$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F82D6F3392B95584EECA832E87C32189709E8DF5.cer File: F82D6F3392B95584EECA832E87C32189709E8DF5.cer (raw, json) Hash identifier: K6WNaWWnSAv2lcn86ph8YnVPDCw6iOFiuBBSlWW/m4I= Subject key identifier: F8:2D:6F:33:92:B9:55:84:EE:CA:83:2E:87:C3:21:89:70:9E:8D:F5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4AFCC6D226AAE61A1E19E4263C1FBFFCC4BF6B6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/F82D6F3392B95584EECA832E87C32189709E8DF5.mft caRepository: rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 29 Nov 2024 10:44:45 +0000 Certificate not after: Fri 28 Nov 2025 10:49:45 +0000 Subordinate resources: AS: 268085 IP: 45.7.92.0/22 IP: 45.168.248.0/22 IP: 2804:57c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fc:c6:d2:26:aa:e6:1a:1e:19:e4:26:3c:1f:bf:fc:c4:bf:6b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 29 10:44:45 2024 GMT Not After : Nov 28 10:49:45 2025 GMT Subject: CN=F82D6F3392B95584EECA832E87C32189709E8DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:ac:c4:27:27:72:f9:f7:2c:87:8f:23:82: 3f:dc:0f:d3:d5:10:65:84:25:f0:e6:a2:69:80:a8: 64:11:b7:34:e0:29:5e:2c:27:16:a8:37:de:e8:1a: 52:9e:ac:f4:6b:e1:00:24:44:8a:ed:87:72:e2:9f: 2f:9c:06:53:c1:9b:d4:61:18:7a:84:f2:7a:cf:a4: a4:de:31:f4:65:37:e5:0c:cb:93:61:fd:5a:d2:8c: 54:97:13:be:d2:b1:ac:f9:f9:83:7c:b2:c2:15:7b: a5:33:ce:9f:86:23:00:32:dd:5b:36:b9:4b:5a:9f: ce:76:b3:16:7a:30:24:b5:72:6a:41:1a:3d:42:7b: f7:25:87:45:38:ef:83:08:ea:14:28:0f:74:48:c2: ec:c7:f7:36:f7:c0:71:a9:99:7f:2b:4e:f8:e2:7a: 72:6d:5c:13:d7:9a:de:d3:8d:3a:58:69:ac:12:40: c5:2c:aa:b1:ed:d0:bd:10:78:71:a4:38:2c:05:bd: 6e:45:13:1c:ff:49:c9:b8:76:c5:c3:a6:7d:30:cb: 03:a5:54:93:c7:92:e1:49:74:91:79:f6:ad:30:5f: 35:26:6e:a2:41:a1:6b:9c:41:45:ca:3a:2c:0b:14: f8:12:05:ae:b4:72:cd:f3:2e:2f:50:6d:f9:71:d6: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:2D:6F:33:92:B9:55:84:EE:CA:83:2E:87:C3:21:89:70:9E:8D:F5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/F82D6F3392B95584EECA832E87C32189709E8DF5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.92.0/22 45.168.248.0/22 IPv6: 2804:57c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268085 Signature Algorithm: sha256WithRSAEncryption 15:70:f7:62:f0:fb:ca:1d:db:0e:6c:cb:f2:9f:4f:cc:fc:df: 9f:0e:a9:89:09:53:ea:75:02:fa:a0:62:93:81:22:72:d0:cf: 22:cf:f3:68:2a:0b:0f:1d:d1:10:c3:ce:2b:01:09:13:d0:89: 37:75:e8:92:93:79:0c:4e:7c:b1:12:b0:42:e8:67:9f:04:88: a8:a6:5c:af:f9:31:03:a9:7b:9a:f5:33:30:1a:97:56:dc:b3: 77:e6:39:7a:14:7b:d7:4d:b6:24:5d:41:ba:32:02:b6:b8:9c: c9:14:fd:e7:e8:b7:68:70:c1:90:13:fe:76:79:16:6f:63:fc: d9:7f:6e:01:45:5c:34:be:fa:bb:eb:01:be:6b:4c:cc:1c:ac: 5c:01:58:24:c7:41:52:c0:19:60:ac:f8:42:e4:f0:3b:f8:86: c7:e4:27:c8:59:5a:19:75:42:0d:75:4a:b4:a4:e3:98:18:43: f9:87:25:e6:3a:e5:b2:ee:bf:4a:5b:24:e4:30:c8:dd:bb:b8: 08:e0:8e:48:30:8a:1c:ba:2d:cd:8f:68:ce:21:64:ad:5b:9a: ed:6c:56:b5:cb:f3:22:b8:b5:4c:52:b1:f3:db:55:2b:91:34: 2b:8b:26:38:97:59:61:0f:a5:c1:b5:4a:13:ea:da:3f:6f:73: 80:63:b6:23 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSvzG0iaq5hoeGeQmPB+//MS/a24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjkxMDQ0NDVaFw0yNTExMjgxMDQ5NDVaMDMxMTAvBgNV BAMTKEY4MkQ2RjMzOTJCOTU1ODRFRUNBODMyRTg3QzMyMTg5NzA5RThERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr5azEJydy+fcsh48jgj/cD9PV EGWEJfDmommAqGQRtzTgKV4sJxaoN97oGlKerPRr4QAkRIrth3Liny+cBlPBm9Rh GHqE8nrPpKTeMfRlN+UMy5Nh/VrSjFSXE77Ssaz5+YN8ssIVe6Uzzp+GIwAy3Vs2 uUtan852sxZ6MCS1cmpBGj1Ce/clh0U474MI6hQoD3RIwuzH9zb3wHGpmX8rTvji enJtXBPXmt7TjTpYaawSQMUsqrHt0L0QeHGkOCwFvW5FExz/Scm4dsXDpn0wywOl VJPHkuFJdJF59q0wXzUmbqJBoWucQUXKOiwLFPgSBa60cs3zLi9Qbflx1munAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT4LW8zkrlVhO7K gy6HwyGJcJ6N9TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjVt anNjOXB2ZG1tTldOVE5HQXllVzVHdG5ZWmZMeXI3THpUb2VwMm9LalEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y1 bWpzYzlwdmRtbU5XTlROR0F5ZVc1R3RuWVpmTHlyN0x6VG9lcDJvS2pRLzAvRjgy RDZGMzM5MkI5NTU4NEVFQ0E4MzJFODdDMzIxODk3MDlFOERGNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQdcAwQCLaj4MA0EAgACMAcDBQAoBFfEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQXNTANBgkqhkiG9w0BAQsFAAOCAQEAFXD3YvD7 yh3bDmzL8p9PzPzfnw6piQlT6nUC+qBik4EictDPIs/zaCoLDx3REMPOKwEJE9CJ N3XokpN5DE58sRKwQuhnnwSIqKZcr/kxA6l7mvUzMBqXVtyzd+Y5ehR71022JF1B ujICtricyRT95+i3aHDBkBP+dnkWb2P82X9uAUVcNL76u+sBvmtMzBysXAFYJMdB UsAZYKz4QuTwO/iGx+QnyFlaGXVCDXVKtKTjmBhD+Ycl5jrlsu6/Slsk5DDI3bu4 COCOSDCKHLotzY9oziFkrVua7WxWtcvzIri1TFKx89tVK5E0K4smOJdZYQ+lwbVK E+raP29zgGO2Iw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:39 2025 by rpki-client on console.sobornost.net