$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer File: 2EE7830EC8B817A3DBD80AAF93266292D6118661.cer (raw, json) Hash identifier: u7b72vI1MzNnrEtP+4t1+fyYXUk9KOEQYwSl9qQza+8= Subject key identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5D3D989A176F34909D4B7D886FB06FDE3EBCDD39 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft caRepository: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 09:25:19 +0000 Certificate not after: Thu 03 Apr 2025 09:30:19 +0000 Subordinate resources: AS: 264528 IP: 138.0.20.0/22 IP: 168.194.104.0/22 IP: 2804:2108::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3d:98:9a:17:6f:34:90:9d:4b:7d:88:6f:b0:6f:de:3e:bc:dd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 09:25:19 2024 GMT Not After : Apr 3 09:30:19 2025 GMT Subject: CN=2EE7830EC8B817A3DBD80AAF93266292D6118661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:5c:40:f3:60:24:dd:34:d2:ba:60:0b:44: 3c:69:1a:7a:69:8b:75:0e:11:93:be:21:be:d9:84: 85:c8:a7:09:df:ea:cc:e2:5a:8b:54:a1:f0:c1:a4: 2d:8c:7a:e9:9a:1a:1a:01:6d:50:2d:50:64:67:a3: f2:db:4d:9f:15:c6:46:5f:e8:8d:bd:3e:57:26:ab: 21:43:df:32:e9:1f:3a:c4:aa:ce:f6:fd:75:9e:59: b1:9f:dd:08:56:ba:5b:bf:df:a0:ab:e4:c1:90:c0: 86:f7:13:63:65:9f:b9:6f:d5:c2:07:91:ff:d0:2e: 2a:80:b2:cf:79:9d:cc:e2:29:23:b1:49:5e:3a:e7: 20:df:c2:a9:84:89:02:05:62:ee:59:42:51:98:26: f2:52:20:64:ad:b2:c3:3b:f5:d4:47:6d:06:d9:d9: 8a:87:18:09:99:1b:96:27:9c:67:cd:97:19:02:3b: ce:8c:b7:90:b3:ac:a9:a5:1f:6a:f0:6b:c2:72:c6: fa:3f:9b:00:86:36:ba:8a:27:37:30:c9:76:10:0f: 57:c9:78:b1:d9:97:70:9c:bf:92:0c:9b:1b:ac:7a: 14:42:39:30:45:18:d0:93:41:4f:b9:53:5e:94:c1: a6:15:3a:12:8b:98:a9:8d:9a:7a:88:fd:4a:1c:b7: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.0.20.0/22 168.194.104.0/22 IPv6: 2804:2108::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264528 Signature Algorithm: sha256WithRSAEncryption 6d:43:bc:fe:5c:cc:e5:39:b5:b2:7b:38:ad:cb:94:51:00:f9: 5c:cf:1c:d3:d2:1d:e2:b5:33:67:eb:57:cb:0f:81:ec:cd:f2: 46:8c:c4:60:b9:b4:59:d1:6d:fb:12:4a:b9:e6:0c:53:a4:bc: cc:1e:c2:66:f6:69:90:c0:61:c4:6f:cc:c1:5d:54:5f:97:b4: e9:d9:17:b1:f1:da:cb:69:3f:84:e2:6c:5e:56:8c:3b:c7:fb: d2:b2:07:aa:c6:9e:38:fc:86:ca:cd:8b:bd:5d:d9:53:1d:15: 7e:37:b3:e9:2a:83:1a:32:0a:24:6b:08:c0:0a:9f:7a:05:b1: 4a:73:ed:b8:94:1a:05:fe:4e:6b:ef:89:b9:79:bc:ca:23:44: 38:66:10:ef:f0:0d:bc:ac:9f:91:21:72:a3:67:1a:bd:4d:c8: 32:35:c9:44:61:a9:f4:69:1e:4e:75:66:d9:56:42:69:50:d3: 6b:ce:2a:34:de:b2:5f:5b:1a:e7:eb:b1:cb:8a:cd:94:d5:2b: 4c:67:5d:ab:3b:80:1d:28:49:7c:17:d5:99:48:e3:88:e5:0b: 67:a1:ee:0a:4d:dd:d8:27:13:0c:3c:77:56:23:0f:6e:1d:80: 93:6c:f3:23:07:e4:57:91:28:9d:73:d5:f3:d8:e8:ee:73:11: aa:79:29:00 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUXT2YmhdvNJCdS32Ib7Bv3j683TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwOTI1MTlaFw0yNTA0MDMwOTMwMTlaMDMxMTAvBgNV BAMTKDJFRTc4MzBFQzhCODE3QTNEQkQ4MEFBRjkzMjY2MjkyRDYxMTg2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhuVxA82Ak3TTSumALRDxpGnpp i3UOEZO+Ib7ZhIXIpwnf6sziWotUofDBpC2MeumaGhoBbVAtUGRno/LbTZ8VxkZf 6I29PlcmqyFD3zLpHzrEqs72/XWeWbGf3QhWulu/36Cr5MGQwIb3E2Nln7lv1cIH kf/QLiqAss95ncziKSOxSV465yDfwqmEiQIFYu5ZQlGYJvJSIGStssM79dRHbQbZ 2YqHGAmZG5YnnGfNlxkCO86Mt5CzrKmlH2rwa8Jyxvo/mwCGNrqKJzcwyXYQD1fJ eLHZl3Ccv5IMmxusehRCOTBFGNCTQU+5U16UwaYVOhKLmKmNmnqI/Uoct4FBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQu54MOyLgXo9vY Cq+TJmKS1hGGYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkdT ZVBybk1YanZwTWlQQUdyZmVzSG16bzRMMTgxMzNWREtlQVBRVUpKbzgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JH U2VQcm5NWGp2cE1pUEFHcmZlc0htem80TDE4MTMzVkRLZUFQUVVKSm84LzEvMkVF NzgzMEVDOEI4MTdBM0RCRDgwQUFGOTMyNjYyOTJENjExODY2MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCigAUAwQCqMJoMA0EAgACMAcDBQAoBCEIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJUDANBgkqhkiG9w0BAQsFAAOCAQEAbUO8/lzM 5Tm1sns4rcuUUQD5XM8c09Id4rUzZ+tXyw+B7M3yRozEYLm0WdFt+xJKueYMU6S8 zB7CZvZpkMBhxG/MwV1UX5e06dkXsfHay2k/hOJsXlaMO8f70rIHqsaeOPyGys2L vV3ZUx0Vfjez6SqDGjIKJGsIwAqfegWxSnPtuJQaBf5Oa++JuXm8yiNEOGYQ7/AN vKyfkSFyo2cavU3IMjXJRGGp9GkeTnVm2VZCaVDTa84qNN6yX1sa5+uxy4rNlNUr TGddqzuAHShJfBfVmUjjiOULZ6HuCk3d2CcTDDx3ViMPbh2Ak2zzIwfkV5EonXPV 89jo7nMRqnkpAA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:49 2024 by rpki-client on console.sobornost.net