$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer File: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer (raw, json) Hash identifier: s8c0CCkDdJlGQVyP+mfJYaicEhSP7qsOfq0lreZhJww= Subject key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BE8D1015F82675D0EC4F534FF313DD2DA6DACE4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft caRepository: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:36:51 +0000 Certificate not after: Wed 04 Mar 2026 18:41:51 +0000 Subordinate resources: AS: 262891 IP: 177.20.184.0/21 IP: 177.23.64.0/21 IP: 191.253.72.0/21 IP: 2804:c50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 13:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e8:d1:01:5f:82:67:5d:0e:c4:f5:34:ff:31:3d:d2:da:6d:ac:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:36:51 2025 GMT Not After : Mar 4 18:41:51 2026 GMT Subject: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:72:c0:d5:a9:c1:d7:90:74:d0:90:4d:dd: 7a:76:da:dd:25:09:38:49:50:17:b2:25:59:6b:0f: 4d:6c:9b:7d:06:a9:12:06:48:84:de:57:c8:99:d7: de:1b:ce:1d:75:f2:ee:64:fd:ee:7a:d8:d7:72:70: 56:6a:b5:21:c4:98:8c:e1:c7:73:e4:a2:82:87:89: 25:21:83:47:0a:51:99:e1:c3:a8:4f:7a:ae:c3:a3: e9:94:45:b0:5f:4d:e9:54:bc:03:8e:f2:1e:84:26: ac:52:a3:4a:8a:47:d0:71:a8:49:61:a6:aa:7d:1d: 86:12:83:41:a8:ec:63:a2:a6:e9:94:4b:fd:ea:68: 61:b9:43:93:6a:d0:13:a8:ec:05:14:1a:c8:29:88: bb:69:b6:33:f4:94:dc:9d:29:77:ae:73:76:fc:f8: 9e:22:5b:ee:76:72:f6:ef:fe:95:dd:38:0c:46:a9: 29:78:2f:14:4f:00:60:98:dc:2e:f3:c1:74:59:7a: 46:49:f4:72:f3:3a:d1:7a:47:f9:c1:2c:23:8d:be: 08:13:a2:a3:e2:17:6d:65:39:2f:b1:50:07:9a:af: c6:33:f5:91:3b:6d:6d:da:bd:35:e3:b1:ec:57:24: a5:54:7d:37:6e:ab:46:90:ef:3d:9d:c0:0a:6a:fd: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.20.184.0/21 177.23.64.0/21 191.253.72.0/21 IPv6: 2804:c50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262891 Signature Algorithm: sha256WithRSAEncryption cc:c0:e8:dd:20:7e:27:e0:9b:99:7b:79:7e:d5:03:c7:61:52: 42:93:73:b3:0f:c0:d8:da:5f:e1:3f:d0:18:75:77:04:40:80: 28:c9:f1:71:96:97:18:d6:c6:23:97:50:e1:87:c4:8d:6f:59: 4b:61:cb:53:84:17:2d:c0:a1:6d:0b:39:33:00:44:7b:15:bd: 5d:57:65:fd:c0:18:eb:13:3e:d6:4b:ba:f4:a1:87:a2:8a:9e: 9a:bd:46:d2:8a:f8:b6:b6:f5:5f:07:97:9b:b9:f5:94:c6:6f: 76:16:f1:99:f4:67:6b:f2:77:0b:d5:83:67:51:60:14:ce:1b: aa:27:77:26:fe:57:54:ff:58:78:37:a0:e0:86:82:97:0d:e2: 33:78:c9:8c:a1:19:fd:19:e5:63:f3:9d:55:e9:be:27:07:66: b8:7f:4e:a8:68:7b:7e:10:e7:9f:e9:20:73:d9:3e:e3:34:85: 11:21:c5:93:7c:d6:26:19:e7:05:e6:40:13:2a:6d:a2:13:82: 70:ee:31:72:43:12:9a:65:46:8f:e5:93:49:97:dd:df:10:2c: ee:13:41:05:a3:a3:97:06:70:09:bd:f3:be:d4:dc:51:92:87: c8:32:c4:24:55:a7:6d:5a:58:fe:4f:69:7f:83:f2:06:d5:e3: 14:25:d3:40 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUG+jRAV+CZ10OxPU0/zE90tptrOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM2NTFaFw0yNjAzMDQxODQxNTFaMDMxMTAvBgNV BAMTKEZBMTU4NUU0MkU3MzhFRTU5NkRCMkYyQjk3MENDM0NCNzQzQkQ4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChN3LA1anB15B00JBN3Xp22t0l CThJUBeyJVlrD01sm30GqRIGSITeV8iZ194bzh118u5k/e562NdycFZqtSHEmIzh x3PkooKHiSUhg0cKUZnhw6hPeq7Do+mURbBfTelUvAOO8h6EJqxSo0qKR9BxqElh pqp9HYYSg0Go7GOipumUS/3qaGG5Q5Nq0BOo7AUUGsgpiLtptjP0lNydKXeuc3b8 +J4iW+52cvbv/pXdOAxGqSl4LxRPAGCY3C7zwXRZekZJ9HLzOtF6R/nBLCONvggT oqPiF21lOS+xUAear8Yz9ZE7bW3avTXjsexXJKVUfTduq0aQ7z2dwApq/XkHAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6FYXkLnOO5Zbb LyuXDMPLdDvY/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWZj VmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQYWQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWZj VmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQYWQvMS9GQTE1 ODVFNDJFNzM4RUU1OTZEQjJGMkI5NzBDQzNDQjc0M0JEOEZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAOxFLgDBAOxF0ADBAO//UgwDQQCAAIwBwMFACgEDFAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBALrMA0GCSqGSIb3DQEBCwUAA4IBAQDM wOjdIH4n4JuZe3l+1QPHYVJCk3OzD8DY2l/hP9AYdXcEQIAoyfFxlpcY1sYjl1Dh h8SNb1lLYctThBctwKFtCzkzAER7Fb1dV2X9wBjrEz7WS7r0oYeiip6avUbSivi2 tvVfB5ebufWUxm92FvGZ9Gdr8ncL1YNnUWAUzhuqJ3cm/ldU/1h4N6DghoKXDeIz eMmMoRn9GeVj851V6b4nB2a4f06oaHt+EOef6SBz2T7jNIURIcWTfNYmGecF5kAT Km2iE4Jw7jFyQxKaZUaP5ZNJl93fECzuE0EFo6OXBnAJvfO+1NxRkofIMsQkVadt Wlj+T2l/g/IG1eMUJdNA -----END CERTIFICATE-----Generated at Fri Apr 25 12:55:23 2025 by rpki-client on console.sobornost.net