$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer (raw, json) Hash identifier: U5j8CjPHbeYES7fe4IzNfej8qEtIKQ8lgdzkhEBdOzc= Subject key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0329BE73CAA5176FFB523654D5E165E09D1C03AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft caRepository: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 23 Mar 2025 20:37:36 +0000 Certificate not after: Sun 22 Mar 2026 20:42:36 +0000 Subordinate resources: AS: 263919 IP: 138.185.236.0/22 IP: 170.0.208.0/22 IP: 2804:27bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:29:be:73:ca:a5:17:6f:fb:52:36:54:d5:e1:65:e0:9d:1c:03:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 23 20:37:36 2025 GMT Not After : Mar 22 20:42:36 2026 GMT Subject: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:c8:85:ba:7e:47:78:bd:c3:9e:5a:d4:99: da:b9:4b:e8:a3:b8:7b:06:01:d4:92:05:70:fc:00: 7b:d5:23:43:98:4f:00:71:72:b8:fa:3a:f1:3b:62: 97:d7:48:ca:9d:80:65:42:3f:99:d3:4a:cc:28:8d: 57:1d:ae:e6:87:20:52:8b:b8:23:a2:95:bd:c6:69: 96:00:67:02:de:a9:75:83:08:1b:4f:dc:80:21:2b: cd:08:d0:a7:d6:3a:02:2b:84:27:db:6c:6e:ab:b2: 74:16:2a:1b:e7:31:fd:93:d8:c0:ad:7a:07:ef:ff: 91:96:8a:28:5f:40:f8:d4:86:03:84:8e:73:91:65: ac:09:c6:cc:f0:e0:8c:67:54:c9:2e:26:4d:46:dd: 6b:e5:ff:35:38:a0:43:4f:0b:50:5a:17:e0:dc:ed: 99:d5:ab:6f:2b:e2:cc:6b:ee:e3:84:e3:94:5e:e8: 06:49:0d:e1:3e:0a:41:8b:0c:b0:65:41:72:ac:88: 5c:a3:d4:5b:cb:51:12:f6:ba:90:03:2f:b3:ee:8c: c0:99:64:2f:54:1d:25:fc:7e:7f:49:65:99:f8:6b: ec:28:52:69:13:cc:7d:6d:90:36:41:31:37:cd:7f: 87:d5:ac:18:bf:79:34:42:d4:44:73:97:a7:77:d9: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.236.0/22 170.0.208.0/22 IPv6: 2804:27bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263919 Signature Algorithm: sha256WithRSAEncryption 4d:40:28:aa:50:cf:b6:31:7e:32:eb:f9:f4:90:d0:31:46:ce: 87:c4:25:24:31:63:78:dd:bd:0f:cb:29:50:31:c9:05:c3:8c: 6d:c7:29:c7:0b:ef:9c:6f:96:d2:39:4e:87:0a:fc:3d:9b:30: cf:41:e8:3a:10:d8:b4:f5:0e:44:4c:cf:49:77:8d:6d:09:1a: 2f:d7:66:43:2d:64:a1:44:fb:33:68:23:f4:79:df:93:09:4b: 10:cb:41:93:31:6c:ef:07:28:1f:da:cb:a2:f6:81:d1:e5:31: 8a:ac:c7:82:c9:f3:21:bb:8f:1c:31:7e:e3:cd:3f:63:9a:b6: 02:50:81:f9:a0:cd:45:f1:59:9e:3c:f4:ea:d5:01:5e:ee:49: 00:88:51:6e:3d:17:d6:59:62:65:09:af:04:74:f3:c5:86:42: 14:1b:4b:6f:b0:1b:a3:9f:10:2d:a3:58:2e:4f:3a:22:03:ad: a7:5c:a2:e6:b6:30:45:4e:48:11:54:d4:7b:b5:00:a8:44:d8: 41:df:93:3a:4b:c0:4b:dd:e0:24:5c:e4:83:be:6c:49:7f:f9: b4:ca:dd:73:a5:93:43:82:50:54:f3:84:32:d1:bd:6e:a5:7b: c0:37:44:62:c4:9a:9d:f9:ef:08:7e:01:16:62:13:50:0d:e9: 05:4b:0f:bf -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAym+c8qlF2/7UjZU1eFl4J0cA64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjMyMDM3MzZaFw0yNjAzMjIyMDQyMzZaMDMxMTAvBgNV BAMTKDhCQUU5QzkwRUJDNTA4MkY4MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fciFun5HeL3DnlrUmdq5S+ij uHsGAdSSBXD8AHvVI0OYTwBxcrj6OvE7YpfXSMqdgGVCP5nTSswojVcdruaHIFKL uCOilb3GaZYAZwLeqXWDCBtP3IAhK80I0KfWOgIrhCfbbG6rsnQWKhvnMf2T2MCt egfv/5GWiihfQPjUhgOEjnORZawJxszw4IxnVMkuJk1G3Wvl/zU4oENPC1BaF+Dc 7ZnVq28r4sxr7uOE45Re6AZJDeE+CkGLDLBlQXKsiFyj1FvLURL2upADL7PujMCZ ZC9UHSX8fn9JZZn4a+woUmkTzH1tkDZBMTfNf4fVrBi/eTRC1ERzl6d32bGFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLrpyQ68UIL4Ag Ve+qY2DGYb+FzjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNGNH Mm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRj RzJvYkVVWWZNS2hXQVg0NTduRmd6b1RYWVN0aUxLNERhRTM0VkRTSzg1LzEvOEJB RTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2MUJGODVDRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCirnsAwQCqgDQMA0EAgACMAcDBQAoBCe8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG7zANBgkqhkiG9w0BAQsFAAOCAQEATUAoqlDP tjF+Muv59JDQMUbOh8QlJDFjeN29D8spUDHJBcOMbccpxwvvnG+W0jlOhwr8PZsw z0HoOhDYtPUOREzPSXeNbQkaL9dmQy1koUT7M2gj9HnfkwlLEMtBkzFs7wcoH9rL ovaB0eUxiqzHgsnzIbuPHDF+480/Y5q2AlCB+aDNRfFZnjz06tUBXu5JAIhRbj0X 1lliZQmvBHTzxYZCFBtLb7Abo58QLaNYLk86IgOtp1yi5rYwRU5IEVTUe7UAqETY Qd+TOkvAS93gJFzkg75sSX/5tMrdc6WTQ4JQVPOEMtG9bqV7wDdEYsSanfnvCH4B FmITUA3pBUsPvw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:16 2025 by rpki-client on console.sobornost.net