$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer File: 9954871A58BD1D563C66245B157E43881A74A8D7.cer (raw, json) Hash identifier: LACgrt4DHOSLNtq6udFerKEoFySDJ+fBI7hfrcQp7Gc= Subject key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 57388948EB3E619910A5687796C414A141324832 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft caRepository: rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 22:20:34 +0000 Certificate not after: Thu 05 Mar 2026 22:25:34 +0000 Subordinate resources: AS: 61856 IP: 131.0.40.0/22 IP: 138.117.208.0/22 IP: 143.208.120.0/22 IP: 170.245.252.0/22 IP: 2804:1a5c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:38:89:48:eb:3e:61:99:10:a5:68:77:96:c4:14:a1:41:32:48:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 22:20:34 2025 GMT Not After : Mar 5 22:25:34 2026 GMT Subject: CN=9954871A58BD1D563C66245B157E43881A74A8D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:d5:ae:ba:79:40:87:d6:9f:0d:59:c3:b8: 0c:d5:f5:bc:7d:2c:c5:47:a6:58:a1:ec:49:10:df: 38:6d:0b:cb:94:f6:47:64:c1:58:e3:91:76:98:a5: 92:6f:06:7c:b5:fc:c1:49:b1:b3:44:57:66:ee:71: 5a:b6:89:09:04:a0:12:11:28:9a:ec:ce:94:21:31: f8:9a:50:e7:3f:d7:96:14:87:50:31:13:bc:ca:7d: 9a:0d:10:32:8c:5c:1c:d2:16:70:57:a4:86:74:7f: 3c:a3:42:90:d2:49:c4:e9:8d:8d:7b:40:8d:71:8b: f0:6e:16:a2:9f:67:cd:3c:9e:e6:17:0d:fd:37:b3: a4:e4:c3:2c:4f:87:a8:b9:98:6c:a3:63:88:5c:d5: f0:45:13:f0:af:56:d5:73:cb:92:73:c4:ca:cd:44: e5:04:63:b3:f0:cd:03:ac:b0:3c:33:e1:b3:8f:25: 3e:13:36:1d:9b:04:ee:16:0a:c4:b1:82:8b:65:6d: 19:fb:dc:4b:9f:02:8f:53:51:d3:1b:56:07:18:7b: c8:2a:e1:7e:07:a8:df:e8:20:09:2f:ad:b0:e8:f9: 26:cc:27:ca:82:f8:92:36:11:f7:db:e8:9f:ed:41: 6f:b2:e1:4a:87:5f:18:bb:7b:12:a3:7f:13:29:f8: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.40.0/22 138.117.208.0/22 143.208.120.0/22 170.245.252.0/22 IPv6: 2804:1a5c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61856 Signature Algorithm: sha256WithRSAEncryption 89:4f:c9:15:b2:85:74:5e:71:99:9e:5e:c9:07:f4:9a:1b:9b: da:e7:f5:ab:21:ca:c7:6e:64:22:4d:27:15:e8:08:ea:48:8e: c8:ee:2f:4c:fd:6c:69:aa:72:b4:03:65:5f:1d:cc:a8:a7:ca: 8f:5e:16:40:14:ea:7f:29:14:bd:ad:9a:33:1a:38:68:bb:5a: 9e:f3:f3:93:b7:1b:e4:2b:3d:7a:7d:d2:f0:08:7a:18:e3:df: fb:a2:2f:90:5c:b2:2f:ff:3f:96:1b:bf:39:35:1f:24:76:e1: 66:58:b2:03:38:d1:9d:43:61:6c:c1:1d:5b:87:7d:c5:09:07: aa:41:4e:f9:ec:ba:7f:5b:92:a6:be:81:05:96:02:fa:db:fb: 08:97:75:49:7f:89:36:44:ee:8d:8c:82:a1:7e:f8:df:c5:3a: bb:70:f5:0b:aa:15:f7:c1:be:5f:4a:11:1b:fe:fe:88:f2:fd: 42:18:3b:63:02:8d:9e:de:aa:e7:d6:6d:1e:5f:fe:35:42:df: 93:b4:f6:47:63:eb:1a:d3:85:4a:1d:3e:84:5d:3d:63:11:a8: 86:75:78:c8:fa:3d:30:5c:6a:64:a7:aa:37:da:da:42:9f:b4: 39:b7:ca:54:a9:c2:33:4e:e1:7d:3b:de:24:82:28:38:4e:63: b7:7a:4d:1a -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUVziJSOs+YZkQpWh3lsQUoUEySDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYyMjIwMzRaFw0yNjAzMDUyMjI1MzRaMDMxMTAvBgNV BAMTKDk5NTQ4NzFBNThCRDFENTYzQzY2MjQ1QjE1N0U0Mzg4MUE3NEE4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11tWuunlAh9afDVnDuAzV9bx9 LMVHplih7EkQ3zhtC8uU9kdkwVjjkXaYpZJvBny1/MFJsbNEV2bucVq2iQkEoBIR KJrszpQhMfiaUOc/15YUh1AxE7zKfZoNEDKMXBzSFnBXpIZ0fzyjQpDSScTpjY17 QI1xi/BuFqKfZ808nuYXDf03s6TkwyxPh6i5mGyjY4hc1fBFE/CvVtVzy5JzxMrN ROUEY7PwzQOssDwz4bOPJT4TNh2bBO4WCsSxgotlbRn73EufAo9TUdMbVgcYe8gq 4X4HqN/oIAkvrbDo+SbMJ8qC+JI2Effb6J/tQW+y4UqHXxi7exKjfxMp+B3TAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZVIcaWL0dVjxm JFsVfkOIGnSo1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNq N2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1a3EvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXNq N2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1a3EvMS85OTU0 ODcxQTU4QkQxRDU2M0M2NjI0NUIxNTdFNDM4ODFBNzRBOEQ3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB Af8EMTAvMB4EAgABMBgDBAKDACgDBAKKddADBAKP0HgDBAKq9fwwDQQCAAIwBwMF ACgEGlwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPGgMA0GCSqGSIb3DQEBCwUA A4IBAQCJT8kVsoV0XnGZnl7JB/SaG5va5/WrIcrHbmQiTScV6AjqSI7I7i9M/Wxp qnK0A2VfHcyop8qPXhZAFOp/KRS9rZozGjhou1qe8/OTtxvkKz16fdLwCHoY49/7 oi+QXLIv/z+WG785NR8kduFmWLIDONGdQ2FswR1bh33FCQeqQU757Lp/W5KmvoEF lgL62/sIl3VJf4k2RO6NjIKhfvjfxTq7cPULqhX3wb5fShEb/v6I8v1CGDtjAo2e 3qrn1m0eX/41Qt+TtPZHY+sa04VKHT6EXT1jEaiGdXjI+j0wXGpkp6o32tpCn7Q5 t8pUqcIzTuF9O94kgig4TmO3ek0a -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:34 2025 by rpki-client on console.sobornost.net