$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer File: 4FEB85108E86A307A90034950C74C7A6630768F6.cer (raw, json) Hash identifier: ZZybzzCsSaQcmVd6B2vWFv+AzKij9+qW/mpcDwlvszI= Subject key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5DBC74124B4686B965A80FCC94A46845495D203B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft caRepository: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 14:37:25 +0000 Certificate not after: Fri 06 Mar 2026 14:42:25 +0000 Subordinate resources: AS: 61901 IP: 170.254.52.0/22 IP: 191.5.64.0/21 IP: 2804:1370::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bc:74:12:4b:46:86:b9:65:a8:0f:cc:94:a4:68:45:49:5d:20:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 14:37:25 2025 GMT Not After : Mar 6 14:42:25 2026 GMT Subject: CN=4FEB85108E86A307A90034950C74C7A6630768F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:bc:5d:71:60:12:b4:4a:83:e4:62:6c:9b: ba:ca:11:dc:de:03:91:b7:73:bc:c4:89:52:20:98: df:9c:d1:3c:cd:bb:f7:19:e3:2a:b9:aa:ec:69:17: e3:2b:3d:50:75:08:af:e8:3a:89:e9:78:9b:6e:cf: c1:7a:b0:02:4f:d2:79:44:47:55:37:cd:e2:1d:fb: cf:92:f5:4c:ca:f5:02:83:ef:df:cd:10:5d:d5:45: 5e:ea:52:ab:7e:26:74:c8:94:5b:06:71:c3:a4:53: 8a:65:35:7d:70:8a:d2:5b:78:d5:52:bb:dc:0d:f1: 9b:e0:d3:f8:6e:12:1d:eb:02:7e:8a:11:e2:91:59: 03:aa:75:99:34:08:7f:4e:b0:76:99:6b:8d:3a:71: 9b:84:5c:88:50:73:5f:5e:de:96:66:05:24:32:5f: 32:6b:b2:e1:70:cb:37:97:f4:8a:bc:8b:74:1e:14: c9:09:b1:10:86:bc:92:87:17:c5:f8:df:32:81:20: 07:1b:be:92:f7:cb:57:43:6f:c3:ec:40:00:9d:d7: ad:4c:80:59:49:98:c7:f8:4c:4f:e4:0d:af:50:36: 61:60:8f:a5:5d:11:0c:76:bc:c9:de:4d:e3:14:5c: f2:5c:da:34:d3:2b:89:d5:ba:4e:cb:48:d9:bd:d8: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.52.0/22 191.5.64.0/21 IPv6: 2804:1370::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61901 Signature Algorithm: sha256WithRSAEncryption a1:49:18:d6:8c:df:16:2e:07:3b:c3:2b:b2:e6:40:3b:e8:17: 0f:71:07:54:12:de:66:d9:5b:d1:33:12:d2:12:b9:6f:3c:7d: 35:b6:4d:3c:5c:7b:76:36:50:22:f1:a5:31:ec:c4:27:67:e6: 2f:c0:cd:a9:d7:d8:56:6c:f0:76:6b:c2:75:c0:43:fb:77:6b: e2:43:82:82:16:e8:c4:1d:3c:c9:23:e5:75:66:70:51:bf:6a: d3:ae:41:42:17:b6:9e:18:6f:73:9a:d2:98:08:c2:7a:25:ba: 53:7a:24:47:25:1a:c5:d8:84:36:cd:0f:2e:35:01:ab:ab:56: 1e:29:e9:c1:4b:d1:94:fd:0b:75:5b:16:19:27:57:fc:cd:ed: 96:da:f6:1f:ea:a1:4a:8f:19:53:28:fa:bb:00:79:d2:17:20: 79:35:02:78:23:09:f2:04:ca:17:9b:0f:4e:73:ba:98:b9:01: 2d:6e:4b:a4:5a:34:f2:36:94:f6:34:cf:41:b6:56:19:bd:fd: 85:8b:6e:da:11:58:40:35:f4:d8:cc:3e:79:6b:8d:05:c0:a1: 99:bb:59:df:9d:ef:be:4e:cd:7b:1f:7a:8f:ef:47:5b:c3:4e: fd:30:9f:f9:02:1d:9d:05:20:9f:94:16:5d:9a:f7:03:ee:5a: e1:38:ef:48 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXbx0EktGhrllqA/MlKRoRUldIDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNDM3MjVaFw0yNjAzMDYxNDQyMjVaMDMxMTAvBgNV BAMTKDRGRUI4NTEwOEU4NkEzMDdBOTAwMzQ5NTBDNzRDN0E2NjMwNzY4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LbxdcWAStEqD5GJsm7rKEdze A5G3c7zEiVIgmN+c0TzNu/cZ4yq5quxpF+MrPVB1CK/oOonpeJtuz8F6sAJP0nlE R1U3zeId+8+S9UzK9QKD79/NEF3VRV7qUqt+JnTIlFsGccOkU4plNX1witJbeNVS u9wN8Zvg0/huEh3rAn6KEeKRWQOqdZk0CH9OsHaZa406cZuEXIhQc19e3pZmBSQy XzJrsuFwyzeX9Iq8i3QeFMkJsRCGvJKHF8X43zKBIAcbvpL3y1dDb8PsQACd161M gFlJmMf4TE/kDa9QNmFgj6VdEQx2vMneTeMUXPJc2jTTK4nVuk7LSNm92Fb1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP64UQjoajB6kA NJUMdMemYwdo9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXFM UnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5dkMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlx TFJyNk54Y3h1U2ZXaUwyeVdWblhjUk5OMWU0M3Q4YjI2ejMyaDdkeXZDLzEvNEZF Qjg1MTA4RTg2QTMwN0E5MDAzNDk1MEM3NEM3QTY2MzA3NjhGNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqv40AwQDvwVAMA0EAgACMAcDBQAoBBNwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxzTANBgkqhkiG9w0BAQsFAAOCAQEAoUkY1ozf Fi4HO8MrsuZAO+gXD3EHVBLeZtlb0TMS0hK5bzx9NbZNPFx7djZQIvGlMezEJ2fm L8DNqdfYVmzwdmvCdcBD+3dr4kOCghboxB08ySPldWZwUb9q065BQhe2nhhvc5rS mAjCeiW6U3okRyUaxdiENs0PLjUBq6tWHinpwUvRlP0LdVsWGSdX/M3tltr2H+qh So8ZUyj6uwB50hcgeTUCeCMJ8gTKF5sPTnO6mLkBLW5LpFo08jaU9jTPQbZWGb39 hYtu2hFYQDX02Mw+eWuNBcChmbtZ353vvk7Nex96j+9HW8NO/TCf+QIdnQUgn5QW XZr3A+5a4TjvSA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:04 2025 by rpki-client on console.sobornost.net