$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer File: 27431F298D6DFE8179639FE397D34A2A47E96D15.cer (raw, json) Hash identifier: 2KGF4d9fQ5K+07GG404vmf+giVizN1NGNeuebXFfIv0= Subject key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4E0D84017404DCE81F8AB805E21A7041A4DAAFCE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.mft caRepository: rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 13:57:08 +0000 Certificate not after: Mon 30 Jun 2025 14:02:08 +0000 Subordinate resources: AS: 267475 IP: 192.141.192.0/22 IP: 2804:4210::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:84:01:74:04:dc:e8:1f:8a:b8:05:e2:1a:70:41:a4:da:af:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 13:57:08 2024 GMT Not After : Jun 30 14:02:08 2025 GMT Subject: CN=27431F298D6DFE8179639FE397D34A2A47E96D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:0e:cf:13:c9:dd:31:84:35:57:b3:53:b9: 06:16:c5:a5:5f:7e:6e:b3:24:ba:f9:95:32:3f:16: 17:cb:0e:cd:87:69:90:8f:1e:3c:98:53:4f:f0:7b: e2:62:ff:8a:51:65:93:68:31:c5:01:46:f1:83:31: 4d:94:1c:2d:89:6f:bb:fe:4e:b8:eb:3d:dc:48:26: 29:34:a8:1e:9f:3e:8a:13:a1:82:ae:e5:84:97:7f: 24:d2:69:80:bd:a0:a5:13:91:f4:15:97:9e:c0:b6: fb:83:b8:7f:c1:5a:81:78:bc:29:5a:24:d9:a1:92: a7:7a:92:46:b2:8a:6d:cf:ed:f8:04:dd:16:e0:50: 94:a5:16:36:6d:a5:35:86:29:62:39:fb:c6:b2:3f: 68:c6:20:29:33:b0:bd:53:87:1e:3e:9b:c1:56:89: 40:18:39:2e:80:ec:90:77:97:e6:57:e3:da:f2:43: 3b:f4:2d:bb:ab:c0:19:f0:fa:f6:54:90:97:11:62: 0b:e5:a1:ec:c9:49:6f:ab:1c:ba:3b:74:45:f8:89: 6d:22:84:c7:6e:95:1b:31:9c:65:ef:64:84:fc:a3: c9:93:3a:8a:6a:0a:40:de:a7:b4:bd:25:37:61:51: 5a:49:cf:eb:43:45:3d:47:f7:c1:9d:12:2a:fe:30: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.192.0/22 IPv6: 2804:4210::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267475 Signature Algorithm: sha256WithRSAEncryption 68:62:1d:2f:52:26:3c:96:21:c5:9e:78:d9:ab:27:38:61:2b: 6d:27:5e:5b:2c:41:44:55:1c:ac:77:9b:d8:0e:84:bd:5f:be: 7b:ae:0e:67:bc:d6:27:29:00:c0:68:67:b5:8b:37:67:18:a0: 68:93:63:94:ad:a8:9a:c7:71:d2:1c:e4:74:67:0a:d3:6e:8d: 01:76:3b:d2:90:46:20:72:4e:27:7e:b1:e8:cf:c2:35:72:4f: 80:ca:c3:d5:b9:24:5f:0c:1b:0f:dd:3b:a5:7e:02:47:92:ff: 58:28:d7:d3:65:24:07:db:80:5d:04:7c:a5:a0:1b:55:64:f7: d7:ff:4e:77:dc:4a:d1:6a:44:9d:d2:07:b6:6d:af:6e:eb:53: b0:cb:6d:7f:d5:ad:73:ae:33:a0:86:f7:f1:6e:b9:76:45:be: aa:c8:c9:d0:27:7b:9f:4c:91:b5:72:4c:99:4f:f8:90:c2:a6: 70:89:e3:c1:ba:dd:5c:6f:e3:26:8d:8d:b6:8c:38:36:1c:3e: 43:9e:08:a7:39:84:e8:36:2e:6d:2a:89:73:80:b3:47:cd:c5: 2a:68:6f:c4:ee:7a:d0:30:25:ef:8b:c0:90:e7:c2:8d:46:3c: 6f:77:07:c2:88:a2:0c:c7:e3:1e:47:29:de:79:0b:21:0d:92: ce:e4:af:cf -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTg2EAXQE3OgfirgF4hpwQaTar84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MDExMzU3MDhaFw0yNTA2MzAxNDAyMDhaMDMxMTAvBgNV BAMTKDI3NDMxRjI5OEQ2REZFODE3OTYzOUZFMzk3RDM0QTJBNDdFOTZEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjsg7PE8ndMYQ1V7NTuQYWxaVf fm6zJLr5lTI/FhfLDs2HaZCPHjyYU0/we+Ji/4pRZZNoMcUBRvGDMU2UHC2Jb7v+ TrjrPdxIJik0qB6fPooToYKu5YSXfyTSaYC9oKUTkfQVl57AtvuDuH/BWoF4vCla JNmhkqd6kkayim3P7fgE3RbgUJSlFjZtpTWGKWI5+8ayP2jGICkzsL1Thx4+m8FW iUAYOS6A7JB3l+ZX49ryQzv0LburwBnw+vZUkJcRYgvloezJSW+rHLo7dEX4iW0i hMdulRsxnGXvZIT8o8mTOopqCkDep7S9JTdhUVpJz+tDRT1H98GdEir+MEEfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnQx8pjW3+gXlj n+OX00oqR+ltFTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0Jk VVkxN01wTkFuWjlZZ1JGNmtFdVR1Skx3RjdRYlpvckZqNFhzZVpRVjcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdC ZFVZMTdNcE5Bblo5WWdSRjZrRXVUdUpMd0Y3UWJab3JGajRYc2VaUVY3LzAvMjc0 MzFGMjk4RDZERkU4MTc5NjM5RkUzOTdEMzRBMkE0N0U5NkQxNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCwI3AMA0EAgACMAcDBQAoBEIQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQU0zANBgkqhkiG9w0BAQsFAAOCAQEAaGIdL1ImPJYhxZ54 2asnOGErbSdeWyxBRFUcrHeb2A6EvV++e64OZ7zWJykAwGhntYs3ZxigaJNjlK2o msdx0hzkdGcK026NAXY70pBGIHJOJ36x6M/CNXJPgMrD1bkkXwwbD907pX4CR5L/ WCjX02UkB9uAXQR8paAbVWT31/9Od9xK0WpEndIHtm2vbutTsMttf9Wtc64zoIb3 8W65dkW+qsjJ0Cd7n0yRtXJMmU/4kMKmcInjwbrdXG/jJo2Ntow4Nhw+Q54IpzmE 6DYubSqJc4CzR83FKmhvxO560DAl74vAkOfCjUY8b3cHwoiiDMfjHkcp3nkLIQ2S zuSvzw== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:47 2024 by rpki-client on console.sobornost.net