$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer File: 81DD59DA77587B1BD0A14E971E442A926C1CFBAB.cer (raw, json) Hash identifier: lEu9BCkZmPOzcfQkuUyobNQUmSQi98/hkhw2et+1NfU= Subject key identifier: 81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 199A1F16D30462ACD2D5FB94FE1C0325F7759A57 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.mft caRepository: rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 04 Apr 2025 11:09:08 +0000 Certificate not after: Fri 03 Apr 2026 11:14:08 +0000 Subordinate resources: AS: 267164 IP: 45.230.156.0/22 IP: 168.196.12.0/22 IP: 2804:4918::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 20:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9a:1f:16:d3:04:62:ac:d2:d5:fb:94:fe:1c:03:25:f7:75:9a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 11:09:08 2025 GMT Not After : Apr 3 11:14:08 2026 GMT Subject: CN=81DD59DA77587B1BD0A14E971E442A926C1CFBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:40:8c:73:af:59:b4:e5:95:d0:b1:52:9e: 13:24:86:5e:cf:fe:5c:5b:6b:6a:2f:a1:a7:95:98: a3:93:63:92:ef:3c:1f:23:6d:9c:dc:fb:7f:39:05: 72:49:b5:f2:c7:a4:d4:83:31:ae:18:97:b5:2c:0d: 0d:59:05:0e:d6:80:32:8a:a8:bf:7d:b1:9d:8c:60: 20:f1:37:63:1b:d1:de:52:0a:69:c2:e2:4b:98:40: 37:81:5e:e0:46:49:2a:a7:cd:9e:86:3a:00:2e:e8: 5b:e8:8e:1e:ac:6d:04:9b:5a:95:3d:2e:c7:26:a8: 76:a0:44:0f:7d:b2:3a:6f:00:1e:f3:1a:d8:b7:18: 36:5b:ca:94:aa:8b:d9:9c:49:29:a3:8d:b7:fd:22: 16:64:50:66:df:04:4a:d1:bf:dc:ca:54:02:bd:1c: 12:86:48:db:1c:35:8a:4e:03:f0:c0:b6:6e:da:03: ee:9b:15:5f:aa:17:ca:e5:cb:f6:40:80:c3:37:c9: 0e:26:a2:ae:06:6d:da:29:56:ae:91:7e:f3:5f:5b: c1:f0:6d:e1:73:58:f9:50:30:ec:5c:c7:f1:93:a9: 4c:97:f5:40:9e:1f:14:37:b4:ec:89:14:f4:da:95: a7:e4:f7:e2:eb:4d:b3:7b:ba:4a:04:56:b8:e3:6f: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:DD:59:DA:77:58:7B:1B:D0:A1:4E:97:1E:44:2A:92:6C:1C:FB:AB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FXw3rc59bScZgyvsoRGTJ9nhyxXJY7YBwV6QcKbGNPDZ/1/81DD59DA77587B1BD0A14E971E442A926C1CFBAB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.156.0/22 168.196.12.0/22 IPv6: 2804:4918::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267164 Signature Algorithm: sha256WithRSAEncryption 9e:a6:28:12:ef:05:32:8d:d1:9c:58:8f:36:2a:64:96:67:32: b2:4c:3e:27:07:ed:e2:3e:26:d4:e3:ba:e7:e8:e6:28:a3:8f: ab:40:41:d7:6c:de:8f:23:f4:2e:5c:41:2a:47:44:23:5a:49: 21:70:a3:2b:1d:ba:50:a4:a4:6e:8c:ce:15:f4:cb:7d:e6:1a: ec:14:28:db:88:ec:74:66:69:49:c9:88:02:68:ce:8c:8c:1e: 7c:47:bf:ff:31:3f:b9:8d:6f:f7:cd:fc:95:7b:f9:d4:ad:35: f2:5f:1e:bc:d7:52:22:bf:3b:36:85:68:71:b9:cf:26:13:cc: be:fa:aa:d1:0a:e5:b0:ce:aa:2b:bd:d5:06:8d:83:1e:f7:88: c3:b7:a8:b7:54:67:b4:b8:48:24:0f:38:96:00:8f:a5:63:38: 49:38:69:89:1d:ab:f9:e0:bd:85:01:e0:97:aa:5f:e0:8c:48: ba:bf:cd:da:9b:62:49:74:c1:39:57:76:45:09:df:43:36:5c: 38:22:65:90:06:95:1f:f8:71:47:da:fc:b2:99:08:7f:28:db: a0:ae:be:88:3c:ec:67:32:2e:c5:84:f7:50:be:57:d8:f9:be: b5:ec:74:76:94:ec:6a:00:df:cd:57:93:fb:76:8e:a8:bb:d3: 36:03:45:bd -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGZofFtMEYqzS1fuU/hwDJfd1mlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MDQxMTA5MDhaFw0yNjA0MDMxMTE0MDhaMDMxMTAvBgNV BAMTKDgxREQ1OURBNzc1ODdCMUJEMEExNEU5NzFFNDQyQTkyNkMxQ0ZCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTECMc69ZtOWV0LFSnhMkhl7P /lxba2ovoaeVmKOTY5LvPB8jbZzc+385BXJJtfLHpNSDMa4Yl7UsDQ1ZBQ7WgDKK qL99sZ2MYCDxN2Mb0d5SCmnC4kuYQDeBXuBGSSqnzZ6GOgAu6Fvojh6sbQSbWpU9 LscmqHagRA99sjpvAB7zGti3GDZbypSqi9mcSSmjjbf9IhZkUGbfBErRv9zKVAK9 HBKGSNscNYpOA/DAtm7aA+6bFV+qF8rly/ZAgMM3yQ4moq4GbdopVq6RfvNfW8Hw beFzWPlQMOxcx/GTqUyX9UCeHxQ3tOyJFPTalafk9+LrTbN7ukoEVrjjbwETAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSB3Vnad1h7G9Ch TpceRCqSbBz7qzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlh3 M3JjNTliU2NaZ3l2c29SR1RKOW5oeXhYSlk3WUJ3VjZRY0tiR05QRFovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZY dzNyYzU5YlNjWmd5dnNvUkdUSjluaHl4WEpZN1lCd1Y2UWNLYkdOUERaLzEvODFE RDU5REE3NzU4N0IxQkQwQTE0RTk3MUU0NDJBOTI2QzFDRkJBQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeacAwQCqMQMMA0EAgACMAcDBQAoBEkYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQTnDANBgkqhkiG9w0BAQsFAAOCAQEAnqYoEu8F Mo3RnFiPNipklmcyskw+Jwft4j4m1OO65+jmKKOPq0BB12zejyP0LlxBKkdEI1pJ IXCjKx26UKSkbozOFfTLfeYa7BQo24jsdGZpScmIAmjOjIwefEe//zE/uY1v9838 lXv51K018l8evNdSIr87NoVocbnPJhPMvvqq0QrlsM6qK73VBo2DHveIw7eot1Rn tLhIJA84lgCPpWM4SThpiR2r+eC9hQHgl6pf4IxIur/N2ptiSXTBOVd2RQnfQzZc OCJlkAaVH/hxR9r8spkIfyjboK6+iDzsZzIuxYT3UL5X2Pm+tex0dpTsagDfzVeT +3aOqLvTNgNFvQ== -----END CERTIFICATE-----Generated at Sun Apr 27 19:12:47 2025 by rpki-client on console.sobornost.net