$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer File: B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer (raw, json) Hash identifier: ytVBrgJgTk/75IwuSKJUmr0jQgwBHHJSzmUJ73tjE5U= Subject key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59AAD2C0DFA306130050C94AFB2AF65012573B84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft caRepository: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 24 Apr 2025 02:38:01 +0000 Certificate not after: Thu 23 Apr 2026 02:43:01 +0000 Subordinate resources: AS: 52790 IP: 177.39.12.0/22 IP: 200.196.140.0/22 IP: 2804:18dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:aa:d2:c0:df:a3:06:13:00:50:c9:4a:fb:2a:f6:50:12:57:3b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 24 02:38:01 2025 GMT Not After : Apr 23 02:43:01 2026 GMT Subject: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:2d:0c:79:4a:80:bf:d5:de:7f:51:72:9f: 0e:4e:90:63:31:d9:48:3a:3e:00:80:b6:bd:db:0c: 08:66:dc:8a:0a:41:06:b4:3b:60:d1:55:92:e2:9a: d4:fb:a3:76:93:5c:55:b1:b6:fe:44:9f:22:ea:e4: ee:2d:32:f3:bc:88:52:9f:f6:88:92:04:3c:06:ef: 8f:40:4b:33:3a:93:e7:50:b7:84:3e:d2:bf:b3:7e: 83:b2:b4:dc:35:42:f6:61:78:a3:9a:19:a1:dc:1f: 92:e1:ca:fe:64:23:d0:6c:90:3a:f0:05:6a:06:f9: 42:25:a0:00:c0:8b:d1:c8:b5:5d:3c:f8:98:62:d1: f5:f3:87:15:00:a8:f2:80:7a:6f:81:66:fc:34:a5: a3:6f:5c:87:b0:67:75:b7:d2:61:cd:e6:54:3b:af: 96:8b:0d:16:5a:9e:5a:eb:c1:e0:fc:91:34:9e:c0: d5:75:d7:b5:40:d4:c7:66:cf:04:5b:e7:ad:02:86: 9e:6d:0e:44:8c:41:aa:d8:99:9f:9e:7a:db:56:91: ae:ba:a9:53:35:4f:e6:ee:aa:4d:c4:11:73:f6:ff: 19:3a:f2:7f:f8:09:15:22:fc:80:72:a0:4e:51:c9: ac:83:94:f4:e0:ce:86:c0:00:ca:20:dd:cb:bc:ea: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.39.12.0/22 200.196.140.0/22 IPv6: 2804:18dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52790 Signature Algorithm: sha256WithRSAEncryption 20:44:24:20:c4:53:69:db:3e:11:95:75:2e:12:f2:44:fb:bf: a7:f9:ed:bf:02:84:37:02:49:ce:4b:e0:ac:07:c9:e0:9e:0f: c9:a8:11:a7:0f:04:3a:21:3e:e5:e8:0b:bb:18:07:eb:d5:b6: 42:bd:71:e9:f3:8b:e9:17:db:ec:21:20:3f:28:47:24:4d:0b: 96:c7:34:ad:7f:fb:d5:ee:5d:3a:3e:f3:c7:d7:af:4b:17:fa: fa:04:ff:e4:73:f4:d2:43:70:2b:f0:0c:00:d2:6c:34:6f:4b: 16:5b:b2:52:25:03:c4:06:6f:57:85:74:d8:84:9f:53:da:0f: 44:d3:2a:70:f4:a6:1e:40:53:bb:e5:24:cc:d9:c4:8a:ec:9f: 71:5c:a1:3f:22:b5:69:64:0b:7f:5a:26:ca:e7:40:86:a7:93: 3e:37:18:55:98:2a:8c:09:75:89:14:8a:a2:0d:2d:45:0b:99: 64:8f:ab:d9:4d:f1:54:63:ef:d4:ca:4c:31:ee:05:99:e5:5f: 8a:7a:cd:b1:80:5d:c7:d3:5a:35:c0:73:ce:bb:d9:d9:bc:58: ce:05:3b:87:05:3f:af:f3:96:eb:28:3f:9d:16:da:35:11:f9: 1c:de:d6:78:2e:4b:ab:9f:b2:1d:f9:7f:75:7c:bd:75:60:0d: c6:f9:04:93 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUWarSwN+jBhMAUMlK+yr2UBJXO4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjQwMjM4MDFaFw0yNjA0MjMwMjQzMDFaMDMxMTAvBgNV BAMTKEI4QzQyMkY0RTdERUIyMkJGODQ0OUE0ODk2REE1QjYwNThERjY1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2y0MeUqAv9Xef1Fynw5OkGMx 2Ug6PgCAtr3bDAhm3IoKQQa0O2DRVZLimtT7o3aTXFWxtv5EnyLq5O4tMvO8iFKf 9oiSBDwG749ASzM6k+dQt4Q+0r+zfoOytNw1QvZheKOaGaHcH5Lhyv5kI9BskDrw BWoG+UIloADAi9HItV08+Jhi0fXzhxUAqPKAem+BZvw0paNvXIewZ3W30mHN5lQ7 r5aLDRZanlrrweD8kTSewNV117VA1MdmzwRb560Chp5tDkSMQarYmZ+eettWka66 qVM1T+buqk3EEXP2/xk68n/4CRUi/IByoE5RyayDlPTgzobAAMog3cu86lBLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4xCL0596yK/hE mkiW2ltgWN9lrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNmJR amZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdjdU4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZi UWpmQ1B3TG9mY1B1NVZieDdLRWRFc3AxdDVRSkV1clBjeVBhaVhnY3VOLzAvQjhD NDIyRjRFN0RFQjIyQkY4NDQ5QTQ4OTZEQTVCNjA1OERGNjVBRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsScMAwQCyMSMMA0EAgACMAcDBQAoBBjcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDONjANBgkqhkiG9w0BAQsFAAOCAQEAIEQkIMRT ads+EZV1LhLyRPu/p/ntvwKENwJJzkvgrAfJ4J4PyagRpw8EOiE+5egLuxgH69W2 Qr1x6fOL6Rfb7CEgPyhHJE0Llsc0rX/71e5dOj7zx9evSxf6+gT/5HP00kNwK/AM ANJsNG9LFluyUiUDxAZvV4V02ISfU9oPRNMqcPSmHkBTu+UkzNnEiuyfcVyhPyK1 aWQLf1omyudAhqeTPjcYVZgqjAl1iRSKog0tRQuZZI+r2U3xVGPv1MpMMe4FmeVf inrNsYBdx9NaNcBzzrvZ2bxYzgU7hwU/r/OW6yg/nRbaNRH5HN7WeC5Lq5+yHfl/ dXy9dWANxvkEkw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:38:26 2025 by rpki-client on console.sobornost.net