$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer File: 1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer (raw, json) Hash identifier: o9XRV/IgwS8hF39BRFl5N1oVT3mU6q4h6FQBJ35OpHw= Subject key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7ECD35701FAFE512BA17AF445F90C22FAA359C01 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft caRepository: rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Jan 2025 11:41:26 +0000 Certificate not after: Fri 16 Jan 2026 11:46:26 +0000 Subordinate resources: AS: 266457 IP: 170.82.200.0/22 IP: 2804:381c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cd:35:70:1f:af:e5:12:ba:17:af:44:5f:90:c2:2f:aa:35:9c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 17 11:41:26 2025 GMT Not After : Jan 16 11:46:26 2026 GMT Subject: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:5e:33:08:d1:29:6d:5d:6d:64:e8:60:ad: cf:c1:da:eb:66:cf:8a:3a:0a:57:50:48:84:53:b6: 96:af:42:32:2e:da:8e:df:90:50:8e:17:59:bc:f4: d5:b7:23:7a:1c:d4:6b:d4:3f:0a:be:c5:1e:06:4c: 29:fc:99:50:75:66:98:0a:d7:f5:89:5e:39:44:25: d1:5c:2f:4c:42:c4:81:cd:f4:fd:f3:2b:be:21:26: 83:4f:7f:73:1f:a5:64:7f:07:2f:9e:c1:65:3d:c2: 60:7b:46:a1:a0:bc:41:cb:40:b1:82:db:0e:ee:71: 8e:75:df:b7:57:ae:71:68:6a:a2:4c:29:5a:4b:c3: 36:1c:c7:3d:60:49:4e:03:04:78:68:d6:6b:e0:e4: d2:37:c0:b6:11:c0:05:1b:23:39:47:7a:9f:eb:62: b0:1b:4a:b2:41:46:5e:cb:8b:21:0f:32:3d:47:4c: ae:d0:f2:3a:23:a7:d0:aa:f4:4b:3f:cf:40:17:33: 41:84:80:63:66:a5:34:d1:67:6a:2b:ab:ed:05:57: af:8e:bb:a0:16:c4:7c:f6:a4:81:d3:2d:6c:5d:58: 06:f7:ac:5a:72:33:4d:30:3b:78:ce:a6:e5:e5:9a: 66:a6:75:f4:d3:fb:12:46:41:66:dc:a5:a6:97:13: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.200.0/22 IPv6: 2804:381c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266457 Signature Algorithm: sha256WithRSAEncryption 25:36:1c:cd:3a:1f:8a:24:f9:68:7c:b9:7a:44:c2:fb:b0:e4: 6b:5b:d1:14:50:2e:fb:1c:fc:91:4a:03:87:21:69:62:ea:d9: 4f:1b:f0:ac:8c:87:e3:80:f6:1c:5a:9d:b6:00:4e:8f:be:d1: 45:83:c6:43:21:34:e8:6a:b9:00:17:a3:88:c8:f9:82:17:29: 9d:e1:a8:e0:87:90:ee:20:ad:de:99:ac:2a:a1:0b:d2:6d:6c: ef:b8:77:67:a5:00:50:a3:19:a3:c1:6b:21:36:e2:ef:5c:fb: 41:9a:02:3d:9f:fc:5f:fc:ca:db:e2:a4:58:0d:c2:43:4f:d1: 90:36:d0:4e:fa:94:fa:57:fb:dd:64:aa:33:ff:97:72:02:07: a1:70:1b:f2:d1:ab:a2:24:9a:60:62:43:fa:3a:d2:47:f1:21: 2b:5d:3a:2a:b4:42:2e:07:a8:f8:30:f2:eb:cb:cb:e3:9a:cb: de:b9:76:e1:b9:68:90:5d:30:fd:9e:7c:29:e8:05:4b:b8:b8: 5f:f0:70:79:68:8e:78:06:91:54:bb:4c:9b:e2:ce:46:54:dd: 14:df:63:90:86:01:5d:00:fc:5b:17:1b:3b:80:03:f6:4e:dd: 97:76:a5:7d:d0:39:b1:c2:b4:c6:ee:57:7f:75:6a:6d:53:6e: 48:42:5b:30 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfs01cB+v5RK6F69EX5DCL6o1nAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTcxMTQxMjZaFw0yNjAxMTYxMTQ2MjZaMDMxMTAvBgNV BAMTKDFCNUZCMDVFNTZBRjFEMjI1REE0RjUzQ0NGRjNBOTQzNjZEOTM2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GF4zCNEpbV1tZOhgrc/B2utm z4o6CldQSIRTtpavQjIu2o7fkFCOF1m89NW3I3oc1GvUPwq+xR4GTCn8mVB1ZpgK 1/WJXjlEJdFcL0xCxIHN9P3zK74hJoNPf3MfpWR/By+ewWU9wmB7RqGgvEHLQLGC 2w7ucY5137dXrnFoaqJMKVpLwzYcxz1gSU4DBHho1mvg5NI3wLYRwAUbIzlHep/r YrAbSrJBRl7LiyEPMj1HTK7Q8jojp9Cq9Es/z0AXM0GEgGNmpTTRZ2orq+0FV6+O u6AWxHz2pIHTLWxdWAb3rFpyM00wO3jOpuXlmmamdfTT+xJGQWbcpaaXE5cdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbX7BeVq8dIl2k 9TzP86lDZtk2FTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTdo WFoxbmY2RTRHN3I5eHhQbkRlNWlSRUxyRXpKSGd5TkxSd1dQeE1TVjkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E3 aFhaMW5mNkU0RzdyOXh4UG5EZTVpUkVMckV6SkhneU5MUndXUHhNU1Y5LzAvMUI1 RkIwNUU1NkFGMUQyMjVEQTRGNTNDQ0ZGM0E5NDM2NkQ5MzYxNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlLIMA0EAgACMAcDBQAoBDgcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQ2TANBgkqhkiG9w0BAQsFAAOCAQEAJTYczTofiiT5aHy5 ekTC+7Dka1vRFFAu+xz8kUoDhyFpYurZTxvwrIyH44D2HFqdtgBOj77RRYPGQyE0 6Gq5ABejiMj5ghcpneGo4IeQ7iCt3pmsKqEL0m1s77h3Z6UAUKMZo8FrITbi71z7 QZoCPZ/8X/zK2+KkWA3CQ0/RkDbQTvqU+lf73WSqM/+XcgIHoXAb8tGroiSaYGJD +jrSR/EhK106KrRCLgeo+DDy68vL45rL3rl24blokF0w/Z58KegFS7i4X/BweWiO eAaRVLtMm+LORlTdFN9jkIYBXQD8WxcbO4AD9k7dl3alfdA5scK0xu5Xf3VqbVNu SEJbMA== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:46 2025 by rpki-client on console.sobornost.net