$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.cer File: 2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.cer (raw, json) Hash identifier: 4BzatCVp9YifPpjNJg2TP6QsADqD4SqYkoHVw5Syu5g= Subject key identifier: 2D:3A:A1:7B:EE:9C:EF:03:7A:01:DD:CE:96:C7:89:68:B7:A2:3E:47 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 68FE50599A5BFA66A8F9708294E674E866C0F8A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.mft caRepository: rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Sep 2024 12:07:32 +0000 Certificate not after: Thu 11 Sep 2025 12:12:32 +0000 Subordinate resources: AS: 263855 IP: 138.186.84.0/22 IP: 2804:26c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:fe:50:59:9a:5b:fa:66:a8:f9:70:82:94:e6:74:e8:66:c0:f8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 12 12:07:32 2024 GMT Not After : Sep 11 12:12:32 2025 GMT Subject: CN=2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:eb:d6:ab:f6:86:5e:0c:cb:02:8c:6d:b2: 58:6f:93:47:2d:44:64:37:06:b7:2c:10:50:53:5d: 78:d7:31:a4:08:14:46:26:d4:5a:9c:f5:f4:e7:c6: fd:6e:7f:b9:94:d9:9d:bf:38:63:a8:9a:ca:c3:19: ff:05:23:8f:69:a6:46:07:b8:56:52:22:40:de:3a: 3a:67:51:09:9f:49:e0:56:d3:12:0d:56:de:86:dc: de:f8:31:0b:1e:74:0b:13:19:f7:48:d9:74:3c:e9: 0e:d0:84:c3:3f:a8:a2:71:41:e5:47:5b:33:db:34: ee:b6:e4:5b:51:82:20:99:2e:92:be:8a:70:fb:b8: f9:03:93:42:03:e5:9b:3b:85:bd:3f:8b:89:24:cc: 8f:8e:14:82:87:84:08:c2:dc:db:c3:3b:65:e8:46: 1b:f9:f4:08:ab:ef:41:9c:7a:32:ea:31:42:77:cc: c0:42:d0:5f:d1:37:58:bb:44:3b:88:55:7b:f2:e5: 53:89:90:af:89:c4:c7:dc:dc:fc:a8:ac:b7:06:29: 83:28:ab:38:a8:c5:7b:4d:d6:fe:79:7a:1e:d6:d4: 72:b8:87:ed:ac:87:22:15:34:55:52:3b:4a:ea:9f: a7:00:aa:74:14:67:11:7b:ab:14:91:ec:b9:f3:38: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:3A:A1:7B:EE:9C:EF:03:7A:01:DD:CE:96:C7:89:68:B7:A2:3E:47 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/2D3AA17BEE9CEF037A01DDCE96C78968B7A23E47.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.84.0/22 IPv6: 2804:26c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263855 Signature Algorithm: sha256WithRSAEncryption 6c:93:b5:e1:07:cf:37:54:d2:03:c2:f3:45:1b:47:b0:b6:fc: 78:62:d6:0f:7c:48:6e:fc:1a:6b:15:c3:42:3e:73:16:5f:9f: e4:8a:2d:81:04:72:b8:fd:9d:7c:96:0c:17:78:78:2c:ff:39: 04:3f:12:88:a5:da:c5:f4:1e:d3:89:94:3c:48:a7:10:d9:69: dc:7d:25:33:91:1a:68:f0:4e:ee:7b:ac:93:40:c6:5a:27:f4: 11:55:c4:87:85:ee:02:ee:20:10:11:f6:e2:b5:d3:fe:92:c1: 53:d7:2f:ca:56:5d:c0:22:3f:42:b5:48:c5:9b:39:9f:21:d9: 89:c7:4e:64:b9:92:0e:63:68:1e:df:e6:59:99:81:88:f3:ef: 9d:f0:7d:ee:0e:a2:8c:6d:24:10:0b:62:ba:4b:76:f4:93:fd: f1:7b:3a:c7:2f:fd:68:a4:4c:55:4f:47:c7:ce:3e:ec:07:4e: 9f:e3:03:54:71:95:e7:a5:8a:ac:13:7c:d0:84:b3:f7:e0:0f: ea:22:39:49:ed:80:92:5c:a6:05:d3:12:fd:94:27:61:e6:ae: 58:cb:2b:26:65:0a:a2:ba:67:d7:5e:09:dc:40:b1:17:a9:30: 29:c9:21:67:24:72:8e:c6:bd:4e:a9:8d:d0:17:9c:06:45:95: 82:1a:69:25 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUaP5QWZpb+mao+XCClOZ06GbA+KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MTIxMjA3MzJaFw0yNTA5MTExMjEyMzJaMDMxMTAvBgNV BAMTKDJEM0FBMTdCRUU5Q0VGMDM3QTAxRERDRTk2Qzc4OTY4QjdBMjNFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsuvWq/aGXgzLAoxtslhvk0ct RGQ3BrcsEFBTXXjXMaQIFEYm1Fqc9fTnxv1uf7mU2Z2/OGOomsrDGf8FI49ppkYH uFZSIkDeOjpnUQmfSeBW0xINVt6G3N74MQsedAsTGfdI2XQ86Q7QhMM/qKJxQeVH WzPbNO625FtRgiCZLpK+inD7uPkDk0ID5Zs7hb0/i4kkzI+OFIKHhAjC3NvDO2Xo Rhv59Air70GcejLqMUJ3zMBC0F/RN1i7RDuIVXvy5VOJkK+JxMfc3PyorLcGKYMo qzioxXtN1v55eh7W1HK4h+2shyIVNFVSO0rqn6cAqnQUZxF7qxSR7LnzONN3AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQtOqF77pzvA3oB 3c6Wx4lot6I+RzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ21n Z250dVh5RnhSeVZUOFhBQjZITnFpYm1xYXk2OUR4Z3BMQVg3UlVKOHUvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ21n Z250dVh5RnhSeVZUOFhBQjZITnFpYm1xYXk2OUR4Z3BMQVg3UlVKOHUvMC8yRDNB QTE3QkVFOUNFRjAzN0EwMUREQ0U5NkM3ODk2OEI3QTIzRTQ3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKulQwDQQCAAIwBwMFACgEJsQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAavMA0GCSqGSIb3DQEBCwUAA4IBAQBsk7XhB883VNIDwvNF G0ewtvx4YtYPfEhu/BprFcNCPnMWX5/kii2BBHK4/Z18lgwXeHgs/zkEPxKIpdrF 9B7TiZQ8SKcQ2WncfSUzkRpo8E7ue6yTQMZaJ/QRVcSHhe4C7iAQEfbitdP+ksFT 1y/KVl3AIj9CtUjFmzmfIdmJx05kuZIOY2ge3+ZZmYGI8++d8H3uDqKMbSQQC2K6 S3b0k/3xezrHL/1opExVT0fHzj7sB06f4wNUcZXnpYqsE3zQhLP34A/qIjlJ7YCS XKYF0xL9lCdh5q5YyysmZQqiumfXXgncQLEXqTApySFnJHKOxr1OqY3QF5wGRZWC Gmkl -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:48 2024 by rpki-client on console.sobornost.net