$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer File: 93BE4B443103C9EA3CE4069D092C62B98F0895FD.cer (raw, json) Hash identifier: Bd9lqZBIyVXVkX8Hp90D/XPV2HeRvrkMjs6Ez7HmUOQ= Subject key identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3BF8FF3E29DD46014886221BDDBFCD7855B3213C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft caRepository: rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 03 Dec 2024 18:01:53 +0000 Certificate not after: Tue 02 Dec 2025 18:06:53 +0000 Subordinate resources: AS: 263073 IP: 138.0.196.0/22 IP: 138.219.240.0/22 IP: 164.163.12.0/22 IP: 168.121.192.0/22 IP: 170.78.80.0/22 IP: 170.244.96.0/22 IP: 177.200.240.0/20 IP: 177.223.16.0/20 IP: 179.0.24.0/24 IP: 186.194.112.0/20 IP: 186.224.24.0/21 IP: 186.233.104.0/21 IP: 191.6.48.0/21 IP: 201.71.60.0/22 IP: 2804:954::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f8:ff:3e:29:dd:46:01:48:86:22:1b:dd:bf:cd:78:55:b3:21:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 3 18:01:53 2024 GMT Not After : Dec 2 18:06:53 2025 GMT Subject: CN=93BE4B443103C9EA3CE4069D092C62B98F0895FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:5f:ee:8e:29:f7:3e:fa:93:03:dd:a1:3b: 4d:4e:a2:a2:52:6f:9d:a8:0b:df:36:e4:72:fa:c4: 44:7d:a6:d2:5e:f8:2d:a8:ac:60:c4:ea:ed:16:eb: f7:a4:25:c8:20:f7:8d:35:38:96:4a:3d:a4:93:d9: 97:66:8c:ba:11:3f:cb:5d:69:15:ab:2a:c0:ab:e8: 3b:f8:2f:e4:56:c6:2a:1d:37:b3:91:01:c9:17:97: f7:89:e0:8d:8d:62:3b:f6:86:b5:6f:6e:c4:5b:a3: f7:fd:91:7f:bb:96:78:2a:1b:54:0f:8d:6b:31:40: 6f:e0:04:47:36:6e:fa:dd:5d:e3:56:d7:07:10:c4: 9b:3e:b3:cc:4e:ed:78:93:8a:05:e1:02:a6:63:28: e1:60:16:85:9e:49:0e:f4:5c:63:1b:23:02:a0:c3: df:28:81:d3:6f:e6:bd:e4:5d:55:4e:a9:02:26:2b: 09:f3:45:b4:b0:35:f8:99:ed:64:bb:49:fa:42:c2: a5:e3:f5:a3:09:1b:7e:b4:62:dc:ef:f3:ae:5a:03: a7:a8:38:c6:6a:89:4f:f2:a4:48:28:c2:ac:fd:80: 81:34:8d:ac:23:21:bf:84:50:14:9b:e1:f9:0e:52: 20:53:37:c6:7d:54:d8:6e:d0:1a:56:1d:57:4f:de: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:BE:4B:44:31:03:C9:EA:3C:E4:06:9D:09:2C:62:B9:8F:08:95:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/1/93BE4B443103C9EA3CE4069D092C62B98F0895FD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.196.0/22 138.219.240.0/22 164.163.12.0/22 168.121.192.0/22 170.78.80.0/22 170.244.96.0/22 177.200.240.0/20 177.223.16.0/20 179.0.24.0/24 186.194.112.0/20 186.224.24.0/21 186.233.104.0/21 191.6.48.0/21 201.71.60.0/22 IPv6: 2804:954::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263073 Signature Algorithm: sha256WithRSAEncryption 