$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer File: 2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer (raw, json) Hash identifier: qbRU/amTbS0IaKkRnFJrLRWJNi+xw07+zKg1zcwIi4o= Subject key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6171B2F57C850AC3CB7F3D00489077109C961253 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft caRepository: rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Oct 2024 15:15:48 +0000 Certificate not after: Mon 13 Oct 2025 15:20:48 +0000 Subordinate resources: AS: 263518 IP: 168.197.84.0/22 IP: 191.243.212.0/22 IP: 2804:1324::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:71:b2:f5:7c:85:0a:c3:cb:7f:3d:00:48:90:77:10:9c:96:12:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 14 15:15:48 2024 GMT Not After : Oct 13 15:20:48 2025 GMT Subject: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:22:52:a7:48:b9:a0:b7:9c:7e:ff:bb:34: 1d:4d:56:c2:9a:4d:85:dc:be:90:80:79:7e:28:7c: bc:43:e4:2b:88:01:eb:89:79:3b:61:72:02:a1:ac: 6e:72:bb:d1:f1:d6:39:38:d9:37:d9:1c:1d:3c:bc: 8a:14:54:73:57:0d:7d:2e:63:93:16:64:0c:8c:d2: b8:46:fb:49:69:a2:ed:58:63:c2:39:04:84:46:a9: 42:93:9d:50:bd:fe:e4:9b:d7:d9:5e:06:ec:df:6a: 28:4d:87:56:99:0e:38:f6:07:7d:b1:df:ed:4a:fc: 6b:cd:45:70:4e:0b:85:76:73:be:d5:db:a6:0a:ea: 66:42:46:31:9c:39:63:33:e5:2b:9d:37:99:ff:e4: 9e:15:38:ab:a1:c7:1f:93:ac:29:82:a4:ab:e3:80: be:2a:e6:16:25:5a:99:20:67:c3:5d:7a:4f:02:12: 62:c1:27:13:e2:be:a7:34:ea:79:ab:48:e0:ca:6b: 67:86:a9:73:66:b0:0f:01:ea:cc:73:3a:28:0f:b3: b9:18:fc:6a:1e:c4:89:50:52:d2:d9:5d:a6:d1:ae: 03:f5:ba:dd:78:06:31:de:bc:db:98:25:47:13:69: 7c:02:1e:53:09:06:20:a2:86:90:31:6d:1a:37:77: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.197.84.0/22 191.243.212.0/22 IPv6: 2804:1324::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263518 Signature Algorithm: sha256WithRSAEncryption 7a:d8:44:f0:66:b0:ac:63:54:8f:ae:a9:5b:ad:1c:a3:99:bb: ac:44:e8:91:a8:80:00:e7:27:f7:c9:ee:94:a0:ef:b8:a3:b5: 2e:9f:50:17:f5:5d:2d:68:50:56:1b:61:3f:bf:bc:2b:48:20: 86:70:e2:ab:d8:4c:bc:6f:77:51:d8:36:96:3c:8f:36:3c:b5: 8b:ec:68:7d:3e:32:a1:d6:5a:2b:87:72:89:57:e9:27:5c:fb: 54:bf:c6:85:58:00:0f:cd:e4:db:72:a0:e4:28:e5:74:36:08: dc:43:16:a2:d6:4c:cb:25:25:eb:a0:51:d3:08:93:6c:b5:18: 0a:e3:4d:d4:c3:9d:e9:83:3e:62:ef:8a:4a:a9:57:17:ff:93: 95:c0:1e:7b:60:ae:ab:99:38:c3:16:4e:74:83:ae:70:38:a4: 66:3b:ae:ba:66:89:47:7b:97:1f:1a:bc:a7:d6:99:29:b2:ed: 9e:13:67:7c:b5:9f:dc:d2:b3:c9:e6:ff:8a:83:75:0c:8a:db: 77:55:17:b4:1c:1b:b9:d0:fd:4c:8a:0c:87:a2:35:f6:d5:70: 26:52:a3:b1:1c:45:36:94:1b:e1:c6:be:0d:d6:27:df:a3:21: 92:74:5d:4d:1d:ef:bc:a2:9e:43:40:71:49:6f:3c:ec:03:f0: 81:75:01:fd -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYXGy9XyFCsPLfz0ASJB3EJyWElMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMTQxNTE1NDhaFw0yNTEwMTMxNTIwNDhaMDMxMTAvBgNV BAMTKDJGNDkxNkMwRUM1RjFFNkJGRjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdSJSp0i5oLecfv+7NB1NVsKa TYXcvpCAeX4ofLxD5CuIAeuJeTthcgKhrG5yu9Hx1jk42TfZHB08vIoUVHNXDX0u Y5MWZAyM0rhG+0lpou1YY8I5BIRGqUKTnVC9/uSb19leBuzfaihNh1aZDjj2B32x 3+1K/GvNRXBOC4V2c77V26YK6mZCRjGcOWMz5SudN5n/5J4VOKuhxx+TrCmCpKvj gL4q5hYlWpkgZ8Ndek8CEmLBJxPivqc06nmrSODKa2eGqXNmsA8B6sxzOigPs7kY /GoexIlQUtLZXabRrgP1ut14BjHevNuYJUcTaXwCHlMJBiCihpAxbRo3dxHrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvSRbA7F8ea/8a ZNyWBEVHOHdeJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG05 OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZpVG4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht OTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAvMkY0 OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDczODc3NUUyNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqMVUAwQCv/PUMA0EAgACMAcDBQAoBBMkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFXjANBgkqhkiG9w0BAQsFAAOCAQEAethE8Gaw rGNUj66pW60co5m7rETokaiAAOcn98nulKDvuKO1Lp9QF/VdLWhQVhthP7+8K0gg hnDiq9hMvG93Udg2ljyPNjy1i+xofT4yodZaK4dyiVfpJ1z7VL/GhVgAD83k23Kg 5CjldDYI3EMWotZMyyUl66BR0wiTbLUYCuNN1MOd6YM+Yu+KSqlXF/+TlcAee2Cu q5k4wxZOdIOucDikZjuuumaJR3uXHxq8p9aZKbLtnhNnfLWf3NKzyeb/ioN1DIrb d1UXtBwbudD9TIoMh6I19tVwJlKjsRxFNpQb4ca+DdYn36MhknRdTR3vvKKeQ0Bx SW887APwgXUB/Q== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:49 2024 by rpki-client on console.sobornost.net