$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer File: 197FCDDAE310D022081D86F4C3E65FDA0DAB655E.cer (raw, json) Hash identifier: eN37U1zcnMPM6IKRLMVvoYwZOcOxzKHxujGaI+v/gFM= Subject key identifier: 19:7F:CD:DA:E3:10:D0:22:08:1D:86:F4:C3:E6:5F:DA:0D:AB:65:5E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4636D80D588D8E4BE592A5A74EBB834533AFA17A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.mft caRepository: rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 13:32:37 +0000 Certificate not after: Thu 03 Apr 2025 13:37:37 +0000 Subordinate resources: AS: 265302 IP: 168.121.72.0/22 IP: 2804:2dc4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:36:d8:0d:58:8d:8e:4b:e5:92:a5:a7:4e:bb:83:45:33:af:a1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:32:37 2024 GMT Not After : Apr 3 13:37:37 2025 GMT Subject: CN=197FCDDAE310D022081D86F4C3E65FDA0DAB655E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:04:b1:b1:a2:2e:be:b9:51:65:30:ff:86: c7:3f:ed:9a:57:19:43:aa:3a:b5:17:49:e3:e9:75: 0e:91:95:b2:fd:0c:05:60:cc:56:19:55:cd:f4:09: 7d:ac:ae:fd:ee:71:d4:73:92:7d:73:20:23:dc:47: cf:34:62:4a:90:80:02:0a:18:fd:91:56:2a:b7:0c: d4:3d:32:1a:9f:e4:f2:b5:86:49:e8:ef:97:78:a5: 36:25:8f:9f:cf:d5:21:17:8c:af:7c:f1:14:13:b3: 1f:6c:73:c3:ce:56:89:c3:f2:0d:de:b8:b1:60:5b: f4:a7:0b:21:e3:dc:d6:97:71:28:66:a3:2a:9e:4d: 67:7f:5e:e1:d9:63:71:78:09:48:59:b8:3c:ef:74: fd:d9:5e:5f:df:86:01:62:73:db:cb:7c:dc:79:1e: 97:de:6f:db:8b:d0:8d:9b:b8:72:fb:a7:86:a7:4f: 88:89:0c:d0:93:a6:ba:bb:17:ae:79:10:43:3d:9a: bb:41:8e:d5:cc:8c:3f:a1:c2:1a:80:22:dc:fa:6b: 91:71:78:a0:61:1a:93:87:9e:55:e0:76:38:d8:bc: a7:dc:24:39:8e:65:8e:77:1a:cb:82:cc:44:ab:2d: 13:fc:ef:fe:c6:ff:1e:51:b9:79:b4:4e:73:c8:e5: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:7F:CD:DA:E3:10:D0:22:08:1D:86:F4:C3:E6:5F:DA:0D:AB:65:5E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H6zTo4nPv99zZemCHbVirduLWcfy6dfcn2SvDqw8toes/1/197FCDDAE310D022081D86F4C3E65FDA0DAB655E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.121.72.0/22 IPv6: 2804:2dc4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265302 Signature Algorithm: sha256WithRSAEncryption b6:5c:f1:38:c9:b7:5c:39:32:51:c8:bb:b8:c0:0a:82:8e:33: 93:1b:20:ee:92:c6:dc:35:8b:19:04:4b:b8:7e:e0:67:7f:b1: 86:5d:b9:54:62:e8:6f:2b:f6:a1:c2:b5:a2:f7:d4:f3:6d:74: 82:96:f8:8c:81:8f:9c:24:00:a3:63:f9:8a:fa:57:ca:27:7a: 2c:33:10:19:f0:53:8a:e5:fa:ec:92:ad:bd:7b:ae:cc:b4:dc: bd:a4:72:5a:76:c5:bf:1b:ca:20:0d:be:b4:aa:e5:28:1e:e3: a6:1a:fc:86:21:4f:ef:ab:37:c9:ad:9b:46:b8:d1:0f:b3:32: be:15:8f:1f:dc:ee:70:29:4c:3b:ec:5d:2d:ae:6d:70:e0:a7: 0d:de:ec:2f:59:a5:a0:a5:d8:49:50:f1:40:38:1e:6b:04:61: 84:01:e1:a1:ff:dc:53:49:a2:20:e9:6c:ec:14:18:f3:b3:cf: 71:71:b2:e0:a8:a5:1e:ca:49:95:30:45:c5:89:05:87:85:b1: b9:ff:ef:ce:9b:27:26:b1:f5:ec:e1:f7:cc:11:90:a6:1e:4f: 5f:ba:00:d7:b8:0f:93:22:93:be:05:c5:86:33:df:2f:01:7a: 12:d3:e1:f4:40:6f:a4:6d:42:7e:34:01:8f:c5:10:6d:68:f2: d5:c2:4a:32 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURjbYDViNjkvlkqWnTruDRTOvoXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMzMyMzdaFw0yNTA0MDMxMzM3MzdaMDMxMTAvBgNV BAMTKDE5N0ZDRERBRTMxMEQwMjIwODFEODZGNEMzRTY1RkRBMERBQjY1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hASxsaIuvrlRZTD/hsc/7ZpX GUOqOrUXSePpdQ6RlbL9DAVgzFYZVc30CX2srv3ucdRzkn1zICPcR880YkqQgAIK GP2RViq3DNQ9Mhqf5PK1hkno75d4pTYlj5/P1SEXjK988RQTsx9sc8POVonD8g3e uLFgW/SnCyHj3NaXcShmoyqeTWd/XuHZY3F4CUhZuDzvdP3ZXl/fhgFic9vLfNx5 Hpfeb9uL0I2buHL7p4anT4iJDNCTprq7F655EEM9mrtBjtXMjD+hwhqAItz6a5Fx eKBhGpOHnlXgdjjYvKfcJDmOZY53GsuCzESrLRP87/7G/x5RuXm0TnPI5QVFAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZf83a4xDQIggd hvTD5l/aDatlXjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDZ6 VG80blB2OTl6WmVtQ0hiVmlyZHVMV2NmeTZkZmNuMlN2RHF3OHRvZXMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDZ6 VG80blB2OTl6WmVtQ0hiVmlyZHVMV2NmeTZkZmNuMlN2RHF3OHRvZXMvMS8xOTdG Q0REQUUzMTBEMDIyMDgxRDg2RjRDM0U2NUZEQTBEQUI2NTVFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKoeUgwDQQCAAIwBwMFACgELcQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAxWMA0GCSqGSIb3DQEBCwUAA4IBAQC2XPE4ybdcOTJRyLu4 wAqCjjOTGyDuksbcNYsZBEu4fuBnf7GGXblUYuhvK/ahwrWi99TzbXSClviMgY+c JACjY/mK+lfKJ3osMxAZ8FOK5frskq29e67MtNy9pHJadsW/G8ogDb60quUoHuOm GvyGIU/vqzfJrZtGuNEPszK+FY8f3O5wKUw77F0trm1w4KcN3uwvWaWgpdhJUPFA OB5rBGGEAeGh/9xTSaIg6WzsFBjzs89xcbLgqKUeykmVMEXFiQWHhbG5/+/Omycm sfXs4ffMEZCmHk9fugDXuA+TIpO+BcWGM98vAXoS0+H0QG+kbUJ+NAGPxRBtaPLV wkoy -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:45 2024 by rpki-client on console.sobornost.net