$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer File: 5429A630D95311C5AADAF5AC62BF18BF86863194.cer (raw, json) Hash identifier: ATexSyYGipw2DtmgPwossGCjKtuSUoRUrxXe+31jb6U= Subject key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DB4D6043002C032CAB5867BBC7FF3CCEDE6617F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft caRepository: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 19:35:10 +0000 Certificate not after: Thu 18 Dec 2025 19:40:10 +0000 Subordinate resources: AS: 52593 IP: 170.83.208.0/22 IP: 177.87.232.0/22 IP: 2804:d10::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b4:d6:04:30:02:c0:32:ca:b5:86:7b:bc:7f:f3:cc:ed:e6:61:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 19 19:35:10 2024 GMT Not After : Dec 18 19:40:10 2025 GMT Subject: CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:d9:6f:a2:71:4b:b3:5e:20:bf:c6:de:53: 33:3d:0c:13:b4:4e:0a:fb:04:7f:f8:71:5e:ad:05: 2b:e1:d0:3c:08:eb:f0:51:a0:30:fd:d1:5f:c4:d7: 5f:78:3e:a5:df:a5:de:0e:30:71:14:d2:51:96:87: ec:3f:6c:a9:0c:70:7e:15:10:f0:7e:d3:ce:2c:ea: 5d:10:7e:e0:6f:af:a4:ec:41:fa:75:46:bd:2f:fd: e4:e6:f0:50:d2:4f:d6:93:16:b5:02:cc:15:f4:8c: 9c:0e:36:27:28:96:5c:4c:7f:0a:e1:6e:b9:60:8f: ab:4b:a8:ee:d8:ca:55:17:93:ad:85:f9:44:bb:3a: 3d:fc:46:07:d6:70:ad:d3:56:61:8f:79:4c:a9:87: 78:36:57:53:40:25:0b:37:d8:8c:f0:02:ce:16:23: a1:3f:0a:53:a0:00:f2:71:a6:dd:77:b9:71:95:b5: d6:b8:97:8d:25:f7:c3:25:31:e4:c5:5c:ca:54:5a: a2:91:3f:46:60:ee:22:28:a8:aa:e7:c6:ab:0a:a0: fc:0b:49:3b:c4:a3:9a:1d:05:c6:99:9f:c4:af:33: 5f:c8:0d:ee:d3:b4:a5:d4:b0:39:f1:19:93:66:c7: c7:31:96:85:2b:e7:37:a2:ec:3b:ff:f9:48:ff:fc: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.83.208.0/22 177.87.232.0/22 IPv6: 2804:d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52593 Signature Algorithm: sha256WithRSAEncryption ab:21:22:13:6a:a1:a5:cc:ec:f7:22:bf:8c:42:ad:35:c9:91: 42:22:bf:3f:7f:c2:1f:9c:9f:8f:d6:0e:d0:18:3b:6c:2b:5a: 4e:fe:23:82:3f:0c:29:bf:c0:77:51:7a:f1:5e:ec:88:18:c4: e9:d7:5e:7e:8d:09:4a:58:40:f1:d7:6d:cd:ba:df:e8:ce:fe: 93:34:66:63:da:c8:89:13:48:1a:d7:06:0a:b4:44:00:c1:88: bd:ef:c7:09:fc:8e:75:e4:c8:2a:80:06:26:15:65:6c:06:b2: b6:67:1a:28:63:e3:fe:3b:70:bd:1b:d0:8a:08:89:37:1b:02: 39:63:98:cb:63:30:e5:0b:11:30:31:c5:9b:16:cf:5a:18:50: 59:c5:de:b8:4e:87:7a:d2:1b:78:e6:83:5e:e1:2f:00:ae:66: 02:b2:99:40:b3:59:91:95:34:0f:21:76:3b:f5:6b:4e:2f:74: c0:95:ac:f7:44:34:29:90:66:28:a1:e1:cb:aa:b6:46:5a:07: 09:db:3e:61:f8:ec:ca:0e:72:82:2d:22:e7:38:c5:a1:e8:7c: 20:e7:74:69:fc:70:36:a0:61:25:8a:95:24:13:44:f5:42:8b: 61:8b:fa:99:6f:e8:2d:fa:24:5d:b1:ab:9d:55:67:4b:9b:55: 77:0d:e6:f5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUHbTWBDACwDLKtYZ7vH/zzO3mYX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTkxOTM1MTBaFw0yNTEyMTgxOTQwMTBaMDMxMTAvBgNV BAMTKDU0MjlBNjMwRDk1MzExQzVBQURBRjVBQzYyQkYxOEJGODY4NjMxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbdlvonFLs14gv8beUzM9DBO0 Tgr7BH/4cV6tBSvh0DwI6/BRoDD90V/E1194PqXfpd4OMHEU0lGWh+w/bKkMcH4V EPB+084s6l0QfuBvr6TsQfp1Rr0v/eTm8FDST9aTFrUCzBX0jJwONicollxMfwrh brlgj6tLqO7YylUXk62F+US7Oj38RgfWcK3TVmGPeUyph3g2V1NAJQs32IzwAs4W I6E/ClOgAPJxpt13uXGVtda4l40l98MlMeTFXMpUWqKRP0Zg7iIoqKrnxqsKoPwL STvEo5odBcaZn8SvM1/IDe7TtKXUsDnxGZNmx8cxloUr5zei7Dv/+Uj//E6lAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUKaYw2VMRxara 9axivxi/hoYxlDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOE1T VlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhN U1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzAvNTQy OUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4Njg2MzE5NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlPQAwQCsVfoMA0EAgACMAcDBQAoBA0QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNcTANBgkqhkiG9w0BAQsFAAOCAQEAqyEiE2qh pczs9yK/jEKtNcmRQiK/P3/CH5yfj9YO0Bg7bCtaTv4jgj8MKb/Ad1F68V7siBjE 6ddefo0JSlhA8ddtzbrf6M7+kzRmY9rIiRNIGtcGCrREAMGIve/HCfyOdeTIKoAG JhVlbAaytmcaKGPj/jtwvRvQigiJNxsCOWOYy2Mw5QsRMDHFmxbPWhhQWcXeuE6H etIbeOaDXuEvAK5mArKZQLNZkZU0DyF2O/VrTi90wJWs90Q0KZBmKKHhy6q2RloH Cds+Yfjsyg5ygi0i5zjFoeh8IOd0afxwNqBhJYqVJBNE9UKLYYv6mW/oLfokXbGr nVVnS5tVdw3m9Q== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:05 2025 by rpki-client on console.sobornost.net