$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer File: 5668EE81C8705A595C00BF220C5BB48B38682B81.cer (raw, json) Hash identifier: 5Ni5zC+xLH8GgMB6cn7uj6FcqhlFjcgIMxAlI7YvJuw= Subject key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B295FADB3B61BC625262CD9C4CAB8B1F8BBA112 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft caRepository: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 22 Mar 2025 23:06:46 +0000 Certificate not after: Sat 21 Mar 2026 23:11:46 +0000 Subordinate resources: AS: 263558 IP: 143.255.196.0/22 IP: 186.237.216.0/21 IP: 2804:ef0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:29:5f:ad:b3:b6:1b:c6:25:26:2c:d9:c4:ca:b8:b1:f8:bb:a1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 22 23:06:46 2025 GMT Not After : Mar 21 23:11:46 2026 GMT Subject: CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1b:62:36:72:02:ca:02:d5:6b:8b:d7:7b:0e: 0a:5a:70:a4:a4:26:a7:aa:3c:52:6a:1b:d3:a8:64: 74:2d:6e:63:47:dc:b5:bd:87:09:5b:ab:1f:a8:59: 9f:8d:2d:d1:df:48:21:f0:42:d2:6e:6f:16:e3:aa: b8:9c:ff:3a:a2:2a:7f:34:8e:21:75:26:1a:3e:3f: 9a:fe:76:58:30:02:b0:11:8a:39:b1:b0:db:cc:e8: 31:15:3a:cd:01:c7:5a:fc:0d:c3:6a:8f:de:43:df: e4:36:cd:a6:bd:d2:69:d8:b5:5c:8a:6f:9f:7f:08: ef:37:11:d9:96:58:f5:bb:3d:be:c3:5e:f4:38:cc: 02:f6:6d:c4:a7:4d:c9:d8:13:fc:9d:27:21:6c:ae: a0:46:5b:d4:bb:62:a6:fe:e0:bd:d8:f9:8f:a8:03: e2:dc:50:64:19:95:fd:07:dd:83:e1:ff:a4:fa:86: 13:ac:70:35:dd:7c:7d:9f:af:a4:0a:50:d7:26:85: ba:28:82:e6:49:b7:2f:8a:46:72:ab:93:63:52:dd: a5:82:cd:ef:ee:03:04:55:da:c4:27:26:27:2c:c3: dd:f6:2e:77:86:d9:d0:13:1d:ce:e2:19:f9:03:14: e4:fe:3b:a7:69:e3:e0:3e:58:67:5a:bd:3d:e4:33: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.196.0/22 186.237.216.0/21 IPv6: 2804:ef0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263558 Signature Algorithm: sha256WithRSAEncryption 63:98:e2:cc:d7:c3:b1:95:31:48:54:92:2a:be:38:5e:01:95: 59:8a:13:ce:f4:4b:ea:64:54:c5:a9:98:57:5c:b8:8a:6b:1a: db:3f:df:b2:9c:17:10:d0:22:3b:53:d0:82:fa:47:e1:57:14: f7:02:d3:87:b6:3a:5e:b2:f5:c4:97:cf:a7:5a:91:0a:24:04: 47:46:4c:a9:e7:21:5c:9a:80:a0:e7:91:f4:43:79:d5:bc:78: c8:48:b6:61:3a:ba:fe:55:c2:19:74:bd:6d:53:39:e0:a8:f2: 63:b5:cc:9f:b8:84:4a:62:67:c6:02:6f:e0:37:ff:c4:3a:3f: fa:f1:d6:a1:6a:18:51:aa:d7:b7:21:15:12:56:d7:db:6e:67: 31:db:29:d6:61:97:c2:76:c6:e8:28:12:2c:18:d3:da:d6:f1: 51:d3:55:dc:22:5e:03:26:06:a1:83:39:60:84:72:07:ed:6b: 14:3f:cb:61:ec:fb:a7:f2:a5:93:5a:07:12:69:b1:48:93:ed: c8:6d:73:92:f1:b7:e1:9f:96:75:c2:99:66:38:f1:ec:9d:cd: 57:ef:64:21:47:3e:44:2b:8a:d7:4f:91:6d:98:96:df:40:95: 3c:8e:a8:fc:67:52:fe:a4:d7:47:4d:af:31:cf:29:72:a2:e3: 67:7e:76:0e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOylfrbO2G8YlJizZxMq4sfi7oRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjIyMzA2NDZaFw0yNjAzMjEyMzExNDZaMDMxMTAvBgNV BAMTKDU2NjhFRTgxQzg3MDVBNTk1QzAwQkYyMjBDNUJCNDhCMzg2ODJCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnG2I2cgLKAtVri9d7DgpacKSk JqeqPFJqG9OoZHQtbmNH3LW9hwlbqx+oWZ+NLdHfSCHwQtJubxbjqric/zqiKn80 jiF1Jho+P5r+dlgwArARijmxsNvM6DEVOs0Bx1r8DcNqj95D3+Q2zaa90mnYtVyK b59/CO83EdmWWPW7Pb7DXvQ4zAL2bcSnTcnYE/ydJyFsrqBGW9S7Yqb+4L3Y+Y+o A+LcUGQZlf0H3YPh/6T6hhOscDXdfH2fr6QKUNcmhbooguZJty+KRnKrk2NS3aWC ze/uAwRV2sQnJicsw932LneG2dATHc7iGfkDFOT+O6dp4+A+WGdavT3kM9aZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWaO6ByHBaWVwA vyIMW7SLOGgrgTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREFE WHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVtYWcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RB RFhxUW1weEVzaENmUzU2aFlDWDVUdUdmRlpoYzdSelc4QzZZOXp1bWFnLzAvNTY2 OEVFODFDODcwNUE1OTVDMDBCRjIyMEM1QkI0OEIzODY4MkI4MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj//EAwQDuu3YMA0EAgACMAcDBQAoBA7wMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFhjANBgkqhkiG9w0BAQsFAAOCAQEAY5jizNfD sZUxSFSSKr44XgGVWYoTzvRL6mRUxamYV1y4imsa2z/fspwXENAiO1PQgvpH4VcU 9wLTh7Y6XrL1xJfPp1qRCiQER0ZMqechXJqAoOeR9EN51bx4yEi2YTq6/lXCGXS9 bVM54KjyY7XMn7iESmJnxgJv4Df/xDo/+vHWoWoYUarXtyEVElbX225nMdsp1mGX wnbG6CgSLBjT2tbxUdNV3CJeAyYGoYM5YIRyB+1rFD/LYez7p/Klk1oHEmmxSJPt yG1zkvG34Z+WdcKZZjjx7J3NV+9kIUc+RCuK10+RbZiW30CVPI6o/GdS/qTXR02v Mc8pcqLjZ352Dg== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:00 2025 by rpki-client on console.sobornost.net