$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer File: 21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer (raw, json) Hash identifier: Lt4wQO+3SqadxNjfXkmg5HemfvmpOPG8odR2JyFVT/M= Subject key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4859B01FD78558539233069AF1EEDD886D485BCE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft caRepository: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 31 Aug 2024 19:28:49 +0000 Certificate not after: Sat 30 Aug 2025 19:33:49 +0000 Subordinate resources: AS: 269626 IP: 45.190.108.0/22 IP: 2804:6768::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:59:b0:1f:d7:85:58:53:92:33:06:9a:f1:ee:dd:88:6d:48:5b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 31 19:28:49 2024 GMT Not After : Aug 30 19:33:49 2025 GMT Subject: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:bb:68:bd:16:c8:6a:4e:40:8c:7b:5b:e6: c8:34:6e:a6:02:fe:16:d1:b7:55:0e:ba:ff:e9:c2: 83:2d:9f:64:93:8e:6a:07:e0:59:c8:2b:bf:f5:db: 0a:fb:82:09:c1:b3:d6:4c:65:1e:6d:dd:65:06:b7: 08:d6:08:0d:5b:08:55:38:00:5d:48:96:3f:98:02: 92:4c:af:67:75:6f:2f:e9:c0:46:95:62:e4:fe:f1: 44:cd:c9:de:ef:49:d9:24:5a:8f:45:ea:fb:a3:5d: 72:9a:4a:94:30:2c:af:8f:2a:7e:94:a8:a1:b3:e0: 7d:d4:ed:ff:1e:78:4b:fa:57:32:93:5c:02:70:fe: 6c:88:83:19:0d:eb:0e:bd:84:4f:6f:49:18:e5:1a: 51:e1:d9:8c:f8:01:52:6b:32:26:50:6e:8a:80:50: 37:8f:bb:c0:96:00:51:fe:dd:90:54:f7:f6:6b:e1: cc:a0:fb:28:ea:b3:47:ba:0b:e6:fa:29:3a:78:2d: 94:d0:e6:6f:0b:cd:7b:8b:de:ad:0f:2d:a0:94:1f: 9b:fd:8b:9f:d4:26:a2:27:b7:80:43:f9:ed:eb:27: e6:0e:4e:d4:40:4a:e4:2c:8b:70:69:1f:29:45:fd: a8:8e:12:c9:d2:f5:08:b4:71:c9:c2:8f:68:1b:c3: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.190.108.0/22 IPv6: 2804:6768::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269626 Signature Algorithm: sha256WithRSAEncryption b1:a4:be:f0:4f:68:0a:f2:df:af:84:c2:37:32:a4:c8:f9:5c: 58:5b:f7:d4:d5:cb:06:c7:6e:66:ac:1c:a2:29:31:67:db:4d: 78:4b:1d:29:be:49:5f:cd:99:a2:86:d9:21:51:cc:2a:cc:b5: 86:52:98:6e:b9:cc:04:51:36:16:11:6f:ba:df:d9:e2:b3:be: 88:48:5b:37:45:76:0c:b2:75:f4:9e:3d:3b:1f:f7:07:4d:10: 4c:61:b0:cb:2d:06:28:33:19:70:f7:71:e6:3a:2e:00:5b:10: 03:bc:d4:6c:ea:7e:3f:af:39:c4:5a:ab:7c:89:b2:50:d5:e7: 9e:ff:1c:61:07:9d:92:92:34:e9:5a:62:8f:88:07:c3:61:f0: 23:ac:85:fb:c5:63:3e:b4:62:62:23:d4:f6:95:a0:36:b6:8e: 77:83:23:ee:a5:09:3f:17:a5:42:25:44:da:2c:e6:f0:16:5d: 52:f2:ef:4e:48:dd:b8:a5:5b:66:21:8d:be:f7:86:51:f9:1f: df:00:62:7b:2f:82:e2:98:91:e1:ad:52:8a:f6:4b:2d:c0:eb: 2a:c8:d0:5a:7d:81:3f:06:e1:a4:ce:92:d1:c4:d8:b2:a1:3b: 50:43:44:d2:e0:5b:ba:38:8a:62:3e:69:63:0c:ee:f1:bd:bf: c4:54:77:a9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUSFmwH9eFWFOSMwaa8e7diG1IW84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MzExOTI4NDlaFw0yNTA4MzAxOTMzNDlaMDMxMTAvBgNV BAMTKDIxRERERjA0N0E1NDJDMTA4MkY2REQ5RDE3NTRFQUFFRTNDRDBBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYbtovRbIak5AjHtb5sg0bqYC /hbRt1UOuv/pwoMtn2STjmoH4FnIK7/12wr7ggnBs9ZMZR5t3WUGtwjWCA1bCFU4 AF1Ilj+YApJMr2d1by/pwEaVYuT+8UTNyd7vSdkkWo9F6vujXXKaSpQwLK+PKn6U qKGz4H3U7f8eeEv6VzKTXAJw/myIgxkN6w69hE9vSRjlGlHh2Yz4AVJrMiZQboqA UDePu8CWAFH+3ZBU9/Zr4cyg+yjqs0e6C+b6KTp4LZTQ5m8LzXuL3q0PLaCUH5v9 i5/UJqInt4BD+e3rJ+YOTtRASuQsi3BpHylF/aiOEsnS9Qi0ccnCj2gbw/1nAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQh3d8EelQsEIL2 3Z0XVOqu480K3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUda cHhKMlN5M3Z1M21iNGoxb1doeXRHNGhIRmpOR0dFYjZRZG9YcFZMU1QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH WnB4SjJTeTN2dTNtYjRqMW9XaHl0RzRoSEZqTkdHRWI2UWRvWHBWTFNULzAvMjFE RERGMDQ3QTU0MkMxMDgyRjZERDlEMTc1NEVBQUVFM0NEMEFEQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLb5sMA0EAgACMAcDBQAoBGdoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQdOjANBgkqhkiG9w0BAQsFAAOCAQEAsaS+8E9oCvLfr4TC NzKkyPlcWFv31NXLBsduZqwcoikxZ9tNeEsdKb5JX82ZoobZIVHMKsy1hlKYbrnM BFE2FhFvut/Z4rO+iEhbN0V2DLJ19J49Ox/3B00QTGGwyy0GKDMZcPdx5jouAFsQ A7zUbOp+P685xFqrfImyUNXnnv8cYQedkpI06Vpij4gHw2HwI6yF+8VjPrRiYiPU 9pWgNraOd4Mj7qUJPxelQiVE2izm8BZdUvLvTkjduKVbZiGNvveGUfkf3wBiey+C 4piR4a1SivZLLcDrKsjQWn2BPwbhpM6S0cTYsqE7UENE0uBbujiKYj5pYwzu8b2/ xFR3qQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:46 2024 by rpki-client on console.sobornost.net