$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer File: 8BD6A70FA78C09BB2792766E310F7002F0203A65.cer (raw, json) Hash identifier: eC6eJFMmqpvmyq/BHPRKv7gxVuGxGjiJ536Oi0wWEuc= Subject key identifier: 8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73F5FAD49279CC24EDEE7C37E0B7C51F6F860E79 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft caRepository: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 14 Dec 2024 12:06:28 +0000 Certificate not after: Sat 13 Dec 2025 12:11:28 +0000 Subordinate resources: AS: 263544 IP: 143.0.48.0/22 IP: 168.227.84.0/22 IP: 170.78.248.0/22 IP: 191.5.240.0/20 IP: 2804:13a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f5:fa:d4:92:79:cc:24:ed:ee:7c:37:e0:b7:c5:1f:6f:86:0e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 14 12:06:28 2024 GMT Not After : Dec 13 12:11:28 2025 GMT Subject: CN=8BD6A70FA78C09BB2792766E310F7002F0203A65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:a4:5e:13:73:fe:2a:41:be:0f:e6:44:37: 84:51:8b:59:bb:4c:9f:09:1b:5b:d3:bf:54:0e:a0: 4d:41:ec:32:aa:c5:30:a1:ae:0c:77:46:ad:07:88: b5:fb:b0:a0:31:d6:b3:41:17:2e:40:62:72:4b:c8: 34:6c:54:86:d0:d7:b9:76:17:bb:45:47:1e:e0:70: ee:73:39:c7:fb:ef:43:c3:b4:1a:a6:c2:33:d9:f7: 40:12:c9:82:b4:3a:39:fe:fd:1d:f1:ff:7b:f6:f1: dd:28:47:cc:43:b6:77:0d:cb:44:da:3b:13:24:b9: 57:73:f7:3d:e2:53:75:a7:05:c3:be:92:1c:7c:8d: cf:7a:d1:79:0b:ef:71:a9:b1:28:08:c0:57:8e:c4: 84:e3:c1:39:f1:2a:56:fd:f2:5c:22:01:3b:2a:83: 74:e4:f2:b5:76:d3:87:b2:e0:a8:a3:32:07:3c:31: a2:ca:92:c6:85:2d:9d:e5:24:ad:4d:79:6b:75:3d: 7d:8a:0a:3c:6f:ef:3c:e2:50:3f:d6:7b:c6:50:40: cc:3e:79:74:6b:a0:4a:cc:ed:45:7d:d7:27:45:74: dc:5f:9a:55:09:3e:18:92:0c:2c:5d:7d:c9:75:32: 5b:74:54:4b:70:6d:fd:df:73:83:2a:d8:57:94:f1: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.48.0/22 168.227.84.0/22 170.78.248.0/22 191.5.240.0/20 IPv6: 2804:13a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263544 Signature Algorithm: sha256WithRSAEncryption 4b:1f:66:b1:6b:d8:01:9c:92:40:b9:9d:72:47:66:c0:c8:35: 60:d2:82:0b:32:47:74:5b:f7:1d:73:e4:f4:da:d7:2e:55:b1: 20:12:54:fa:bc:fa:ed:5f:e6:11:70:9a:8e:4c:45:70:63:78: 36:0e:79:e0:37:39:8d:1f:fb:d2:82:0d:92:5d:f3:13:a7:a0: f0:9f:76:48:3e:ca:63:42:39:c1:a7:6a:9a:de:18:5c:d6:7a: f4:12:fe:c9:73:1c:19:12:02:84:1c:6e:5b:cd:e6:b2:11:98: 55:db:18:f0:2f:28:33:13:71:4f:fe:c0:0d:60:f0:42:38:a5: a9:00:a7:a8:3c:cc:f0:83:4f:ec:d1:f5:ad:7c:00:86:a2:0b: 48:53:a1:81:a9:6e:61:ea:a2:c8:cf:34:6b:d1:cc:d7:b6:40: 45:06:c3:f2:74:3d:58:a4:ec:25:e7:9f:2a:c0:53:7d:e0:ce: 86:63:96:4d:6d:69:6d:61:5b:f5:9b:b5:4a:75:cb:27:cc:18: 6f:b0:47:d3:57:66:02:9b:ca:9b:a9:01:46:d1:c9:03:5c:50: b1:ea:9e:d6:42:70:76:34:07:3a:0d:c5:19:d7:e0:57:9d:73: 2f:eb:3e:a6:4d:aa:39:84:1e:17:8a:c0:97:a8:6b:d1:bf:c7: a9:00:25:23 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUc/X61JJ5zCTt7nw34LfFH2+GDnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTQxMjA2MjhaFw0yNTEyMTMxMjExMjhaMDMxMTAvBgNV BAMTKDhCRDZBNzBGQTc4QzA5QkIyNzkyNzY2RTMxMEY3MDAyRjAyMDNBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8U6ReE3P+KkG+D+ZEN4RRi1m7 TJ8JG1vTv1QOoE1B7DKqxTChrgx3Rq0HiLX7sKAx1rNBFy5AYnJLyDRsVIbQ17l2 F7tFRx7gcO5zOcf770PDtBqmwjPZ90ASyYK0Ojn+/R3x/3v28d0oR8xDtncNy0Ta OxMkuVdz9z3iU3WnBcO+khx8jc960XkL73GpsSgIwFeOxITjwTnxKlb98lwiATsq g3Tk8rV204ey4KijMgc8MaLKksaFLZ3lJK1NeWt1PX2KCjxv7zziUD/We8ZQQMw+ eXRroErM7UV91ydFdNxfmlUJPhiSDCxdfcl1Mlt0VEtwbf3fc4Mq2FeU8YwTAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSL1qcPp4wJuyeS dm4xD3AC8CA6ZTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEFG cWhQM3pSejJ4UjY5WUhvTXJ0WW5XczE1dnM2ZVgzTEZrRHkyNVJHV3gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhB RnFoUDN6UnoyeFI2OVlIb01ydFluV3MxNXZzNmVYM0xGa0R5MjVSR1d4LzAvOEJE NkE3MEZBNzhDMDlCQjI3OTI3NjZFMzEwRjcwMDJGMDIwM0E2NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQCjwAwAwQCqONUAwQCqk74AwQEvwXwMA0EAgACMAcD BQAoBBOoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFeDANBgkqhkiG9w0BAQsF AAOCAQEASx9msWvYAZySQLmdckdmwMg1YNKCCzJHdFv3HXPk9NrXLlWxIBJU+rz6 7V/mEXCajkxFcGN4Ng554Dc5jR/70oINkl3zE6eg8J92SD7KY0I5wadqmt4YXNZ6 9BL+yXMcGRIChBxuW83mshGYVdsY8C8oMxNxT/7ADWDwQjilqQCnqDzM8INP7NH1 rXwAhqILSFOhgaluYeqiyM80a9HM17ZARQbD8nQ9WKTsJeefKsBTfeDOhmOWTW1p bWFb9Zu1SnXLJ8wYb7BH01dmApvKm6kBRtHJA1xQseqe1kJwdjQHOg3FGdfgV51z L+s+pk2qOYQeF4rAl6hr0b/HqQAlIw== -----END CERTIFICATE-----Generated at Wed Apr 9 05:14:03 2025 by rpki-client