$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer File: 482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer (raw, json) Hash identifier: iRni8i9TmnJtvyTDUy1l4XmpOcwG9gku/4IrUSk5nEI= Subject key identifier: 48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58CFAA4E5FAF2644806923124900212BA14722BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.mft caRepository: rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 08 Aug 2024 13:08:17 +0000 Certificate not after: Thu 07 Aug 2025 13:13:17 +0000 Subordinate resources: AS: 264177 IP: 138.94.236.0/22 IP: 2804:23ac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:cf:aa:4e:5f:af:26:44:80:69:23:12:49:00:21:2b:a1:47:22:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 8 13:08:17 2024 GMT Not After : Aug 7 13:13:17 2025 GMT Subject: CN=482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:20:a3:2f:ec:5e:7d:fc:3a:15:f7:b0:12: 62:bf:98:64:78:56:9b:2b:ee:8d:6b:c9:02:a8:e2: db:b6:28:58:3c:04:8e:46:c5:5a:e4:b1:4b:32:52: 01:1b:e8:43:b0:af:a4:8f:f4:34:05:42:e3:0d:b4: 58:71:ba:67:b5:2b:25:aa:d5:ae:de:eb:d9:de:59: 09:1f:c7:64:06:a4:85:4b:16:2e:16:5c:7d:07:6e: 30:96:ed:de:ee:24:82:1e:46:d8:69:d3:be:5a:12: 68:1d:e3:e4:e3:aa:09:15:98:a0:c7:12:5b:35:2f: bc:e5:47:ff:b1:28:66:77:28:fa:7f:90:90:c3:84: 77:94:90:6e:93:e8:26:c9:92:0b:a3:a7:6b:5b:11: 78:e9:eb:bf:e8:66:25:ef:55:30:fd:27:39:45:25: ef:19:23:ab:eb:20:e8:8d:a0:46:eb:4e:1c:5b:24: c2:e2:7e:6a:55:7d:9e:1a:99:01:c7:9f:fd:30:1e: df:94:de:bd:91:dd:80:23:6b:4f:24:34:04:c3:89: f6:26:32:b8:81:7e:c7:31:48:51:e7:6f:23:2e:61: f9:15:13:5a:88:28:34:2d:a2:0d:d1:3f:14:01:8e: 50:4b:f8:d2:21:2c:89:85:a4:f5:e7:8c:20:7e:80: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.94.236.0/22 IPv6: 2804:23ac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264177 Signature Algorithm: sha256WithRSAEncryption 52:01:0b:8a:65:2c:9c:5c:57:47:11:0f:b9:f8:64:dd:f6:62: 9d:0b:6f:a1:fe:fa:fa:0b:9e:ce:52:a5:5c:cc:10:0d:4b:cc: 1e:d6:60:1c:61:d6:ec:a8:b5:6f:3a:00:81:a0:9a:96:2d:0f: b3:e1:3f:27:b5:4a:90:59:5e:55:e2:18:98:39:35:7e:20:10: 01:cb:f2:a0:67:01:c0:44:89:7f:72:d7:d8:24:ee:0b:91:12: 5a:79:cc:44:d8:0d:d9:97:78:59:93:52:47:65:da:a6:31:54: 17:21:1d:8b:11:a1:69:8e:8e:aa:a2:c0:1c:8a:04:c6:9d:fc: 9b:c0:84:42:a2:28:f0:98:a8:1b:03:7f:29:42:1f:1c:0e:2e: 75:f0:19:dc:af:7a:49:10:ed:f8:9b:b8:32:3c:c2:53:a6:98: 82:c5:d7:55:db:a8:1c:a2:ed:10:3f:cf:e5:e9:cf:ff:1c:6e: 62:b9:a2:d3:f0:8e:da:db:4f:88:25:8e:1f:ea:b1:55:66:f3: 76:b0:bf:d1:d3:92:52:f9:6f:83:82:ec:dd:87:36:1a:d5:7f: 3f:3f:95:47:d3:b7:2d:d5:3a:4a:a1:9b:9c:55:72:d4:da:2b: e6:7b:e1:04:39:f5:c2:0f:15:15:a9:47:87:d3:67:6d:8e:22: ac:9c:8a:b0 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWM+qTl+vJkSAaSMSSQAhK6FHIrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDgxMzA4MTdaFw0yNTA4MDcxMzEzMTdaMDMxMTAvBgNV BAMTKDQ4MkRDRkYwRjhCNDVERDhCMDRFMzNGNjk2NDI3MjNFNkREQTdEQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7CCjL+xeffw6FfewEmK/mGR4 Vpsr7o1ryQKo4tu2KFg8BI5GxVrksUsyUgEb6EOwr6SP9DQFQuMNtFhxume1KyWq 1a7e69neWQkfx2QGpIVLFi4WXH0HbjCW7d7uJIIeRthp075aEmgd4+TjqgkVmKDH Els1L7zlR/+xKGZ3KPp/kJDDhHeUkG6T6CbJkgujp2tbEXjp67/oZiXvVTD9JzlF Je8ZI6vrIOiNoEbrThxbJMLifmpVfZ4amQHHn/0wHt+U3r2R3YAja08kNATDifYm MriBfscxSFHnbyMuYfkVE1qIKDQtog3RPxQBjlBL+NIhLImFpPXnjCB+gBGxAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRILc/w+LRd2LBO M/aWQnI+bdp9yjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODRN UVZMU3laWFpqTVk4UGpoNGdpTXR2QjdqR2J0dVlieUtwSE1IWkZ1WXMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg0 TVFWTFN5Wlhaak1ZOFBqaDRnaU10dkI3akdidHVZYnlLcEhNSFpGdVlzLzAvNDgy RENGRjBGOEI0NUREOEIwNEUzM0Y2OTY0MjcyM0U2RERBN0RDQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCil7sMA0EAgACMAcDBQAoBCOsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQH8TANBgkqhkiG9w0BAQsFAAOCAQEAUgELimUsnFxXRxEP ufhk3fZinQtvof76+guezlKlXMwQDUvMHtZgHGHW7Ki1bzoAgaCali0Ps+E/J7VK kFleVeIYmDk1fiAQAcvyoGcBwESJf3LX2CTuC5ESWnnMRNgN2Zd4WZNSR2XapjFU FyEdixGhaY6OqqLAHIoExp38m8CEQqIo8JioGwN/KUIfHA4udfAZ3K96SRDt+Ju4 MjzCU6aYgsXXVduoHKLtED/P5enP/xxuYrmi0/CO2ttPiCWOH+qxVWbzdrC/0dOS Uvlvg4Ls3Yc2GtV/Pz+VR9O3LdU6SqGbnFVy1Nor5nvhBDn1wg8VFalHh9NnbY4i rJyKsA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:53 2024 by rpki-client on console.sobornost.net