$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer File: 42D604698AFA9BA492807398AA6527B6E7B04AB4.cer (raw, json) Hash identifier: R8Gd7mxk8+QEoA8vyoC1BnpCI7172qystWaJ/VPrZkw= Subject key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 56D690F171ADC4248FDB610AFDD10D02FFA1E63F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft caRepository: rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 28 May 2024 19:15:54 +0000 Certificate not after: Tue 27 May 2025 19:20:54 +0000 Subordinate resources: AS: 268221 IP: 45.236.52.0/22 IP: 2804:4dd0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d6:90:f1:71:ad:c4:24:8f:db:61:0a:fd:d1:0d:02:ff:a1:e6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 28 19:15:54 2024 GMT Not After : May 27 19:20:54 2025 GMT Subject: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:39:f3:c5:48:03:0a:21:a5:6d:3a:25:fe: 69:8f:e0:52:b8:b2:3c:e8:bc:fd:4f:c5:a1:b4:6a: 9f:82:94:db:4c:5f:a2:62:ba:46:88:1e:c1:22:de: 46:43:07:6e:17:5c:00:8e:77:30:ef:57:de:43:8a: 1e:07:3b:ca:ca:ce:09:7c:68:85:1b:9f:03:dd:5f: ad:c0:4e:bc:83:60:9e:61:f3:14:e0:9a:2d:09:0c: 73:ab:3e:cd:04:d5:dd:1d:1d:cd:8a:e1:8a:ea:82: 19:22:1a:c0:e6:8f:b9:58:77:f8:5f:ac:c6:f2:ce: c1:59:cb:6a:10:c2:64:48:4c:d7:7a:2c:09:f4:ef: f9:98:22:8e:de:ea:3a:36:8e:9f:f6:65:fe:2f:0a: 19:d2:d1:63:32:18:8b:c7:41:50:ee:ec:85:2a:af: 78:a2:6f:eb:55:bf:fc:e6:56:43:55:d8:83:fc:66: 71:da:7f:35:d5:30:f6:fa:68:4f:9e:31:91:2f:40: c4:7e:75:d2:f8:ae:a2:66:76:7f:ae:23:ea:68:e5: df:af:0a:e8:46:c9:2b:32:c4:5b:d1:ee:35:9b:ca: 8b:20:24:16:03:f1:ab:34:7b:97:e0:82:17:46:e5: 58:b0:70:b6:28:38:9b:2c:a5:20:b6:22:aa:60:c4: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.52.0/22 IPv6: 2804:4dd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268221 Signature Algorithm: sha256WithRSAEncryption 74:1a:93:a0:f7:67:31:7f:65:8b:2f:73:1d:1f:2f:6a:52:72: 8b:04:0e:d3:af:ba:cb:d0:47:ff:6d:d4:e7:b2:07:c3:ee:e0: ae:98:87:43:5f:45:a5:8c:9d:95:38:12:66:c6:6e:30:30:13: 4f:56:c6:0b:27:e4:a9:cc:cb:c7:5f:03:30:88:ac:0d:1e:b9: eb:0a:d3:05:6a:17:cd:13:c3:0b:8b:ce:ef:f5:aa:8f:ec:62: 76:5e:eb:ba:dc:a7:4f:b8:c9:ce:b5:59:51:c1:88:de:1d:27: b3:d2:dd:74:81:42:08:65:32:97:4b:26:e8:87:24:8c:75:83: 0c:51:ea:bc:8a:0c:25:dd:20:5a:0b:f6:9b:7c:e0:a5:d9:bd: d3:c0:46:0b:13:cb:87:07:09:e5:3d:27:cb:8a:96:03:32:f6: 52:e5:68:63:87:14:a9:ac:67:a5:76:38:f4:ea:4e:51:01:78: d5:23:29:72:08:29:83:ac:4a:8f:89:cb:00:f7:67:1f:e6:13: 6b:ce:e4:87:b1:63:59:c8:4c:0a:62:0a:b8:77:c9:60:68:19: 1c:ef:75:0d:52:fd:30:3e:81:a4:b9:03:a0:41:7b:c5:e0:22: 18:de:9e:95:92:7a:c0:41:28:51:3b:65:be:bc:7d:a8:01:82: b4:7a:64:e1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVtaQ8XGtxCSP22EK/dENAv+h5j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjgxOTE1NTRaFw0yNTA1MjcxOTIwNTRaMDMxMTAvBgNV BAMTKDQyRDYwNDY5OEFGQTlCQTQ5MjgwNzM5OEFBNjUyN0I2RTdCMDRBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenTnzxUgDCiGlbTol/mmP4FK4 sjzovP1PxaG0ap+ClNtMX6JiukaIHsEi3kZDB24XXACOdzDvV95Dih4HO8rKzgl8 aIUbnwPdX63ATryDYJ5h8xTgmi0JDHOrPs0E1d0dHc2K4YrqghkiGsDmj7lYd/hf rMbyzsFZy2oQwmRITNd6LAn07/mYIo7e6jo2jp/2Zf4vChnS0WMyGIvHQVDu7IUq r3iib+tVv/zmVkNV2IP8ZnHafzXVMPb6aE+eMZEvQMR+ddL4rqJmdn+uI+po5d+v CuhGySsyxFvR7jWbyosgJBYD8as0e5fgghdG5ViwcLYoOJsspSC2IqpgxC1ZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRC1gRpivqbpJKA c5iqZSe257BKtDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMk5o Q1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQNU4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJO aENYVm9vNG9EeGtGdDFkdnRoN3dLRENGb3VpdTdwand6Znp5a2E1UDVOLzAvNDJE NjA0Njk4QUZBOUJBNDkyODA3Mzk4QUE2NTI3QjZFN0IwNEFCNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLew0MA0EAgACMAcDBQAoBE3QMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXvTANBgkqhkiG9w0BAQsFAAOCAQEAdBqToPdnMX9liy9z HR8valJyiwQO06+6y9BH/23U57IHw+7grpiHQ19FpYydlTgSZsZuMDATT1bGCyfk qczLx18DMIisDR656wrTBWoXzRPDC4vO7/Wqj+xidl7rutynT7jJzrVZUcGI3h0n s9LddIFCCGUyl0sm6IckjHWDDFHqvIoMJd0gWgv2m3zgpdm908BGCxPLhwcJ5T0n y4qWAzL2UuVoY4cUqaxnpXY49OpOUQF41SMpcggpg6xKj4nLAPdnH+YTa87kh7Fj WchMCmIKuHfJYGgZHO91DVL9MD6BpLkDoEF7xeAiGN6elZJ6wEEoUTtlvrx9qAGC tHpk4Q== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:52 2024 by rpki-client on console.sobornost.net