$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer File: 08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.cer (raw, json) Hash identifier: yRAZaPJPVanNLa75J5jzjWHayd/4DJ6GrThTL8kNgxc= Subject key identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B32A80D558B5893B70021E5BC3E2126DF686C3D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.mft caRepository: rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Jun 2024 18:32:41 +0000 Certificate not after: Tue 03 Jun 2025 18:37:41 +0000 Subordinate resources: AS: 270962 IP: 187.84.120.0/22 IP: 2804:7428::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:32:a8:0d:55:8b:58:93:b7:00:21:e5:bc:3e:21:26:df:68:6c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 18:32:41 2024 GMT Not After : Jun 3 18:37:41 2025 GMT Subject: CN=08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:ee:90:08:a5:14:19:e0:20:f0:4c:51:a6: 74:ef:c7:99:7e:75:6a:5d:e0:ad:dc:c8:63:48:13: 14:4f:fd:a0:f2:ad:5c:f2:a7:c6:d9:66:9a:6d:b8: 6e:9a:7f:d7:53:55:33:ea:c8:9b:b4:e0:6d:09:3a: 70:5d:81:a2:4b:3d:3f:51:e8:c4:d8:60:7a:d8:bc: ff:74:24:0a:c7:e0:60:67:c6:6b:18:d1:a2:23:59: da:b8:c5:b1:3c:87:b6:c9:fd:04:45:c8:b3:a0:09: 2a:97:02:73:61:92:77:d9:9f:4b:08:81:9c:26:92: d1:74:35:9d:35:5b:e0:42:96:e8:c8:1d:66:e3:2e: e8:be:bd:ee:dc:d8:88:9d:3b:f0:e2:58:27:c8:a7: 95:d0:26:bf:9a:84:81:30:af:4b:cb:ce:e9:32:b9: 4b:40:d1:e4:d7:5e:c9:ca:4d:e7:1b:d5:d8:3e:0d: 90:8b:0f:af:6a:0a:75:f0:f7:17:17:67:40:27:8e: a0:3e:4c:59:c6:66:a7:b4:03:cd:b7:ac:7f:3c:64: 21:2a:7d:4e:9f:3f:fc:b0:b9:88:c0:d4:16:f7:f0: 4f:cb:f9:ad:e4:23:97:44:d2:fa:76:30:b5:d8:73: b4:ca:5e:51:7d:f3:87:b1:0d:0d:55:87:ad:ee:c7: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:F7:AF:F5:CA:BD:E7:CD:FB:14:03:52:C2:CF:6D:11:CA:1C:20:00 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/08F7AFF5CABDE7CDFB140352C2CF6D11CA1C2000.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.84.120.0/22 IPv6: 2804:7428::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270962 Signature Algorithm: sha256WithRSAEncryption 29:6a:b3:68:4f:6a:b5:36:f2:e3:06:58:44:58:68:6d:b7:f7: e6:9d:01:0d:d5:c9:4b:7d:3f:a1:68:30:9f:24:f4:65:a8:3e: c5:1d:cf:81:0b:eb:d7:a0:39:3d:93:52:b4:9a:51:53:e4:24: 68:2d:0e:b4:ca:0f:ba:85:b2:92:67:7b:66:f4:bf:ee:7a:0c: 7f:5c:ae:93:c0:e5:8a:a6:b7:50:cc:43:c2:e6:bc:31:ac:ba: 06:07:93:73:f9:a2:d1:41:98:23:51:34:e1:77:03:b2:38:f1: 1d:59:fb:8e:c9:ff:e1:bb:51:54:af:15:01:32:40:e2:19:67: 28:45:b3:64:f1:49:ef:ba:16:ae:8e:72:b2:42:86:cd:72:16: e6:3b:c5:1e:23:d7:33:12:dd:2a:59:92:b3:95:db:f3:58:6d: 01:26:f6:f0:96:ec:60:b9:57:11:10:35:9f:4d:f9:e0:ed:cb: 97:b4:a3:c6:96:8f:8b:23:30:e7:64:bd:90:6c:33:da:5b:ff: 5b:d0:6f:35:51:ee:d4:e6:32:db:a8:9f:32:79:46:8d:41:5e: f7:6e:67:6f:e2:80:d7:7c:9f:2b:91:65:f9:5c:dc:02:7c:35: 40:e4:8e:5f:d8:10:d1:e9:5e:78:b7:c0:c6:5d:57:1e:04:5a: 05:3c:12:4a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOzKoDVWLWJO3ACHlvD4hJt9obD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MDQxODMyNDFaFw0yNTA2MDMxODM3NDFaMDMxMTAvBgNV BAMTKDA4RjdBRkY1Q0FCREU3Q0RGQjE0MDM1MkMyQ0Y2RDExQ0ExQzIwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJZe6QCKUUGeAg8ExRpnTvx5l+ dWpd4K3cyGNIExRP/aDyrVzyp8bZZpptuG6af9dTVTPqyJu04G0JOnBdgaJLPT9R 6MTYYHrYvP90JArH4GBnxmsY0aIjWdq4xbE8h7bJ/QRFyLOgCSqXAnNhknfZn0sI gZwmktF0NZ01W+BClujIHWbjLui+ve7c2IidO/DiWCfIp5XQJr+ahIEwr0vLzuky uUtA0eTXXsnKTecb1dg+DZCLD69qCnXw9xcXZ0AnjqA+TFnGZqe0A823rH88ZCEq fU6fP/ywuYjA1Bb38E/L+a3kI5dE0vp2MLXYc7TKXlF984exDQ1Vh63ux649AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQI96/1yr3nzfsU A1LCz20RyhwgADAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNW5p dDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3MTUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVu aXQzTkRQS0hqSDcxcU55YWdUVjd4bUdjN2VKV2RGRUNEN1k3V0x5NzE1LzAvMDhG N0FGRjVDQUJERTdDREZCMTQwMzUyQzJDRjZEMTFDQTFDMjAwMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCu1R4MA0EAgACMAcDBQAoBHQoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQicjANBgkqhkiG9w0BAQsFAAOCAQEAKWqzaE9qtTby4wZY RFhobbf35p0BDdXJS30/oWgwnyT0Zag+xR3PgQvr16A5PZNStJpRU+QkaC0OtMoP uoWykmd7ZvS/7noMf1yuk8Dliqa3UMxDwua8May6BgeTc/mi0UGYI1E04XcDsjjx HVn7jsn/4btRVK8VATJA4hlnKEWzZPFJ77oWro5yskKGzXIW5jvFHiPXMxLdKlmS s5Xb81htASb28JbsYLlXERA1n0354O3Ll7SjxpaPiyMw52S9kGwz2lv/W9BvNVHu 1OYy26ifMnlGjUFe925nb+KA13yfK5Fl+VzcAnw1QOSOX9gQ0eleeLfAxl1XHgRa BTwSSg== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:42 2024 by rpki-client on console.sobornost.net