$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer File: D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer (raw, json) Hash identifier: 1Ld1d6gTeh1s9dqK8+V8cPW5YgXOiKc3vKx8Dl9Cds0= Subject key identifier: D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 132D1400E34CB4291FA3826FEC7F5714E4902997 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft caRepository: rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 18:43:30 +0000 Certificate not after: Thu 05 Mar 2026 18:48:30 +0000 Subordinate resources: AS: 267622 IP: 45.71.168.0/22 IP: 2804:4448::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2d:14:00:e3:4c:b4:29:1f:a3:82:6f:ec:7f:57:14:e4:90:29:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 18:43:30 2025 GMT Not After : Mar 5 18:48:30 2026 GMT Subject: CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:76:93:70:57:b2:ee:a6:79:29:ff:30:f9: 35:73:25:e4:29:0c:60:6f:1e:14:fc:98:ab:3a:80: 9f:6b:04:7b:81:97:0b:0f:c6:05:c3:2f:d7:a7:c9: 6b:d5:ec:bc:5b:30:f4:e5:32:a6:31:99:52:5e:14: 8f:6b:61:bf:a7:b1:c7:b5:50:4c:21:ea:81:38:e9: f8:ad:02:dd:2a:da:c8:d5:58:48:50:30:f7:d5:a4: 92:bf:6c:13:0b:61:65:49:a0:bb:85:3f:6d:8c:11: 32:fd:7a:cc:fd:a0:05:d4:a8:15:a4:6f:68:5f:d0: 84:04:2e:cc:79:b2:86:42:93:dc:7e:9d:c1:b9:d6: 2b:20:88:2b:3a:d0:50:72:3a:d6:9c:ea:1f:da:be: d9:73:de:41:23:5e:4c:fb:fe:f4:d3:23:f7:b7:04: 81:50:5c:44:06:bd:60:ad:2b:00:19:08:11:3b:51: 75:5a:38:27:f4:e6:50:84:7b:59:1a:d4:82:c0:f4: 78:1e:52:9f:02:39:70:a3:3b:cc:92:b3:fa:33:31: 95:21:eb:fb:a9:a3:fd:70:cd:91:b2:fc:44:f1:39: 28:d8:d4:f8:b6:38:54:91:be:bd:84:b7:64:a5:42: 85:cb:62:2b:9c:d9:45:b2:a9:06:1c:7f:81:8d:81: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.71.168.0/22 IPv6: 2804:4448::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267622 Signature Algorithm: sha256WithRSAEncryption 39:8a:c7:e6:24:94:bb:88:25:11:80:77:c8:06:bf:b3:9c:02: ce:0b:b3:9c:65:22:6e:25:69:c3:4e:a9:e1:03:2b:c4:4d:fc: 82:42:9f:7f:30:6a:ab:7e:37:cb:11:a8:dc:08:ef:ed:ad:e6: 8b:03:a1:3e:ea:e9:c3:b8:7d:49:1f:24:ed:f4:63:b3:ac:33: d1:08:e0:a5:57:7f:af:bc:af:e5:e0:86:d5:1b:b2:8f:76:19: f5:8f:89:bc:d8:6c:61:50:96:e1:54:31:a3:2e:46:d5:7c:5e: 0f:a4:2e:df:ee:d2:97:6c:44:d4:09:3f:bd:2f:97:d1:fc:3c: 51:90:74:cc:13:ae:ce:6f:a9:a4:2d:88:75:46:00:25:cd:cf: 97:d2:bc:3b:5f:b8:b6:96:b6:a3:59:af:4b:a6:b7:ad:d9:cd: a0:18:92:fd:33:42:b9:4f:5c:2e:84:02:32:41:eb:64:82:60: a0:7a:57:c0:3d:e2:0b:b1:f4:24:e4:bc:4b:45:0f:70:d6:5d: 23:50:3a:88:70:49:05:5f:0d:5d:47:ad:cf:4c:65:90:33:10: b6:11:be:6b:a7:4c:c1:3d:37:4d:43:b9:79:4e:0f:22:93:9f: e5:aa:c4:14:90:bf:4d:94:2e:33:b4:95:fe:e9:7b:3c:ca:a1: 45:c5:82:7c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEy0UAONMtCkfo4Jv7H9XFOSQKZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYxODQzMzBaFw0yNjAzMDUxODQ4MzBaMDMxMTAvBgNV BAMTKEQwNUVDMjQ1OTNEMjAyNkQyRDVCN0Q3RUY3NkMwRTUyMzMxMjM0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mXaTcFey7qZ5Kf8w+TVzJeQp DGBvHhT8mKs6gJ9rBHuBlwsPxgXDL9enyWvV7LxbMPTlMqYxmVJeFI9rYb+nsce1 UEwh6oE46fitAt0q2sjVWEhQMPfVpJK/bBMLYWVJoLuFP22METL9esz9oAXUqBWk b2hf0IQELsx5soZCk9x+ncG51isgiCs60FByOtac6h/avtlz3kEjXkz7/vTTI/e3 BIFQXEQGvWCtKwAZCBE7UXVaOCf05lCEe1ka1ILA9HgeUp8COXCjO8ySs/ozMZUh 6/upo/1wzZGy/ETxOSjY1Pi2OFSRvr2Et2SlQoXLYiuc2UWyqQYcf4GNgUshAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTQXsJFk9ICbS1b fX73bA5SMxI03zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOW1p UFNZRzRxcXdhRW9UV0J1NmFzcVNMRkFDcTFuVFF3MXJLNEJRemtDR2YvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlt aVBTWUc0cXF3YUVvVFdCdTZhc3FTTEZBQ3ExblRRdzFySzRCUXprQ0dmLzEvRDA1 RUMyNDU5M0QyMDI2RDJENUI3RDdFRjc2QzBFNTIzMzEyMzRERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLUeoMA0EAgACMAcDBQAoBERIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQVZjANBgkqhkiG9w0BAQsFAAOCAQEAOYrH5iSUu4glEYB3 yAa/s5wCzguznGUibiVpw06p4QMrxE38gkKffzBqq343yxGo3Ajv7a3miwOhPurp w7h9SR8k7fRjs6wz0QjgpVd/r7yv5eCG1Ruyj3YZ9Y+JvNhsYVCW4VQxoy5G1Xxe D6Qu3+7Sl2xE1Ak/vS+X0fw8UZB0zBOuzm+ppC2IdUYAJc3Pl9K8O1+4tpa2o1mv S6a3rdnNoBiS/TNCuU9cLoQCMkHrZIJgoHpXwD3iC7H0JOS8S0UPcNZdI1A6iHBJ BV8NXUetz0xlkDMQthG+a6dMwT03TUO5eU4PIpOf5arEFJC/TZQuM7SV/ul7PMqh RcWCfA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:30 2025 by rpki-client on console.sobornost.net