$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer File: 4FEB85108E86A307A90034950C74C7A6630768F6.cer (raw, json) Hash identifier: 5O5IAhENmya2g7UZ6EE2cL3TF5SSXnSYoix0e2CJEAg= Subject key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 203A49E824FA8A0C4F6F1D29440B819B1D9ADEDA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft caRepository: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 16:33:51 +0000 Certificate not after: Thu 03 Apr 2025 16:38:51 +0000 Subordinate resources: AS: 61901 IP: 170.254.52.0/22 IP: 191.5.64.0/21 IP: 2804:1370::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3a:49:e8:24:fa:8a:0c:4f:6f:1d:29:44:0b:81:9b:1d:9a:de:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 16:33:51 2024 GMT Not After : Apr 3 16:38:51 2025 GMT Subject: CN=4FEB85108E86A307A90034950C74C7A6630768F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:bc:5d:71:60:12:b4:4a:83:e4:62:6c:9b: ba:ca:11:dc:de:03:91:b7:73:bc:c4:89:52:20:98: df:9c:d1:3c:cd:bb:f7:19:e3:2a:b9:aa:ec:69:17: e3:2b:3d:50:75:08:af:e8:3a:89:e9:78:9b:6e:cf: c1:7a:b0:02:4f:d2:79:44:47:55:37:cd:e2:1d:fb: cf:92:f5:4c:ca:f5:02:83:ef:df:cd:10:5d:d5:45: 5e:ea:52:ab:7e:26:74:c8:94:5b:06:71:c3:a4:53: 8a:65:35:7d:70:8a:d2:5b:78:d5:52:bb:dc:0d:f1: 9b:e0:d3:f8:6e:12:1d:eb:02:7e:8a:11:e2:91:59: 03:aa:75:99:34:08:7f:4e:b0:76:99:6b:8d:3a:71: 9b:84:5c:88:50:73:5f:5e:de:96:66:05:24:32:5f: 32:6b:b2:e1:70:cb:37:97:f4:8a:bc:8b:74:1e:14: c9:09:b1:10:86:bc:92:87:17:c5:f8:df:32:81:20: 07:1b:be:92:f7:cb:57:43:6f:c3:ec:40:00:9d:d7: ad:4c:80:59:49:98:c7:f8:4c:4f:e4:0d:af:50:36: 61:60:8f:a5:5d:11:0c:76:bc:c9:de:4d:e3:14:5c: f2:5c:da:34:d3:2b:89:d5:ba:4e:cb:48:d9:bd:d8: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.52.0/22 191.5.64.0/21 IPv6: 2804:1370::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61901 Signature Algorithm: sha256WithRSAEncryption c5:c9:9d:45:e9:6f:92:43:f4:7d:a6:07:31:2c:4e:d6:c5:54: 51:23:5d:44:ae:73:a9:b3:87:65:e8:e1:01:01:b9:62:59:38: 61:ae:4e:12:ea:b3:04:cc:71:6b:1f:85:cd:16:f6:55:5d:20: 62:9d:ab:7a:73:d6:07:39:c3:a5:9a:d6:7f:bd:28:5c:69:3d: f9:96:fb:e1:df:a6:0b:20:4e:a5:a1:26:4f:82:54:2b:c5:e7: 21:fe:39:25:f6:48:92:cb:b8:f6:4a:55:83:20:22:4d:82:50: 2a:83:28:6f:01:49:3d:eb:c5:0d:2a:d3:c5:e6:d4:d2:38:53: 56:f1:ca:0d:10:d0:94:07:08:de:20:ec:58:1c:56:18:cd:a4: fe:df:4a:fd:60:e1:0d:c4:74:47:cd:f7:37:77:f1:74:bb:e7: 3b:38:3a:7e:a9:3a:fc:1d:41:05:0a:9a:1c:54:9d:bd:5e:9a: ee:22:59:6b:bd:01:9c:29:77:76:f4:c4:c9:7c:3f:93:a8:25: 53:d5:d7:95:dd:a5:89:66:46:c0:f0:90:3b:1c:68:c8:74:7d: 8d:28:c9:e4:10:9d:e1:73:e4:0b:58:bb:9b:6d:e1:1a:36:b7: 87:d7:a9:c9:b2:5a:39:22:54:5f:71:d9:b5:39:ec:1e:88:25: a0:97:3f:10 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIDpJ6CT6igxPbx0pRAuBmx2a3towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNjMzNTFaFw0yNTA0MDMxNjM4NTFaMDMxMTAvBgNV BAMTKDRGRUI4NTEwOEU4NkEzMDdBOTAwMzQ5NTBDNzRDN0E2NjMwNzY4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LbxdcWAStEqD5GJsm7rKEdze A5G3c7zEiVIgmN+c0TzNu/cZ4yq5quxpF+MrPVB1CK/oOonpeJtuz8F6sAJP0nlE R1U3zeId+8+S9UzK9QKD79/NEF3VRV7qUqt+JnTIlFsGccOkU4plNX1witJbeNVS u9wN8Zvg0/huEh3rAn6KEeKRWQOqdZk0CH9OsHaZa406cZuEXIhQc19e3pZmBSQy XzJrsuFwyzeX9Iq8i3QeFMkJsRCGvJKHF8X43zKBIAcbvpL3y1dDb8PsQACd161M gFlJmMf4TE/kDa9QNmFgj6VdEQx2vMneTeMUXPJc2jTTK4nVuk7LSNm92Fb1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP64UQjoajB6kA NJUMdMemYwdo9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOXFM UnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5dkMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlx TFJyNk54Y3h1U2ZXaUwyeVdWblhjUk5OMWU0M3Q4YjI2ejMyaDdkeXZDLzEvNEZF Qjg1MTA4RTg2QTMwN0E5MDAzNDk1MEM3NEM3QTY2MzA3NjhGNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqv40AwQDvwVAMA0EAgACMAcDBQAoBBNwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDxzTANBgkqhkiG9w0BAQsFAAOCAQEAxcmdRelv kkP0faYHMSxO1sVUUSNdRK5zqbOHZejhAQG5Ylk4Ya5OEuqzBMxxax+FzRb2VV0g Yp2renPWBznDpZrWf70oXGk9+Zb74d+mCyBOpaEmT4JUK8XnIf45JfZIksu49kpV gyAiTYJQKoMobwFJPevFDSrTxebU0jhTVvHKDRDQlAcI3iDsWBxWGM2k/t9K/WDh DcR0R833N3fxdLvnOzg6fqk6/B1BBQqaHFSdvV6a7iJZa70BnCl3dvTEyXw/k6gl U9XXld2liWZGwPCQOxxoyHR9jSjJ5BCd4XPkC1i7m23hGja3h9epybJaOSJUX3HZ tTnsHogloJc/EA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:54 2024 by rpki-client on console.sobornost.net