$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer File: EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer (raw, json) Hash identifier: Xo2Oy0m2ZwMO2ICkKWQfbp20idSauSa9ScXN6CZzbH0= Subject key identifier: EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F46CD3CC3C8E7368DFC8116CD4C48C81A923391 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft caRepository: rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 11 Feb 2025 16:56:56 +0000 Certificate not after: Tue 10 Feb 2026 17:01:56 +0000 Subordinate resources: AS: 269377 IP: 45.185.136.0/22 IP: 2804:63b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:46:cd:3c:c3:c8:e7:36:8d:fc:81:16:cd:4c:48:c8:1a:92:33:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 11 16:56:56 2025 GMT Not After : Feb 10 17:01:56 2026 GMT Subject: CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:ae:f3:2b:8c:d6:3b:8c:6b:09:9d:37:27: 05:63:94:4a:a3:5c:e7:c7:c1:d0:48:af:2c:8b:67: be:28:62:f7:7a:e1:cd:f7:75:95:42:6d:f8:53:cc: 05:c4:e5:df:32:0b:0e:0b:03:ac:6b:14:a3:ca:65: 9d:8a:5f:12:d4:56:a5:98:81:d5:db:9a:90:90:5d: db:9b:cd:0b:2d:eb:47:7f:db:19:a4:2e:62:ec:a6: a6:19:94:47:fd:be:0f:62:2b:1c:e7:74:37:a1:ce: 88:5f:89:b1:ee:d6:1b:96:34:63:6f:75:15:47:71: b3:03:1a:e2:58:7a:f1:68:91:31:f6:2f:1b:59:c2: 43:91:be:a9:4e:81:f6:eb:08:a4:13:2a:9b:29:45: 55:d9:d9:09:20:ad:ef:d4:37:a0:05:85:b8:ff:5e: b1:a7:b6:0f:80:9d:f8:60:f0:94:bd:33:75:86:89: 87:b9:30:0b:37:40:1d:e2:7f:d8:3b:ab:de:ed:a6: e2:a7:33:71:4b:29:3b:73:f1:92:3b:2f:9b:c6:6c: 4d:20:18:49:71:0b:04:13:05:34:07:82:e1:12:1f: b3:84:ec:19:95:04:ef:14:f9:fa:cc:d0:e4:0e:30: 46:ca:4b:15:70:26:89:eb:e9:14:ef:78:95:50:40: 34:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.136.0/22 IPv6: 2804:63b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269377 Signature Algorithm: sha256WithRSAEncryption 36:7e:ea:b6:df:eb:98:83:9b:a7:da:08:bf:f7:67:09:e6:2b: f3:97:11:0d:29:3f:a7:ae:9c:28:e6:5f:8f:e2:9e:63:8e:91: 5a:1e:d0:ac:cb:ce:e3:fa:da:2a:d7:9b:c5:2d:04:20:df:2c: 3d:d7:3d:bd:84:71:9c:14:a7:2b:52:f5:bf:64:36:de:72:0e: 7a:e1:9e:71:80:6d:a2:65:43:e5:d4:3d:00:cb:92:48:67:b7: d8:65:6f:74:34:d9:40:60:ec:61:11:9f:a0:ed:be:21:a8:11: f1:2b:22:cc:c2:f3:2f:06:86:54:f7:28:89:43:54:03:7e:fe: 2f:3c:ba:1d:1a:96:12:80:fd:5a:fe:65:92:48:3d:43:48:fe: d4:ab:ea:cf:41:0c:4e:87:19:86:d6:f7:c9:a0:9a:14:1f:63: 96:73:d1:99:15:28:d9:3a:ae:25:46:3f:6e:5c:e7:72:f0:5c: 69:8f:03:03:5d:d3:3b:10:58:dc:19:5d:0c:bd:83:d3:86:53: 70:11:20:66:97:32:9f:e4:50:e2:c7:84:20:ab:38:15:14:76: 1a:77:ae:d1:a5:61:da:b2:09:89:87:99:0b:56:db:3a:94:a2: 2f:88:48:db:ae:51:98:03:b1:d9:9d:6c:8e:49:6a:b0:a7:c6: 09:61:6b:10 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUX0bNPMPI5zaN/IEWzUxIyBqSM5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMTExNjU2NTZaFw0yNjAyMTAxNzAxNTZaMDMxMTAvBgNV BAMTKEVGRDlENTM1RTE3OTFBN0QwQzc2MzhGNkQ1QzdCQzY2MDAzNTMxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSq7zK4zWO4xrCZ03JwVjlEqj XOfHwdBIryyLZ74oYvd64c33dZVCbfhTzAXE5d8yCw4LA6xrFKPKZZ2KXxLUVqWY gdXbmpCQXdubzQst60d/2xmkLmLspqYZlEf9vg9iKxzndDehzohfibHu1huWNGNv dRVHcbMDGuJYevFokTH2LxtZwkORvqlOgfbrCKQTKpspRVXZ2Qkgre/UN6AFhbj/ XrGntg+Anfhg8JS9M3WGiYe5MAs3QB3if9g7q97tpuKnM3FLKTtz8ZI7L5vGbE0g GElxCwQTBTQHguESH7OE7BmVBO8U+frM0OQOMEbKSxVwJonr6RTveJVQQDTPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTv2dU14XkafQx2 OPbVx7xmADUx9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFpK dDFCYUVrUUh0TEVNY3FhVW9BclpEVGt5bVMyYjhGWjRoSGJZUmhSTEcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ra SnQxQmFFa1FIdExFTWNxYVVvQXJaRFRreW1TMmI4Rlo0aEhiWVJoUkxHLzAvRUZE OUQ1MzVFMTc5MUE3RDBDNzYzOEY2RDVDN0JDNjYwMDM1MzFGNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLbmIMA0EAgACMAcDBQAoBGOwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQcQTANBgkqhkiG9w0BAQsFAAOCAQEANn7qtt/rmIObp9oI v/dnCeYr85cRDSk/p66cKOZfj+KeY46RWh7QrMvO4/raKtebxS0EIN8sPdc9vYRx nBSnK1L1v2Q23nIOeuGecYBtomVD5dQ9AMuSSGe32GVvdDTZQGDsYRGfoO2+IagR 8SsizMLzLwaGVPcoiUNUA37+Lzy6HRqWEoD9Wv5lkkg9Q0j+1Kvqz0EMTocZhtb3 yaCaFB9jlnPRmRUo2TquJUY/blzncvBcaY8DA13TOxBY3BldDL2D04ZTcBEgZpcy n+RQ4seEIKs4FRR2Gneu0aVh2rIJiYeZC1bbOpSiL4hI265RmAOx2Z1sjklqsKfG CWFrEA== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:53 2025 by rpki-client on console.sobornost.net