$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4108FDAFD23A629171E45C2E18CFD743DE65C108.cer File: 4108FDAFD23A629171E45C2E18CFD743DE65C108.cer (raw, json) Hash identifier: h2UmI6rKEEw5boyriApAA+fs4CB/ftTCMHq4xfD4KaQ= Subject key identifier: 41:08:FD:AF:D2:3A:62:91:71:E4:5C:2E:18:CF:D7:43:DE:65:C1:08 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2D97C8841AA363895E555F0DD2DC5E982978F79B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/4108FDAFD23A629171E45C2E18CFD743DE65C108.mft caRepository: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 18 Oct 2024 11:19:45 +0000 Certificate not after: Fri 17 Oct 2025 11:24:45 +0000 Subordinate resources: AS: 268033 IP: 45.166.200.0/22 IP: 2804:56f0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:97:c8:84:1a:a3:63:89:5e:55:5f:0d:d2:dc:5e:98:29:78:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 18 11:19:45 2024 GMT Not After : Oct 17 11:24:45 2025 GMT Subject: CN=4108FDAFD23A629171E45C2E18CFD743DE65C108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:57:37:29:a8:98:34:24:49:0e:56:a5:74:3c: 38:73:2d:0b:c1:c8:82:b4:14:e0:2c:d1:90:93:ec: e9:db:12:b8:54:9c:b7:f5:e6:07:1a:44:3f:8b:69: d9:54:61:ea:0f:c5:69:3d:b0:fc:15:4b:4a:f6:56: 40:fa:e6:c6:fa:0f:76:e3:f6:c4:6e:51:f9:b3:ea: dc:ad:6c:d3:96:5f:05:fd:ee:42:28:fd:89:52:87: d6:ff:5c:8c:92:13:32:7b:00:23:65:52:31:c2:21: 43:dc:4c:62:6a:ea:7e:b9:76:1b:41:19:45:e6:79: 8c:0c:6c:3d:91:03:fe:24:a1:ea:b5:f2:d5:b8:ad: 5a:b0:3b:24:e7:70:9e:df:f5:8e:73:7b:1b:78:66: c3:39:48:4d:6b:12:fd:e3:ec:07:f5:c7:dc:2f:7f: c9:73:fb:e5:ce:ff:e8:9a:6f:92:df:25:42:5b:42: e8:bb:8f:f8:6a:ff:06:a1:d8:d3:ec:68:07:80:af: e6:6f:df:94:96:03:5b:6b:67:76:6f:36:34:5c:41: e6:81:ef:37:6d:a2:2f:9e:6a:6d:ca:4e:cb:c2:04: a4:dd:67:8e:9b:ad:36:a5:b4:7b:3b:8d:0a:7b:5c: c8:c0:91:3b:e1:2e:ec:58:b5:74:b0:86:20:fc:48: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:08:FD:AF:D2:3A:62:91:71:E4:5C:2E:18:CF:D7:43:DE:65:C1:08 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/4108FDAFD23A629171E45C2E18CFD743DE65C108.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.166.200.0/22 IPv6: 2804:56f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268033 Signature Algorithm: sha256WithRSAEncryption c9:42:38:35:a7:78:82:70:64:0a:64:fb:ad:cc:b0:b8:5b:21: 89:d9:de:aa:7f:0c:21:f4:c9:a8:50:bd:0b:36:3f:02:eb:23: cb:2a:ac:86:50:09:81:01:31:e1:12:45:4e:b4:f1:c8:90:d8: 90:51:6d:ec:15:25:4f:bf:da:fd:e5:29:dc:5a:d0:d9:bb:a9: e5:80:b0:0c:98:74:71:63:2d:c1:1b:dd:1c:de:0f:af:9f:29: a1:f6:0d:16:fe:38:93:96:df:d3:c9:45:16:4c:80:bb:21:bc: e9:cd:c2:ef:74:4c:13:84:89:8d:64:55:71:60:9d:cb:47:fe: 69:57:49:bb:5a:b3:37:03:45:24:57:21:fa:88:ec:d4:63:7b: 8d:47:b2:cb:fa:52:31:66:50:78:6d:a0:cc:f3:dc:2f:59:55: 1a:3d:c1:d4:31:e7:9b:cc:53:70:59:4c:96:a4:0e:7c:ac:9b: d6:82:27:b2:27:06:ab:de:06:54:70:f0:9b:16:50:00:c2:18: 6d:cf:5c:87:56:2b:d1:f0:f3:cd:ae:7e:34:f7:bf:95:f9:e9: 8a:a7:55:82:fd:ca:34:b3:f6:52:94:a5:de:f9:b2:b6:dc:22: e0:6e:ae:5b:35:07:84:9a:3b:fb:38:79:45:7e:64:dd:20:d2: 1f:14:e4:25 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIULZfIhBqjY4leVV8N0txemCl495swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMTgxMTE5NDVaFw0yNTEwMTcxMTI0NDVaMDMxMTAvBgNV BAMTKDQxMDhGREFGRDIzQTYyOTE3MUU0NUMyRTE4Q0ZENzQzREU2NUMxMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVzcpqJg0JEkOVqV0PDhzLQvB yIK0FOAs0ZCT7OnbErhUnLf15gcaRD+LadlUYeoPxWk9sPwVS0r2VkD65sb6D3bj 9sRuUfmz6tytbNOWXwX97kIo/YlSh9b/XIySEzJ7ACNlUjHCIUPcTGJq6n65dhtB GUXmeYwMbD2RA/4koeq18tW4rVqwOyTncJ7f9Y5zext4ZsM5SE1rEv3j7Af1x9wv f8lz++XO/+iab5LfJUJbQui7j/hq/wah2NPsaAeAr+Zv35SWA1trZ3ZvNjRcQeaB 7zdtoi+eam3KTsvCBKTdZ46brTaltHs7jQp7XMjAkTvhLuxYtXSwhiD8SMOZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBCP2v0jpikXHk XC4Yz9dD3mXBCDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUY0 cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2ajIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FG NHFOa1hVa240R25tS1VkbkhmSldnRUh1dGdjZ3dBZFhBTmY1OVBxNmoyLzAvNDEw OEZEQUZEMjNBNjI5MTcxRTQ1QzJFMThDRkQ3NDNERTY1QzEwOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLabIMA0EAgACMAcDBQAoBFbwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXATANBgkqhkiG9w0BAQsFAAOCAQEAyUI4Nad4gnBkCmT7 rcywuFshidneqn8MIfTJqFC9CzY/AusjyyqshlAJgQEx4RJFTrTxyJDYkFFt7BUl T7/a/eUp3FrQ2bup5YCwDJh0cWMtwRvdHN4Pr58pofYNFv44k5bf08lFFkyAuyG8 6c3C73RME4SJjWRVcWCdy0f+aVdJu1qzNwNFJFch+ojs1GN7jUeyy/pSMWZQeG2g zPPcL1lVGj3B1DHnm8xTcFlMlqQOfKyb1oInsicGq94GVHDwmxZQAMIYbc9ch1Yr 0fDzza5+NPe/lfnpiqdVgv3KNLP2UpSl3vmyttwi4G6uWzUHhJo7+zh5RX5k3SDS HxTkJQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:52 2024 by rpki-client on console.sobornost.net