMxMTAvBgNV BAMTKDE0RjFDRTBDMTY0M0RDRkQwNjZGNjYyQ0U5RTMwNzQzNzlBNjczMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4dyIlAv3u1JfItD5I8jkF+Vf K1fhWBKnOZZ/JgdkOLNi8Zl9w3wAdmWCC/BWOLXUXhpqIjk7kro/azdvn6FOB/Uy 9OPUSjIl4o49nYbpdAPd2msofPRmHUXkzNItWrO71UBaNMRfSVNKBgET3/U4+xHR s3uGF/ihdPmRB02W8oCH1DZCYeUJW5902kQyhIJufK0VnCfdOe9CkA5rh/s34zy0 PBdK81yAbL8+2ZWrcAUBE0IiaXl76Lj0gTljfOJxakX2Ud6F7Li7zT3bd6vOraZT Tnv9tBvZCLFNrVT4oIQNTAo8vysSmNVa8AEAr1P68/Nx1n4BOpDJShR8oxuvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQU8c4MFkPc/QZv Zizp4wdDeaZzKzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2Nh TXI2UWY1c1lydFFuaTdKaEM5MTNHMVpQY1Z3eXduQlRpWHdDNFZBa0gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNj YU1yNlFmNXNZcnRRbmk3SmhDOTEzRzFaUGNWd3l3bkJUaVh3QzRWQWtILzAvMTRG MUNFMEMxNjQzRENGRDA2NkY2NjJDRTlFMzA3NDM3OUE2NzMyQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqu68MA0EAgACMAcDBQAoBDYwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQXDANBgkqhkiG9w0BAQsFAAOCAQEAUwztQuY1u4DcV7I7 IaXRodnWlNojwgOiLDgQ8yAH8iYRQOJCBorJwycyHZbAbtcv4oFeJiYOZE8+Ga3t aW20xeGJdgA1pC/ohLA5n6Yv5Vr4H1hiy6kSi57a5Fjwup+MqmabFyawi302/y5S oCnbabhLNnHL6N3/RewVDnblARqi+CbfN2qzp3PMfgEmk0aNqLWhMDpNE/G7MI4w 6do11xmNpPcs1RFy2HgCPZV6gh6knIJpXppZduoInwP22FSrFTisOg6zii6QrQVP +4k1ssYpCvZcFS80lRRUhKrCASdItdSz2s3OyDUhStW0FE6oVz9kMdfB1dJ5RTPV 4r8GEA== -----END CERTIFICATE-----Generated at Fri Apr 25 08:22:14 2025 by rpki-client on console.sobornost.net