$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer File: D1D8C77A34CB2B0044058D74160F7A20912778C1.cer (raw, json) Hash identifier: svVwxWfWN0U3ZJAsKiqqU7SRzJIQCD+0xFz3Yf2qdtM= Subject key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 49438BD49FD81A1C9524C2F7265796F62EEC7422 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft caRepository: rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:41 +0000 Certificate not after: Wed 04 Mar 2026 18:40:41 +0000 Subordinate resources: AS: 52863 IP: 143.255.200.0/22 IP: 177.124.128.0/22 IP: 2804:2870::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:43:8b:d4:9f:d8:1a:1c:95:24:c2:f7:26:57:96:f6:2e:ec:74:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:41 2025 GMT Not After : Mar 4 18:40:41 2026 GMT Subject: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:0d:01:d5:2c:5b:d0:f9:3c:6b:d6:ab:29: 01:dd:cd:c8:6c:90:3a:55:1d:4f:98:ab:9a:8f:e2: ed:b0:3a:39:9f:48:3e:d8:7c:1d:c3:76:9d:66:48: a1:f0:2d:d0:35:76:75:98:8e:3a:60:02:57:ff:89: 70:af:d9:85:35:df:ad:43:54:08:aa:3c:6e:70:a7: 65:5b:d6:03:87:01:bc:0f:ad:c1:79:a2:bb:d5:13: 86:fa:68:2b:9e:73:0c:8e:2a:44:8e:c4:68:12:1c: 5f:ad:54:35:60:3d:d1:07:29:31:61:d5:35:b8:cb: c0:6e:fb:f5:95:e4:60:6b:dd:39:f1:ce:7a:32:dd: ec:da:92:69:89:d2:3b:f7:21:04:74:c7:bd:cf:9e: 9f:1b:06:c7:6a:4a:66:0b:79:2a:be:69:19:29:27: be:e7:75:58:ad:aa:a9:ce:41:fa:fe:27:81:f2:81: 70:0f:30:4b:04:09:be:b8:41:6f:a8:37:c9:21:af: d8:d5:b1:53:1e:21:98:83:62:a1:fa:11:6c:05:ac: 8c:95:60:8c:4c:83:92:22:c9:c2:65:46:df:3b:0c: d8:4f:76:96:3d:15:7a:e9:46:fe:91:ea:c4:10:26: a3:dc:32:0f:83:33:e6:0a:c9:60:29:82:7b:8f:29: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.200.0/22 177.124.128.0/22 IPv6: 2804:2870::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52863 Signature Algorithm: sha256WithRSAEncryption 17:f9:ea:1b:be:43:21:40:49:d7:f2:39:f1:c3:d6:52:99:88: c9:dd:18:2a:e2:43:0c:6f:4f:0d:e8:89:8d:e4:b0:14:8d:35: ce:07:c7:7e:65:5c:cc:b1:1b:89:9f:5b:f0:2b:44:88:d1:f1: e3:bf:08:7c:19:9c:40:c7:35:ee:30:a4:e0:da:d5:1a:7b:d3: e1:4b:49:59:20:bd:b0:d6:a7:11:ee:7c:16:79:f2:12:d9:27: fb:b0:23:41:a9:82:a6:e1:19:52:38:b5:a3:2c:61:61:44:f5: 5b:66:b7:ed:34:6a:f0:60:e5:79:ad:7c:22:0b:f3:83:89:4f: 35:50:01:c7:dc:10:e8:0a:53:6c:d2:0e:db:b7:6e:45:59:33: 28:8c:2e:c8:68:67:26:98:1d:d2:67:e6:2b:75:a6:db:fd:9c: 42:29:77:e3:15:1a:a9:66:a1:da:be:bf:94:20:c9:32:1c:d0: 72:a2:fd:b1:e6:be:50:f9:fc:ae:89:00:04:c2:fa:80:5c:2b: c0:a6:27:11:56:da:7c:ca:fa:4e:44:82:19:4e:a5:40:d2:d3: bf:04:98:64:44:29:6d:8e:ea:ed:f9:09:0a:c8:cf:dc:f2:2b: d5:f1:19:53:2b:1b:a5:56:e6:3f:e4:9a:bd:42:db:dd:85:b4: 6d:89:77:35 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSUOL1J/YGhyVJML3JleW9i7sdCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1NDFaFw0yNjAzMDQxODQwNDFaMDMxMTAvBgNV BAMTKEQxRDhDNzdBMzRDQjJCMDA0NDA1OEQ3NDE2MEY3QTIwOTEyNzc4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Dw0B1Sxb0Pk8a9arKQHdzchs kDpVHU+Yq5qP4u2wOjmfSD7YfB3Ddp1mSKHwLdA1dnWYjjpgAlf/iXCv2YU1361D VAiqPG5wp2Vb1gOHAbwPrcF5orvVE4b6aCuecwyOKkSOxGgSHF+tVDVgPdEHKTFh 1TW4y8Bu+/WV5GBr3Tnxznoy3ezakmmJ0jv3IQR0x73Pnp8bBsdqSmYLeSq+aRkp J77ndVitqqnOQfr+J4HygXAPMEsECb64QW+oN8khr9jVsVMeIZiDYqH6EWwFrIyV YIxMg5IiycJlRt87DNhPdpY9FXrpRv6R6sQQJqPcMg+DM+YKyWApgnuPKcXzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR2Md6NMsrAEQF jXQWD3ogkSd4wTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlZ3 aGhrQzlxcjlibkE2a2Fia01kWkhGUG9TTWtEbXZKUlYyZTFEa0NpTDMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZW d2hoa0M5cXI5Ym5BNmthYmtNZFpIRlBvU01rRG12SlJWMmUxRGtDaUwzLzEvRDFE OEM3N0EzNENCMkIwMDQ0MDU4RDc0MTYwRjdBMjA5MTI3NzhDMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj//IAwQCsXyAMA0EAgACMAcDBQAoBChwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOfzANBgkqhkiG9w0BAQsFAAOCAQEAF/nqG75D IUBJ1/I58cPWUpmIyd0YKuJDDG9PDeiJjeSwFI01zgfHfmVczLEbiZ9b8CtEiNHx 478IfBmcQMc17jCk4NrVGnvT4UtJWSC9sNanEe58FnnyEtkn+7AjQamCpuEZUji1 oyxhYUT1W2a37TRq8GDlea18Igvzg4lPNVABx9wQ6ApTbNIO27duRVkzKIwuyGhn Jpgd0mfmK3Wm2/2cQil34xUaqWah2r6/lCDJMhzQcqL9sea+UPn8rokABML6gFwr wKYnEVbafMr6TkSCGU6lQNLTvwSYZEQpbY7q7fkJCsjP3PIr1fEZUysbpVbmP+Sa vULb3YW0bYl3NQ== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:23 2025 by rpki-client on console.sobornost.net