$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer (raw, json) Hash identifier: mKjzMsqFXGt8S94ndhV/6kvR1HgegFoxd5V9G0Dxk3w= Subject key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D5E29182F234073120F3EA6F87230FA0876EAE7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft caRepository: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:58 +0000 Certificate not after: Wed 02 Apr 2025 18:31:58 +0000 Subordinate resources: AS: 267489 IP: 192.141.160.0/22 IP: 2804:4244::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5e:29:18:2f:23:40:73:12:0f:3e:a6:f8:72:30:fa:08:76:ea:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:58 2024 GMT Not After : Apr 2 18:31:58 2025 GMT Subject: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:4d:3c:77:13:19:05:0c:75:29:e6:15:06: 0d:61:d9:4b:e6:6e:52:a1:58:e5:a1:b6:af:ab:aa: 27:12:3b:1b:41:b7:bb:09:21:97:cf:b0:18:eb:f1: 81:1e:bf:3e:b6:9e:5f:7e:7c:8b:45:e1:e1:fb:34: c8:70:f1:c8:12:10:5e:e3:34:0c:b3:d1:4e:3f:79: 9e:55:4c:6a:70:e7:a1:19:7b:d4:e8:2e:53:fd:ee: cf:bf:0e:1a:71:48:77:06:06:57:92:65:a2:6f:02: c8:c0:f2:3d:82:e1:d2:e4:56:e2:2e:93:1a:10:99: 9d:8b:50:8b:ca:dd:fc:9b:8e:23:19:04:33:38:ee: e8:26:57:a2:9e:22:02:04:2f:77:4c:b3:b4:82:3a: 4a:76:97:b4:9c:bd:95:ed:93:ee:b5:af:dd:11:22: fd:c5:a5:6c:86:9e:74:85:eb:02:a7:a8:eb:fc:45: 59:3e:8b:9b:35:c6:aa:ab:03:6d:48:04:48:12:d2: 2c:49:dd:10:71:bb:1d:2b:02:ea:3b:e0:26:ca:f2: 1e:a3:e0:4f:d7:9e:e9:a0:49:d6:dd:ee:6d:6e:f8: 7e:b7:93:fa:e5:eb:7f:19:bb:ab:95:08:f3:0c:c8: 73:00:2c:40:35:91:f1:02:0f:16:dc:5f:fe:10:b2: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.160.0/22 IPv6: 2804:4244::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267489 Signature Algorithm: sha256WithRSAEncryption ae:9f:09:26:b1:7e:54:e7:12:46:45:ef:be:fe:60:6e:ce:cd: 49:b9:e9:4c:f7:41:4c:bf:75:ca:49:2b:9f:13:b1:11:39:69: 46:02:4b:d5:7a:07:8a:39:ed:e3:91:a1:11:82:a7:a6:93:27: 85:e4:b8:39:d3:23:34:3a:36:47:08:70:f1:54:00:e3:30:5e: ca:59:1e:80:9e:44:0d:d2:23:f9:e7:ae:d9:63:f8:51:0f:a1: f6:b7:15:36:81:dd:e4:8a:0c:32:8d:07:23:77:97:32:29:e6: 20:15:48:c8:46:01:3e:a1:8d:93:32:1a:e2:61:9e:7c:22:06: 5f:5a:a9:f2:d0:f2:19:49:73:f9:5d:5e:05:5d:a6:f5:da:79: 05:7f:2e:9a:ff:b3:cd:22:22:41:23:4e:b0:ae:bd:0f:64:8f: 5d:bb:78:19:f8:f5:46:25:ab:3e:a3:de:03:1b:fb:e6:a9:b1: ef:ec:dc:0f:2b:b9:49:42:3f:b2:79:49:12:e3:cb:e3:a5:c2: c3:fc:d2:9d:80:9b:01:bf:37:35:8b:47:a6:7d:61:b6:04:fb: 98:49:a7:61:9f:aa:f6:d2:0d:83:b4:08:9e:6f:19:5e:e9:42: 26:a8:82:6d:51:3b:cf:f1:ec:2a:46:c7:37:e2:c9:dc:7d:b8: 91:98:87:d1 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULV4pGC8jQHMSDz6m+HIw+gh26ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2NThaFw0yNTA0MDIxODMxNThaMDMxMTAvBgNV BAMTKDIzRUNENEQxQUY4OENFMkUxQjNERjZERjg3RkM3NkNDMTU3QTA3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDE08dxMZBQx1KeYVBg1h2Uvm blKhWOWhtq+rqicSOxtBt7sJIZfPsBjr8YEevz62nl9+fItF4eH7NMhw8cgSEF7j NAyz0U4/eZ5VTGpw56EZe9ToLlP97s+/DhpxSHcGBleSZaJvAsjA8j2C4dLkVuIu kxoQmZ2LUIvK3fybjiMZBDM47ugmV6KeIgIEL3dMs7SCOkp2l7ScvZXtk+61r90R Iv3FpWyGnnSF6wKnqOv8RVk+i5s1xqqrA21IBEgS0ixJ3RBxux0rAuo74CbK8h6j 4E/XnumgSdbd7m1u+H63k/rl638Zu6uVCPMMyHMALEA1kfECDxbcX/4QshFZAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQj7NTRr4jOLhs9 9t+H/HbMFXoHwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODVz MXhCRXR4OEJHU3Y2d1BITnBieXIyTHBYWHBQQ0drdEhpSnZZdXgyN3QvMS8yM0VD RDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0EwN0MxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALAjaAwDQQCAAIwBwMFACgEQkQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBThMA0GCSqGSIb3DQEBCwUAA4IBAQCunwkmsX5U5xJGRe++ /mBuzs1JuelM90FMv3XKSSufE7EROWlGAkvVegeKOe3jkaERgqemkyeF5Lg50yM0 OjZHCHDxVADjMF7KWR6AnkQN0iP5567ZY/hRD6H2txU2gd3kigwyjQcjd5cyKeYg FUjIRgE+oY2TMhriYZ58IgZfWqny0PIZSXP5XV4FXab12nkFfy6a/7PNIiJBI06w rr0PZI9du3gZ+PVGJas+o94DG/vmqbHv7NwPK7lJQj+yeUkS48vjpcLD/NKdgJsB vzc1i0emfWG2BPuYSadhn6r20g2DtAiebxle6UImqIJtUTvP8ewqRsc34sncfbiR mIfR -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:47 2024 by rpki-client on console.sobornost.net