$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer File: FB296CB95D657097D81AFC78BE6A40AC2591E349.cer (raw, json) Hash identifier: OA0LP8ielp1xJ9epDTD4m+2kFlt8OIMM6Cuguu6wftg= Subject key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 670285ED87A8E9864076D47C6945D0107BD1902A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft caRepository: rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 18:35:23 +0000 Certificate not after: Wed 04 Mar 2026 18:40:23 +0000 Subordinate resources: AS: 265234 IP: 45.172.68.0/22 IP: 168.0.96.0/22 IP: 2804:2cac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:02:85:ed:87:a8:e9:86:40:76:d4:7c:69:45:d0:10:7b:d1:90:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 5 18:35:23 2025 GMT Not After : Mar 4 18:40:23 2026 GMT Subject: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:9a:92:ea:f0:f4:c9:10:d6:be:69:97:56: da:5a:23:fd:00:77:15:f0:a7:05:79:c3:fc:e5:e9: 6f:db:d1:f0:88:71:be:17:c4:1e:49:74:2b:9c:74: 0f:46:85:74:4d:23:00:09:33:3e:24:77:72:4b:76: 70:7d:37:63:5a:89:11:87:29:c5:f1:a1:4a:a6:e3: 9e:98:cf:e3:49:5c:1c:a9:94:6e:32:e4:bc:a9:07: 92:61:f5:b1:6e:11:a6:62:44:90:2e:74:59:9a:5a: 21:44:77:c8:00:ad:c4:fe:a0:83:3d:73:6b:a1:9c: 15:0f:2d:8f:31:7a:e9:f0:36:5e:ed:18:26:fa:a8: 89:62:81:ea:aa:59:ac:2d:9c:2c:3c:f4:5c:2d:d1: ec:00:3c:06:7d:83:7a:25:64:8f:7a:0b:73:5d:52: 46:5b:db:f0:69:1f:ac:ce:67:d7:95:0a:d9:6d:3b: 73:a2:21:5a:fa:2d:61:95:23:e6:fe:15:1b:a7:96: b6:b6:f0:9e:8f:9a:5f:84:84:10:ad:c0:c3:5b:18: 9e:f4:9f:e1:c8:3a:a1:31:77:ec:55:1b:18:f1:9f: cb:e6:e3:5a:1b:bf:6c:fc:0f:ed:3f:c9:8a:f2:c7: 0d:cc:2c:6e:5e:7e:50:1a:1b:de:51:49:0b:2e:99: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.68.0/22 168.0.96.0/22 IPv6: 2804:2cac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265234 Signature Algorithm: sha256WithRSAEncryption 35:8b:6e:ec:ac:08:d0:ee:0b:94:73:d9:d3:7c:0e:ae:48:00: ca:d2:2b:3c:56:51:89:f1:a0:07:88:06:e3:96:32:2c:42:fc: 11:8d:b7:e2:9c:a8:60:95:50:c7:be:59:fa:6f:59:9c:39:ad: 79:36:91:c1:fc:4f:13:d4:7f:01:5f:24:84:21:7b:d4:4f:5e: 4b:2f:a4:97:d4:d7:26:11:fe:ca:fb:db:be:9c:96:dc:7d:30: 3d:ac:e8:66:69:cc:32:64:81:3d:6a:77:86:a9:48:5e:82:00: f6:2a:f3:a5:4f:65:f1:3d:f6:a9:46:e2:10:a8:c5:03:df:7d: 99:8c:ae:aa:78:c7:d7:fd:25:36:e9:49:8d:e2:c2:36:8a:39: 5c:c4:30:3a:b9:fa:14:1d:75:aa:45:9b:3c:d3:4f:3d:2a:e0: 2c:84:28:8b:83:33:c2:1c:57:7a:2b:f4:57:32:ce:ec:21:6a: 2d:a6:06:54:1d:e3:86:74:97:76:04:ad:6f:b6:77:62:9a:52: 33:d3:14:b9:67:ea:61:e5:50:1e:45:14:51:98:12:2b:22:6d: 99:57:82:01:3a:1a:a3:21:15:2e:91:c9:5c:b6:28:5e:db:4c: bd:41:c2:10:3d:b2:54:76:a2:4e:ac:e4:4e:9a:d9:33:ee:2a: db:48:50:2a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZwKF7Yeo6YZAdtR8aUXQEHvRkCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDUxODM1MjNaFw0yNjAzMDQxODQwMjNaMDMxMTAvBgNV BAMTKEZCMjk2Q0I5NUQ2NTcwOTdEODFBRkM3OEJFNkE0MEFDMjU5MUUzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpl5qS6vD0yRDWvmmXVtpaI/0A dxXwpwV5w/zl6W/b0fCIcb4XxB5JdCucdA9GhXRNIwAJMz4kd3JLdnB9N2NaiRGH KcXxoUqm456Yz+NJXByplG4y5LypB5Jh9bFuEaZiRJAudFmaWiFEd8gArcT+oIM9 c2uhnBUPLY8xeunwNl7tGCb6qIligeqqWawtnCw89Fwt0ewAPAZ9g3olZI96C3Nd UkZb2/BpH6zOZ9eVCtltO3OiIVr6LWGVI+b+FRunlra28J6Pml+EhBCtwMNbGJ70 n+HIOqExd+xVGxjxn8vm41obv2z8D+0/yYryxw3MLG5eflAaG95RSQsumfhJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7KWy5XWVwl9ga /Hi+akCsJZHjSTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTkx aDFXRndiTlg0WkRldFlmU3kza3p0cDVFRm5laW9hWUZBeHo1cGZoenYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U5 MWgxV0Z3Yk5YNFpEZXRZZlN5M2t6dHA1RUZuZWlvYVlGQXh6NXBmaHp2LzEvRkIy OTZDQjk1RDY1NzA5N0Q4MUFGQzc4QkU2QTQwQUMyNTkxRTM0OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaxEAwQCqABgMA0EAgACMAcDBQAoBCysMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQMEjANBgkqhkiG9w0BAQsFAAOCAQEANYtu7KwI 0O4LlHPZ03wOrkgAytIrPFZRifGgB4gG45YyLEL8EY234pyoYJVQx75Z+m9ZnDmt eTaRwfxPE9R/AV8khCF71E9eSy+kl9TXJhH+yvvbvpyW3H0wPazoZmnMMmSBPWp3 hqlIXoIA9irzpU9l8T32qUbiEKjFA999mYyuqnjH1/0lNulJjeLCNoo5XMQwOrn6 FB11qkWbPNNPPSrgLIQoi4MzwhxXeiv0VzLO7CFqLaYGVB3jhnSXdgStb7Z3YppS M9MUuWfqYeVQHkUUUZgSKyJtmVeCAToaoyEVLpHJXLYoXttMvUHCED2yVHaiTqzk TprZM+4q20hQKg== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:32 2025 by rpki-client on console.sobornost.net