$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5634BCD8031BCA068F888911F3AFF0838C89576F.cer File: 5634BCD8031BCA068F888911F3AFF0838C89576F.cer (raw, json) Hash identifier: cYf0uyk+onAQGYfVH1rCfDlQUFiR98yUakQwlXzjiJU= Subject key identifier: 56:34:BC:D8:03:1B:CA:06:8F:88:89:11:F3:AF:F0:83:8C:89:57:6F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7136E91F2A3797E729712D72D18F347708794A1B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5634BCD8031BCA068F888911F3AFF0838C89576F.mft caRepository: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 04 Apr 2025 13:55:52 +0000 Certificate not after: Fri 03 Apr 2026 14:00:52 +0000 Subordinate resources: AS: 52818 IP: 177.72.148.0/22 IP: 191.240.196.0/22 IP: 2804:111c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 13:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:36:e9:1f:2a:37:97:e7:29:71:2d:72:d1:8f:34:77:08:79:4a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:55:52 2025 GMT Not After : Apr 3 14:00:52 2026 GMT Subject: CN=5634BCD8031BCA068F888911F3AFF0838C89576F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:87:87:b1:8d:ad:cc:45:55:89:b9:ac:37: 47:cf:cc:f5:c9:57:09:23:c6:d8:9b:a4:e5:71:08: a9:bc:8e:57:d6:96:e1:a0:82:cc:9c:cc:69:6e:f2: f2:f8:a3:d9:ec:52:a9:f6:b4:6f:ce:03:b2:5e:18: 4a:61:d3:2b:40:69:43:f7:e2:0e:9e:fe:d5:db:86: 80:f0:21:36:a8:fc:54:b7:b8:e1:ca:29:e4:1f:32: 38:31:c0:3e:fa:9e:8e:9d:aa:c2:e4:09:6d:ac:b4: 00:78:a5:3e:c6:44:a7:21:ba:49:cb:f9:42:29:e3: 62:a3:56:ab:ae:35:89:2f:93:cd:24:35:51:0f:0c: 28:ed:99:0f:29:2a:66:ec:b5:cb:36:bf:1d:d0:98: a2:fc:95:80:3f:ae:f1:a1:6c:3e:cd:6d:fc:43:64: 38:18:f5:56:62:09:05:a8:0d:5b:64:85:56:8b:88: 82:a3:48:80:ca:8d:6a:e5:98:d3:4c:eb:b2:79:22: 10:43:08:46:bf:ad:19:a5:c4:fb:a9:28:8c:d3:f3: dd:58:65:4f:45:09:80:d2:23:f4:47:b3:ac:a9:55: 19:da:e0:f9:cc:03:f6:51:d4:c7:08:55:d6:fc:4c: 60:62:90:c2:f5:3b:cd:c3:99:17:5b:7a:bf:3f:f0: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:34:BC:D8:03:1B:CA:06:8F:88:89:11:F3:AF:F0:83:8C:89:57:6F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5634BCD8031BCA068F888911F3AFF0838C89576F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.72.148.0/22 191.240.196.0/22 IPv6: 2804:111c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52818 Signature Algorithm: sha256WithRSAEncryption 89:d9:22:08:7c:d8:ce:75:46:96:91:1a:b2:36:83:15:d8:38: 25:6a:7f:43:c8:89:f8:c6:18:01:01:08:9c:bc:a8:bb:78:76: e6:1a:3e:57:be:8b:79:17:3e:29:8c:6d:bc:78:54:ee:4c:53: 5f:65:60:08:93:8a:d9:b9:e9:35:54:9c:0e:9d:a4:d4:f0:bc: e2:78:47:e7:24:02:b3:be:cc:05:99:ef:88:a3:48:38:42:fb: f2:0e:dd:42:28:74:bd:48:fe:86:a7:53:ea:59:4f:1d:1a:06: 03:9e:22:1c:92:ba:b4:95:38:cb:5b:ea:fa:88:8b:6d:28:95: ff:55:c9:c0:b1:a5:67:67:89:a9:2f:35:ad:2f:7f:f8:e6:98: d9:91:c0:4a:85:c5:70:30:fa:63:dc:f5:a9:84:a2:24:d3:fa: be:e1:1c:cf:a5:5f:73:81:95:a8:10:f4:d7:fb:50:c9:80:08: dc:9a:d4:21:41:46:9c:b4:34:86:e8:24:df:13:e3:e8:d6:30: 87:b8:bf:e5:87:b8:30:29:70:f1:7c:7a:b9:b6:91:0b:8c:d9: ba:72:e1:a0:92:0d:80:69:8d:a3:f4:10:e6:fc:fd:52:77:9f: 99:12:98:28:f1:72:de:97:2b:5a:1c:da:43:24:2d:89:a6:a4: d3:ff:b5:79 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUcTbpHyo3l+cpcS1y0Y80dwh5ShswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDQxMzU1NTJaFw0yNjA0MDMxNDAwNTJaMDMxMTAvBgNV BAMTKDU2MzRCQ0Q4MDMxQkNBMDY4Rjg4ODkxMUYzQUZGMDgzOEM4OTU3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKIeHsY2tzEVVibmsN0fPzPXJ VwkjxtibpOVxCKm8jlfWluGggsyczGlu8vL4o9nsUqn2tG/OA7JeGEph0ytAaUP3 4g6e/tXbhoDwITao/FS3uOHKKeQfMjgxwD76no6dqsLkCW2stAB4pT7GRKchuknL +UIp42KjVquuNYkvk80kNVEPDCjtmQ8pKmbstcs2vx3QmKL8lYA/rvGhbD7NbfxD ZDgY9VZiCQWoDVtkhVaLiIKjSIDKjWrlmNNM67J5IhBDCEa/rRmlxPupKIzT891Y ZU9FCYDSI/RHs6ypVRna4PnMA/ZR1McIVdb8TGBikML1O83DmRdber8/8HFZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWNLzYAxvKBo+I iRHzr/CDjIlXbzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGhZ TTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2EyTXIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ho WU01ajdZOFg3WGFvUTZzUG1yTHRGU1RaWWlaRXBQZHN6OUV6ZmNhMk1yLzAvNTYz NEJDRDgwMzFCQ0EwNjhGODg4OTExRjNBRkYwODM4Qzg5NTc2Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUiUAwQCv/DEMA0EAgACMAcDBQAoBBEcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOUjANBgkqhkiG9w0BAQsFAAOCAQEAidkiCHzY znVGlpEasjaDFdg4JWp/Q8iJ+MYYAQEInLyou3h25ho+V76LeRc+KYxtvHhU7kxT X2VgCJOK2bnpNVScDp2k1PC84nhH5yQCs77MBZnviKNIOEL78g7dQih0vUj+hqdT 6llPHRoGA54iHJK6tJU4y1vq+oiLbSiV/1XJwLGlZ2eJqS81rS9/+OaY2ZHASoXF cDD6Y9z1qYSiJNP6vuEcz6Vfc4GVqBD01/tQyYAI3JrUIUFGnLQ0hugk3xPj6NYw h7i/5Ye4MClw8Xx6ubaRC4zZunLhoJINgGmNo/QQ5vz9UnefmRKYKPFy3pcrWhza QyQtiaak0/+1eQ== -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:50 2025 by rpki-client on console.sobornost.net