$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer File: F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer (raw, json) Hash identifier: Dx7Jpt4vuO0+4hmLvS7Lh6EpzmnqO0XVnSM/aQOMjnM= Subject key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0C37C57C86E75891B9DE060E3C3636EA5C4D4451 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft caRepository: rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:23 +0000 Certificate not after: Wed 04 Mar 2026 18:41:23 +0000 Subordinate resources: AS: 266211 IP: 45.229.164.0/22 IP: 192.144.100.0/22 IP: 2804:3c70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:37:c5:7c:86:e7:58:91:b9:de:06:0e:3c:36:36:ea:5c:4d:44:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:23 2025 GMT Not After : Mar 4 18:41:23 2026 GMT Subject: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:4b:71:47:2e:42:36:5e:37:2f:58:1b:72: 6c:9f:11:f2:e1:18:31:26:34:08:c4:14:54:b6:d1: 25:01:eb:44:62:f2:b1:e6:e2:ae:2c:8d:aa:10:0a: aa:40:06:87:55:cc:3e:3f:fa:48:da:7c:f2:a4:45: f9:c7:77:2d:13:18:ad:8c:6f:69:a2:78:48:87:d0: 2a:6f:46:1c:ce:63:b1:76:02:3d:cb:cf:50:d8:88: 34:2e:08:45:5c:1d:90:03:d9:c2:60:38:be:f0:64: c0:31:f7:8e:39:d4:5c:d6:29:6d:f4:60:3a:2e:95: 5a:a5:5f:98:d8:8d:2e:41:c0:c6:8f:14:0c:8c:fb: 50:4f:6e:c4:51:da:1a:f3:64:a7:58:59:6d:db:32: d9:32:03:85:44:f5:b1:54:9b:7c:d6:96:19:9d:56: 63:76:84:6a:fd:d5:6b:44:3e:5d:a3:e9:ea:7b:04: d2:bc:ec:35:3f:e9:8f:0e:4d:23:29:42:d9:6f:f0: de:cf:ed:cf:a4:fa:e4:15:92:3e:c5:f1:c2:57:1b: 10:8d:e4:d0:40:c0:93:d4:17:ab:63:de:ab:6f:77: b2:01:42:8e:a0:21:b1:04:7e:22:cd:a7:ff:6d:c8: 74:ee:eb:76:b8:06:cf:5a:86:8d:39:f0:d7:8d:e3: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.164.0/22 192.144.100.0/22 IPv6: 2804:3c70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266211 Signature Algorithm: sha256WithRSAEncryption 63:1e:3d:dd:88:52:d3:3e:4e:fa:85:1e:27:c6:d4:9c:71:97: 6d:96:a0:a8:3c:c6:b7:f0:1b:1f:cd:72:c0:75:88:67:36:9f: ce:6d:17:d7:7c:9e:12:e4:18:32:dd:06:07:bc:e9:c8:ac:e6: 83:bb:e5:11:1f:ad:b3:10:43:52:41:e9:5c:3b:60:a1:f3:38: 32:a7:24:75:26:e0:86:4e:a0:79:55:c8:f0:01:0e:2f:bf:6d: e5:c5:f9:7c:b9:6d:2c:96:32:89:91:50:1a:06:ad:bc:cf:8b: 0b:fe:a1:da:e2:1d:f5:fe:30:d6:33:d3:dd:1d:5a:e7:42:cb: 84:6d:37:41:d5:21:79:86:be:06:5f:6b:f6:74:31:ed:87:eb: b0:38:f6:34:31:75:a5:ea:b3:17:0c:87:b4:0d:08:ca:7f:48: fa:33:3a:0f:9a:14:17:48:6b:e3:ed:15:19:7f:14:21:b8:79: dc:12:cd:49:bb:c6:9f:85:10:28:04:35:19:be:56:4b:a9:c0: a1:f7:8f:df:c0:c5:37:e0:55:69:72:28:cd:42:e3:68:fb:22: db:7a:88:91:65:ea:5a:3e:ec:d6:ce:dc:43:13:8b:6e:c3:bb: 12:f0:e8:d3:be:99:20:8e:ff:64:17:c2:80:4f:a9:f0:dd:a1: b9:10:a2:9f -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUDDfFfIbnWJG53gYOPDY26lxNRFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2MjNaFw0yNjAzMDQxODQxMjNaMDMxMTAvBgNV BAMTKEY1QjNDQzY5NjNGMjkxRDExRjAxOTNCRDI3RkM0RTgzRDE0NTkyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYktxRy5CNl43L1gbcmyfEfLh GDEmNAjEFFS20SUB60Ri8rHm4q4sjaoQCqpABodVzD4/+kjafPKkRfnHdy0TGK2M b2mieEiH0CpvRhzOY7F2Aj3Lz1DYiDQuCEVcHZAD2cJgOL7wZMAx94451FzWKW30 YDoulVqlX5jYjS5BwMaPFAyM+1BPbsRR2hrzZKdYWW3bMtkyA4VE9bFUm3zWlhmd VmN2hGr91WtEPl2j6ep7BNK87DU/6Y8OTSMpQtlv8N7P7c+k+uQVkj7F8cJXGxCN 5NBAwJPUF6tj3qtvd7IBQo6gIbEEfiLNp/9tyHTu63a4Bs9aho058NeN48vrAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1s8xpY/KR0R8B k70n/E6D0UWSuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVZH SHYzZ2ZSeUJycnFzRllIWldrZW5IajZZcG13VzJaY1VZU1NkY1U5eHcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVZH SHYzZ2ZSeUJycnFzRllIWldrZW5IajZZcG13VzJaY1VZU1NkY1U5eHcvMS9GNUIz Q0M2OTYzRjI5MUQxMUYwMTkzQkQyN0ZDNEU4M0QxNDU5MkI5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIt5aQDBALAkGQwDQQCAAIwBwMFACgEPHAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBA/jMA0GCSqGSIb3DQEBCwUAA4IBAQBjHj3diFLT Pk76hR4nxtSccZdtlqCoPMa38BsfzXLAdYhnNp/ObRfXfJ4S5Bgy3QYHvOnIrOaD u+URH62zEENSQelcO2Ch8zgypyR1JuCGTqB5VcjwAQ4vv23lxfl8uW0sljKJkVAa Bq28z4sL/qHa4h31/jDWM9PdHVrnQsuEbTdB1SF5hr4GX2v2dDHth+uwOPY0MXWl 6rMXDIe0DQjKf0j6MzoPmhQXSGvj7RUZfxQhuHncEs1Ju8afhRAoBDUZvlZLqcCh 94/fwMU34FVpcijNQuNo+yLbeoiRZepaPuzWztxDE4tuw7sS8OjTvpkgjv9kF8KA T6nw3aG5EKKf -----END CERTIFICATE-----Generated at Fri Apr 25 10:38:03 2025 by rpki-client on console.sobornost.net