$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer File: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer (raw, json) Hash identifier: Hgzlj4mqC30UyQrm9qyPBgBhKXf9IynRwGSkT0eNcTk= Subject key identifier: FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2428560CBF5BD5B1842E4E38A58751798F5C0CEC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft caRepository: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 25 Feb 2025 20:24:32 +0000 Certificate not after: Tue 24 Feb 2026 20:29:32 +0000 Subordinate resources: AS: 268696 IP: 45.165.244.0/22 IP: 201.159.164.0/22 IP: 2804:5534::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:28:56:0c:bf:5b:d5:b1:84:2e:4e:38:a5:87:51:79:8f:5c:0c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Feb 25 20:24:32 2025 GMT Not After : Feb 24 20:29:32 2026 GMT Subject: CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:0c:2c:aa:70:f1:a5:65:e6:b1:d3:00:69: b1:09:0a:7b:cb:53:87:50:94:22:8f:67:f8:eb:7e: 48:9c:b0:6b:2e:7f:4e:f4:66:74:5c:60:3b:68:9b: a1:6d:d4:7a:98:05:d9:aa:b1:b6:a2:a8:d1:71:e0: ad:c5:9f:60:4a:36:de:44:2a:55:2d:b5:6b:b6:bb: 05:9b:d4:f7:be:c6:f6:e0:5e:8a:60:0e:06:46:e2: e6:2e:99:05:e5:be:b8:cb:e0:bd:d2:24:ad:10:11: 72:53:ff:ac:66:6d:b5:58:9a:ad:25:b0:f9:0f:5c: 9e:c0:4d:95:9c:b6:cf:4a:f6:f7:f5:e8:d4:53:f3: 57:e9:5c:2c:8b:38:72:1a:a7:ad:4d:17:71:af:94: dc:5a:90:60:fd:25:e9:4d:c4:71:08:85:40:e7:34: 30:fb:14:bb:b5:e2:72:9b:12:f5:a7:09:c2:bd:72: 52:66:2e:88:53:96:71:d4:d5:66:80:5b:07:d4:20: 8f:01:9b:b2:a1:51:37:c1:b6:d3:fc:7d:a5:cb:bf: ec:a7:37:b6:cb:12:93:eb:ec:df:26:37:ea:f3:70: 8d:3d:2a:c8:77:4a:0e:f3:5c:72:a5:f0:b3:f4:83: e4:e7:56:3f:51:89:44:64:ce:04:10:22:81:9d:17: 24:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.244.0/22 201.159.164.0/22 IPv6: 2804:5534::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268696 Signature Algorithm: sha256WithRSAEncryption 3e:7e:19:a4:1a:f5:24:b5:be:50:63:b5:f2:97:aa:3b:e6:eb: 1a:db:d3:c0:0d:5c:85:8b:ac:ba:3b:0f:bf:ff:88:fc:dd:eb: d6:3f:5c:6a:69:d8:ee:7f:6a:b1:bd:36:22:3b:81:f0:1a:e0: 16:18:56:1c:ca:7f:2b:e3:62:91:67:47:d6:84:ef:f0:db:6b: 48:08:bc:ab:c5:b3:94:25:44:dd:68:e2:e2:f2:c5:6d:ee:7c: a0:33:8a:f0:36:9d:d5:73:38:57:34:d8:a2:86:c9:80:24:ff: db:2d:23:53:82:e6:f7:eb:b4:6a:d3:65:3d:c4:5c:66:71:76: 2d:9d:b8:83:cb:97:d1:95:d6:ab:b3:da:40:e5:ea:05:31:0d: 15:78:e5:48:30:e8:85:06:64:00:41:9a:7a:c8:cf:eb:e4:d9: d3:78:2f:82:aa:fe:b6:99:c3:9e:56:28:46:ff:53:b4:18:d5: a0:7e:1d:45:c9:ff:1b:db:29:01:91:f2:37:d3:3f:bf:cf:b2: 77:c5:cf:df:74:ac:1d:cf:e5:e8:1e:22:5d:49:55:77:98:05: 9d:10:38:b9:d3:3a:64:4d:3f:18:65:04:93:d0:bf:e9:8e:57: 79:64:14:2b:82:f8:be:68:fd:51:f2:82:29:89:82:89:11:53: 4c:b8:30:88 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJChWDL9b1bGELk44pYdReY9cDOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAyMjUyMDI0MzJaFw0yNjAyMjQyMDI5MzJaMDMxMTAvBgNV BAMTKEZFRkVENTcyMzI2RDIxQkZGQkQ3MzNDRkEwQ0M3OTA5RENFQzUwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidwwsqnDxpWXmsdMAabEJCnvL U4dQlCKPZ/jrfkicsGsuf070ZnRcYDtom6Ft1HqYBdmqsbaiqNFx4K3Fn2BKNt5E KlUttWu2uwWb1Pe+xvbgXopgDgZG4uYumQXlvrjL4L3SJK0QEXJT/6xmbbVYmq0l sPkPXJ7ATZWcts9K9vf16NRT81fpXCyLOHIap61NF3GvlNxakGD9JelNxHEIhUDn NDD7FLu14nKbEvWnCcK9clJmLohTlnHU1WaAWwfUII8Bm7KhUTfBttP8faXLv+yn N7bLEpPr7N8mN+rzcI09Ksh3Sg7zXHKl8LP0g+TnVj9RiURkzgQQIoGdFyR7AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+/tVyMm0hv/vX M8+gzHkJ3OxQbjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUth Y2FCTEs2c3g0RXhMVmdZcmNNYVN5NHhHVWFQTVVYQmQ0ZThkWWtRQ2cvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVL YWNhQkxLNnN4NEV4TFZnWXJjTWFTeTR4R1VhUE1VWEJkNGU4ZFlrUUNnLzAvRkVG RUQ1NzIzMjZEMjFCRkZCRDczM0NGQTBDQzc5MDlEQ0VDNTA2RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaX0AwQCyZ+kMA0EAgACMAcDBQAoBFU0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQZmDANBgkqhkiG9w0BAQsFAAOCAQEAPn4ZpBr1 JLW+UGO18peqO+brGtvTwA1chYusujsPv/+I/N3r1j9camnY7n9qsb02IjuB8Brg FhhWHMp/K+NikWdH1oTv8NtrSAi8q8WzlCVE3Wji4vLFbe58oDOK8Dad1XM4VzTY oobJgCT/2y0jU4Lm9+u0atNlPcRcZnF2LZ24g8uX0ZXWq7PaQOXqBTENFXjlSDDo hQZkAEGaesjP6+TZ03gvgqr+tpnDnlYoRv9TtBjVoH4dRcn/G9spAZHyN9M/v8+y d8XP33SsHc/l6B4iXUlVd5gFnRA4udM6ZE0/GGUEk9C/6Y5XeWQUK4L4vmj9UfKC KYmCiRFTTLgwiA== -----END CERTIFICATE-----Generated at Fri Apr 25 10:38:04 2025 by rpki-client on console.sobornost.net