$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer File: 2C425257AE7B63529EB88108AC7DEA60648B43E5.cer (raw, json) Hash identifier: DQPcQt6dZZ4BtdnMDRI5KT5K2cGL1YcOpegwDpwAY+k= Subject key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18BBCF2F1C603BC16C54BB010513E6EC540023A8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft caRepository: rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 01 Aug 2024 15:05:08 +0000 Certificate not after: Thu 31 Jul 2025 15:10:08 +0000 Subordinate resources: AS: 272549 IP: 187.84.152.0/22 IP: 2804:84f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:bb:cf:2f:1c:60:3b:c1:6c:54:bb:01:05:13:e6:ec:54:00:23:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 1 15:05:08 2024 GMT Not After : Jul 31 15:10:08 2025 GMT Subject: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:48:08:ba:1e:2d:7a:79:a7:e9:3e:8e:fe: cd:07:4e:94:46:75:ac:46:7d:76:ea:68:1f:d6:d8: 86:b7:63:6f:97:b4:35:e5:35:46:30:bf:50:72:b4: 55:71:40:e8:19:c2:0f:b5:0a:a9:10:73:0b:f5:4a: 09:e2:c5:0b:db:1e:6b:7c:e1:f4:10:fa:5c:64:16: a4:12:dd:06:bf:a9:92:de:59:d8:cf:aa:31:4a:ce: fa:c1:90:8a:45:f5:ad:98:df:93:db:e4:fb:ce:79: 2c:07:37:49:53:a9:b9:57:f0:e5:b2:11:88:19:ca: ed:9f:f0:55:4a:5a:e3:84:b8:9c:14:76:be:f9:8e: 7e:fe:73:61:bc:f9:97:a6:76:5e:73:5d:75:88:cc: c9:b7:fb:3c:18:63:a6:67:27:1c:48:16:f0:70:1b: 51:ca:93:6b:cd:4d:91:df:4c:b1:1c:dc:5f:6e:18: 72:bd:49:8b:c1:cf:41:a1:6e:de:ce:38:c9:43:e2: 80:15:74:18:fb:36:93:d7:74:3e:28:c0:06:7b:83: 5d:29:8c:31:48:95:3b:9a:e4:5c:c6:8c:11:a4:49: 54:7c:8a:13:39:ef:c9:0b:45:12:9d:17:88:64:24: 0e:98:95:6a:2b:c7:ef:ca:6b:9b:92:90:4f:0e:ae: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.84.152.0/22 IPv6: 2804:84f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272549 Signature Algorithm: sha256WithRSAEncryption 65:c5:8f:15:95:c6:17:87:83:65:05:12:41:8e:77:c5:f1:ef: 79:ed:41:7e:71:3f:36:5a:fc:d3:3a:01:f6:d9:97:a0:37:c5: 59:1e:8c:18:4e:bf:fc:e8:3e:7a:dd:36:58:f3:be:91:65:60: 7a:4a:ff:dc:a4:7f:07:8d:76:46:16:39:1c:3a:e5:f3:85:98: 70:fb:f5:7f:e4:62:79:5d:89:92:72:bf:fb:92:19:2e:cd:1d: 8b:eb:b5:fe:85:b4:d5:50:cf:2e:cb:43:e6:fd:17:5b:71:2d: 03:79:fd:89:58:3b:d0:b1:86:a0:8a:b8:00:bb:13:c8:13:75: 7d:67:88:ab:ca:b3:26:3a:dc:15:c5:81:0a:fd:1a:53:7f:d9: 39:1c:41:5e:30:f4:f6:09:ac:9b:b0:d1:69:02:47:c7:5d:ab: c6:1e:de:52:58:fb:2b:f5:86:d2:13:a5:a5:39:46:dd:9a:70: 64:88:75:66:da:ca:90:56:18:a3:35:37:bb:cd:25:9c:69:ea: c9:8c:05:37:9b:cf:4c:3c:c7:df:39:7b:fd:ec:2a:3d:c9:33: af:73:b6:c8:c5:c1:8f:b6:fc:79:ab:9e:fc:b4:0f:2e:b1:a1: 29:55:a5:da:05:82:75:d4:7a:17:dd:49:2b:d2:46:72:27:9f: 4a:8d:c1:90 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUGLvPLxxgO8FsVLsBBRPm7FQAI6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDExNTA1MDhaFw0yNTA3MzExNTEwMDhaMDMxMTAvBgNV BAMTKDJDNDI1MjU3QUU3QjYzNTI5RUI4ODEwOEFDN0RFQTYwNjQ4QjQzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6EgIuh4tenmn6T6O/s0HTpRG daxGfXbqaB/W2Ia3Y2+XtDXlNUYwv1BytFVxQOgZwg+1CqkQcwv1SgnixQvbHmt8 4fQQ+lxkFqQS3Qa/qZLeWdjPqjFKzvrBkIpF9a2Y35Pb5PvOeSwHN0lTqblX8OWy EYgZyu2f8FVKWuOEuJwUdr75jn7+c2G8+Zemdl5zXXWIzMm3+zwYY6ZnJxxIFvBw G1HKk2vNTZHfTLEc3F9uGHK9SYvBz0Ghbt7OOMlD4oAVdBj7NpPXdD4owAZ7g10p jDFIlTua5FzGjBGkSVR8ihM578kLRRKdF4hkJA6YlWorx+/Ka5uSkE8Orhz9AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsQlJXrntjUp64 gQisfepgZItD5TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGRp Tm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhkckwvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGRp Tm1aS2R2UEFHckdxaHI1dVo3bWZBVGdpem5GeVBubnNzWUxwZlhkckwvMS8yQzQy NTI1N0FFN0I2MzUyOUVCODgxMDhBQzdERUE2MDY0OEI0M0U1Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK7VJgwDQQCAAIwBwMFACgEhPgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCilMA0GCSqGSIb3DQEBCwUAA4IBAQBlxY8VlcYXh4NlBRJB jnfF8e957UF+cT82WvzTOgH22ZegN8VZHowYTr/86D563TZY876RZWB6Sv/cpH8H jXZGFjkcOuXzhZhw+/V/5GJ5XYmScr/7khkuzR2L67X+hbTVUM8uy0Pm/RdbcS0D ef2JWDvQsYagirgAuxPIE3V9Z4iryrMmOtwVxYEK/RpTf9k5HEFeMPT2CaybsNFp AkfHXavGHt5SWPsr9YbSE6WlOUbdmnBkiHVm2sqQVhijNTe7zSWcaerJjAU3m89M PMffOXv97Co9yTOvc7bIxcGPtvx5q578tA8usaEpVaXaBYJ11HoX3Ukr0kZyJ59K jcGQ -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:48 2024 by rpki-client on console.sobornost.net