$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BBD9AC921F2635DCF85BC0FD86EE073AAD1F1D99.cer File: BBD9AC921F2635DCF85BC0FD86EE073AAD1F1D99.cer (raw, json) Hash identifier: 7GZ7vPmvHuD+DKFNlvb0KDMPLIn1ms5f7x1Zz3jiysQ= Subject key identifier: BB:D9:AC:92:1F:26:35:DC:F8:5B:C0:FD:86:EE:07:3A:AD:1F:1D:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1C67028DA7E7B8310ABC9187D147CCEC0EAB70A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/BBD9AC921F2635DCF85BC0FD86EE073AAD1F1D99.mft caRepository: rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 24 Apr 2025 13:29:18 +0000 Certificate not after: Thu 23 Apr 2026 13:34:18 +0000 Subordinate resources: AS: 267367 IP: 45.234.148.0/22 IP: 2804:4c60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:67:02:8d:a7:e7:b8:31:0a:bc:91:87:d1:47:cc:ec:0e:ab:70:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 24 13:29:18 2025 GMT Not After : Apr 23 13:34:18 2026 GMT Subject: CN=BBD9AC921F2635DCF85BC0FD86EE073AAD1F1D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:fc:bd:6d:b4:82:e1:ce:15:63:63:39:22: 2b:a7:33:b1:00:48:6d:5d:ad:5d:67:1a:72:77:bd: 9f:7a:9f:5f:ef:2e:02:1e:48:4a:7c:af:73:0b:2f: 24:9a:16:9c:7b:72:72:83:46:a2:36:9c:2e:a2:0f: bd:b0:bc:d4:45:d3:94:1f:99:7c:91:d0:a4:73:23: fc:41:5a:88:7b:23:22:ea:a1:95:1f:01:ca:9c:0f: 91:e7:f5:a3:48:7a:e6:1c:53:db:39:07:3c:35:f6: 90:c2:2f:9e:e7:c7:f8:eb:ab:cb:a8:4d:af:86:fa: 08:ba:3a:3d:00:3f:d9:cc:b8:18:8e:f0:3c:89:6f: 99:08:6f:4c:58:9d:0a:da:03:ef:c8:3e:db:f0:9d: 7f:3f:9a:6d:f4:67:00:74:82:e9:51:19:ee:2e:b4: ee:0f:e9:71:0a:12:b5:34:df:32:d8:e2:f7:0d:a7: 44:d2:0d:3e:70:e9:bf:15:2e:44:30:af:d8:a5:c2: 2d:ab:2e:80:dd:41:ba:bb:4b:89:3f:6a:1b:0a:9a: 3c:fb:35:90:91:e6:7c:da:c1:2d:75:55:ee:db:fb: ab:4a:e1:96:85:a6:96:56:6c:42:37:16:45:0f:df: d2:1e:2b:92:05:2a:f1:59:09:8c:85:fb:fb:e4:08: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:D9:AC:92:1F:26:35:DC:F8:5B:C0:FD:86:EE:07:3A:AD:1F:1D:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7n7JhEsGrwnddSxjuWu64x5bPpBF7Kx7AnpC8YnErAqR/0/BBD9AC921F2635DCF85BC0FD86EE073AAD1F1D99.