$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/201858301640DA230EDCEE272F949CD407A471E7.cer File: 201858301640DA230EDCEE272F949CD407A471E7.cer (raw, json) Hash identifier: jJCX6+q2Q87Bun1PrccF3TC4E2fTVYotDU74ncmc1eo= Subject key identifier: 20:18:58:30:16:40:DA:23:0E:DC:EE:27:2F:94:9C:D4:07:A4:71:E7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55A69BF3873947B65B006F5A48B61D8DC2454C78 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/201858301640DA230EDCEE272F949CD407A471E7.mft caRepository: rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Feb 2025 00:36:24 +0000 Certificate not after: Tue 24 Feb 2026 00:41:24 +0000 Subordinate resources: AS: 266961 IP: 45.226.72.0/22 IP: 164.163.104.0/22 IP: 2804:4600::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a6:9b:f3:87:39:47:b6:5b:00:6f:5a:48:b6:1d:8d:c2:45:4c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 25 00:36:24 2025 GMT Not After : Feb 24 00:41:24 2026 GMT Subject: CN=201858301640DA230EDCEE272F949CD407A471E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:08:2b:a7:65:9f:4b:a4:1a:a2:e6:3b:fe: 31:c4:50:9e:1b:ff:2a:b8:2b:32:d0:43:7e:01:0e: 62:6c:2e:4b:cf:31:c9:76:40:52:b6:1d:23:e9:0f: e6:d3:19:ee:95:f4:da:19:36:45:b1:33:1a:90:cc: 1d:11:5f:0e:67:93:14:57:37:ab:ad:ba:c5:12:cc: 60:1d:7f:b6:1f:1e:28:30:f0:49:44:9c:10:19:ae: 87:51:f7:b7:14:d9:3a:42:01:98:f2:7d:f9:75:d2: 7b:c2:f9:0c:8b:ab:72:d2:ed:c5:13:61:ec:b2:a3: b5:78:02:76:d8:1d:ae:30:54:91:4b:2a:e7:55:6d: 69:c1:40:3c:f7:35:e8:87:f7:61:6e:0a:88:54:82: 3d:05:81:6f:b8:f2:12:d9:f6:19:7a:ea:73:0a:fd: 89:09:2f:52:cd:d3:90:04:ac:d0:d9:5a:ac:54:fb: b9:19:64:ae:57:ce:42:63:d2:7a:50:b6:61:bb:45: 89:1a:e7:63:5a:b5:89:1d:ae:03:27:2a:17:a0:79: 10:f4:ac:a6:05:5e:96:53:29:f9:92:02:58:63:37: bb:0d:62:ff:dc:76:c9:23:1d:b4:ae:6a:39:0a:3d: 66:4d:04:4c:8c:45:84:71:84:55:6f:ec:bf:09:10: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:18:58:30:16:40:DA:23:0E:DC:EE:27:2F:94:9C:D4:07:A4:71:E7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/201858301640DA230EDCEE272F949CD407A471E7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.72.0/22 164.163.104.0/22 IPv6: 2804:4600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266961 Signature Algorithm: sha256WithRSAEncryption 8e:3a:c9:ad:e2:f3:2b:ee:d8:8f:72:67:7b:d9:d3:1d:3b:3b: 20:15:b4:7c:91:b8:00:b6:4a:a8:f7:1a:4d:39:ad:98:33:c8: b0:1b:00:bd:e1:d4:90:9a:98:2f:1e:b7:a2:e7:fb:c7:4e:bc: 4c:ca:b3:17:0d:20:f2:06:82:b5:65:fa:2b:62:6e:85:12:2a: 1d:28:9a:56:c4:70:95:46:2c:15:ce:ae:3f:d4:9d:95:77:76: 93:18:82:0e:a9:ae:49:e0:bb:cc:08:51:c7:22:6f:9d:83:cb: 79:1e:5a:04:a1:10:63:48:f5:13:11:a3:da:f3:62:21:b6:c0: a6:e7:4f:1c:83:d9:3d:63:09:36:38:8c:a8:2d:1c:f5:18:1b: c1:10:34:ad:09:4d:d2:e8:66:c4:b3:7c:b0:84:ee:ea:14:2c: 50:95:4c:77:c9:a3:60:68:1c:bc:c1:b3:48:03:a9:a4:06:4a: 09:83:3a:2c:4b:f4:e1:55:25:25:ad:3b:b6:a8:ed:39:98:05: db:54:48:95:92:36:09:67:ee:7c:99:e2:ab:1b:b5:49:5e:d1: 27:4b:b1:05:b2:62:d4:86:5a:91:6f:a0:e1:14:f7:eb:ee:35: 20:97:d3:1a:31:c1:fa:c9:ef:23:dc:21:83:8b:56:54:da:35: 9e:e7:18:8d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVaab84c5R7ZbAG9aSLYdjcJFTHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjUwMDM2MjRaFw0yNjAyMjQwMDQxMjRaMDMxMTAvBgNV BAMTKDIwMTg1ODMwMTY0MERBMjMwRURDRUUyNzJGOTQ5Q0Q0MDdBNDcxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSwgrp2WfS6QaouY7/jHEUJ4b /yq4KzLQQ34BDmJsLkvPMcl2QFK2HSPpD+bTGe6V9NoZNkWxMxqQzB0RXw5nkxRX N6utusUSzGAdf7YfHigw8ElEnBAZrodR97cU2TpCAZjyffl10nvC+QyLq3LS7cUT Yeyyo7V4AnbYHa4wVJFLKudVbWnBQDz3NeiH92FuCohUgj0FgW+48hLZ9hl66nMK /YkJL1LN05AErNDZWqxU+7kZZK5XzkJj0npQtmG7RYka52NatYkdrgMnKhegeRD0 rKYFXpZTKfmSAlhjN7sNYv/cdskjHbSuajkKPWZNBEyMRYRxhFVv7L8JEJAVAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgGFgwFkDaIw7c 7icvlJzUB6Rx5zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVM3 cU1VOW5FM01nbnNIcGd2d210dWgzUkhHUHFMVGc4UGNCYTRUUWZHYnkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVT N3FNVTluRTNNZ25zSHBndndtdHVoM1JIR1BxTFRnOFBjQmE0VFFmR2J5LzAvMjAx ODU4MzAxNjQwREEyMzBFRENFRTI3MkY5NDlDRDQwN0E0NzFFNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeJIAwQCpKNoMA0EAgACMAcDBQAoBEYAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQS0TANBgkqhkiG9w0BAQsFAAOCAQEAjjrJreLz K+7Yj3Jne9nTHTs7IBW0fJG4ALZKqPcaTTmtmDPIsBsAveHUkJqYLx63ouf7x068 TMqzFw0g8gaCtWX6K2JuhRIqHSiaVsRwlUYsFc6uP9SdlXd2kxiCDqmuSeC7zAhR xyJvnYPLeR5aBKEQY0j1ExGj2vNiIbbApudPHIPZPWMJNjiMqC0c9RgbwRA0rQlN 0uhmxLN8sITu6hQsUJVMd8mjYGgcvMGzSAOppAZKCYM6LEv04VUlJa07tqjtOZgF 21RIlZI2CWfufJniqxu1SV7RJ0uxBbJi1IZakW+g4RT36+41IJfTGjHB+snvI9wh g4tWVNo1nucYjQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:54 2025 by rpki-client on console.sobornost.net