61:bc:7d:67:3e:d2:b8:cb:51:b7:6c:7f:cd:44:6c:6e:2b:a1: 2d:32:9c:67:65:4d:f1:bd:dd:bf:90:56:a8:e9:d7:b3:90:67: 9e:0f:9e:4f:72:8e:b9:1f:78:2f:76:f5:8a:c0:38:39:29:aa: e9:5c:15:59:24:78:25:c1:e0:c9:ec:04:a5:78:c8:e2:aa:fc: 71:08:9e:14:2b:fd:1b:c3:ed:06:0a:de:64:82:2c:b1:30:62: d2:83:af:5b:ac:b2:91:79:39:e5:ad:a3:1a:26:b2:c1:02:71: 04:30:f8:67:96:0c:1e:25:95:95:8b:20:c6:6d:ca:6a:af:74: 48:08:c3:e0:70:9b:f4:9a:30:85:cf:94:1e:de:2e:c6:44:67: ae:ec:2b:9a:73:aa:8b:0a:71:2a:a9:bf:fb:2c:86:9c:c7:eb: c1:9c:dd:b9:55:fb:6a:69:0a:ab:98:d2:61:78:88:5a:ff:33: c3:a5:ff:a7:56:59:55:7a:29:0c:5d:53:63:9f:d7:9b:92:11: 0f:d3:a9:d4:85:1c:0c:61:df:21:d4:19:a6:fd:3d:6c:56:6d: 8b:70:98:01:66:fb:de:35:e4:3b:57:6a:c6:e8:53:e3:1a:1f: f3:88:b3:ea:b5:06:5e:3a:bf:11:21:a4:27:23:eb:37:f1:be: 7b:a0:5b:bb -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUO/j/PindRgFIhiIb3b/NeFWzITwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMDMxODAxNTNaFw0yNTEyMDIxODA2NTNaMDMxMTAvBgNV BAMTKDkzQkU0QjQ0MzEwM0M5RUEzQ0U0MDY5RDA5MkM2MkI5OEYwODk1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRl/ujin3PvqTA92hO01OoqJS b52oC9825HL6xER9ptJe+C2orGDE6u0W6/ekJcgg9401OJZKPaST2ZdmjLoRP8td aRWrKsCr6Dv4L+RWxiodN7ORAckXl/eJ4I2NYjv2hrVvbsRbo/f9kX+7lngqG1QP jWsxQG/gBEc2bvrdXeNW1wcQxJs+s8xO7XiTigXhAqZjKOFgFoWeSQ70XGMbIwKg w98ogdNv5r3kXVVOqQImKwnzRbSwNfiZ7WS7SfpCwqXj9aMJG360Ytzv865aA6eo OMZqiU/ypEgowqz9gIE0jawjIb+EUBSb4fkOUiBTN8Z9VNhu0BpWHVdP3np9AgMB AAGjggOIMIIDhDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSTvktEMQPJ6jzk Bp0JLGK5jwiV/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmI4 NXM1ZVhZTmtmY2dWYVdxOTVKdWtUeTZjNm8zcXRuaFVuaU5zZkFia20vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zi ODVzNWVYWU5rZmNnVmFXcTk1SnVrVHk2YzZvM3F0bmhVbmlOc2ZBYmttLzEvOTNC RTRCNDQzMTAzQzlFQTNDRTQwNjlEMDkyQzYyQjk4RjA4OTVGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEH AQH/BG0wazBaBAIAATBUAwQCigDEAwQCitvwAwQCpKMMAwQCqHnAAwQCqk5QAwQC qvRgAwQEscjwAwQEsd8QAwQAswAYAwQEusJwAwQDuuAYAwQDuuloAwQDvwYwAwQC yUc8MA0EAgACMAcDBQAoBAlUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDoTAN BgkqhkiG9w0BAQsFAAOCAQEAYbx9Zz7SuMtRt2x/zURsbiuhLTKcZ2VN8b3dv5BW qOnXs5Bnng+eT3KOuR94L3b1isA4OSmq6VwVWSR4JcHgyewEpXjI4qr8cQieFCv9 G8PtBgreZIIssTBi0oOvW6yykXk55a2jGiaywQJxBDD4Z5YMHiWVlYsgxm3Kaq90 SAjD4HCb9Jowhc+UHt4uxkRnruwrmnOqiwpxKqm/+yyGnMfrwZzduVX7amkKq5jS YXiIWv8zw6X/p1ZZVXopDF1TY5/Xm5IRD9Op1IUcDGHfIdQZpv09bFZti3CYAWb7 3jXkO1dqxuhT4xof84iz6rUGXjq/ESGkJyPrN/G+e6Bbuw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:18 2025 by rpki-client on console.sobornost.net