$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.cer File: FEBA73E668F06EB3E835940A05E3FE7036390D15.cer (raw, json) Hash identifier: qGR3WxBx6OrdtzDnAMKZTBJn9wsPeDoO2eUSxGZMUck= Subject key identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55F9821983F99788CD42CEEECB6E3EC2EB3A22B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft caRepository: rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 06 Mar 2025 03:59:05 +0000 Certificate not after: Thu 05 Mar 2026 04:04:05 +0000 Subordinate resources: AS: 52756 IP: 170.245.134.0/23 IP: 177.11.252.0/24 IP: 2801:80:1c10::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f9:82:19:83:f9:97:88:cd:42:ce:ee:cb:6e:3e:c2:eb:3a:22:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 6 03:59:05 2025 GMT Not After : Mar 5 04:04:05 2026 GMT Subject: CN=FEBA73E668F06EB3E835940A05E3FE7036390D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:d8:91:cb:b7:57:45:33:6e:c6:df:57:7e: 59:08:a7:9e:06:a4:40:da:30:7a:80:01:9a:97:73: 5f:78:09:f9:0b:73:d2:21:d3:73:0f:e7:6e:16:50: da:7f:b5:6f:2a:42:bf:d9:53:06:4c:1b:52:6b:97: 34:1d:20:b0:85:18:26:19:07:d4:c2:18:53:1d:95: 9a:c1:15:bc:0a:2a:e3:46:9b:82:8a:49:70:c7:ec: d0:cc:51:94:02:22:d4:df:3b:b8:b5:78:c6:31:46: a2:65:11:e0:c6:11:da:ee:55:aa:c6:d5:a5:03:ce: 7c:38:04:56:72:14:e8:1e:9a:d9:d0:bb:23:ab:3e: 2b:9b:b2:df:70:dc:83:61:8f:38:13:61:80:55:e3: 76:25:c5:c6:31:7a:98:e0:33:dc:3e:69:e1:3c:50: b7:f5:57:1f:4f:ca:02:7a:63:b8:b1:a7:97:02:57: a4:f0:e5:69:33:35:07:cc:e4:7f:6b:46:f5:f4:ba: 9c:66:ba:fc:78:e9:48:4a:9f:bb:ee:4c:53:82:00: ba:07:c1:64:c0:07:93:f7:1d:7e:bb:82:cf:9a:40: a1:0f:f3:40:35:50:5e:9c:36:a3:f9:c8:53:29:d5: 15:a5:66:31:94:95:66:37:72:39:b1:f8:f2:96:26: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:BA:73:E6:68:F0:6E:B3:E8:35:94:0A:05:E3:FE:70:36:39:0D:15 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Da5tCrfmGs4wxSqvZNThYbBt2afM6qxP6cmbeyyY5qP/1/FEBA73E668F06EB3E835940A05E3FE7036390D15.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.245.134.0/23 177.11.252.0/24 IPv6: 2801:80:1c10::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52756 Signature Algorithm: sha256WithRSAEncryption 24:c3:70:5d:43:bb:5b:90:9f:f1:83:1b:45:e9:86:ad:c8:55: b5:24:f4:92:bf:b0:5c:d0:57:a3:74:c7:55:96:9b:78:93:bb: 6f:50:56:15:09:d9:df:1e:bb:07:d4:a8:a3:55:0a:62:d1:78: fd:66:57:35:8c:87:30:c1:ec:35:b6:b6:35:a9:f1:73:04:c8: 4e:50:ed:a7:c2:a9:84:fd:16:dc:52:83:64:a0:59:c0:47:e7: d7:3e:3c:eb:bc:ee:f6:08:3e:4d:d8:f5:b3:6d:68:e4:05:79: 7a:e0:81:3a:83:7e:09:49:b3:c0:9c:32:cf:de:9f:48:c3:98: 23:93:4e:3b:09:90:b0:7c:f3:46:fa:75:e9:d7:a9:e6:43:ec: 41:08:b7:b4:d6:76:6b:cb:f7:eb:7a:3f:36:91:ee:ab:2c:4b: 6b:d6:1c:71:07:cd:fa:9f:30:c8:43:2a:91:2d:24:eb:58:7b: a6:0e:6c:0b:c7:cc:a5:a8:ca:1a:2c:ee:55:e9:03:ba:b4:b9: 7c:b0:b7:2f:9d:8c:ef:56:88:f9:44:0c:05:1e:c3:1d:e1:0a: 53:3f:d5:36:aa:3b:fd:b9:74:61:f3:fa:2c:7f:f9:df:34:0b: 94:a8:2a:e3:87:78:ce:1a:cc:b5:4d:c1:aa:15:51:e2:1a:31: 43:1f:24:4b -----BEGIN CERTIFICATE----- MIIGODCCBSCgAwIBAgIUVfmCGYP5l4jNQs7uy24+wus6IrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMDYwMzU5MDVaFw0yNjAzMDUwNDA0MDVaMDMxMTAvBgNV BAMTKEZFQkE3M0U2NjhGMDZFQjNFODM1OTQwQTA1RTNGRTcwMzYzOTBEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFNiRy7dXRTNuxt9XflkIp54G pEDaMHqAAZqXc194CfkLc9Ih03MP524WUNp/tW8qQr/ZUwZMG1JrlzQdILCFGCYZ B9TCGFMdlZrBFbwKKuNGm4KKSXDH7NDMUZQCItTfO7i1eMYxRqJlEeDGEdruVarG 1aUDznw4BFZyFOgemtnQuyOrPiubst9w3INhjzgTYYBV43YlxcYxepjgM9w+aeE8 ULf1Vx9PygJ6Y7ixp5cCV6Tw5WkzNQfM5H9rRvX0upxmuvx46UhKn7vuTFOCALoH wWTAB5P3HX67gs+aQKEP80A1UF6cNqP5yFMp1RWlZjGUlWY3cjmx+PKWJoXRAgMB AAGjggNCMIIDPjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+unPmaPBus+g1 lAoF4/5wNjkNFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNURh NXRDcmZtR3M0d3hTcXZaTlRoWWJCdDJhZk02cXhQNmNtYmV5eVk1cVAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVE YTV0Q3JmbUdzNHd4U3F2Wk5UaFliQnQyYWZNNnF4UDZjbWJleXlZNXFQLzEvRkVC QTczRTY2OEYwNkVCM0U4MzU5NDBBMDVFM0ZFNzAzNjM5MEQxNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTASBAIAATAMAwQBqvWGAwQAsQv8MA8EAgACMAkDBwAoAQCAHBAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAM4UMA0GCSqGSIb3DQEBCwUAA4IBAQAkw3Bd Q7tbkJ/xgxtF6YatyFW1JPSSv7Bc0FejdMdVlpt4k7tvUFYVCdnfHrsH1KijVQpi 0Xj9Zlc1jIcwwew1trY1qfFzBMhOUO2nwqmE/RbcUoNkoFnAR+fXPjzrvO72CD5N 2PWzbWjkBXl64IE6g34JSbPAnDLP3p9Iw5gjk047CZCwfPNG+nXp16nmQ+xBCLe0 1nZry/frej82ke6rLEtr1hxxB836nzDIQyqRLSTrWHumDmwLx8ylqMoaLO5V6QO6 tLl8sLcvnYzvVoj5RAwFHsMd4QpTP9U2qjv9uXRh8/osf/nfNAuUqCrjh3jOGsy1 TcGqFVHiGjFDHyRL -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:33 2025 by rpki-client on console.sobornost.net