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.148.0/22 IPv6: 2804:4c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267367 Signature Algorithm: sha256WithRSAEncryption d0:33:d9:c0:31:a5:a9:e2:26:e9:8d:5b:a5:1e:6f:05:a2:a6: 02:3c:34:bb:ab:e5:2c:60:c3:2d:63:24:87:35:e4:1e:79:c8: a8:d8:28:33:e2:68:2c:08:15:a5:45:e5:1e:e6:a7:d0:a7:21: 65:3d:5f:c8:78:e3:f1:a2:f7:56:57:f7:88:3b:09:ee:2a:ee: 3b:cc:f2:4d:1f:45:55:46:f2:34:84:75:7c:5f:90:e3:c7:b6: 16:96:b3:b2:37:ed:cc:40:b9:4d:b1:67:43:85:0b:a2:a9:15: 16:29:cf:68:e6:76:2c:7a:31:4a:57:ab:e1:99:00:30:dd:a4: 78:cf:08:cb:9c:71:ab:9b:bd:e9:37:46:68:e0:de:57:28:09: 47:c9:bf:f6:40:f0:be:9b:9e:81:bc:ee:78:8d:4f:12:61:d6: 98:98:a5:a7:9a:73:75:d2:9f:dc:e0:08:b6:32:62:f6:99:e1: e6:b8:1a:43:27:73:88:96:40:52:38:ba:a7:6a:fa:12:59:23: a0:d3:45:80:4a:cf:50:77:69:4a:b6:f0:c9:da:03:c3:b8:1a: a5:84:e7:17:72:95:a5:37:e8:de:a6:63:78:69:5e:cd:60:ee: 8e:fe:46:93:6c:2e:d2:dc:b0:9a:fc:f9:6e:06:74:5f:2a:aa: 29:e6:3e:6f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUHGcCjafnuDEKvJGH0UfM7A6rcKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA0MjQxMzI5MThaFw0yNjA0MjMxMzM0MThaMDMxMTAvBgNV BAMTKEJCRDlBQzkyMUYyNjM1RENGODVCQzBGRDg2RUUwNzNBQUQxRjFEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyPy9bbSC4c4VY2M5IiunM7EA SG1drV1nGnJ3vZ96n1/vLgIeSEp8r3MLLySaFpx7cnKDRqI2nC6iD72wvNRF05Qf mXyR0KRzI/xBWoh7IyLqoZUfAcqcD5Hn9aNIeuYcU9s5Bzw19pDCL57nx/jrq8uo Ta+G+gi6Oj0AP9nMuBiO8DyJb5kIb0xYnQraA+/IPtvwnX8/mm30ZwB0gulRGe4u tO4P6XEKErU03zLY4vcNp0TSDT5w6b8VLkQwr9ilwi2rLoDdQbq7S4k/ahsKmjz7 NZCR5nzawS11Ve7b+6tK4ZaFppZWbEI3FkUP39IeK5IFKvFZCYyF+/vkCOxtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS72aySHyY13Phb wP2G7gc6rR8dmTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN243 SmhFc0dyd25kZFN4anVXdTY0eDViUHBCRjdLeDdBbnBDOFluRXJBcVIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdu N0poRXNHcnduZGRTeGp1V3U2NHg1YlBwQkY3S3g3QW5wQzhZbkVyQXFSLzAvQkJE OUFDOTIxRjI2MzVEQ0Y4NUJDMEZEODZFRTA3M0FBRDFGMUQ5OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeqUMA0EAgACMAcDBQAoBExgMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUZzANBgkqhkiG9w0BAQsFAAOCAQEA0DPZwDGlqeIm6Y1b pR5vBaKmAjw0u6vlLGDDLWMkhzXkHnnIqNgoM+JoLAgVpUXlHuan0KchZT1fyHjj 8aL3Vlf3iDsJ7iruO8zyTR9FVUbyNIR1fF+Q48e2FpazsjftzEC5TbFnQ4ULoqkV FinPaOZ2LHoxSler4ZkAMN2keM8Iy5xxq5u96TdGaODeVygJR8m/9kDwvpuegbzu eI1PEmHWmJilp5pzddKf3OAItjJi9pnh5rgaQydziJZAUji6p2r6ElkjoNNFgErP UHdpSrbwydoDw7gapYTnF3KVpTfo3qZjeGlezWDujv5Gk2wu0tywmvz5bgZ0Xyqq KeY+bw== -----END CERTIFICATE-----Generated at Fri Apr 25 00:07:40 2025 by rpki-client on console.sobornost.net