$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.cer File: 2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.cer (raw, json) Hash identifier: 4yfqNPYOdlpiSopHvImLjU3+8FH7uA76c3NW1zpKTv4= Subject key identifier: 2C:8B:93:2A:8C:0C:2B:F6:73:EC:E8:BA:5A:EA:BD:93:F1:B2:4C:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 758E32F93E6EC22859132802B1644CF2CD73F217 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.mft caRepository: rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 25 Jul 2024 13:37:19 +0000 Certificate not after: Thu 24 Jul 2025 13:42:19 +0000 Subordinate resources: AS: 273521 IP: 189.126.39.0/24 IP: 2804:8fe8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8e:32:f9:3e:6e:c2:28:59:13:28:02:b1:64:4c:f2:cd:73:f2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 25 13:37:19 2024 GMT Not After : Jul 24 13:42:19 2025 GMT Subject: CN=2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c5:db:ff:63:e3:fa:e3:d2:3f:26:4a:80:4e: 73:e3:eb:fa:4c:b9:e3:27:71:d5:fd:4a:a2:74:30: d8:cc:c2:d5:c9:db:0a:17:00:72:57:11:ca:3e:c9: 6c:47:0a:02:cd:c7:12:1d:2c:a1:91:be:06:56:17: 2f:ce:ae:3f:24:89:32:ae:75:6e:db:38:46:cf:c9: 4c:01:bc:9c:36:f6:fb:99:42:a0:04:59:e1:f7:26: ec:43:3a:76:06:82:19:00:43:13:63:04:84:e2:f7: d9:69:b8:b3:17:50:0b:af:21:18:53:c3:81:df:fc: 69:fd:0a:41:04:08:87:56:49:09:dd:09:b0:41:ee: b8:26:76:40:ef:f3:e0:94:2b:ab:d1:12:91:42:aa: ab:c3:9e:75:cf:fa:dc:80:21:3b:46:c9:23:8f:c8: a5:23:c1:70:58:f6:7c:c6:95:09:f0:f5:60:dc:bb: 4b:60:88:17:74:8b:5d:ce:be:7a:9b:d2:e3:e9:e2: f6:88:21:ec:d6:9e:e5:6a:2e:0a:6d:ac:b9:21:51: a0:b6:f9:33:19:b5:0e:fa:7d:1a:03:2d:a2:58:e2: 1e:ea:de:c6:e9:9f:63:04:8d:dc:12:e1:13:aa:e5: 30:a2:40:ac:a2:50:cb:36:c8:00:4d:05:40:45:b2: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:8B:93:2A:8C:0C:2B:F6:73:EC:E8:BA:5A:EA:BD:93:F1:B2:4C:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6ZKPDK8UsgqSh24HSBD5eim6HyfrvZ3sQVkLKBXX3rzE/0/2C8B932A8C0C2BF673ECE8BA5AEABD93F1B24C71.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.39.0/24 IPv6: 2804:8fe8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273521 Signature Algorithm: sha256WithRSAEncryption 15:69:ce:2a:ae:96:73:ed:cf:38:9b:61:af:86:b0:14:75:be: ad:d2:a1:f8:43:20:b5:97:f7:f8:24:ad:fe:50:43:8d:ed:38: 84:8f:62:4c:4e:c8:fd:04:2c:01:bb:f6:61:a2:35:e5:48:e0: 73:d9:9f:03:c6:6b:b2:23:5e:c9:98:6d:80:0f:10:9c:2d:c1: a5:7e:26:51:43:74:a2:5b:1e:f0:b7:33:75:5f:98:8c:59:6b: 02:7c:4e:88:f7:e7:99:f4:51:f5:a2:8a:2b:1b:f5:fc:92:64: cb:df:9f:66:c4:95:d1:a7:f3:c5:f3:ac:b7:a0:11:10:45:bc: c6:eb:35:a2:29:37:1f:92:ab:82:e3:e3:62:f5:e9:01:6d:b6: 20:ca:24:bc:91:72:58:59:0d:2a:69:2b:1c:34:68:74:88:1d: f0:f9:80:2e:31:c6:80:70:60:b2:14:aa:e7:64:02:bc:cc:d1: 83:8a:ec:f4:7c:a8:b9:d2:f8:0b:63:a9:f6:e1:2e:ef:86:da: 93:d8:d2:1d:6a:b5:82:40:d8:5d:30:ce:06:c0:c3:e2:9a:c5: 9c:94:46:e8:95:27:66:09:44:69:5d:c9:b8:e2:43:4c:a8:7f: ec:02:4b:9a:05:67:9e:f1:ee:a8:23:db:97:e2:6d:92:4d:a7: d1:9d:0c:ee -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdY4y+T5uwihZEygCsWRM8s1z8hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjUxMzM3MTlaFw0yNTA3MjQxMzQyMTlaMDMxMTAvBgNV BAMTKDJDOEI5MzJBOEMwQzJCRjY3M0VDRThCQTVBRUFCRDkzRjFCMjRDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlxdv/Y+P649I/JkqATnPj6/pM ueMncdX9SqJ0MNjMwtXJ2woXAHJXEco+yWxHCgLNxxIdLKGRvgZWFy/Orj8kiTKu dW7bOEbPyUwBvJw29vuZQqAEWeH3JuxDOnYGghkAQxNjBITi99lpuLMXUAuvIRhT w4Hf/Gn9CkEECIdWSQndCbBB7rgmdkDv8+CUK6vREpFCqqvDnnXP+tyAITtGySOP yKUjwXBY9nzGlQnw9WDcu0tgiBd0i13Ovnqb0uPp4vaIIezWnuVqLgptrLkhUaC2 +TMZtQ76fRoDLaJY4h7q3sbpn2MEjdwS4ROq5TCiQKyiUMs2yABNBUBFsij/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsi5MqjAwr9nPs 6Lpa6r2T8bJMcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlpL UERLOFVzZ3FTaDI0SFNCRDVlaW02SHlmcnZaM3NRVmtMS0JYWDNyekUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZa S1BESzhVc2dxU2gyNEhTQkQ1ZWltNkh5ZnJ2WjNzUVZrTEtCWFgzcnpFLzAvMkM4 QjkzMkE4QzBDMkJGNjczRUNFOEJBNUFFQUJEOTNGMUIyNEM3MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQAvX4nMA0EAgACMAcDBQAoBI/oMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQscTANBgkqhkiG9w0BAQsFAAOCAQEAFWnOKq6Wc+3POJth r4awFHW+rdKh+EMgtZf3+CSt/lBDje04hI9iTE7I/QQsAbv2YaI15Ujgc9mfA8Zr siNeyZhtgA8QnC3BpX4mUUN0olse8LczdV+YjFlrAnxOiPfnmfRR9aKKKxv1/JJk y9+fZsSV0afzxfOst6AREEW8xus1oik3H5KrguPjYvXpAW22IMokvJFyWFkNKmkr HDRodIgd8PmALjHGgHBgshSq52QCvMzRg4rs9HyoudL4C2Op9uEu74bak9jSHWq1 gkDYXTDOBsDD4prFnJRG6JUnZglEaV3JuOJDTKh/7AJLmgVnnvHuqCPbl+Jtkk2n 0Z0M7g== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:48 2024 by rpki-client on console.sobornost.net