$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer File: 2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer (raw, json) Hash identifier: sDHFwJYDDpj+fw23ZyGnds2cAZuNvJlEmQRkbnQKyng= Subject key identifier: 2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4F33B917F07943DF9BF206C235B91C6829432B14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft caRepository: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Jul 2024 11:37:53 +0000 Certificate not after: Tue 22 Jul 2025 11:42:53 +0000 Subordinate resources: AS: 265079 IP: 170.233.136.0/22 IP: 2804:3274::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:33:b9:17:f0:79:43:df:9b:f2:06:c2:35:b9:1c:68:29:43:2b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 23 11:37:53 2024 GMT Not After : Jul 22 11:42:53 2025 GMT Subject: CN=2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:63:3b:6b:75:eb:7e:fb:15:24:93:10:f0: 2d:04:1f:75:8f:5c:31:00:bf:7b:c4:5c:92:b1:69: 55:b3:11:fe:73:4d:ca:9b:76:0d:05:d7:b6:d6:c1: fb:98:26:82:22:57:f1:35:a1:f3:fe:2b:8c:27:35: c2:85:da:d7:85:21:99:cc:bf:88:6a:8f:d0:cc:e8: 30:88:5e:03:44:cb:f8:9e:fa:5f:48:98:73:cb:25: b3:f7:8f:46:79:be:51:75:67:5b:ef:5a:79:c5:01: 95:ef:75:fd:dd:7a:4d:b6:47:a7:2e:a8:2f:b5:13: 4c:d3:1f:8a:78:0e:dd:e5:6a:ba:9a:11:88:0e:df: 36:17:b6:98:16:fb:0e:dc:74:a2:55:67:85:69:38: 5e:d6:bc:75:9f:d5:16:35:45:ab:d6:86:db:42:37: b9:01:ad:a4:8a:11:da:2c:90:17:51:15:d1:7a:3f: 09:fe:d6:bc:76:52:0f:4d:47:51:60:25:5e:52:6f: c2:b1:54:10:4d:3d:ea:53:f2:aa:a5:c9:09:1d:fa: 51:a2:c5:4d:1d:1e:b6:7a:50:b2:3c:a9:0f:44:b7: 39:99:4a:52:ba:f0:f1:57:eb:73:0f:84:43:fb:fb: 2f:b9:25:f0:12:b0:88:2d:ea:f2:50:11:65:4d:80: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.136.0/22 IPv6: 2804:3274::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265079 Signature Algorithm: sha256WithRSAEncryption 68:4c:ef:6d:c6:03:72:ae:6a:9c:98:14:76:38:31:d3:e0:04: 86:3c:e1:76:c5:1e:48:9c:66:39:92:c8:ed:cd:a3:c6:c8:76: 3f:e6:cb:37:80:35:9e:23:bc:33:66:bc:cc:90:60:ce:1e:5d: e8:10:00:cf:95:4b:65:d5:d4:65:9b:87:9a:56:0b:73:65:cf: d2:a7:49:fe:69:5f:6f:09:92:71:fc:2a:5a:31:c8:04:d6:de: d5:da:b6:12:82:71:55:7a:e5:0c:63:c6:fa:bc:f4:ce:20:e9: 23:04:ac:68:7e:5d:2d:31:2c:bd:19:b5:02:75:71:3f:56:7a: 51:ec:c4:ce:c0:63:82:70:63:00:ca:b9:2b:f6:d8:80:0d:ee: 04:16:7b:cd:7c:fa:75:68:ae:7d:3e:cd:66:2b:7e:b3:90:70: 88:17:87:cf:7e:db:19:5b:04:50:c1:f4:e3:df:45:0a:cc:87: f0:ed:6e:11:81:fe:7a:b4:0e:fa:72:d6:4b:e7:b5:0f:10:cd: 68:ca:c6:da:fd:a8:1f:08:e5:0a:6c:df:60:cf:32:66:4c:ff: 9f:17:77:64:8f:f3:e2:38:a6:11:ee:10:b5:ba:f0:f9:71:71: 29:31:ea:5a:bc:34:32:21:5a:13:9a:98:f6:c8:74:1b:a2:9d: e6:8d:f5:da -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTzO5F/B5Q9+b8gbCNbkcaClDKxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjMxMTM3NTNaFw0yNTA3MjIxMTQyNTNaMDMxMTAvBgNV BAMTKDJBMzFFM0Q3MDZDOTRBQTJCRUIzRDc0OUE3MkQwMTc5M0Y1RDJBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQ2M7a3XrfvsVJJMQ8C0EH3WP XDEAv3vEXJKxaVWzEf5zTcqbdg0F17bWwfuYJoIiV/E1ofP+K4wnNcKF2teFIZnM v4hqj9DM6DCIXgNEy/ie+l9ImHPLJbP3j0Z5vlF1Z1vvWnnFAZXvdf3dek22R6cu qC+1E0zTH4p4Dt3larqaEYgO3zYXtpgW+w7cdKJVZ4VpOF7WvHWf1RY1RavWhttC N7kBraSKEdoskBdRFdF6Pwn+1rx2Ug9NR1FgJV5Sb8KxVBBNPepT8qqlyQkd+lGi xU0dHrZ6ULI8qQ9EtzmZSlK68PFX63MPhEP7+y+5JfASsIgt6vJQEWVNgHSFAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqMePXBslKor6z 10mnLQF5P10qrTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOW5V YTZoVldMdm5kM1l5WHhXNllNZVBBTEI3VHVtYmc0M0JlUEZKbWFkZDUvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlu VWE2aFZXTHZuZDNZeVh4VzZZTWVQQUxCN1R1bWJnNDNCZVBGSm1hZGQ1LzIvMkEz MUUzRDcwNkM5NEFBMkJFQjNENzQ5QTcyRDAxNzkzRjVEMkFBRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqumIMA0EAgACMAcDBQAoBDJ0MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLdzANBgkqhkiG9w0BAQsFAAOCAQEAaEzvbcYDcq5qnJgU djgx0+AEhjzhdsUeSJxmOZLI7c2jxsh2P+bLN4A1niO8M2a8zJBgzh5d6BAAz5VL ZdXUZZuHmlYLc2XP0qdJ/mlfbwmScfwqWjHIBNbe1dq2EoJxVXrlDGPG+rz0ziDp IwSsaH5dLTEsvRm1AnVxP1Z6UezEzsBjgnBjAMq5K/bYgA3uBBZ7zXz6dWiufT7N Zit+s5BwiBeHz37bGVsEUMH0499FCsyH8O1uEYH+erQO+nLWS+e1DxDNaMrG2v2o HwjlCmzfYM8yZkz/nxd3ZI/z4jimEe4Qtbrw+XFxKTHqWrw0MiFaE5qY9sh0G6Kd 5o312g== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:48 2024 by rpki-client on console.sobornost.net