$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer File: FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer (raw, json) Hash identifier: YTGKPm/FCDc8ieQJ8FBnaV8V7r62eYhTJTtYiAlm8SI= Subject key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6AE53178E3A19ADE8CAD4831AA90B9EBB29B7C72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft caRepository: rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:15 +0000 Certificate not after: Wed 04 Mar 2026 18:41:15 +0000 Subordinate resources: AS: 263145 IP: 168.205.136.0/22 IP: 170.245.224.0/22 IP: 177.154.28.0/22 IP: 2804:1774::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e5:31:78:e3:a1:9a:de:8c:ad:48:31:aa:90:b9:eb:b2:9b:7c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:15 2025 GMT Not After : Mar 4 18:41:15 2026 GMT Subject: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:49:a8:da:97:1b:ea:4f:bd:f8:60:14:bb: 1a:1b:7a:08:f6:97:52:cb:6e:0a:9e:3c:d2:1e:64: 05:87:db:e8:a6:8b:42:52:2f:58:dc:95:f9:9f:ad: 78:d8:1c:de:a6:d7:bb:87:c2:d2:e9:99:00:0f:5f: 6f:94:4b:86:d2:2c:ab:bb:9e:bd:48:89:72:5c:8d: eb:5e:50:f0:2d:66:34:de:43:2b:91:05:31:28:74: d4:f5:96:fc:28:ad:56:a4:ea:05:84:20:31:7a:e2: 6d:05:6b:59:6a:6b:9c:89:bb:c2:36:a5:ea:41:21: 10:b6:b4:f8:3f:eb:7b:5e:d9:88:f4:0a:bf:0a:58: 16:40:e4:7f:73:88:ea:4c:b9:bd:13:0e:b8:d4:9e: 1f:95:ff:65:bd:2b:25:d0:63:7c:bb:44:e5:53:bd: 78:91:b8:bb:9f:10:45:6c:07:29:67:e1:7f:85:0d: 14:b8:ed:5e:2d:61:08:3c:62:2d:36:1e:96:9f:0f: 04:3b:57:c2:c1:41:ce:00:32:48:ac:8d:f5:29:37: 02:32:04:e8:51:15:0f:5f:6d:d2:5e:2c:0c:a2:b4: 06:b1:cb:5f:80:77:c2:74:69:6e:6f:cb:a5:f2:bf: e2:e4:43:e9:0d:d3:89:4e:10:cb:ea:bd:a4:38:0e: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.136.0/22 170.245.224.0/22 177.154.28.0/22 IPv6: 2804:1774::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263145 Signature Algorithm: sha256WithRSAEncryption 05:50:80:f7:73:c6:46:d6:84:fc:29:44:ed:e4:23:9a:07:d4: 68:2d:9f:b0:eb:79:9c:9d:5f:b1:89:e8:a3:7b:2e:51:e0:ce: e3:32:61:b1:d2:d5:4b:df:c6:a2:04:d9:ee:c8:b7:31:69:49: 44:a7:80:a2:9a:d6:1a:e9:c0:04:c5:27:80:8c:02:48:4e:65: a8:28:27:58:9a:37:d1:29:48:cb:68:5f:65:a7:3c:48:eb:93: 5d:29:bf:13:c5:e2:89:37:09:66:fd:b4:01:21:07:12:63:71: 6e:16:ff:05:e1:04:91:86:9f:80:4f:ec:6f:43:bb:03:b0:04: 25:6a:71:18:ab:d7:31:d3:fa:97:b0:62:23:78:4f:e2:0a:1d: ab:f0:ae:af:6a:69:9d:d2:b9:59:eb:11:79:73:d9:16:0e:81: e2:d2:3b:2b:ff:91:7b:02:8e:fd:36:cc:6b:93:9c:de:be:59: 43:9d:69:d0:8e:1b:a6:c3:d0:51:6a:04:e1:95:03:38:e1:b1: bc:79:8a:25:05:dc:0c:9d:67:49:74:f7:f2:d4:f7:35:be:81: 4c:71:b1:72:c7:82:49:bd:2e:62:0d:a1:20:92:6e:1c:3e:8e: 49:bd:95:79:71:c6:df:a3:43:73:86:cc:af:3e:8e:d6:16:9d: ed:b5:a0:76 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUauUxeOOhmt6MrUgxqpC567KbfHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2MTVaFw0yNjAzMDQxODQxMTVaMDMxMTAvBgNV BAMTKEZBMTQ0MjExRjU4OEQ5NjAzOUM4RDRENEE2RjM5QUFCMEI3QjM0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYS0mo2pcb6k+9+GAUuxobegj2 l1LLbgqePNIeZAWH2+imi0JSL1jclfmfrXjYHN6m17uHwtLpmQAPX2+US4bSLKu7 nr1IiXJcjeteUPAtZjTeQyuRBTEodNT1lvworVak6gWEIDF64m0Fa1lqa5yJu8I2 pepBIRC2tPg/63te2Yj0Cr8KWBZA5H9ziOpMub0TDrjUnh+V/2W9KyXQY3y7ROVT vXiRuLufEEVsByln4X+FDRS47V4tYQg8Yi02HpafDwQ7V8LBQc4AMkisjfUpNwIy BOhRFQ9fbdJeLAyitAaxy1+Ad8J0aW5vy6Xyv+LkQ+kN04lOEMvqvaQ4DsuDAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6FEIR9YjZYDnI 1NSm85qrC3s0YTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDUx MXNIVzFBcHdLUllFQWZIZ0VNYTFDenNndzg3MUhwNFNNcFgzcEtzUkwvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDUx MXNIVzFBcHdLUllFQWZIZ0VNYTFDenNndzg3MUhwNFNNcFgzcEtzUkwvMi9GQTE0 NDIxMUY1ODhEOTYwMzlDOEQ0RDRBNkYzOUFBQjBCN0IzNDYxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAKozYgDBAKq9eADBAKxmhwwDQQCAAIwBwMFACgEF3Qw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAPpMA0GCSqGSIb3DQEBCwUAA4IBAQAF UID3c8ZG1oT8KUTt5COaB9RoLZ+w63mcnV+xieijey5R4M7jMmGx0tVL38aiBNnu yLcxaUlEp4CimtYa6cAExSeAjAJITmWoKCdYmjfRKUjLaF9lpzxI65NdKb8TxeKJ Nwlm/bQBIQcSY3FuFv8F4QSRhp+AT+xvQ7sDsAQlanEYq9cx0/qXsGIjeE/iCh2r 8K6vammd0rlZ6xF5c9kWDoHi0jsr/5F7Ao79Nsxrk5zevllDnWnQjhumw9BRagTh lQM44bG8eYolBdwMnWdJdPfy1Pc1voFMcbFyx4JJvS5iDaEgkm4cPo5JvZV5ccbf o0NzhsyvPo7WFp3ttaB2 -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:39 2025 by rpki-client on console.sobornost.net