$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer File: 20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer (raw, json) Hash identifier: K9kVVR6fCqSltGfHBcThfcwBZNoybd/ZV4VPUrUEF2c= Subject key identifier: 20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1D654D6E498926A379D29A67D68CE5DF5FA39CE9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft caRepository: rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 31 Mar 2025 18:55:27 +0000 Certificate not after: Mon 30 Mar 2026 19:00:27 +0000 Subordinate resources: AS: 268817 IP: 45.173.164.0/22 IP: 2804:5b14::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:65:4d:6e:49:89:26:a3:79:d2:9a:67:d6:8c:e5:df:5f:a3:9c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 31 18:55:27 2025 GMT Not After : Mar 30 19:00:27 2026 GMT Subject: CN=20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:c9:0d:f0:5d:3f:26:16:51:29:e8:4c:1e: 47:8c:49:df:a1:84:3d:3c:7e:20:36:f1:78:83:6a: 0e:cc:0c:bb:92:c0:23:cd:9b:15:2a:e3:0d:fd:85: 12:02:54:06:d3:2d:5f:4a:8a:a2:bf:37:d0:6d:c4: 73:49:db:60:92:5f:57:f8:0c:bd:3b:89:ab:4d:c6: b9:2c:3b:ac:09:d5:71:ec:a6:64:bb:7b:37:3b:46: a7:ed:d8:f8:38:e5:e8:d4:8a:c9:ab:48:6c:c2:09: 5a:ee:46:71:77:09:ad:67:12:0d:16:b9:9a:bf:92: d4:cd:9c:75:7b:6d:a6:b1:19:4a:bc:af:df:3a:87: e3:e2:35:9f:e9:ac:c1:ad:45:78:91:cf:b2:83:ee: 80:d4:87:82:cb:bc:75:08:ec:76:53:5a:d4:cd:52: 93:5c:d2:a2:fd:4b:36:22:d2:88:28:b6:36:a0:4b: d8:f6:6b:59:a3:9b:32:66:e9:c7:a3:0c:6e:37:a4: 9a:67:9a:a9:9a:dc:ae:81:a4:24:8b:a7:41:ec:36: 3b:5a:ec:b6:ab:0e:a9:c5:e7:5e:6a:af:82:8a:6c: 96:13:4f:29:af:26:03:0a:13:a2:56:85:2e:36:46: 9b:3b:43:96:a7:09:96:4d:28:d7:68:ab:6f:98:5b: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.164.0/22 IPv6: 2804:5b14::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268817 Signature Algorithm: sha256WithRSAEncryption af:2c:79:23:58:67:6d:cf:a6:be:b6:76:e4:ca:43:e9:42:71: c2:5b:c6:b7:c2:77:da:c5:8a:ab:a8:8c:c3:3b:95:47:d7:81: 36:ca:70:cf:8e:74:05:ce:b0:4c:75:8b:9a:43:7a:10:76:24: 94:58:2a:ef:41:09:ce:03:fc:e5:21:28:2c:fa:60:0b:45:d8: 67:dc:f9:2d:80:d0:6b:d9:d9:5b:55:fa:eb:b3:4c:d4:22:d8: fb:b8:3d:fc:f9:6a:5f:bd:6c:1f:6f:d1:61:14:47:5b:cd:f5: cc:cb:39:50:a8:fd:03:b8:38:a6:2c:be:27:fa:db:73:4b:e0: 34:c5:40:81:13:0c:75:ac:5d:37:a2:b8:9e:8d:f7:6d:d6:c0: 6e:ee:c8:c4:36:12:31:1f:03:14:d6:b3:94:04:5c:9b:d0:4a: 7a:5c:57:c1:c7:5f:c2:6c:7b:fc:af:e8:44:a0:1c:db:b6:06: 4d:b4:0b:7f:d2:3c:05:6f:7a:04:89:36:26:91:d0:3b:93:43: ed:3e:73:e5:41:2b:ec:9a:53:6d:2b:13:4a:67:85:ff:e7:60: 62:23:a3:ea:95:dd:62:0a:fa:9c:91:b4:01:95:f3:fe:7a:81: a8:c7:f6:b1:5a:26:98:23:dc:2e:9c:99:07:3c:17:54:94:9e: 5e:62:8c:26 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHWVNbkmJJqN50ppn1ozl31+jnOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMzExODU1MjdaFw0yNjAzMzAxOTAwMjdaMDMxMTAvBgNV BAMTKDIwQkJDNDhFN0I2MEMzRTUwNTVDQ0JGNENDNzJBNzZCRDc4NDBBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKMkN8F0/JhZRKehMHkeMSd+h hD08fiA28XiDag7MDLuSwCPNmxUq4w39hRICVAbTLV9KiqK/N9BtxHNJ22CSX1f4 DL07iatNxrksO6wJ1XHspmS7ezc7Rqft2Pg45ejUismrSGzCCVruRnF3Ca1nEg0W uZq/ktTNnHV7baaxGUq8r986h+PiNZ/prMGtRXiRz7KD7oDUh4LLvHUI7HZTWtTN UpNc0qL9SzYi0ogotjagS9j2a1mjmzJm6cejDG43pJpnmqma3K6BpCSLp0HsNjta 7LarDqnF515qr4KKbJYTTymvJgMKE6JWhS42Rps7Q5anCZZNKNdoq2+YW1vlAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgu8SOe2DD5QVc y/TMcqdr14QKbTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODhN WGc5TXF5dWZuMXlUNFRTR1lTUUJMdnJGcFAxWlVxcExySGdQblluTUYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg4 TVhnOU1xeXVmbjF5VDRUU0dZU1FCTHZyRnBQMVpVcXBMckhnUG5Zbk1GLzAvMjBC QkM0OEU3QjYwQzNFNTA1NUNDQkY0Q0M3MkE3NkJENzg0MEE2RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa2kMA0EAgACMAcDBQAoBFsUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaETANBgkqhkiG9w0BAQsFAAOCAQEAryx5I1hnbc+mvrZ2 5MpD6UJxwlvGt8J32sWKq6iMwzuVR9eBNspwz450Bc6wTHWLmkN6EHYklFgq70EJ zgP85SEoLPpgC0XYZ9z5LYDQa9nZW1X667NM1CLY+7g9/PlqX71sH2/RYRRHW831 zMs5UKj9A7g4piy+J/rbc0vgNMVAgRMMdaxdN6K4no33bdbAbu7IxDYSMR8DFNaz lARcm9BKelxXwcdfwmx7/K/oRKAc27YGTbQLf9I8BW96BIk2JpHQO5ND7T5z5UEr 7JpTbSsTSmeF/+dgYiOj6pXdYgr6nJG0AZXz/nqBqMf2sVommCPcLpyZBzwXVJSe XmKMJg== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:09 2025 by rpki-client on console.sobornost.net