$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.cer File: 33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.cer (raw, json) Hash identifier: 61e3PNy1qiEBXtJdTkoFRJAkUy2b0ExNQlPK8DV9AZQ= Subject key identifier: 33:A6:DF:FF:7F:2B:17:EF:89:28:30:BB:63:5C:0D:F0:AB:06:F3:3A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 64C6836545CE9634E8CF3AB2ACAE895F6C0A9F8C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.mft caRepository: rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 24 May 2024 18:49:20 +0000 Certificate not after: Fri 23 May 2025 18:54:20 +0000 Subordinate resources: AS: 268737 IP: 45.171.252.0/22 IP: 2804:59f8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c6:83:65:45:ce:96:34:e8:cf:3a:b2:ac:ae:89:5f:6c:0a:9f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 24 18:49:20 2024 GMT Not After : May 23 18:54:20 2025 GMT Subject: CN=33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:ee:24:81:d7:bb:62:71:d4:5d:d6:8f:d4: 7f:38:9d:fb:c1:44:f8:6d:e0:25:27:68:c3:09:1d: b7:65:da:f0:b7:61:1c:63:39:21:9b:6f:1e:d8:2b: 87:41:3d:6c:f2:92:22:13:28:70:59:60:dc:03:30: dc:49:4e:40:22:3c:50:40:99:50:e2:a5:2d:e7:2f: 71:01:f8:99:e3:95:c5:e0:7c:9a:fe:2d:5b:e3:e1: ab:40:6d:3c:1a:7b:0d:5c:ca:65:c6:26:85:2e:61: 89:96:a8:1c:dc:08:13:8e:3c:15:e6:a6:0a:c9:72: cf:91:2c:a7:a9:58:eb:e0:95:f8:fd:95:5f:eb:31: f5:bc:b9:e5:2d:a7:76:7f:b7:87:c8:9f:c6:85:bc: b9:c1:b9:b0:14:b2:25:12:e8:7f:45:fa:69:6d:b7: 5b:7a:80:73:31:cc:db:c9:38:27:50:d7:3d:6d:2f: 53:c9:01:bb:7e:03:cd:10:cf:25:91:e6:75:ab:39: 33:f4:69:10:bc:e5:e5:55:1c:5e:c6:02:e6:6c:89: d2:df:5d:21:7b:29:67:71:fe:2d:ee:53:c5:d9:71: 5f:c0:f8:d9:d6:0b:c4:a3:37:d3:57:69:c3:01:0c: e8:01:16:c1:94:c2:f7:8c:1e:91:e8:d3:25:14:ef: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:A6:DF:FF:7F:2B:17:EF:89:28:30:BB:63:5C:0D:F0:AB:06:F3:3A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.252.0/22 IPv6: 2804:59f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268737 Signature Algorithm: sha256WithRSAEncryption da:96:80:6a:8b:49:ec:80:82:6a:7c:93:ff:38:a3:c7:08:61: b1:7d:d9:43:42:40:4c:46:16:e4:3a:fd:34:6f:8d:5e:38:b2: e6:92:58:5f:32:1d:f6:39:05:3a:b2:36:36:29:7f:84:7f:35: 25:01:c0:98:5c:5c:11:5c:0e:df:8b:76:c7:8a:7b:c3:0e:8a: 5c:1e:e2:72:5c:5f:f2:6f:14:4c:2e:cf:70:13:bf:0d:1c:a6: 54:f2:52:13:3a:40:65:49:de:0a:d0:d1:ab:50:29:59:71:67: c4:7b:d3:62:94:f0:ea:23:eb:73:de:aa:02:a6:7b:a1:45:52: 6a:0e:55:fc:5b:06:d5:3d:5d:09:5c:df:7e:f7:7e:8f:83:dc: 11:7f:db:04:39:fe:b4:0c:9f:4a:c6:7d:b6:6f:8c:8f:d6:ff: 9e:8b:13:6b:e2:87:ba:98:8a:f0:5a:c1:9d:0a:b6:24:3a:c3: bc:46:c1:d1:a5:e2:58:3e:e1:45:ec:4e:da:21:e0:70:be:9e: d5:77:d5:d2:15:b3:3e:c8:20:c2:b7:e4:6f:50:48:9e:06:6b: f8:60:2a:8a:7f:9c:28:16:91:60:f1:09:13:84:5e:28:19:a5: 4c:2e:d0:b7:81:93:d6:6f:aa:3c:b3:47:d0:b8:ad:cd:f9:ff: da:14:69:fd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZMaDZUXOljTozzqyrK6JX2wKn4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjQxODQ5MjBaFw0yNTA1MjMxODU0MjBaMDMxMTAvBgNV BAMTKDMzQTZERkZGN0YyQjE3RUY4OTI4MzBCQjYzNUMwREYwQUIwNkYzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4u4kgde7YnHUXdaP1H84nfvB RPht4CUnaMMJHbdl2vC3YRxjOSGbbx7YK4dBPWzykiITKHBZYNwDMNxJTkAiPFBA mVDipS3nL3EB+JnjlcXgfJr+LVvj4atAbTwaew1cymXGJoUuYYmWqBzcCBOOPBXm pgrJcs+RLKepWOvglfj9lV/rMfW8ueUtp3Z/t4fIn8aFvLnBubAUsiUS6H9F+mlt t1t6gHMxzNvJOCdQ1z1tL1PJAbt+A80QzyWR5nWrOTP0aRC85eVVHF7GAuZsidLf XSF7KWdx/i3uU8XZcV/A+NnWC8SjN9NXacMBDOgBFsGUwveMHpHo0yUU7wQtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQzpt//fysX74ko MLtjXA3wqwbzOjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEtu OHdnUWFycG8zNmdvaFIzc3hhdXVWZ0NSNmdHV2RMRlhlVmNhNHd2aUsvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhL bjh3Z1FhcnBvMzZnb2hSM3N4YXV1VmdDUjZnR1dkTEZYZVZjYTR3dmlLLzIvMzNB NkRGRkY3RjJCMTdFRjg5MjgzMEJCNjM1QzBERjBBQjA2RjMzQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLav8MA0EAgACMAcDBQAoBFn4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZwTANBgkqhkiG9w0BAQsFAAOCAQEA2paAaotJ7ICCanyT /zijxwhhsX3ZQ0JATEYW5Dr9NG+NXjiy5pJYXzId9jkFOrI2Nil/hH81JQHAmFxc EVwO34t2x4p7ww6KXB7iclxf8m8UTC7PcBO/DRymVPJSEzpAZUneCtDRq1ApWXFn xHvTYpTw6iPrc96qAqZ7oUVSag5V/FsG1T1dCVzffvd+j4PcEX/bBDn+tAyfSsZ9 tm+Mj9b/nosTa+KHupiK8FrBnQq2JDrDvEbB0aXiWD7hRexO2iHgcL6e1XfV0hWz Psggwrfkb1BIngZr+GAqin+cKBaRYPEJE4ReKBmlTC7Qt4GT1m+qPLNH0Litzfn/ 2hRp/Q== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:49 2024 by rpki-client on console.sobornost.net