$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer File: 0234F91A291644025C2C2460D355272A046B58DD.cer (raw, json) Hash identifier: MdLx6o7Ty0+js7pPGV3oz550TfY8CNGCcomMW71pQ/4= Subject key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2E49DC71198219DB9584FDCD1FD5569D258702C0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.mft caRepository: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Jul 2024 17:57:12 +0000 Certificate not after: Mon 21 Jul 2025 18:02:12 +0000 Subordinate resources: AS: 28287 AS: 262272 IP: 45.70.232.0/22 IP: 138.36.180.0/22 IP: 138.118.120.0/22 IP: 167.249.176.0/22 IP: 168.194.60.0/22 IP: 177.21.128.0/20 IP: 177.130.96.0/20 IP: 177.154.32.0/20 IP: 179.127.64.0/21 IP: 187.1.16.0/20 IP: 187.120.128.0/19 IP: 189.124.80.0/20 IP: 201.49.192.0/20 IP: 2804:1080::/32 IP: 2804:21f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:49:dc:71:19:82:19:db:95:84:fd:cd:1f:d5:56:9d:25:87:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 17:57:12 2024 GMT Not After : Jul 21 18:02:12 2025 GMT Subject: CN=0234F91A291644025C2C2460D355272A046B58DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:84:1d:56:cc:9c:ed:79:8a:63:42:7c:08: 66:cd:6b:0a:11:14:4d:d0:c2:c8:cc:78:71:be:a7: 95:a1:e2:ff:f8:95:90:e8:42:62:0b:eb:9c:21:01: 5e:51:87:ed:38:2c:f5:d3:11:1f:dc:5a:5b:5a:a6: 58:2d:2b:11:50:cc:b1:0d:64:eb:e9:e1:87:93:35: 0b:86:1d:0d:9c:2e:57:25:98:18:e1:39:1b:f9:cc: a0:1d:b7:97:50:85:b1:b9:b8:3f:0e:c2:9e:90:21: 3a:4d:65:96:ba:52:ec:f5:f1:60:91:a4:d4:ca:6f: 7d:d0:5d:85:d6:c7:67:c9:8b:f6:ca:53:85:e2:0e: 99:a9:53:6f:c0:9a:dd:67:ac:04:35:65:01:1e:71: 73:09:7a:ab:71:28:8f:ce:5a:ce:f4:b1:69:d4:3c: 8e:fc:48:ca:1a:86:63:24:fb:53:3e:c6:09:c5:20: 4c:63:0e:4f:98:e9:08:30:b9:30:28:fe:52:de:e6: 03:96:dd:d6:89:10:6c:b6:3e:e4:a4:8f:89:25:b0: 2a:cd:f7:db:2b:5e:06:4b:45:af:9f:34:0a:8c:e6: f8:62:51:94:c8:08:e1:85:fc:1a:64:43:dd:bd:28: b6:e7:f9:5b:ec:5a:f2:7d:81:a1:78:94:90:80:f7: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.70.232.0/22 138.36.180.0/22 138.118.120.0/22 167.249.176.0/22 168.194.60.0/22 177.21.128.0/20 177.130.96.0/20 177.154.32.0/20 179.127.64.0/21 187.1.16.0/20 187.120.128.0/19 189.124.80.0/20 201.49.192.0/20 IPv6: 2804:1080::/32 2804:21f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28287 262272 Signature Algorithm: sha256WithRSAEncryption 84:74:86:95:5c:05:4c:eb:70:17:79:45:3f:68:c4:11:b3:7d: 6e:20:fe:10:4d:da:e1:46:7d:42:4d:12:55:5c:e7:5c:b3:fb: