$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.cer File: 554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.cer (raw, json) Hash identifier: j5t7K0nCYogV0AInX0GLyGKNtZboCzASRrGsjh1c5dc= Subject key identifier: 55:4C:9B:7D:E7:6D:DB:DE:12:B5:80:B0:F0:7E:00:1D:7B:2B:57:A9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73D31BAACE7E2B65C4FA427EAD5714FEC900ABCB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.mft caRepository: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 22 Apr 2024 19:59:36 +0000 Certificate not after: Mon 21 Apr 2025 20:04:36 +0000 Subordinate resources: AS: 268289 IP: 45.237.200.0/22 IP: 170.233.20.0/22 IP: 2804:4ee4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jun 2024 22:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d3:1b:aa:ce:7e:2b:65:c4:fa:42:7e:ad:57:14:fe:c9:00:ab:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 22 19:59:36 2024 GMT Not After : Apr 21 20:04:36 2025 GMT Subject: CN=554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:a2:0c:b5:d0:2d:b5:d0:37:bb:08:f3:06: 06:63:93:64:ea:c6:59:d9:cc:55:79:3c:41:4e:47: 1c:89:86:43:a4:b4:12:7f:e7:cf:b4:8a:2d:93:f1: ef:14:2d:74:e9:73:aa:08:0d:5d:05:1d:36:00:bf: 24:d1:fa:94:d5:ed:4e:67:e5:39:1f:ef:38:fc:be: 06:01:44:20:59:b7:0a:78:3d:cf:8f:87:b0:38:fd: 85:9f:8e:11:95:d5:9b:14:c3:91:28:96:6c:eb:5a: 32:0d:d1:e7:b0:cb:af:16:e1:0e:94:39:11:7f:3a: bc:7f:be:b4:0c:c6:c5:e9:5a:ba:5a:42:2e:ff:2f: ab:e4:fa:64:17:96:f6:79:22:9c:cc:57:cb:90:a3: 2d:2a:f4:a1:3f:6c:84:c6:f3:48:6b:96:66:d7:aa: 67:20:4a:2d:91:fc:0c:73:3b:09:c0:e4:77:00:96: ba:fc:9f:50:7c:7c:5f:a9:21:cb:c3:58:6f:d1:39: 7a:90:ba:0a:ac:d8:90:bd:43:40:8d:5b:45:c1:2d: 31:1e:4c:22:ed:b2:bf:b2:9c:db:a6:3c:1d:de:cf: e7:40:fa:48:1e:fa:36:c2:d6:0a:b2:eb:18:0e:90: 20:32:d9:c9:7a:e5:20:9a:96:2d:64:a4:0d:25:17: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:4C:9B:7D:E7:6D:DB:DE:12:B5:80:B0:F0:7E:00:1D:7B:2B:57:A9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.237.200.0/22 170.233.20.0/22 IPv6: 2804:4ee4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268289 Signature Algorithm: sha256WithRSAEncryption 33:36:50:c8:72:19:66:17:0f:ef:54:6d:28:56:2f:d4:e3:6e: 19:94:38:64:37:48:31:6d:d5:e4:c7:f1:1c:55:92:15:38:35: 81:b8:74:07:fb:ed:d5:d3:50:3e:40:8f:b7:58:47:66:3f:be: 23:0e:79:a4:73:b6:89:27:f1:a9:84:d9:82:b8:4b:57:09:cc: e3:5a:9f:fd:62:87:d4:76:ad:7d:9d:c0:9c:c7:4f:52:d0:bb: d7:53:45:a8:96:dd:68:62:ae:7f:f8:65:76:80:7e:17:df:17: 51:28:6f:1f:32:2b:71:77:b7:a9:9d:27:dd:96:51:39:18:ed: f0:8c:57:93:fd:23:e8:f1:dc:b2:26:e1:17:ae:08:f0:8b:48: b1:50:e9:1d:18:6c:3c:d0:26:9f:b1:ac:d7:c6:89:75:20:c4: 5f:4c:a1:98:68:fc:0f:e3:02:ec:b2:3b:a8:1b:9d:13:e3:94: 0a:ed:4b:77:35:e1:06:29:92:8b:be:d8:18:3b:89:aa:5d:a5: 4a:bb:0a:7c:50:ee:8a:fe:20:9e:42:cc:44:25:62:45:4f:a2: 23:f5:54:a1:58:ae:15:b5:93:2a:42:ee:b8:b6:ec:3d:3c:d5: 22:93:33:c0:76:3b:a4:21:22:3a:ae:7c:87:e5:ad:d3:0f:f3: 6a:42:4f:21 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUc9Mbqs5+K2XE+kJ+rVcU/skAq8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjIxOTU5MzZaFw0yNTA0MjEyMDA0MzZaMDMxMTAvBgNV BAMTKDU1NEM5QjdERTc2RERCREUxMkI1ODBCMEYwN0UwMDFEN0IyQjU3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38aIMtdAttdA3uwjzBgZjk2Tq xlnZzFV5PEFORxyJhkOktBJ/58+0ii2T8e8ULXTpc6oIDV0FHTYAvyTR+pTV7U5n 5Tkf7zj8vgYBRCBZtwp4Pc+Ph7A4/YWfjhGV1ZsUw5EolmzrWjIN0eewy68W4Q6U ORF/Orx/vrQMxsXpWrpaQi7/L6vk+mQXlvZ5IpzMV8uQoy0q9KE/bITG80hrlmbX qmcgSi2R/AxzOwnA5HcAlrr8n1B8fF+pIcvDWG/ROXqQugqs2JC9Q0CNW0XBLTEe TCLtsr+ynNumPB3ez+dA+kge+jbC1gqy6xgOkCAy2cl65SCali1kpA0lF6/5AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRVTJt9523b3hK1 gLDwfgAdeytXqTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU5X Z0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNU5X Z0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMS81NTRD OUI3REU3NkREQkRFMTJCNTgwQjBGMDdFMDAxRDdCMkI1N0E5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIt7cgDBAKq6RQwDQQCAAIwBwMFACgETuQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBBgBMA0GCSqGSIb3DQEBCwUAA4IBAQAzNlDIchlm Fw/vVG0oVi/U424ZlDhkN0gxbdXkx/EcVZIVODWBuHQH++3V01A+QI+3WEdmP74j Dnmkc7aJJ/GphNmCuEtXCczjWp/9YofUdq19ncCcx09S0LvXU0Wolt1oYq5/+GV2 gH4X3xdRKG8fMitxd7epnSfdllE5GO3wjFeT/SPo8dyyJuEXrgjwi0ixUOkdGGw8 0CafsazXxol1IMRfTKGYaPwP4wLssjuoG50T45QK7Ut3NeEGKZKLvtgYO4mqXaVK uwp8UO6K/iCeQsxEJWJFT6Ij9VShWK4VtZMqQu64tuw9PNUikzPAdjukISI6rnyH 5a3TD/NqQk8h -----END CERTIFICATE-----Generated at Fri Jun 21 21:58:31 2024 by rpki-client on console.sobornost.net