$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer File: 5E82705FF857324984E1087AAFCCE6BD46657C71.cer (raw, json) Hash identifier: 7i2rkzVrp1Ywtvl49ipKl21BGoGkhOJHRwemW7f7v8Y= Subject key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4CBE2235BF973E53F1ED95E67DC476D03DAC8618 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft caRepository: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 27 Mar 2025 06:25:57 +0000 Certificate not after: Thu 26 Mar 2026 06:30:57 +0000 Subordinate resources: AS: 263450 IP: 168.232.156.0/22 IP: 177.91.232.0/22 IP: 2804:1200::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:be:22:35:bf:97:3e:53:f1:ed:95:e6:7d:c4:76:d0:3d:ac:86:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 27 06:25:57 2025 GMT Not After : Mar 26 06:30:57 2026 GMT Subject: CN=5E82705FF857324984E1087AAFCCE6BD46657C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:ef:a7:ff:ff:e2:e4:f4:1f:8a:e0:40:ca: dc:74:28:0b:27:4d:08:36:32:b6:50:5f:ae:a7:85: 9e:85:12:a3:cd:71:21:9e:e4:7a:31:dc:7d:b1:09: ba:30:50:b9:26:87:ec:99:d2:e8:1a:f1:e7:09:76: 68:22:74:b8:d8:40:96:f9:05:d8:67:77:21:89:78: 31:a1:59:98:69:b6:6f:ff:39:85:57:09:e9:95:55: 7a:3f:b9:ac:22:e9:a5:78:c9:be:d4:28:0a:d8:bb: 19:94:fe:41:1e:f9:a3:ad:43:e4:5d:04:e5:4b:e2: 9d:ae:7a:be:62:04:6a:9f:d0:2a:76:a8:85:d4:af: 27:ea:ea:24:1f:97:49:0f:60:43:45:7f:28:b1:7e: 16:ea:7f:ec:80:c4:84:f9:a4:f6:e5:8a:11:58:f0: 23:48:f9:bf:fd:50:d2:28:20:c8:a5:0f:c5:8a:e1: 8c:32:ff:72:8a:8b:7a:27:35:e2:6f:48:ae:ae:84: 04:4d:b5:fe:2a:d2:3b:f2:e9:33:ee:49:34:70:3e: 4c:a0:78:d1:5b:b8:1f:fa:2a:75:4d:3c:d5:73:50: 6a:ac:0a:8a:0f:76:6e:fa:95:53:bc:84:f1:4e:67: a9:e0:77:9c:61:f2:ad:74:cd:5c:d7:b3:ee:92:2c: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.156.0/22 177.91.232.0/22 IPv6: 2804:1200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263450 Signature Algorithm: sha256WithRSAEncryption 2e:33:6f:57:86:2d:fa:1a:dd:7d:9d:53:d4:5c:0b:54:73:b1: e3:f7:b7:60:8b:ea:51:25:18:ef:0d:ed:20:6b:86:c6:1e:b8: b0:f7:76:5f:68:d4:d5:d2:d0:d1:e7:c5:51:a5:fe:b2:01:bb: 42:39:cf:3c:11:bb:af:ee:41:3c:fa:2c:0e:42:db:5d:5d:13: 85:b6:c2:e2:c4:bb:74:f0:af:66:dd:bb:d2:b6:36:e8:34:af: 1a:4c:e2:ed:3f:bc:37:8c:44:74:21:57:23:4f:79:a2:e3:64: 67:08:25:74:ae:6e:4a:f2:f8:cc:35:fc:b9:3b:ee:d8:42:b4: 34:29:8e:aa:94:6e:de:0e:27:73:a5:a0:9b:d1:97:cb:95:e7: d3:10:92:7a:d6:c1:4e:05:45:2d:27:d5:b5:4e:26:5d:8b:c5: c6:23:ea:13:f4:ef:27:36:78:06:51:0f:1d:97:09:2b:20:75: a7:f9:e8:c0:f5:f7:4e:58:f0:e1:7b:0b:0a:b0:79:78:f1:29: b1:b6:db:40:66:36:b3:dc:d5:98:24:3b:4c:de:5c:a0:c3:5c: ae:95:57:a2:d4:8e:1b:79:e7:9a:16:a7:00:86:9a:a9:7e:25: c7:a5:ae:85:b0:8b:ba:75:26:52:4a:b2:de:93:2f:7d:a0:c2: e2:41:75:2a -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUTL4iNb+XPlPx7ZXmfcR20D2shhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjcwNjI1NTdaFw0yNjAzMjYwNjMwNTdaMDMxMTAvBgNV BAMTKDVFODI3MDVGRjg1NzMyNDk4NEUxMDg3QUFGQ0NFNkJENDY2NTdDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iO+n///i5PQfiuBAytx0KAsn TQg2MrZQX66nhZ6FEqPNcSGe5Hox3H2xCbowULkmh+yZ0uga8ecJdmgidLjYQJb5 BdhndyGJeDGhWZhptm//OYVXCemVVXo/uawi6aV4yb7UKArYuxmU/kEe+aOtQ+Rd BOVL4p2uer5iBGqf0Cp2qIXUryfq6iQfl0kPYENFfyixfhbqf+yAxIT5pPblihFY 8CNI+b/9UNIoIMilD8WK4Ywy/3KKi3onNeJvSK6uhARNtf4q0jvy6TPuSTRwPkyg eNFbuB/6KnVNPNVzUGqsCooPdm76lVO8hPFOZ6ngd5xh8q10zVzXs+6SLJy1AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRegnBf+FcySYTh CHqvzOa9RmV8cTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWlJp OUo3Y0pNVUJtc3lCc2FCTGFSdFJSU2dGUFpRNGZEd2trR2VreHFVQy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWlJp OUo3Y0pNVUJtc3lCc2FCTGFSdFJSU2dGUFpRNGZEd2trR2VreHFVQy8wLzVFODI3 MDVGRjg1NzMyNDk4NEUxMDg3QUFGQ0NFNkJENDY2NTdDNzEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAqjonAMEArFb6DANBAIAAjAHAwUAKAQSADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEBRowDQYJKoZIhvcNAQELBQADggEBAC4zb1eGLfoa 3X2dU9RcC1RzseP3t2CL6lElGO8N7SBrhsYeuLD3dl9o1NXS0NHnxVGl/rIBu0I5 zzwRu6/uQTz6LA5C211dE4W2wuLEu3Twr2bdu9K2Nug0rxpM4u0/vDeMRHQhVyNP eaLjZGcIJXSubkry+Mw1/Lk77thCtDQpjqqUbt4OJ3OloJvRl8uV59MQknrWwU4F RS0n1bVOJl2LxcYj6hP07yc2eAZRDx2XCSsgdaf56MD1905Y8OF7CwqweXjxKbG2 20BmNrPc1ZgkO0zeXKDDXK6VV6LUjht555oWpwCGmql+JcelroWwi7p1JlJKst6T L32gwuJBdSo= -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:01 2025 by rpki-client on console.sobornost.net