$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer File: 8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer (raw, json) Hash identifier: RV87iKnKC8jiSOaKD0QJokrIqOG4gvwyMyOe/llSKCs= Subject key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 196B2AF46CDF8BADCCC0CFF32D8B493A55179F8D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft caRepository: rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 29 Mar 2025 00:22:26 +0000 Certificate not after: Sat 28 Mar 2026 00:27:26 +0000 Subordinate resources: AS: 266178 IP: 138.97.144.0/22 IP: 192.144.64.0/22 IP: 2804:3be4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6b:2a:f4:6c:df:8b:ad:cc:c0:cf:f3:2d:8b:49:3a:55:17:9f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Mar 29 00:22:26 2025 GMT Not After : Mar 28 00:27:26 2026 GMT Subject: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:41:63:10:66:d9:41:be:39:30:84:eb:3f: 35:4c:97:14:e7:25:59:fd:40:76:bb:13:14:fd:a9: 16:a4:93:1a:73:b1:d0:ef:80:68:ca:07:67:8e:34: d3:1e:cb:56:80:56:e3:8c:f6:8b:8d:1d:7d:ba:71: 45:47:8a:fc:76:f1:38:87:8b:49:ff:1d:b8:55:00: b6:93:37:26:d2:4a:44:26:28:86:36:2c:fa:72:08: 07:69:bd:f4:e8:b4:46:d5:a7:21:d8:a3:33:78:6c: f0:ba:06:f6:88:55:c0:82:ac:6d:88:11:2b:41:9e: eb:5d:3e:14:6a:36:7c:bb:b5:3d:81:69:3e:f9:44: 43:05:90:c9:4c:eb:94:11:83:86:c8:9b:1c:23:e7: 9f:6c:98:90:4a:b9:b3:a3:03:0a:6a:95:74:be:ac: bc:97:33:f6:fc:56:1b:98:d1:30:9f:bd:1f:20:97: 74:8a:78:3c:a8:c4:2f:9a:a9:0c:11:af:f8:2c:f3: 18:03:d9:23:a1:c7:f2:97:5c:c9:b6:b6:21:a3:cb: c6:f0:7e:0e:6f:9d:e2:b1:c6:39:e3:53:99:df:36: 32:38:3a:c5:14:5e:b3:8f:26:79:4a:d7:bb:14:c6: 56:84:01:81:10:cc:40:48:08:18:6b:59:56:97:67: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.144.0/22 192.144.64.0/22 IPv6: 2804:3be4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266178 Signature Algorithm: sha256WithRSAEncryption 8d:3a:1d:31:59:7e:0f:fc:a8:75:b5:78:06:2f:01:db:29:86: a1:7a:f9:d2:d8:f3:03:fe:0a:31:6b:05:98:1a:db:c2:3f:e7: 67:76:e1:0d:bb:de:16:58:f1:66:3b:e7:e0:5c:4d:a6:4d:db: 8f:78:0f:e2:1f:88:73:a0:eb:a3:91:0c:81:2d:03:0c:9b:6c: 5c:d2:49:85:07:38:cc:e2:35:eb:fd:c6:e4:a3:27:b7:19:52: 29:35:07:cd:80:88:ed:72:a5:34:4b:5e:8a:ba:f2:86:b3:2b: 34:f3:b7:54:f5:b8:d1:b9:40:1c:d3:82:f8:f4:ab:37:52:b2: 28:5a:79:b1:7f:3a:ba:bd:50:3c:9d:35:35:2d:4a:64:83:e0: 92:e0:29:15:0d:53:16:bc:42:57:2c:1c:3c:75:39:59:05:ce: e5:00:ac:09:3b:d9:9d:56:33:be:d0:0c:59:98:54:6e:ea:2f: 56:19:2a:3e:8b:46:42:05:7a:61:e3:70:ce:5a:a0:94:cf:f5: 28:4e:bf:be:6c:42:d2:f4:50:49:c5:da:ee:9d:a2:08:c2:3c: 79:25:e7:fc:41:39:5f:08:54:12:65:1f:f7:36:1a:f1:cb:f8: 03:ec:06:3a:bb:95:89:a2:51:6d:81:09:f4:9b:7c:c5:c7:b9: c9:89:c5:9c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGWsq9Gzfi63MwM/zLYtJOlUXn40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTAzMjkwMDIyMjZaFw0yNjAzMjgwMDI3MjZaMDMxMTAvBgNV BAMTKDhCQjIzRkIwRjM4RjdDREUxNzg1MkRDNjFCRDIzNERDRUJDM0JCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vkFjEGbZQb45MITrPzVMlxTn JVn9QHa7ExT9qRakkxpzsdDvgGjKB2eONNMey1aAVuOM9ouNHX26cUVHivx28TiH i0n/HbhVALaTNybSSkQmKIY2LPpyCAdpvfTotEbVpyHYozN4bPC6BvaIVcCCrG2I EStBnutdPhRqNny7tT2BaT75REMFkMlM65QRg4bImxwj559smJBKubOjAwpqlXS+ rLyXM/b8VhuY0TCfvR8gl3SKeDyoxC+aqQwRr/gs8xgD2SOhx/KXXMm2tiGjy8bw fg5vneKxxjnjU5nfNjI4OsUUXrOPJnlK17sUxlaEAYEQzEBICBhrWVaXZwlPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLsj+w84983heF LcYb0jTc68O7kDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzFF Q2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3IxcVEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzMx RUNlTmE2SkZyUU5OeVNaZ3VTaTgyU3oxMTRnQTVqUnhRWU0yUG9yMXFRLzEvOEJC MjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENFQkMzQkI5MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimGQAwQCwJBAMA0EAgACMAcDBQAoBDvkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQPwjANBgkqhkiG9w0BAQsFAAOCAQEAjTodMVl+ D/yodbV4Bi8B2ymGoXr50tjzA/4KMWsFmBrbwj/nZ3bhDbveFljxZjvn4FxNpk3b j3gP4h+Ic6Dro5EMgS0DDJtsXNJJhQc4zOI16/3G5KMntxlSKTUHzYCI7XKlNEte irryhrMrNPO3VPW40blAHNOC+PSrN1KyKFp5sX86ur1QPJ01NS1KZIPgkuApFQ1T FrxCVywcPHU5WQXO5QCsCTvZnVYzvtAMWZhUbuovVhkqPotGQgV6YeNwzlqglM/1 KE6/vmxC0vRQScXa7p2iCMI8eSXn/EE5XwhUEmUf9zYa8cv4A+wGOruViaJRbYEJ 9Jt8xce5yYnFnA== -----END CERTIFICATE-----Generated at Fri Apr 25 03:47:10 2025 by rpki-client on console.sobornost.net