$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer File: 108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.cer (raw, json) Hash identifier: 1DlZxElXCujcbeIxHhik23I9AFJTy3cq6SnSWZw6Hgw= Subject key identifier: 10:8C:C3:E7:A5:B6:3C:7A:E8:A3:B1:DF:F7:9B:8E:68:5A:96:82:6B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 63FAF6019BEC31BF685DC7A99A1794E6298DCFD4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft caRepository: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Aug 2024 13:40:09 +0000 Certificate not after: Thu 07 Aug 2025 13:45:09 +0000 Subordinate resources: AS: 265933 IP: 45.4.80.0/22 IP: 164.163.0.0/22 IP: 2804:4014::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fa:f6:01:9b:ec:31:bf:68:5d:c7:a9:9a:17:94:e6:29:8d:cf:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 8 13:40:09 2024 GMT Not After : Aug 7 13:45:09 2025 GMT Subject: CN=108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:aa:9b:b2:63:2a:8a:d6:ff:38:0f:6d:40: 23:f2:ef:99:22:53:39:37:d8:fa:3e:70:f1:a6:79: ab:f4:9d:03:a9:7d:f5:ff:7e:bd:77:22:f0:9b:5e: 1a:90:57:1d:c5:63:a5:3c:f1:7e:0d:78:31:65:bb: f8:1c:8a:03:e0:1c:cf:0c:e2:eb:f5:9b:1f:f4:0b: 41:a8:3b:ab:69:aa:9d:c1:c6:7b:66:dc:8f:99:cb: a7:c1:a2:de:2a:68:d0:b7:10:32:c2:81:0e:f7:f2: 90:e7:67:1d:98:b0:52:4d:cc:a9:17:d0:ce:2e:2e: 45:30:fa:b0:20:7f:bb:de:93:c7:53:55:0a:36:d1: f9:65:36:36:a6:5a:f7:18:6d:ad:6b:11:dd:85:70: a2:fc:a3:69:ea:ad:84:5d:72:76:8c:0e:a6:71:55: 35:5d:a9:66:e2:28:1a:e2:b1:86:f3:c7:20:89:e2: eb:02:a1:aa:e9:50:4f:d0:c3:d9:86:fe:4d:1e:e2: 82:63:04:6d:2c:70:35:0b:bb:84:e6:a7:36:a3:cb: de:e7:26:d2:49:13:0c:8a:6d:16:cf:6b:b2:ff:f9: 1c:5e:1b:cb:4c:12:bc:7c:d5:4b:fd:b1:50:b9:b5: 6f:f2:3b:b1:cd:90:e8:f3:fd:63:72:60:fd:18:65: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:8C:C3:E7:A5:B6:3C:7A:E8:A3:B1:DF:F7:9B:8E:68:5A:96:82:6B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/108CC3E7A5B63C7AE8A3B1DFF79B8E685A96826B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.80.0/22 164.163.0.0/22 IPv6: 2804:4014::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265933 Signature Algorithm: sha256WithRSAEncryption c2:c9:80:ad:92:a1:b9:e3:0b:04:a9:8a:5a:c0:d8:f1:5a:b5: f5:7e:54:73:e3:21:50:5b:48:5c:1d:9b:b0:33:73:92:aa:7f: 0a:34:a9:b1:d3:87:46:9a:99:ac:cc:61:59:0d:9c:ea:ad:59: 22:ea:e3:58:50:c5:ed:eb:e7:79:d4:85:5a:76:ce:fe:dc:91: 83:e3:98:5a:2c:01:56:d7:fd:ab:4a:8a:5f:b8:d4:ca:fc:d0: 38:83:c6:54:84:91:7c:20:00:dc:ca:0a:f1:ed:f1:fc:e5:db: a2:5a:e2:3c:e8:30:52:42:c8:6f:0c:74:26:e3:ba:2b:b9:70: 21:96:ed:03:88:ab:eb:17:ee:44:d0:22:2f:dc:3c:cd:18:75: b2:43:53:c3:a6:89:40:e3:97:60:a5:8d:19:41:74:13:c5:4d: 9d:8e:5a:e4:dd:be:94:a0:d4:5c:5f:4f:5b:4f:0e:5f:6c:64: 12:43:40:20:1d:d7:30:1c:7b:8e:be:47:dd:e0:ef:42:8b:41: de:c2:c7:bf:f8:69:77:79:97:dc:f5:aa:92:6b:7f:51:77:51: 13:50:9e:82:39:ad:b3:4d:6b:6e:4e:65:29:08:21:a1:9e:68: 42:85:b6:5f:3e:a6:f2:a9:50:7f:c1:1e:04:0f:fc:8a:19:9e: c6:15:ac:f4 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUY/r2AZvsMb9oXcepmheU5imNz9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDgxMzQwMDlaFw0yNTA4MDcxMzQ1MDlaMDMxMTAvBgNV BAMTKDEwOENDM0U3QTVCNjNDN0FFOEEzQjFERkY3OUI4RTY4NUE5NjgyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnqqbsmMqitb/OA9tQCPy75ki Uzk32Po+cPGmeav0nQOpffX/fr13IvCbXhqQVx3FY6U88X4NeDFlu/gcigPgHM8M 4uv1mx/0C0GoO6tpqp3Bxntm3I+Zy6fBot4qaNC3EDLCgQ738pDnZx2YsFJNzKkX 0M4uLkUw+rAgf7vek8dTVQo20fllNjamWvcYba1rEd2FcKL8o2nqrYRdcnaMDqZx VTVdqWbiKBrisYbzxyCJ4usCoarpUE/Qw9mG/k0e4oJjBG0scDULu4Tmpzajy97n JtJJEwyKbRbPa7L/+RxeG8tMErx81Uv9sVC5tW/yO7HNkOjz/WNyYP0YZeNFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQjMPnpbY8euij sd/3m45oWpaCazAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFlO blF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhZ Tm5RdUE1TUdZajFKV3BFUHhVVEtIWTlmR2lpdmR0N1liQ3lhQmludERxLzAvMTA4 Q0MzRTdBNUI2M0M3QUU4QTNCMURGRjc5QjhFNjg1QTk2ODI2Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQRQAwQCpKMAMA0EAgACMAcDBQAoBEAUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQOzTANBgkqhkiG9w0BAQsFAAOCAQEAwsmArZKh ueMLBKmKWsDY8Vq19X5Uc+MhUFtIXB2bsDNzkqp/CjSpsdOHRpqZrMxhWQ2c6q1Z IurjWFDF7evnedSFWnbO/tyRg+OYWiwBVtf9q0qKX7jUyvzQOIPGVISRfCAA3MoK 8e3x/OXbolriPOgwUkLIbwx0JuO6K7lwIZbtA4ir6xfuRNAiL9w8zRh1skNTw6aJ QOOXYKWNGUF0E8VNnY5a5N2+lKDUXF9PW08OX2xkEkNAIB3XMBx7jr5H3eDvQotB 3sLHv/hpd3mX3PWqkmt/UXdRE1Cegjmts01rbk5lKQghoZ5oQoW2Xz6m8qlQf8Ee BA/8ihmexhWs9A== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:43 2024 by rpki-client on console.sobornost.net