$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10C9E50412BDF457D326557F028EDEA1195C1FD7.cer File: 10C9E50412BDF457D326557F028EDEA1195C1FD7.cer (raw, json) Hash identifier: Zuf3BThZ3fu7+1xKjtMPvhBT7wx+1EjO3XLqphUbg5U= Subject key identifier: 10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3842F5B5928741BE0044CA85ADFF2397DE99A7BA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/10C9E50412BDF457D326557F028EDEA1195C1FD7.mft caRepository: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Jul 2024 18:31:52 +0000 Certificate not after: Mon 21 Jul 2025 18:36:52 +0000 Subordinate resources: AS: 264299 IP: 138.121.152.0/22 IP: 170.254.20.0/22 IP: 2804:25bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:42:f5:b5:92:87:41:be:00:44:ca:85:ad:ff:23:97:de:99:a7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 22 18:31:52 2024 GMT Not After : Jul 21 18:36:52 2025 GMT Subject: CN=10C9E50412BDF457D326557F028EDEA1195C1FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:59:af:61:7e:3a:ff:19:58:8a:06:88:9c: 66:52:af:0a:59:d6:07:9b:d9:c5:60:94:9f:c0:6f: 98:fe:c5:5f:d2:f1:9f:a1:c6:dc:12:8e:7f:71:b0: 2a:3f:8e:09:66:eb:e8:81:64:50:9a:42:23:28:0b: 63:44:2a:0a:b8:08:95:55:7b:ab:9a:4e:42:49:9a: 9a:f2:d9:97:17:2f:ee:d4:45:90:0a:d9:ad:ea:d2: 39:0b:60:99:54:fc:86:f3:8f:95:12:1c:d6:73:66: 29:e0:c7:22:67:83:d1:f9:7e:c3:45:a2:41:ea:49: ca:60:ff:cb:c1:95:52:f4:73:07:ea:8a:97:94:c9: 70:32:a7:11:f1:0a:60:69:4e:cf:e4:d1:67:e1:0a: 09:40:7f:e6:46:bc:79:98:25:d7:94:c0:8d:17:10: 84:5c:a7:c0:6d:cd:86:d5:a2:d5:0f:8d:6a:b9:4c: 93:87:2f:72:8f:31:28:bc:79:f2:bc:6a:57:43:ba: ca:c7:3b:29:87:73:9b:d6:ba:b8:90:0c:60:d4:74: 8d:cd:e5:3c:6c:6d:37:af:45:c8:ad:f9:43:35:24: 12:02:72:7e:5a:e6:f0:c9:b0:b1:f1:0d:b1:be:b0: 97:9b:8c:d8:99:6b:9b:6d:3f:f1:d6:18:1b:d3:9e: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:C9:E5:04:12:BD:F4:57:D3:26:55:7F:02:8E:DE:A1:19:5C:1F:D7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/2/10C9E50412BDF457D326557F028EDEA1195C1FD7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.152.0/22 170.254.20.0/22 IPv6: 2804:25bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264299 Signature Algorithm: sha256WithRSAEncryption 36:b0:cf:1c:58:18:ac:d9:3f:8d:01:21:3a:78:d0:3b:8e:af: 2a:f0:89:4c:41:90:7b:5f:3c:1e:05:66:9d:10:7e:86:80:d2: 2e:41:fd:96:b3:76:4b:f8:ba:f4:84:1b:2a:6c:95:54:9e:1a: ec:f7:c2:db:cb:b9:5b:b1:96:f3:30:82:a6:0e:c1:5a:15:eb: a9:02:0e:15:d0:a0:f0:44:34:bb:31:ee:f4:3e:46:81:dc:34: 53:18:31:7e:2c:88:3d:60:5a:ad:75:0c:da:d8:4b:2d:f3:4e: 08:4a:0d:7b:79:a1:2e:7e:3b:61:10:7e:25:d9:60:fb:1b:11: 49:ad:1f:74:56:5a:02:f6:0d:25:27:e8:1e:38:57:f8:4c:fa: 54:8f:be:eb:b0:10:b9:82:c0:8a:06:42:18:82:b8:31:a5:61: 29:b9:ff:33:73:3a:3d:7a:f6:04:79:18:da:18:b9:ea:d7:46: 46:85:87:99:56:09:b8:71:b6:d4:d4:ea:ff:17:f4:d7:22:78: fa:2a:b0:93:12:f1:e4:64:e4:63:24:a0:60:4a:83:09:f8:eb: 5e:c8:71:7f:60:12:07:2f:c4:20:5a:3e:66:8a:e6:fb:5c:a1: dd:90:c2:0c:64:cb:f7:e1:7d:95:3e:65:26:fb:c8:ef:34:70: dc:27:4a:e6 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOEL1tZKHQb4ARMqFrf8jl96Zp7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjIxODMxNTJaFw0yNTA3MjExODM2NTJaMDMxMTAvBgNV BAMTKDEwQzlFNTA0MTJCREY0NTdEMzI2NTU3RjAyOEVERUExMTk1QzFGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQo1mvYX46/xlYigaInGZSrwpZ 1geb2cVglJ/Ab5j+xV/S8Z+hxtwSjn9xsCo/jglm6+iBZFCaQiMoC2NEKgq4CJVV e6uaTkJJmpry2ZcXL+7URZAK2a3q0jkLYJlU/Ibzj5USHNZzZingxyJng9H5fsNF okHqScpg/8vBlVL0cwfqipeUyXAypxHxCmBpTs/k0WfhCglAf+ZGvHmYJdeUwI0X EIRcp8BtzYbVotUPjWq5TJOHL3KPMSi8efK8aldDusrHOymHc5vWuriQDGDUdI3N 5TxsbTevRcit+UM1JBICcn5a5vDJsLHxDbG+sJebjNiZa5ttP/HWGBvTnseZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQyeUEEr30V9Mm VX8Cjt6hGVwf1zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm1X YWE3YlZzQm1OcExlTXRDWEx2Y0F1TGNackh2SkhOcjFUWUdmZ01zUzMvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jt V2FhN2JWc0JtTnBMZU10Q1hMdmNBdUxjWnJIdkpITnIxVFlHZmdNc1MzLzIvMTBD OUU1MDQxMkJERjQ1N0QzMjY1NTdGMDI4RURFQTExOTVDMUZENy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinmYAwQCqv4UMA0EAgACMAcDBQAoBCW8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIazANBgkqhkiG9w0BAQsFAAOCAQEANrDPHFgY rNk/jQEhOnjQO46vKvCJTEGQe188HgVmnRB+hoDSLkH9lrN2S/i69IQbKmyVVJ4a 7PfC28u5W7GW8zCCpg7BWhXrqQIOFdCg8EQ0uzHu9D5Ggdw0UxgxfiyIPWBarXUM 2thLLfNOCEoNe3mhLn47YRB+Jdlg+xsRSa0fdFZaAvYNJSfoHjhX+Ez6VI++67AQ uYLAigZCGIK4MaVhKbn/M3M6PXr2BHkY2hi56tdGRoWHmVYJuHG21NTq/xf01yJ4 +iqwkxLx5GTkYySgYEqDCfjrXshxf2ASBy/EIFo+Zorm+1yh3ZDCDGTL9+F9lT5l JvvI7zRw3CdK5g== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:43 2024 by rpki-client on console.sobornost.net