$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer File: 127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer (raw, json) Hash identifier: prYPZg503ySvE7AQ4J5nPjO0kMv+35ptfR9JNd7bzbE= Subject key identifier: 12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 25487CF44194A9773D615E6C099F2CE4BA1C1F7F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft caRepository: rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:49 +0000 Certificate not after: Wed 02 Apr 2025 18:30:49 +0000 Subordinate resources: AS: 268548 IP: 45.163.40.0/22 IP: 2804:52e4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:48:7c:f4:41:94:a9:77:3d:61:5e:6c:09:9f:2c:e4:ba:1c:1f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:49 2024 GMT Not After : Apr 2 18:30:49 2025 GMT Subject: CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:8f:b2:a0:85:21:97:5f:e5:15:f2:69:ed: f3:6d:e8:b6:6d:19:29:b6:56:6c:d0:ad:55:33:d9: 03:78:0a:83:7a:f0:47:5e:e8:af:e5:55:84:eb:fd: f8:ce:04:08:1d:e9:4f:ab:68:7b:cf:c7:5b:d7:b2: 73:8d:44:9f:1b:30:19:bb:51:df:af:2a:c3:29:ec: dd:da:be:90:aa:64:d0:60:00:eb:a2:e6:ba:0a:ff: 05:db:9f:58:99:50:b2:b1:0d:60:2f:a0:30:28:d7: 03:66:9f:a5:b1:3f:a5:a4:77:6f:f7:13:e3:09:3d: 87:4d:f8:ab:2c:da:f6:4d:c1:37:fc:50:2f:98:71: d2:60:a9:58:cc:01:d4:b4:a2:5f:fd:a6:a1:05:0e: 48:e2:f5:b3:1a:28:50:cf:de:16:e5:f9:98:a7:58: e4:4d:71:4e:8f:27:46:3e:6b:3b:d8:50:e1:38:55: 68:9c:74:6e:54:4c:f1:53:e5:65:d7:f6:5b:5c:4b: 88:9b:1a:38:b6:06:d6:22:ce:67:2b:a8:a2:65:a0: 05:1d:68:e0:e5:b9:a8:7f:5b:f1:1c:ba:d6:6d:de: 8e:5a:a7:c9:75:4c:50:9b:e2:da:41:18:6f:b4:5c: 7f:d4:93:30:a9:fc:9e:5e:a1:de:ed:78:3e:9e:fe: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.163.40.0/22 IPv6: 2804:52e4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268548 Signature Algorithm: sha256WithRSAEncryption 6e:8e:a7:f1:58:12:2b:84:64:5c:2e:f4:f7:58:7e:ea:d5:9f: 1c:c3:26:13:64:85:3e:4d:28:b7:f2:f2:7f:2d:96:5f:48:c0: 86:0e:17:50:da:c7:5c:f4:6b:71:d8:81:91:c2:c6:da:8e:bd: 1d:7a:92:8b:58:a9:54:4b:71:29:64:19:43:c4:7c:f4:77:07: 52:2d:4c:10:02:dd:83:df:18:d9:39:c4:25:26:ac:aa:54:57: 1a:97:20:64:9a:cb:2e:a2:de:db:5c:0f:2f:e8:73:0a:59:e4: 5f:0f:94:c1:c8:99:48:bd:db:ee:fd:ba:12:1a:60:67:0b:cb: fe:1c:31:be:0f:fa:1a:4a:a0:64:56:50:d0:48:be:fa:78:ba: 9b:8a:02:b0:70:0d:80:1f:8b:e3:db:89:60:01:f5:6c:04:9b: 9e:aa:65:23:50:49:47:28:38:35:2b:6a:77:fa:fb:b2:a3:59: 93:3c:0c:e5:0e:c9:b4:bb:20:f4:66:25:c6:38:6a:38:1d:f6: 74:f4:d0:2d:db:2e:25:af:7a:ee:29:fb:ba:28:2f:09:1b:71: 1b:bd:12:cb:f4:88:3a:e6:6e:0c:24:3d:78:3d:98:68:2e:0d: 91:5d:f7:56:dc:46:a3:0b:58:03:6d:c2:4d:2e:ba:63:87:5c: 75:b2:85:45 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJUh89EGUqXc9YV5sCZ8s5LocH38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1NDlaFw0yNTA0MDIxODMwNDlaMDMxMTAvBgNV BAMTKDEyN0Q3REQzQzBDQzI5N0QwMDIwNkNGMjM1RkYxM0NFRjk3OEE1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxY+yoIUhl1/lFfJp7fNt6LZt GSm2VmzQrVUz2QN4CoN68Ede6K/lVYTr/fjOBAgd6U+raHvPx1vXsnONRJ8bMBm7 Ud+vKsMp7N3avpCqZNBgAOui5roK/wXbn1iZULKxDWAvoDAo1wNmn6WxP6Wkd2/3 E+MJPYdN+Kss2vZNwTf8UC+YcdJgqVjMAdS0ol/9pqEFDkji9bMaKFDP3hbl+Zin WORNcU6PJ0Y+azvYUOE4VWicdG5UTPFT5WXX9ltcS4ibGji2BtYizmcrqKJloAUd aODluah/W/EcutZt3o5ap8l1TFCb4tpBGG+0XH/UkzCp/J5eod7teD6e/jxTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSfX3TwMwpfQAg bPI1/xPO+Xil5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3Nj NE5RcHFlS21TcmdjQ3VteFlRRDNEU0ZjZVhnY0Juc3hhR3hIeXVSNXgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdz YzROUXBxZUttU3JnY0N1bXhZUUQzRFNGY2VYZ2NCbnN4YUd4SHl1UjV4LzEvMTI3 RDdERDNDMENDMjk3RDAwMjA2Q0YyMzVGRjEzQ0VGOTc4QTVFNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaMoMA0EAgACMAcDBQAoBFLkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZBDANBgkqhkiG9w0BAQsFAAOCAQEAbo6n8VgSK4RkXC70 91h+6tWfHMMmE2SFPk0ot/Lyfy2WX0jAhg4XUNrHXPRrcdiBkcLG2o69HXqSi1ip VEtxKWQZQ8R89HcHUi1MEALdg98Y2TnEJSasqlRXGpcgZJrLLqLe21wPL+hzClnk Xw+UwciZSL3b7v26EhpgZwvL/hwxvg/6GkqgZFZQ0Ei++ni6m4oCsHANgB+L49uJ YAH1bASbnqplI1BJRyg4NStqd/r7sqNZkzwM5Q7JtLsg9GYlxjhqOB32dPTQLdsu Ja967in7uigvCRtxG70Sy/SIOuZuDCQ9eD2YaC4NkV33VtxGowtYA23CTS66Y4dc dbKFRQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:44 2024 by rpki-client on console.sobornost.net