$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer (raw, json) Hash identifier: i0LwsgMclkBHuOcl66g0BWrLVGClxBNDGiexorrAozQ= Subject key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64CF45C5211F5F5D279AD6FAD1DA6639A5AC4396 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft caRepository: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 17 Jan 2025 19:33:52 +0000 Certificate not after: Fri 16 Jan 2026 19:38:52 +0000 Subordinate resources: AS: 61862 IP: 138.185.172.0/22 IP: 201.150.120.0/22 IP: 2804:1a7c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cf:45:c5:21:1f:5f:5d:27:9a:d6:fa:d1:da:66:39:a5:ac:43:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jan 17 19:33:52 2025 GMT Not After : Jan 16 19:38:52 2026 GMT Subject: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:d5:51:7d:c3:62:67:3b:67:02:b8:f6:45: 8f:2b:1d:b2:e1:ac:e5:2f:d2:7b:50:c7:96:d2:17: ee:ba:91:6c:be:81:50:7c:b5:40:49:04:ea:32:c0: 71:b4:19:08:91:77:b7:60:07:e1:32:3d:ac:6e:ec: e1:36:75:ea:ba:44:7f:84:e2:b2:82:44:9b:65:20: 23:d1:b2:3c:0f:f4:07:fb:33:82:aa:65:42:49:33: af:01:ca:06:e1:f5:ad:aa:79:09:37:3f:4e:bd:27: 30:ec:5d:a9:71:26:1c:02:c6:15:48:bb:4d:13:87: f3:2b:e5:79:07:8c:1a:36:7f:cf:1b:f5:20:5a:53: 7e:d0:ec:02:23:fa:0f:0b:db:c1:9a:18:ef:46:d5: 20:75:d9:e5:58:9e:25:72:59:e4:b3:ba:56:6c:98: 91:b4:63:47:99:80:3f:6c:b8:67:de:e6:f2:d6:ca: d6:41:e0:3d:3e:ad:7b:5d:36:a6:d0:95:1e:a9:2c: 2d:b5:ec:a1:b3:dc:93:ca:ca:4c:e0:bf:4d:02:0b: 68:ba:6f:3d:00:64:4f:8f:ae:cb:c7:2b:26:f5:3d: bc:14:ea:56:5e:5f:c4:74:04:38:db:b9:2c:c1:d9: bd:b6:a6:81:d9:5f:7c:62:52:54:fa:c1:b3:ba:fd: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.172.0/22 201.150.120.0/22 IPv6: 2804:1a7c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61862 Signature Algorithm: sha256WithRSAEncryption b9:9d:18:82:d8:56:47:d4:66:28:16:db:59:2a:49:db:89:51: fd:41:ab:09:17:27:e7:52:68:c0:ef:d6:0a:02:4f:ce:cb:33: b2:69:cd:28:78:2e:e7:27:17:c6:7f:7b:52:04:0a:c3:a0:56: 23:ef:e4:31:ed:b2:f5:40:3e:59:29:cf:38:ac:a8:0d:ae:4a: d2:c5:ee:f7:c6:83:92:12:90:d6:a8:9f:5f:ad:69:aa:c5:c0: 63:6e:0e:df:b4:d8:9f:d8:f5:89:6b:4d:0b:c9:ba:12:47:4e: d8:be:f9:f8:ff:87:ad:c5:06:59:ff:6f:26:40:bc:aa:28:a8: 6c:37:ab:bd:71:9f:1e:bc:63:22:78:35:d5:53:fd:3a:19:01: 77:9e:27:29:b7:b4:20:fe:4d:4f:a7:b9:1d:9f:17:60:b6:d3: db:f2:a9:6a:7c:78:05:bd:80:91:7c:31:09:64:92:d1:fe:32: 93:f5:0b:69:1d:b2:44:39:7a:a1:6f:3f:b3:d1:52:1e:1e:b7: 0e:ef:f9:74:00:92:c1:ff:58:6e:4f:64:59:7f:44:8f:23:b1: 07:09:c4:f4:2c:a9:ba:4a:fb:a6:03:8f:0a:32:58:20:2c:e9: af:d5:4b:55:e6:cc:f0:da:eb:e5:d2:bc:58:51:fe:3e:68:1d: fa:53:eb:d0 -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUZM9FxSEfX10nmtb60dpmOaWsQ5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAxMTcxOTMzNTJaFw0yNjAxMTYxOTM4NTJaMDMxMTAvBgNV BAMTKDRCODBCMjBCRDc0MERGOEFGQ0YwRjhDNUE2RkVCOEI5RTUzMDYzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHtVRfcNiZztnArj2RY8rHbLh rOUv0ntQx5bSF+66kWy+gVB8tUBJBOoywHG0GQiRd7dgB+EyPaxu7OE2deq6RH+E 4rKCRJtlICPRsjwP9Af7M4KqZUJJM68Bygbh9a2qeQk3P069JzDsXalxJhwCxhVI u00Th/Mr5XkHjBo2f88b9SBaU37Q7AIj+g8L28GaGO9G1SB12eVYniVyWeSzulZs mJG0Y0eZgD9suGfe5vLWytZB4D0+rXtdNqbQlR6pLC217KGz3JPKykzgv00CC2i6 bz0AZE+PrsvHKyb1PbwU6lZeX8R0BDjbuSzB2b22poHZX3xiUlT6wbO6/UyVAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRLgLIL10Dfivzw +MWm/ri55TBjVTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU29o dmpGSEtYcHBrTlFrN1FicXllak41ZlBrWjJjR3JQNDlyNnVBUXZjcy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vU29o dmpGSEtYcHBrTlFrN1FicXllak41ZlBrWjJjR3JQNDlyNnVBUXZjcy8wLzRCODBC MjBCRDc0MERGOEFGQ0YwRjhDNUE2RkVCOEI5RTUzMDYzNTUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAoq5rAMEAsmWeDANBAIAAjAHAwUAKAQafDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA8aYwDQYJKoZIhvcNAQELBQADggEBALmdGILYVkfU ZigW21kqSduJUf1BqwkXJ+dSaMDv1goCT87LM7JpzSh4LucnF8Z/e1IECsOgViPv 5DHtsvVAPlkpzzisqA2uStLF7vfGg5ISkNaon1+taarFwGNuDt+02J/Y9YlrTQvJ uhJHTti++fj/h63FBln/byZAvKooqGw3q71xnx68YyJ4NdVT/ToZAXeeJym3tCD+ TU+nuR2fF2C209vyqWp8eAW9gJF8MQlkktH+MpP1C2kdskQ5eqFvP7PRUh4etw7v +XQAksH/WG5PZFl/RI8jsQcJxPQsqbpK+6YDjwoyWCAs6a/VS1XmzPDa6+XSvFhR /j5oHfpT69A= -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:18 2025 by rpki-client on console.sobornost.net