$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.cer File: 4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.cer (raw, json) Hash identifier: MFDAkfvcOmC9yZG9bF1ixXcHutH1dAI7FE2Ig7Ym/XE= Subject key identifier: 4F:28:33:33:89:AB:BF:D3:6D:CF:1B:86:A4:3B:7B:66:23:B1:E1:E0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 49C2A688A2D9A0363EE991B6EA8591DD35040B37 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.mft caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Oct 2024 01:33:46 +0000 Certificate not after: Mon 13 Oct 2025 01:38:46 +0000 Subordinate resources: AS: 28220 IP: 45.4.64.0/22 IP: 138.0.100.0/22 IP: 168.227.108.0/22 IP: 168.228.68.0/22 IP: 170.82.92.0/22 IP: 177.89.0.0/16 IP: 177.137.192.0/20 IP: 179.96.192.0/21 IP: 179.96.240.0/20 IP: 179.190.128.0/17 IP: 186.192.16.0/20 IP: 186.193.96.0/20 IP: 186.208.208.0/21 IP: 186.235.0.0/20 IP: 186.236.192.0/19 IP: 186.251.112.0/21 IP: 187.49.192.0/20 IP: 187.60.64.0/19 IP: 187.61.128.0/17 IP: 187.86.96.0/20 IP: 187.87.112.0/20 IP: 187.108.64.0/20 IP: 187.109.176.0/20 IP: 187.111.224.0/19 IP: 189.45.16.0/20 IP: 189.124.128.0/17 IP: 191.241.40.0/21 IP: 200.233.80.0/20 IP: 201.148.188.0/22 IP: 2804:54::/32 IP: 2804:2140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:a6:88:a2:d9:a0:36:3e:e9:91:b6:ea:85:91:dd:35:04:0b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 14 01:33:46 2024 GMT Not After : Oct 13 01:38:46 2025 GMT Subject: CN=4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:e8:ce:6b:ee:93:e2:b9:ed:8c:e6:31:1e: 6d:48:bb:80:16:13:8d:9e:49:0e:15:cc:20:b2:3b: 94:73:2e:10:28:6f:93:1d:2a:d8:9a:61:bb:d8:0a: 29:ae:ca:5d:18:3c:22:23:16:61:ac:c8:71:eb:c7: 6b:0d:a7:ec:cb:5b:24:3b:60:57:0b:7d:b0:6a:36: 85:29:fd:b3:1f:ee:2d:87:23:70:04:41:cd:b1:06: 1c:b0:ca:d3:14:f0:ce:ac:fc:87:27:c9:c5:51:34: 52:0b:62:a7:10:61:d6:81:f1:4e:e1:df:85:29:29: 9e:05:95:98:04:68:71:d7:bc:0a:36:58:13:22:8e: 09:7c:24:97:67:b5:71:40:90:11:f0:05:c7:ca:a5: 54:0c:ae:dd:d8:65:30:c9:55:da:8e:d7:0e:85:cb: 98:51:6e:c7:b7:5c:53:09:79:91:23:4c:4b:4e:57: e5:ea:30:46:71:35:52:91:38:16:0b:e5:44:8f:12: 66:59:eb:16:3e:a8:17:e9:09:17:33:14:93:f6:ec: 83:8b:4c:83:ec:34:5a:d3:9b:1e:7b:32:25:c8:37: aa:40:11:45:e4:72:22:ad:63:4d:59:5e:6e:1e:c8: fc:8d:72:00:81:73:91:72:2b:13:46:28:e5:07:d9: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:28:33:33:89:AB:BF:D3:6D:CF:1B:86:A4:3B:7B:66:23:B1:E1:E0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/4F28333389ABBFD36DCF1B86A43B7B6623B1E1E0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.64.0/22 138.0.100.0/22 168.227.108.0/22 168.228.68.0/22 170.82.92.0/22 177.89.0.0/16 177.137.192.0/20 179.96.192.0/21 179.96.240.0/20 179.190.128.0/17 186.192.16.0/20 186.193.96.0/20 186.208.208.0/21 186.235.0.0/20 186.236.192.0/19 186.251.112.0/21 187.49.192.0/20 187.60.64.0/19 187.61.128.0/17 187.86.96.0/20 187.87.112.0/20 187.108.64.0/20 