$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer File: 477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer (raw, json) Hash identifier: xvIw+O+GnOjcUq+dmKIZdyUH8fLcd988aHPLHK5YA60= Subject key identifier: 47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F365D9DDBF56C3104A96C5C110D933FD106F6A2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.mft caRepository: rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 05:40:34 +0000 Certificate not after: Thu 03 Apr 2025 05:45:34 +0000 Subordinate resources: AS: 262777 IP: 45.175.116.0/22 IP: 45.235.192.0/22 IP: 131.255.48.0/22 IP: 138.219.208.0/22 IP: 168.121.188.0/22 IP: 170.80.180.0/22 IP: 177.93.176.0/21 IP: 177.128.248.0/21 IP: 186.233.16.0/21 IP: 2804:814::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:36:5d:9d:db:f5:6c:31:04:a9:6c:5c:11:0d:93:3f:d1:06:f6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 05:40:34 2024 GMT Not After : Apr 3 05:45:34 2025 GMT Subject: CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:76:9c:0e:68:f8:6d:a7:3e:44:4b:8f:7e: e3:f4:bc:91:65:d1:90:e6:13:c9:c4:2c:d6:e3:59: 58:58:6c:d1:9c:7e:00:61:70:46:6b:e9:37:66:08: 5b:1e:02:9f:39:f6:0b:de:5d:b4:d4:7c:29:50:d3: 8a:2e:b6:fc:77:f9:a2:2e:04:81:f7:cb:87:77:c7: 6d:eb:17:f9:50:be:18:36:8e:4d:15:13:eb:37:95: da:71:e3:f0:31:53:53:cd:bc:5a:f7:67:9a:8e:68: 25:7d:62:20:2d:6b:de:c3:ae:6c:ff:7c:34:5d:27: e8:d5:90:5c:75:cb:ae:b7:32:a9:90:14:9c:97:c1: d2:87:57:f5:0e:3f:52:ba:dc:8a:89:f0:f9:0e:b5: f3:3a:76:46:ff:f7:87:51:89:90:45:81:14:74:6f: 7b:8a:33:91:4a:b0:61:2d:81:18:7b:71:82:e3:55: 0f:3d:b5:2e:9a:b9:88:e4:5d:0e:c9:14:1b:d5:99: 4f:3a:e0:cc:ab:c9:6d:74:7b:2f:05:75:81:ca:d0: e8:c0:3e:9e:55:c8:2a:aa:dd:bb:67:fa:ef:5c:f9: 4b:6e:7a:c1:35:7c:98:91:49:66:69:fb:1c:77:b2: ff:69:ff:7d:52:86:d5:b9:b7:5f:3a:af:11:45:a7: 80:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.116.0/22 45.235.192.0/22 131.255.48.0/22 138.219.208.0/22 168.121.188.0/22 170.80.180.0/22 177.93.176.0/21 177.128.248.0/21 186.233.16.0/21 IPv6: 2804:814::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262777 Signature Algorithm: sha256WithRSAEncryption 32:2c:b9:7f:87:a5:94:48:fe:30:18:f8:e8:44:ed:e0:53:69: 70:20:9c:5c:53:10:97:89:e8:91:0a:a0:ed:a8:ae:5a:ba:2d: 11:05:06:68:58:e2:c9:37:b3:1b:da:61:85:eb:44:db:52:68: 1f:a2:d6:39:d7:18:7d:b6:14:9c:23:aa:79:91:5e:3a:bc:69: 7f:a6:48:f3:35:cc:1a:dc:b6:07:12:22:3f:0d:ae:1d:d7:40: 49:0e:47:cd:13:22:f6:23:52:5d:28:ba:15:36:11:94:17:6b: eb:1a:36:ca:78:26:43:43:51:29:8d:89:f1:04:c6:3b:01:f4: e9:e9:18:aa:dc:93:b4:09:08:b8:de:c3:ab:5c:63:88:f5:d3: 04:5c:c5:f7:0b:1d:33:ff:bf:57:74:b8:ef:56:18:4a:04:b5: 28:81:94:3a:ac:26:d1:4a:46:45:23:cf:da:7d:f2:6b:2d:f8: 41:27:c3:0d:12:33:4e:6b:2f:1b:39:8f:f2:01:8a:e2:ba:a1: de:70:cf:9f:5e:40:9c:b9:4f:f8:17:26:23:b9:eb:78:0c:a8: 22:01:5a:23:b6:1a:c1:de:2f:6f:33:f1:66:f2:ea:e2:17:33: 23:7f:8a:21:0f:22:45:0f:69:0c:d3:4e:7f:fc:f6:e9:7b:3e: de:22:a9:80 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUHzZdndv1bDEEqWxcEQ2TP9EG9qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNTQwMzRaFw0yNTA0MDMwNTQ1MzRaMDMxMTAvBgNV BAMTKDQ3N0JGMEFFRTFBNjdCRjU5QTY4RjUxNjk0QUI0MjVGMEMzQjdFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEXacDmj4bac+REuPfuP0vJFl 0ZDmE8nELNbjWVhYbNGcfgBhcEZr6TdmCFseAp859gveXbTUfClQ04outvx3+aIu BIH3y4d3x23rF/lQvhg2jk0VE+s3ldpx4/AxU1PNvFr3Z5qOaCV9YiAta97Drmz/ fDRdJ+jVkFx1y663MqmQFJyXwdKHV/UOP1K63IqJ8PkOtfM6dkb/94dRiZBFgRR0 b3uKM5FKsGEtgRh7cYLjVQ89tS6auYjkXQ7JFBvVmU864MyryW10ey8FdYHK0OjA Pp5VyCqq3btn+u9c+UtuesE1fJiRSWZp+xx3sv9p/31ShtW5t186rxFFp4CfAgMB AAGjggNqMIIDZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRHe/Cu4aZ79Zpo 9RaUq0JfDDt+SDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR2FV UzZqVzlKblFDVFM3akUyaTNMS1V0aGZub3hLV3ZrdWh2amdWQlpNS2IvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dh VVM2alc5Sm5RQ1RTN2pFMmkzTEtVdGhmbm94S1d2a3VodmpnVkJaTUtiLzIvNDc3 QkYwQUVFMUE2N0JGNTlBNjhGNTE2OTRBQjQyNUYwQzNCN0U0OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEH AQH/BE8wTTA8BAIAATA2AwQCLa90AwQCLevAAwQCg/8wAwQCitvQAwQCqHm8AwQC qlC0AwQDsV2wAwQDsYD4AwQDuukQMA0EAgACMAcDBQAoBAgUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQCeTANBgkqhkiG9w0BAQsFAAOCAQEAMiy5f4ellEj+MBj4 6ETt4FNpcCCcXFMQl4nokQqg7aiuWrotEQUGaFjiyTezG9phhetE21JoH6LWOdcY fbYUnCOqeZFeOrxpf6ZI8zXMGty2BxIiPw2uHddASQ5HzRMi9iNSXSi6FTYRlBdr 6xo2yngmQ0NRKY2J8QTGOwH06ekYqtyTtAkIuN7Dq1xjiPXTBFzF9wsdM/+/V3S4 71YYSgS1KIGUOqwm0UpGRSPP2n3yay34QSfDDRIzTmsvGzmP8gGK4rqh3nDPn15A nLlP+BcmI7nreAyoIgFaI7Yawd4vbzPxZvLq4hczI3+KIQ8iRQ9pDNNOf/z26Xs+ 3iKpgA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:53 2024 by rpki-client on console.sobornost.net