$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer File: 35B50C0BFD35280E87CA5148761CD72862DBC7DF.cer (raw, json) Hash identifier: Zer+CfbxkDz0/Jln/jcMHjWoSnG9ijWFZYk5BgVuWQE= Subject key identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B6D416988A0D3968A80E13416193BE8F9430566 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft caRepository: rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 17 Oct 2024 21:07:10 +0000 Certificate not after: Thu 16 Oct 2025 21:12:10 +0000 Subordinate resources: AS: 268726 IP: 45.171.184.0/22 IP: 2804:59cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6d:41:69:88:a0:d3:96:8a:80:e1:34:16:19:3b:e8:f9:43:05:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 17 21:07:10 2024 GMT Not After : Oct 16 21:12:10 2025 GMT Subject: CN=35B50C0BFD35280E87CA5148761CD72862DBC7DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:ec:c9:85:ae:31:30:9a:f5:e5:40:54:c9: 2e:af:c9:99:46:18:b5:0c:31:e6:33:af:22:35:65: 6d:ba:22:24:2b:e8:37:7c:5c:b3:b1:12:ed:30:20: 9c:a9:d7:06:a2:69:8b:56:bf:0e:31:3c:3c:c8:a7: e0:02:c8:1a:6b:0c:4a:6a:38:9b:61:46:b5:79:29: 41:c3:5d:48:6d:33:bb:b4:5c:89:8c:36:2f:57:0f: aa:da:47:e4:6a:c9:4f:ce:d1:9e:18:05:2c:1e:4a: a1:e6:b5:f8:41:54:d1:70:80:13:19:d5:88:49:23: b2:01:8f:7c:52:de:a9:a5:71:2b:15:64:7a:d7:66: ea:96:e6:9b:e9:da:f2:cf:36:e4:45:ec:cd:a5:76: 98:13:c7:2d:b3:15:1e:9c:98:0a:84:17:28:88:48: f5:54:19:11:98:b0:9d:f0:30:ad:46:30:bd:cd:2d: 8e:7e:c3:83:ff:cc:30:a7:24:d4:91:b9:d1:f0:dc: 05:fa:ba:15:68:57:3f:74:46:5c:f5:69:2b:d7:90: a0:65:e9:16:ae:52:66:64:b2:a8:fa:68:16:4f:a8: 29:1f:b8:99:f9:78:1b:e7:b5:fa:8d:c8:1a:0d:2b: 4b:b6:20:95:91:1b:49:9e:55:b4:c0:12:fc:84:29: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:B5:0C:0B:FD:35:28:0E:87:CA:51:48:76:1C:D7:28:62:DB:C7:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/35B50C0BFD35280E87CA5148761CD72862DBC7DF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.184.0/22 IPv6: 2804:59cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268726 Signature Algorithm: sha256WithRSAEncryption a9:51:58:8f:0d:21:a6:86:d6:64:73:62:64:4b:17:22:26:dd: 15:db:dd:e0:b8:84:55:00:70:2e:12:f0:2f:d5:d1:ab:eb:98: cd:1a:83:65:91:26:9c:26:47:aa:40:e8:3c:6a:87:07:aa:6e: 8d:d0:11:d5:27:40:9c:15:84:b7:0f:38:f6:74:eb:c2:41:85: 33:a8:8c:0f:95:22:42:db:95:c6:b0:60:de:90:ab:ec:84:4c: 82:4e:c6:75:4a:1a:72:4a:47:bb:6a:d1:10:d8:25:93:9a:27: 5a:01:64:40:4f:07:0f:9a:df:44:b2:e0:c2:f1:c1:93:72:52: 90:9a:53:c1:a2:8b:b9:4a:ba:00:01:18:7b:8e:d6:0f:c0:bb: 53:7b:6d:6e:8a:ab:2a:97:d4:71:f5:92:a0:c2:44:1e:17:21: 36:48:d0:0f:e0:1a:d7:e8:f7:f3:03:c4:e3:19:b6:ec:bc:de: 1e:f3:65:ac:d9:82:d3:5a:1e:b4:c6:9d:79:50:d3:1a:c9:26: cd:05:13:2a:23:62:2a:06:00:7d:a9:d5:2f:3f:58:ce:36:ed: 57:ce:01:93:32:4c:d5:c8:a5:d5:0f:05:9e:fc:c5:4b:bc:ba: d4:5a:94:5c:7f:3e:af:76:76:42:79:bc:54:68:ff:df:39:9d: 91:4f:57:45 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUS21BaYig05aKgOE0Fhk76PlDBWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMTcyMTA3MTBaFw0yNTEwMTYyMTEyMTBaMDMxMTAvBgNV BAMTKDM1QjUwQzBCRkQzNTI4MEU4N0NBNTE0ODc2MUNENzI4NjJEQkM3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbuzJha4xMJr15UBUyS6vyZlG GLUMMeYzryI1ZW26IiQr6Dd8XLOxEu0wIJyp1waiaYtWvw4xPDzIp+ACyBprDEpq OJthRrV5KUHDXUhtM7u0XImMNi9XD6raR+RqyU/O0Z4YBSweSqHmtfhBVNFwgBMZ 1YhJI7IBj3xS3qmlcSsVZHrXZuqW5pvp2vLPNuRF7M2ldpgTxy2zFR6cmAqEFyiI SPVUGRGYsJ3wMK1GML3NLY5+w4P/zDCnJNSRudHw3AX6uhVoVz90Rlz1aSvXkKBl 6RauUmZksqj6aBZPqCkfuJn5eBvntfqNyBoNK0u2IJWRG0meVbTAEvyEKTvHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1tQwL/TUoDofK UUh2HNcoYtvH3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRVh0 YmRYZWVSemtmRzloa05GZDJ2cWRkUXdUNFJkdm9Gd203WnZIdGF1MkEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VY dGJkWGVlUnprZkc5aGtORmQydnFkZFF3VDRSZHZvRndtN1p2SHRhdTJBLzAvMzVC NTBDMEJGRDM1MjgwRTg3Q0E1MTQ4NzYxQ0Q3Mjg2MkRCQzdERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLau4MA0EAgACMAcDBQAoBFnMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZtjANBgkqhkiG9w0BAQsFAAOCAQEAqVFYjw0hpobWZHNi ZEsXIibdFdvd4LiEVQBwLhLwL9XRq+uYzRqDZZEmnCZHqkDoPGqHB6pujdAR1SdA nBWEtw849nTrwkGFM6iMD5UiQtuVxrBg3pCr7IRMgk7GdUoackpHu2rRENglk5on WgFkQE8HD5rfRLLgwvHBk3JSkJpTwaKLuUq6AAEYe47WD8C7U3ttboqrKpfUcfWS oMJEHhchNkjQD+Aa1+j38wPE4xm27LzeHvNlrNmC01oetMadeVDTGskmzQUTKiNi KgYAfanVLz9YzjbtV84BkzJM1cil1Q8FnvzFS7y61FqUXH8+r3Z2Qnm8VGj/3zmd kU9XRQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:50 2024 by rpki-client on console.sobornost.net