$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer File: 0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer (raw, json) Hash identifier: p9tMHPUkHdnbyvQzdFmFV0bu3n0xAh4PxTvpHFsEYtE= Subject key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 672F8AFACA0E5FD70F92441EE68755B05A1E14ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft caRepository: rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:57:12 +0000 Certificate not after: Thu 03 Apr 2025 08:02:12 +0000 Subordinate resources: AS: 28634 IP: 177.105.128.0/20 IP: 179.96.128.0/19 IP: 189.90.96.0/20 IP: 201.62.64.0/19 IP: 2804:128::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2f:8a:fa:ca:0e:5f:d7:0f:92:44:1e:e6:87:55:b0:5a:1e:14:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:57:12 2024 GMT Not After : Apr 3 08:02:12 2025 GMT Subject: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:83:af:57:20:4d:79:03:da:69:0f:9e:1a:2c: e9:0a:d3:e1:db:a7:93:f6:72:52:43:78:ad:0a:11: 3a:cd:b7:ce:7c:8a:89:dd:65:76:a5:05:15:e3:76: 0a:48:85:e9:ef:76:20:c3:76:39:b2:46:5b:63:e5: ef:e1:09:30:cb:01:fd:21:ae:88:cc:7c:ee:cf:eb: 7a:a7:59:89:6b:3c:92:fe:24:30:e9:f4:63:9a:f8: 40:d4:18:2f:bb:ae:07:4f:fa:77:4d:12:f1:a6:a2: 80:57:7c:ed:4f:eb:ac:d3:04:15:dc:17:47:0f:13: b7:77:36:fc:d8:df:40:28:18:c2:41:69:82:29:77: e6:f3:b0:21:4c:5d:80:49:68:5c:5c:35:81:8f:11: 88:ee:bb:1a:ca:74:9e:44:f1:73:cd:e6:94:f4:39: 6e:da:4b:df:93:8d:de:0a:31:8a:31:83:4c:62:a1: 08:ae:72:52:cb:ec:a0:ad:fd:69:e3:43:6c:79:dc: 4d:f4:90:85:d9:04:cc:36:f8:bc:d3:0e:54:a6:9b: 97:ba:4c:57:8d:e2:c8:e5:e7:23:27:82:4b:e9:1f: 01:eb:b0:4c:b7:6a:e0:fd:bc:4f:f9:33:7f:c1:55: 50:a0:c7:f2:7f:db:e7:c3:e9:55:25:f7:06:f2:47: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.105.128.0/20 179.96.128.0/19 189.90.96.0/20 201.62.64.0/19 IPv6: 2804:128::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28634 Signature Algorithm: sha256WithRSAEncryption a8:ae:0e:43:e9:0a:ba:82:e8:d1:bc:40:2d:c8:1d:19:b0:c7: 93:9e:be:47:b1:27:e7:cc:98:0a:bc:ad:38:fa:b5:2b:2a:2e: 8f:93:57:04:0e:fa:40:ad:80:ce:72:fe:ab:8d:41:fa:ba:e9: 9a:be:02:ba:14:44:f2:c6:d9:62:7c:43:d8:b7:c0:ca:43:77: 99:86:55:e4:99:01:0e:1e:26:e3:c4:65:4b:26:92:40:91:5a: e5:89:5a:38:66:80:79:37:9e:96:4f:ed:d0:f1:6e:65:d8:58: b0:68:3d:cd:dd:c1:f0:e1:f3:82:78:c5:22:c7:55:16:30:b3: da:c0:c8:29:a4:dc:ce:ec:e6:63:2d:52:3f:81:a0:0a:a0:10: 0d:a8:c4:06:cc:52:95:25:c1:ea:bd:42:82:a7:e7:ee:75:64: ac:3b:73:cd:f6:cf:71:15:37:96:74:79:79:77:1a:e8:63:31: 71:f7:6d:be:78:97:ee:36:85:c3:5d:3f:28:2d:9c:3a:39:d5: 75:aa:b0:c6:39:98:0c:96:c0:96:09:56:45:3b:64:0f:be:67: a6:5a:78:85:e8:15:b0:0f:2f:d0:74:bb:da:c0:99:e3:d1:ca: 46:b8:2d:6b:c3:78:c1:70:af:1f:79:8b:c0:bb:b6:01:10:59: c4:0f:49:63 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUZy+K+soOX9cPkkQe5odVsFoeFO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzU3MTJaFw0yNTA0MDMwODAyMTJaMDMxMTAvBgNV BAMTKDBENkZGRDNDMzIwNDYxOEVGM0NDRUIyOTdGRDFBNDIwNzNDRDcxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0g69XIE15A9ppD54aLOkK0+Hb p5P2clJDeK0KETrNt858iondZXalBRXjdgpIhenvdiDDdjmyRltj5e/hCTDLAf0h rojMfO7P63qnWYlrPJL+JDDp9GOa+EDUGC+7rgdP+ndNEvGmooBXfO1P66zTBBXc F0cPE7d3NvzY30AoGMJBaYIpd+bzsCFMXYBJaFxcNYGPEYjuuxrKdJ5E8XPN5pT0 OW7aS9+Tjd4KMYoxg0xioQiuclLL7KCt/WnjQ2x53E30kIXZBMw2+LzTDlSmm5e6 TFeN4sjl5yMngkvpHwHrsEy3auD9vE/5M3/BVVCgx/J/2+fD6VUl9wbyR7JVAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNb/08MgRhjvPM 6yl/0aQgc81xKjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRktR d1ZvQUR5RVA1S045NmZoemlxTkhBWlJYVGtEQnBBWTJXcWNIaE1aNWcvMy8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZL UXdWb0FEeUVQNUtOOTZmaHppcU5IQVpSWFRrREJwQVkyV3FjSGhNWjVnLzMvMEQ2 RkZEM0MzMjA0NjE4RUYzQ0NFQjI5N0ZEMUE0MjA3M0NENzEyQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQEsWmAAwQFs2CAAwQEvVpgAwQFyT5AMA0EAgACMAcD BQAoBAEoMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm/aMA0GCSqGSIb3DQEBCwUA A4IBAQCorg5D6Qq6gujRvEAtyB0ZsMeTnr5HsSfnzJgKvK04+rUrKi6Pk1cEDvpA rYDOcv6rjUH6uumavgK6FETyxtlifEPYt8DKQ3eZhlXkmQEOHibjxGVLJpJAkVrl iVo4ZoB5N56WT+3Q8W5l2FiwaD3N3cHw4fOCeMUix1UWMLPawMgppNzO7OZjLVI/ gaAKoBANqMQGzFKVJcHqvUKCp+fudWSsO3PN9s9xFTeWdHl5dxroYzFx922+eJfu NoXDXT8oLZw6OdV1qrDGOZgMlsCWCVZFO2QPvmemWniF6BWwDy/QdLvawJnj0cpG uC1rw3jBcK8feYvAu7YBEFnED0lj -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:43 2024 by rpki-client on console.sobornost.net