d9:06:fe:e5:52:1b:5b:bc:ec:c3:db:f4:c5:3a:e8:35:ba:7e: 23:67:b9:6e:9d:f6:7c:ff:02:85:f0:94:41:2a:44:c7:e9:57: 52:34:56:8d:75:61:cc:b6:af:04:c4:48:89:8d:7a:6f:71:22: 02:c1:24:09:1b:7c:80:cd:57:96:a5:9a:f6:2b:24:dc:7e:70: 02:40:e2:e9:b5:54:d2:95:29:2a:8c:c5:f5:04:31:ed:ca:87: d2:8f:31:53:71:f6:26:1f:1f:9d:36:65:be:3c:a3:76:52:2f: 0d:13:75:14:90:e8:81:63:4e:47:e2:de:68:4d:50:e9:0e:6c: 53:80:67:0f:1a:85:48:2b:7d:c4:d9:5b:a5:27:93:6b:91:c0: 7b:2f:1e:89:2e:52:a6:9b:c6:8a:47:14:6d:8b:b0:ba:58:51: 73:8d:ef:a8:06:76:65:1c:d2:10:0c:2b:d3:b1:1b:1b:31:01: a4:8a:76:87:58:97:ca:60:ab:07:55:05:a8:a9:9c:c2:2b:17: 3b:95:30:2c:ff:1a:58:77:68:d3:85:63:fd:15:a3:b9:d2:f7: 8e:fe:0b:22 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIULknccRmCGduVhP3NH9VWnSWHAsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjIxNzU3MTJaFw0yNTA3MjExODAyMTJaMDMxMTAvBgNV BAMTKDAyMzRGOTFBMjkxNjQ0MDI1QzJDMjQ2MEQzNTUyNzJBMDQ2QjU4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyIQdVsyc7XmKY0J8CGbNawoR FE3QwsjMeHG+p5Wh4v/4lZDoQmIL65whAV5Rh+04LPXTER/cWltaplgtKxFQzLEN ZOvp4YeTNQuGHQ2cLlclmBjhORv5zKAdt5dQhbG5uD8Owp6QITpNZZa6Uuz18WCR pNTKb33QXYXWx2fJi/bKU4XiDpmpU2/Amt1nrAQ1ZQEecXMJeqtxKI/OWs70sWnU PI78SMoahmMk+1M+xgnFIExjDk+Y6QgwuTAo/lLe5gOW3daJEGy2PuSkj4klsCrN 99srXgZLRa+fNAqM5vhiUZTICOGF/BpkQ929KLbn+VvsWvJ9gaF4lJCA925xAgMB AAGjggONMIIDiTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCNPkaKRZEAlws JGDTVScqBGtY3TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDNm WHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1nVUsvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gz Zlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzIvMDIz NEY5MUEyOTE2NDQwMjVDMkMyNDYwRDM1NTI3MkEwNDZCNThERC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEH AQH/BG4wbDBUBAIAATBOAwQCLUboAwQCiiS0AwQCinZ4AwQCp/mwAwQCqMI8AwQE sRWAAwQEsYJgAwQEsZogAwQDs39AAwQEuwEQAwQFu3iAAwQEvXxQAwQEyTHAMBQE AgACMA4DBQAoBBCAAwUAKAQh+DAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJufwID BACAMA0GCSqGSIb3DQEBCwUAA4IBAQCEdIaVXAVM63AXeUU/aMQRs31uIP4QTdrh Rn1CTRJVXOdcs/vZBv7lUhtbvOzD2/TFOug1un4jZ7lunfZ8/wKF8JRBKkTH6VdS NFaNdWHMtq8ExEiJjXpvcSICwSQJG3yAzVeWpZr2KyTcfnACQOLptVTSlSkqjMX1 BDHtyofSjzFTcfYmHx+dNmW+PKN2Ui8NE3UUkOiBY05H4t5oTVDpDmxTgGcPGoVI K33E2VulJ5NrkcB7Lx6JLlKmm8aKRxRti7C6WFFzje+oBnZlHNIQDCvTsRsbMQGk inaHWJfKYKsHVQWoqZzCKxc7lTAs/xpYd2jThWP9FaO50veO/gsi -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:41 2024 by rpki-client on console.sobornost.net