187.109.176.0/20 187.111.224.0/19 189.45.16.0/20 189.124.128.0/17 191.241.40.0/21 200.233.80.0/20 201.148.188.0/22 IPv6: 2804:54::/32 2804:2140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28220 Signature Algorithm: sha256WithRSAEncryption 9d:01:ff:4e:25:8e:23:4c:93:9f:ea:b0:ce:95:5b:a8:a8:3f: 7b:45:0a:65:ee:31:82:6a:7e:c9:0c:f9:a7:8c:e5:f0:8b:a9: d2:9a:cf:24:fb:66:7d:bf:51:30:32:51:4d:2b:88:14:97:9f: 19:42:24:93:1b:7b:fa:e4:25:fb:3a:2c:39:e2:0e:c7:82:c3: b8:53:25:74:df:1f:c5:0f:62:b3:87:df:7d:1c:91:96:62:b7: 43:db:18:f7:59:5e:29:3b:0a:c2:98:b7:aa:cf:80:a8:d3:d3: 73:0a:3b:12:4e:e4:74:76:97:36:43:bb:32:b3:f4:2f:cc:58: 91:02:8f:66:87:a9:b9:03:19:26:11:1e:d7:03:3d:53:01:a8: f5:7f:0f:6c:99:9f:fc:8a:c7:01:ed:b2:31:1a:97:4a:e7:18: fa:d4:53:14:7e:dd:9a:29:aa:b8:ba:e4:ad:32:e2:04:52:4d: ad:77:99:00:bd:80:a3:a4:d2:cf:46:8b:ec:83:f3:28:e6:dc: 9f:ff:e6:e5:e1:b4:c1:90:fa:4e:92:0f:4c:8e:6a:5d:fc:d5: db:f1:51:ca:63:0b:02:e4:ba:29:57:f9:89:d5:ed:a3:04:a8: dd:ff:27:98:33:20:12:e5:bf:43:a3:cd:d6:a8:cd:28:4c:2b: e3:96:35:ea -----BEGIN CERTIFICATE----- MIIG4jCCBcqgAwIBAgIUScKmiKLZoDY+6ZG26oWR3TUECzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMTQwMTMzNDZaFw0yNTEwMTMwMTM4NDZaMDMxMTAvBgNV BAMTKDRGMjgzMzMzODlBQkJGRDM2RENGMUI4NkE0M0I3QjY2MjNCMUUxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eejOa+6T4rntjOYxHm1Iu4AW E42eSQ4VzCCyO5RzLhAob5MdKtiaYbvYCimuyl0YPCIjFmGsyHHrx2sNp+zLWyQ7 YFcLfbBqNoUp/bMf7i2HI3AEQc2xBhywytMU8M6s/IcnycVRNFILYqcQYdaB8U7h 34UpKZ4FlZgEaHHXvAo2WBMijgl8JJdntXFAkBHwBcfKpVQMrt3YZTDJVdqO1w6F y5hRbse3XFMJeZEjTEtOV+XqMEZxNVKROBYL5USPEmZZ6xY+qBfpCRczFJP27IOL TIPsNFrTmx57MiXIN6pAEUXkciKtY01ZXm4eyPyNcgCBc5FyKxNGKOUH2Sr3AgMB AAGjggPsMIID6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPKDMziau/023P G4akO3tmI7Hh4DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRH QVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk R0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAvNEYy ODMzMzM4OUFCQkZEMzZEQ0YxQjg2QTQzQjdCNjYyM0IxRTFFMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHgBggrBgEFBQcB BwEB/wSB0DCBzTCBtAQCAAEwga0DBAItBEADBAKKAGQDBAKo42wDBAKo5EQDBAKq UlwDAwCxWQMEBLGJwAMEA7NgwAMEBLNg8AMEB7O+gAMEBLrAEAMEBLrBYAMEA7rQ 0AMEBLrrAAMEBbrswAMEA7r7cAMEBLsxwAMEBbs8QAMEB7s9gAMEBLtWYAMEBLtX cAMEBLtsQAMEBLttsAMEBbtv4AMEBL0tEAMEB718gAMEA7/xKAMEBMjpUAMEAsmU vDAUBAIAAjAOAwUAKAQAVAMFACgEIUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC bjwwDQYJKoZIhvcNAQELBQADggEBAJ0B/04ljiNMk5/qsM6VW6ioP3tFCmXuMYJq fskM+aeM5fCLqdKazyT7Zn2/UTAyUU0riBSXnxlCJJMbe/rkJfs6LDniDseCw7hT JXTfH8UPYrOH330ckZZit0PbGPdZXik7CsKYt6rPgKjT03MKOxJO5HR2lzZDuzKz 9C/MWJECj2aHqbkDGSYRHtcDPVMBqPV/D2yZn/yKxwHtsjEal0rnGPrUUxR+3Zop qri65K0y4gRSTa13mQC9gKOk0s9Gi+yD8yjm3J//5uXhtMGQ+k6SD0yOal381dvx UcpjCwLkuilX+YnV7aMEqN3/J5gzIBLlv0OjzdaozShMK+OWNeo= -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:54 2024 by rpki-client on console.sobornost.net