$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer File: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer (raw, json) Hash identifier: iBdyKDD2sgzRdDfkXRBD+nEsh8sMxnV6rIOgZPNeCRY= Subject key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2124A7CE5E6CFA04FC70C7A436EE3DF72EA585E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft caRepository: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Sep 2024 01:19:23 +0000 Certificate not after: Thu 11 Sep 2025 01:24:23 +0000 Subordinate resources: AS: 266169 IP: 45.6.188.0/22 IP: 45.233.128.0/22 IP: 2804:3bc4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:24:a7:ce:5e:6c:fa:04:fc:70:c7:a4:36:ee:3d:f7:2e:a5:85:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 12 01:19:23 2024 GMT Not After : Sep 11 01:24:23 2025 GMT Subject: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:fe:3b:de:05:30:73:58:a1:d7:06:3c:2d: a8:58:68:88:b6:79:5c:4f:09:da:b7:50:f7:1a:8e: 30:dc:80:e1:ce:27:09:cc:68:21:c2:49:f8:88:be: 7b:96:62:1f:98:e4:1b:7d:d8:34:a8:c6:c4:f9:7a: 18:01:7f:1e:9d:11:7d:1a:01:d7:23:dc:60:e4:49: 93:10:90:44:51:76:a5:e1:0d:25:aa:64:46:9e:0b: 89:fa:85:91:d3:35:00:46:9c:35:ad:3d:a4:59:cf: 7a:87:6c:7d:d4:39:9e:9d:90:01:d9:31:e6:44:92: ba:a1:25:aa:3e:11:25:1c:f3:2e:4d:b0:66:7c:d2: 39:da:90:99:c1:32:9a:a6:61:af:53:91:20:5c:dd: fa:39:37:50:0a:01:53:fe:8a:07:21:62:00:2a:0a: 29:29:61:fc:14:47:1f:8e:6f:0f:c4:5a:02:ac:8b: b8:01:cd:4e:96:ac:dd:35:0b:d9:57:3f:99:9a:59: 90:a2:e4:2a:8d:1f:9f:c3:b4:d7:74:2f:3a:56:30: b1:c7:c9:1c:11:a1:65:47:8c:e6:38:95:e6:55:ae: 31:8f:86:1c:ac:62:14:bb:b9:52:8b:7c:97:31:0b: f5:66:a7:82:ee:6c:9d:32:de:d4:2b:7e:7e:cb:fc: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.188.0/22 45.233.128.0/22 IPv6: 2804:3bc4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266169 Signature Algorithm: sha256WithRSAEncryption 75:4e:aa:f2:50:64:e7:ae:c7:79:c8:c6:4b:07:7e:d1:f7:2f: 05:61:8b:7e:a0:e1:8c:8e:fb:93:3d:49:15:48:bf:3b:c9:f8: 5c:cc:74:89:73:fd:1d:ce:3a:5b:c9:49:cd:dd:98:4d:c0:74: 42:5b:ff:f6:74:02:c6:bc:24:3f:c0:b3:5f:f4:99:3f:7c:e9: 30:23:7b:a6:b4:a5:27:c4:24:d8:1b:4f:f5:7e:54:a5:92:b6: 1e:e1:71:32:5b:56:38:f9:0d:bb:6e:cf:85:7f:45:5f:74:fb: 6d:28:ac:d1:f6:ab:69:29:52:12:81:82:53:51:b4:c2:d9:60: c0:d5:cf:43:71:01:dc:6c:53:59:ef:59:2a:f1:01:3a:c6:69: 5c:cc:27:c8:1f:f6:98:91:26:3f:84:34:1a:a9:ed:03:75:ee: 9c:e0:c7:e6:31:bb:6e:5f:8c:f6:7c:32:68:77:7b:da:72:6c: 34:14:20:4d:a2:64:cd:7e:ea:22:ff:61:73:e4:63:65:fc:f0: 16:4e:bb:dc:7b:a1:47:fb:6b:b8:09:c2:d9:03:80:c3:0d:2d: f4:71:f5:70:cd:86:36:fa:ca:a2:d0:86:01:6d:79:31:0a:e9: 25:aa:39:30:7b:c6:58:7d:5a:8e:4c:52:7f:ac:99:d0:0e:5e: 79:f0:b4:32 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUISSnzl5s+gT8cMekNu499y6lheIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MTIwMTE5MjNaFw0yNTA5MTEwMTI0MjNaMDMxMTAvBgNV BAMTKDJBMDVBRjJGQTNCQUJFRUFFREJFRTI2M0MyNEY3RkMxREFDMzZDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFf473gUwc1ih1wY8LahYaIi2 eVxPCdq3UPcajjDcgOHOJwnMaCHCSfiIvnuWYh+Y5Bt92DSoxsT5ehgBfx6dEX0a Adcj3GDkSZMQkERRdqXhDSWqZEaeC4n6hZHTNQBGnDWtPaRZz3qHbH3UOZ6dkAHZ MeZEkrqhJao+ESUc8y5NsGZ80jnakJnBMpqmYa9TkSBc3fo5N1AKAVP+igchYgAq CikpYfwURx+Obw/EWgKsi7gBzU6WrN01C9lXP5maWZCi5CqNH5/DtNd0LzpWMLHH yRwRoWVHjOY4leZVrjGPhhysYhS7uVKLfJcxC/Vmp4LubJ0y3tQrfn7L/LujAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqBa8vo7q+6u2+ 4mPCT3/B2sNsGTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzNz RlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNxMW0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcz c0ZWUjdYUUNnOHMzTHdZZ0FnWTNBQ21ya0hadEZhTkhLYVVvZGpzcTFtLzEvMkEw NUFGMkZBM0JBQkVFQUVEQkVFMjYzQzI0RjdGQzFEQUMzNkMxOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLQa8AwQCLemAMA0EAgACMAcDBQAoBDvEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQPuTANBgkqhkiG9w0BAQsFAAOCAQEAdU6q8lBk 567HecjGSwd+0fcvBWGLfqDhjI77kz1JFUi/O8n4XMx0iXP9Hc46W8lJzd2YTcB0 Qlv/9nQCxrwkP8CzX/SZP3zpMCN7prSlJ8Qk2BtP9X5UpZK2HuFxMltWOPkNu27P hX9FX3T7bSis0faraSlSEoGCU1G0wtlgwNXPQ3EB3GxTWe9ZKvEBOsZpXMwnyB/2 mJEmP4Q0GqntA3XunODH5jG7bl+M9nwyaHd72nJsNBQgTaJkzX7qIv9hc+RjZfzw Fk673HuhR/truAnC2QOAww0t9HH1cM2GNvrKotCGAW15MQrpJao5MHvGWH1ajkxS f6yZ0A5eefC0Mg== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:48 2024 by rpki-client on console.sobornost.net