$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E1114F349B885222E5B551B7066E55CEE43A516.cer File: 5E1114F349B885222E5B551B7066E55CEE43A516.cer (raw, json) Hash identifier: yFL2l0JkxFXXSyNdrIe0ZDBBDnQQLZXVQDRhRY6qWvE= Subject key identifier: 5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4085957367D50DB1E97AFC0D711825FBD0FD4D11 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.mft caRepository: rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 15:46:00 +0000 Certificate not after: Fri 06 Mar 2026 15:51:00 +0000 Subordinate resources: AS: 268687 IP: 45.165.140.0/22 IP: 2804:5510::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:85:95:73:67:d5:0d:b1:e9:7a:fc:0d:71:18:25:fb:d0:fd:4d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 7 15:46:00 2025 GMT Not After : Mar 6 15:51:00 2026 GMT Subject: CN=5E1114F349B885222E5B551B7066E55CEE43A516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:7f:85:8f:0b:15:1e:d3:dd:7f:e3:d2:2e: 8f:f3:7e:4f:e8:bf:39:1f:70:49:28:52:18:bb:78: 9c:7f:e0:7d:a7:f3:4c:04:59:66:d1:f3:8d:05:33: b6:92:60:f4:70:d2:15:0b:23:c7:67:63:e5:97:62: b7:2b:73:10:1e:33:82:dd:b0:73:45:d3:57:65:2e: 72:c0:6c:ac:22:4f:55:bb:08:67:29:b7:dd:91:d4: 33:78:9a:10:f3:74:62:76:e3:f8:27:ec:25:7e:f7: 26:44:86:c3:65:68:8d:af:9a:5e:1a:6a:e8:23:27: 92:6a:71:4d:87:36:09:40:b0:9c:bc:83:62:20:0c: 37:81:36:4b:a4:a8:e1:92:6d:b6:ba:5b:ae:8f:a8: 8e:3e:1d:e1:7a:0d:44:2f:f6:ad:fe:4a:e8:0d:e4: c4:7d:76:b9:58:1e:77:05:c4:57:9b:32:e2:1b:da: 18:60:9d:f0:31:5d:d0:84:bc:e4:d8:3e:50:5e:3f: 93:77:9b:24:91:45:a1:ea:a4:96:4b:18:ed:4b:e1: 14:a3:ea:c2:37:ae:a6:72:61:41:6f:1c:78:6a:4b: cc:c2:b4:50:6a:79:b5:25:f5:d5:ce:3a:42:5d:45: ea:15:5c:74:64:0e:98:bd:02:64:f2:54:6e:74:f6: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.140.0/22 IPv6: 2804:5510::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268687 Signature Algorithm: sha256WithRSAEncryption b1:de:9d:39:a2:43:b9:6e:66:cd:2f:b9:97:5f:9b:72:23:68: 00:ff:28:78:14:3e:aa:5c:1e:0c:cf:d3:8d:24:51:27:b1:fa: 5c:94:05:ca:49:4e:ed:84:48:00:59:58:2f:6e:80:11:70:c7: 1f:d3:b0:4b:d9:cb:72:72:df:40:9e:58:78:37:5c:90:db:8b: 80:64:12:ec:64:4c:bc:20:5e:97:6a:75:09:0f:06:c0:42:6e: 62:51:ae:aa:a4:6d:da:22:a0:ac:3e:ad:35:d5:25:2b:1c:bb: 19:13:4e:3e:1e:aa:47:c5:e0:74:92:5e:60:29:80:fc:9e:c1: 05:91:ca:66:45:0c:8f:78:e5:8b:0f:71:41:5b:67:6b:af:e6: f9:d5:3a:29:59:3b:db:04:45:ec:4c:f0:74:de:3f:35:2b:bc: 36:aa:74:b0:63:99:d9:ad:6d:84:8d:3d:de:e2:da:c1:24:9c: a0:94:28:07:6e:b2:9e:ae:ae:2f:43:c1:05:31:99:9e:82:7f: 59:7b:ad:12:42:b1:b7:b2:c6:98:f2:42:b8:0f:7c:7b:96:cb: e6:7c:a7:c2:3d:87:7f:61:02:84:50:31:33:9a:e8:f1:dc:28: bf:24:84:50:c5:47:56:a4:52:f1:c1:d2:d6:7b:e8:ac:a2:4d: 56:72:d5:99 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUQIWVc2fVDbHpevwNcRgl+9D9TREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDcxNTQ2MDBaFw0yNjAzMDYxNTUxMDBaMDMxMTAvBgNV BAMTKDVFMTExNEYzNDlCODg1MjIyRTVCNTUxQjcwNjZFNTVDRUU0M0E1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKX3+FjwsVHtPdf+PSLo/zfk/o vzkfcEkoUhi7eJx/4H2n80wEWWbR840FM7aSYPRw0hULI8dnY+WXYrcrcxAeM4Ld sHNF01dlLnLAbKwiT1W7CGcpt92R1DN4mhDzdGJ24/gn7CV+9yZEhsNlaI2vml4a augjJ5JqcU2HNglAsJy8g2IgDDeBNkukqOGSbba6W66PqI4+HeF6DUQv9q3+SugN 5MR9drlYHncFxFebMuIb2hhgnfAxXdCEvOTYPlBeP5N3mySRRaHqpJZLGO1L4RSj 6sI3rqZyYUFvHHhqS8zCtFBqebUl9dXOOkJdReoVXHRkDpi9AmTyVG509pIfAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBReERTzSbiFIi5b VRtwZuVc7kOlFjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGF3 dFY4cndCNkNqUVpQNXExRkhtYkdZVDdtNVZ1blY3TmN2ZFJKdDlQRW8vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGF3 dFY4cndCNkNqUVpQNXExRkhtYkdZVDdtNVZ1blY3TmN2ZFJKdDlQRW8vMS81RTEx MTRGMzQ5Qjg4NTIyMkU1QjU1MUI3MDY2RTU1Q0VFNDNBNTE2Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItpYwwDQQCAAIwBwMFACgEVRAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBmPMA0GCSqGSIb3DQEBCwUAA4IBAQCx3p05okO5bmbNL7mX X5tyI2gA/yh4FD6qXB4Mz9ONJFEnsfpclAXKSU7thEgAWVgvboARcMcf07BL2cty ct9Anlh4N1yQ24uAZBLsZEy8IF6XanUJDwbAQm5iUa6qpG3aIqCsPq011SUrHLsZ E04+HqpHxeB0kl5gKYD8nsEFkcpmRQyPeOWLD3FBW2drr+b51TopWTvbBEXsTPB0 3j81K7w2qnSwY5nZrW2EjT3e4trBJJyglCgHbrKerq4vQ8EFMZmegn9Ze60SQrG3 ssaY8kK4D3x7lsvmfKfCPYd/YQKEUDEzmujx3Ci/JIRQxUdWpFLxwdLWe+isok1W ctWZ -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:07 2025 by rpki-client on console.sobornost.net