$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer File: 5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer (raw, json) Hash identifier: cwL/pVsvlwkHlbboXczRg/PvWeBqsNXAuxgX5bdacA8= Subject key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 52C3207948658736B29F1EAB49508B9275E2A0B9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft caRepository: rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 17:23:07 +0000 Certificate not after: Thu 05 Mar 2026 17:28:07 +0000 Subordinate resources: AS: 265897 IP: 128.201.196.0/22 IP: 2804:3f80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c3:20:79:48:65:87:36:b2:9f:1e:ab:49:50:8b:92:75:e2:a0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 17:23:07 2025 GMT Not After : Mar 5 17:28:07 2026 GMT Subject: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:f6:4d:49:e9:15:4f:c1:87:f0:39:25:5c: ab:09:53:0a:8d:24:c9:cd:56:d0:4c:be:72:c8:33: dc:85:28:a5:65:21:06:af:32:a3:cf:59:83:76:d5: cc:a9:cc:d7:1c:e5:e6:96:5c:f3:8c:f1:87:7f:24: 65:33:1f:7f:1a:d0:f7:e6:0a:c8:b8:fb:cf:de:f6: a2:41:b2:88:47:00:43:56:62:a8:95:b7:97:01:90: 05:ab:dd:ff:e0:7e:85:af:cd:47:9e:d1:ff:81:d7: 99:17:37:a6:cf:e2:d6:ea:33:4a:2f:3e:29:1a:45: bd:3a:ed:a2:1d:f5:b9:5f:ea:7b:46:e6:6e:9a:b8: d5:ac:8f:fd:9e:f6:2d:63:db:92:d2:de:bf:59:09: 71:73:b3:1d:21:2a:c4:d4:b7:37:e5:1c:e9:97:62: c9:32:b3:8b:2d:db:33:68:dc:aa:ed:d6:40:ba:1f: b1:7c:2b:af:40:25:3e:e8:a4:3a:3c:ff:28:00:3b: 5d:d4:9a:84:31:02:9e:38:ca:4e:10:ae:4a:f1:74: 37:98:fa:98:51:a7:ff:3f:4d:ad:69:f0:c5:17:8a: e5:ec:5c:70:be:c7:af:09:7d:0f:67:26:1f:32:96: 74:d7:2d:74:ae:7e:fc:5e:1c:22:c0:5c:19:24:4d: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.196.0/22 IPv6: 2804:3f80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265897 Signature Algorithm: sha256WithRSAEncryption 50:97:1d:dc:f8:7e:8a:f4:b7:3c:56:f9:40:ee:d0:55:ee:a9: 06:03:a9:b4:2a:fc:16:3b:c3:fb:2f:08:39:73:69:da:de:2c: 64:33:e8:32:7e:ac:fb:43:5a:18:f5:34:9a:7f:43:14:fc:fa: 8f:9b:5e:e1:01:5e:96:03:5a:a6:97:62:1e:e5:d1:55:02:10: a9:30:fa:42:3d:b7:a6:84:e9:30:bf:81:5c:40:92:a6:cb:b8: 35:6f:91:bc:d3:d6:31:95:08:38:34:a7:a2:1a:a6:f6:a9:a4: e1:f2:30:b3:47:3a:fd:f8:f4:58:23:84:c8:0b:0a:2e:84:99: a6:4d:49:ef:30:8e:82:4a:51:ae:56:6e:d5:48:a8:ec:03:d9: dc:77:6b:80:e4:6f:aa:50:1a:00:d3:75:b6:0b:da:ad:4d:b0: ae:e9:c3:ea:7d:e8:9f:27:37:d1:6b:5d:88:f4:fe:bb:c2:50: c3:f1:a8:75:9d:46:80:4a:65:7b:bc:b1:55:2a:8d:04:f8:93: 74:7c:f5:16:4f:9f:a3:4c:75:27:ee:bc:30:da:5d:d6:86:33: 5c:6a:7d:0f:7b:12:69:71:74:5a:a6:ac:e6:ab:fa:21:00:99: ac:60:a8:bc:17:70:1a:0c:91:f1:aa:a2:96:e8:9c:3a:69:3a: 61:de:e2:8c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUsMgeUhlhzaynx6rSVCLknXioLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxNzIzMDdaFw0yNjAzMDUxNzI4MDdaMDMxMTAvBgNV BAMTKDVBNUUyNkIxQjBGMTJBQkEyNzUzNzU0MzYyMzlCRkRENzZFNTE4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWivZNSekVT8GH8DklXKsJUwqN JMnNVtBMvnLIM9yFKKVlIQavMqPPWYN21cypzNcc5eaWXPOM8Yd/JGUzH38a0Pfm Csi4+8/e9qJBsohHAENWYqiVt5cBkAWr3f/gfoWvzUee0f+B15kXN6bP4tbqM0ov PikaRb067aId9blf6ntG5m6auNWsj/2e9i1j25LS3r9ZCXFzsx0hKsTUtzflHOmX Yskys4st2zNo3Krt1kC6H7F8K69AJT7opDo8/ygAO13UmoQxAp44yk4QrkrxdDeY +phRp/8/Ta1p8MUXiuXsXHC+x68JfQ9nJh8ylnTXLXSufvxeHCLAXBkkTeqBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaXiaxsPEquidT dUNiOb/dduUYmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkRh UWpNMlpOZ2hRZDZrTTlCMUFjTnNmVVY0Rk1IWnpjMnUzb052eGQ5ZzUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZE YVFqTTJaTmdoUWQ2a005QjFBY05zZlVWNEZNSFp6YzJ1M29OdnhkOWc1LzEvNUE1 RTI2QjFCMEYxMkFCQTI3NTM3NTQzNjIzOUJGREQ3NkU1MTg5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgMnEMA0EAgACMAcDBQAoBD+AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQOqTANBgkqhkiG9w0BAQsFAAOCAQEAUJcd3Ph+ivS3PFb5 QO7QVe6pBgOptCr8FjvD+y8IOXNp2t4sZDPoMn6s+0NaGPU0mn9DFPz6j5te4QFe lgNappdiHuXRVQIQqTD6Qj23poTpML+BXECSpsu4NW+RvNPWMZUIODSnohqm9qmk 4fIws0c6/fj0WCOEyAsKLoSZpk1J7zCOgkpRrlZu1Uio7APZ3HdrgORvqlAaANN1 tgvarU2wrunD6n3onyc30WtdiPT+u8JQw/GodZ1GgEple7yxVSqNBPiTdHz1Fk+f o0x1J+68MNpd1oYzXGp9D3sSaXF0Wqas5qv6IQCZrGCovBdwGgyR8aqiluicOmk6 Yd7ijA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:06 2025 by rpki-client on console.sobornost.net