$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer File: 3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer (raw, json) Hash identifier: vVXwSFtSD62TWPGsI3zDHS6A4/NOBpnmZIqGGPdljKE= Subject key identifier: 3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4286EF5C65B24EC2832C7C5DC9D0CC7D12710BB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.mft caRepository: rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 26 Aug 2024 18:24:49 +0000 Certificate not after: Mon 25 Aug 2025 18:29:49 +0000 Subordinate resources: AS: 263486 IP: 170.79.128.0/22 IP: 191.242.248.0/21 IP: 2804:1298::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:86:ef:5c:65:b2:4e:c2:83:2c:7c:5d:c9:d0:cc:7d:12:71:0b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 18:24:49 2024 GMT Not After : Aug 25 18:29:49 2025 GMT Subject: CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:b5:b6:f9:4e:7d:44:d7:5d:79:6c:bd:04: a5:dd:7a:ae:86:36:1b:19:73:18:f5:73:13:01:f6: fe:29:d8:de:ad:04:26:f0:49:f3:9b:1f:b2:5e:ee: c7:fa:cf:46:8a:b1:25:dc:0d:ba:f4:e9:c5:14:4a: 0e:82:53:2a:1a:ba:e4:f8:cc:2a:92:58:90:57:c6: 30:a0:d5:40:41:fe:00:9b:6f:e3:fe:14:a5:7f:af: c9:52:42:55:8d:c9:5f:d5:e2:55:14:6a:d6:6a:ea: 69:c5:d0:47:87:35:8f:e3:4e:96:13:aa:a4:35:4b: c1:af:70:56:51:b4:30:7a:27:90:2e:e5:bf:5d:55: 32:50:7d:ff:83:cc:72:d1:b1:20:dd:39:36:fc:b1: 3c:3a:cf:bf:5a:09:d1:9e:7e:12:1d:92:6b:83:91: 1d:63:7f:9d:51:4d:9c:52:2b:24:28:ec:05:49:96: 04:5d:09:15:80:ab:fb:a5:3e:53:70:c6:99:d3:6d: 40:e8:d8:50:db:e0:db:9f:88:7a:f3:af:6d:bc:0a: c3:d5:ba:e9:46:56:00:ef:d6:17:5c:51:1f:17:85: 49:8f:c2:45:9f:04:9a:6b:c0:28:ba:b0:5f:05:f6: 63:e0:77:d2:9d:6c:88:c6:a7:63:e8:a1:ca:82:77: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.128.0/22 191.242.248.0/21 IPv6: 2804:1298::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263486 Signature Algorithm: sha256WithRSAEncryption 45:16:46:e9:71:74:ee:d3:fb:11:7e:f5:4c:27:2c:b1:bf:23: 19:8b:fa:2a:50:90:4e:43:94:a4:59:35:7e:25:78:9e:b6:07: 2e:97:23:59:3e:c5:67:c1:c6:6e:e3:34:8c:3a:a6:a2:10:a4: 14:26:24:3c:47:1c:e5:0a:70:8c:18:d5:64:90:23:a3:14:39: 71:b4:02:80:04:48:51:66:37:68:3d:36:a9:be:d7:18:f0:d7: b9:71:88:e6:64:ea:81:42:0c:a5:03:01:18:d3:c3:2e:41:25: da:5e:89:e2:5a:d2:ad:9a:59:20:bd:d4:75:f4:5c:ba:d7:90: 8a:0e:24:63:57:6a:97:fd:71:a8:a9:9e:6e:b6:62:19:46:f8: e8:ec:d5:44:6f:53:da:a0:d9:cf:45:82:0c:b7:5e:6b:d4:c1: 7e:6e:7f:54:26:1c:49:65:8d:83:74:85:51:43:e0:cd:28:35: ac:20:16:38:b9:26:a1:f1:fb:6f:7f:72:a6:f5:5a:70:30:52: 75:c1:df:31:8e:6a:fd:0a:4f:f7:38:b4:d5:a6:34:b7:79:07: d5:62:1a:88:b9:bf:f2:90:64:32:c8:be:0c:d6:6a:44:88:b4: 99:ca:42:1d:cd:77:3e:84:62:b5:db:84:77:e6:f5:c1:ad:7f: 09:1d:3d:52 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQobvXGWyTsKDLHxdydDMfRJxC7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjYxODI0NDlaFw0yNTA4MjUxODI5NDlaMDMxMTAvBgNV BAMTKDNDNUE1MjFEMDQwMEQ0NTRGMjMwREZENUFDOEQ5NTI5MEMwQThBNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSrW2+U59RNddeWy9BKXdeq6G NhsZcxj1cxMB9v4p2N6tBCbwSfObH7Je7sf6z0aKsSXcDbr06cUUSg6CUyoauuT4 zCqSWJBXxjCg1UBB/gCbb+P+FKV/r8lSQlWNyV/V4lUUatZq6mnF0EeHNY/jTpYT qqQ1S8GvcFZRtDB6J5Au5b9dVTJQff+DzHLRsSDdOTb8sTw6z79aCdGefhIdkmuD kR1jf51RTZxSKyQo7AVJlgRdCRWAq/ulPlNwxpnTbUDo2FDb4NufiHrzr228CsPV uulGVgDv1hdcUR8XhUmPwkWfBJprwCi6sF8F9mPgd9KdbIjGp2PoocqCdzitAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8WlIdBADUVPIw 39WsjZUpDAqKUTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkZU SGRMYTczdUpmVHA1RGFSYTVuSHdMY3hSQmlNRGZvZ3FUdzM3bmkzZmEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZG VEhkTGE3M3VKZlRwNURhUmE1bkh3TGN4UkJpTURmb2dxVHczN25pM2ZhLzAvM0M1 QTUyMUQwNDAwRDQ1NEYyMzBERkQ1QUM4RDk1MjkwQzBBOEE1MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk+AAwQDv/L4MA0EAgACMAcDBQAoBBKYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFPjANBgkqhkiG9w0BAQsFAAOCAQEARRZG6XF0 7tP7EX71TCcssb8jGYv6KlCQTkOUpFk1fiV4nrYHLpcjWT7FZ8HGbuM0jDqmohCk FCYkPEcc5QpwjBjVZJAjoxQ5cbQCgARIUWY3aD02qb7XGPDXuXGI5mTqgUIMpQMB GNPDLkEl2l6J4lrSrZpZIL3UdfRcuteQig4kY1dql/1xqKmebrZiGUb46OzVRG9T 2qDZz0WCDLdea9TBfm5/VCYcSWWNg3SFUUPgzSg1rCAWOLkmofH7b39ypvVacDBS dcHfMY5q/QpP9zi01aY0t3kH1WIaiLm/8pBkMsi+DNZqRIi0mcpCHc13PoRitduE d+b1wa1/CR09Ug== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:51 2024 by rpki-client on console.sobornost.net