$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer File: 40654D1C88C090F47A51793F972DCFF8DCF3C699.cer (raw, json) Hash identifier: Pb3ixb62OA2t+egtB6yWxO6hdd18qvxzm34HeVIPkcw= Subject key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F07A185463AB4AEA1345078E7095C15F3AED023 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft caRepository: rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 17:34:01 +0000 Certificate not after: Thu 03 Apr 2025 17:39:01 +0000 Subordinate resources: AS: 53047 AS: 267012 IP: 45.227.120.0/22 IP: 177.101.80.0/20 IP: 2804:6f0::/32 IP: 2804:46cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:07:a1:85:46:3a:b4:ae:a1:34:50:78:e7:09:5c:15:f3:ae:d0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 17:34:01 2024 GMT Not After : Apr 3 17:39:01 2025 GMT Subject: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:48:62:67:a0:12:db:8d:4b:1d:92:9c:66: be:2e:78:84:24:ca:24:f4:f0:91:7a:22:90:14:50: 43:bd:4f:56:e3:b4:15:4d:55:fd:31:a5:0e:1d:e4: 76:3f:b2:db:04:a2:8f:13:95:83:23:8e:12:19:67: 2f:d3:ac:2b:14:81:ea:fb:b6:71:32:31:fc:a8:fd: a3:4d:72:65:21:86:84:cc:aa:1b:3b:9f:6e:8f:8d: 22:9c:43:e5:20:85:93:35:03:87:2a:21:17:5e:06: 6c:21:90:58:5d:54:a4:1b:03:64:72:a7:d0:80:c5: e5:65:92:dd:5b:e0:4f:28:4b:06:52:a8:97:b3:0d: f8:0e:98:57:f3:48:9d:1c:c2:f1:32:f8:95:2a:73: dc:bf:9d:b8:40:94:d9:8a:c2:7c:16:bc:5b:2e:3c: ae:ca:65:ca:3e:d4:7e:16:71:b4:c7:04:6e:7b:05: 30:f2:a3:94:66:15:30:03:8c:69:fb:71:fc:eb:66: 24:56:05:69:35:8f:e0:d5:3a:73:bb:10:c8:f2:38: e1:94:6a:b6:19:31:d5:77:b6:d3:32:3f:45:de:7a: cd:20:1f:95:aa:4c:91:88:22:87:45:59:1f:9b:c4: f4:5c:15:76:67:e1:d0:d6:cd:29:d3:07:28:23:cb: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.227.120.0/22 177.101.80.0/20 IPv6: 2804:6f0::/32 2804:46cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53047 267012 Signature Algorithm: sha256WithRSAEncryption 77:d4:6d:b8:e9:d7:03:4a:61:4c:4a:0c:0a:80:36:7b:01:52: 4a:5e:83:2c:37:61:87:95:54:98:56:a7:07:0c:f4:e6:73:e0: a2:c8:c3:80:bc:59:88:58:b0:2d:a2:cc:8a:04:e2:10:a8:3a: 5a:6e:44:0c:87:36:73:0c:99:bc:5a:34:39:b5:6f:cf:61:da: 08:c5:ca:46:38:5d:96:2c:9d:9f:c4:60:d4:35:b4:1b:1a:12: 9a:e8:e9:b3:ea:fd:ad:9e:77:a2:2c:d6:02:20:21:ff:80:d8: 90:a2:0d:9f:c8:8d:73:ee:17:a5:bf:f6:86:cc:c2:35:15:57: be:b2:51:72:d2:b4:f4:ba:dc:40:70:96:11:68:f7:52:70:8a: e3:5d:78:e8:49:f8:f5:56:1c:a7:d8:5a:82:4c:cc:08:7b:8f: 57:2f:9b:2b:85:2a:2f:53:16:cf:56:26:5d:57:7d:9c:a0:86: 90:67:99:9f:90:4e:fa:60:05:43:31:ea:e4:d5:21:4f:6f:3b: a8:1c:ad:a4:e7:d6:f2:d0:7a:7b:b1:4d:43:ea:15:72:59:78: c7:73:ab:6d:9f:71:83:39:51:39:f9:46:91:10:69:99:df:8d: 2d:d4:89:5d:14:07:3f:e5:e0:00:c1:40:78:5e:2e:dc:b8:cc: 79:48:7c:d8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUDwehhUY6tK6hNFB45wlcFfOu0CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNzM0MDFaFw0yNTA0MDMxNzM5MDFaMDMxMTAvBgNV BAMTKDQwNjU0RDFDODhDMDkwRjQ3QTUxNzkzRjk3MkRDRkY4RENGM0M2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPEhiZ6AS241LHZKcZr4ueIQk yiT08JF6IpAUUEO9T1bjtBVNVf0xpQ4d5HY/stsEoo8TlYMjjhIZZy/TrCsUger7 tnEyMfyo/aNNcmUhhoTMqhs7n26PjSKcQ+UghZM1A4cqIRdeBmwhkFhdVKQbA2Ry p9CAxeVlkt1b4E8oSwZSqJezDfgOmFfzSJ0cwvEy+JUqc9y/nbhAlNmKwnwWvFsu PK7KZco+1H4WcbTHBG57BTDyo5RmFTADjGn7cfzrZiRWBWk1j+DVOnO7EMjyOOGU arYZMdV3ttMyP0Xees0gH5WqTJGIIodFWR+bxPRcFXZn4dDWzSnTBygjy8wNAgMB AAGjggNMMIIDSDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRAZU0ciMCQ9HpR eT+XLc/43PPGmTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlhI b21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlCSmcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZY SG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzEvNDA2 NTREMUM4OEMwOTBGNDdBNTE3OTNGOTcyRENGRjhEQ0YzQzY5OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjASBAIAATAMAwQCLeN4AwQEsWVQMBQEAgACMA4DBQAoBAbwAwUAKARG zDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAzzcCAwQTBDANBgkqhkiG9w0BAQsF AAOCAQEAd9RtuOnXA0phTEoMCoA2ewFSSl6DLDdhh5VUmFanBwz05nPgosjDgLxZ iFiwLaLMigTiEKg6Wm5EDIc2cwyZvFo0ObVvz2HaCMXKRjhdliydn8Rg1DW0GxoS mujps+r9rZ53oizWAiAh/4DYkKINn8iNc+4Xpb/2hszCNRVXvrJRctK09LrcQHCW EWj3UnCK41146En49VYcp9hagkzMCHuPVy+bK4UqL1MWz1YmXVd9nKCGkGeZn5BO +mAFQzHq5NUhT287qBytpOfW8tB6e7FNQ+oVcll4x3OrbZ9xgzlROflGkRBpmd+N LdSJXRQHP+XgAMFAeF4u3LjMeUh82A== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:52 2024 by rpki-client on console.sobornost.net