$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer File: 568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer (raw, json) Hash identifier: 4VVfHOIfV/X1SdkZ7b0xrzQEqggWZ2gt/uUjQeeXgIY= Subject key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73E81A432A9F4E0677E2ED69C2D2E444DE0180D0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft caRepository: rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 04 Jun 2024 14:58:01 +0000 Certificate not after: Tue 03 Jun 2025 15:03:01 +0000 Subordinate resources: AS: 262972 IP: 179.124.248.0/21 IP: 186.227.152.0/22 IP: 2804:ec0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e8:1a:43:2a:9f:4e:06:77:e2:ed:69:c2:d2:e4:44:de:01:80:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 4 14:58:01 2024 GMT Not After : Jun 3 15:03:01 2025 GMT Subject: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:32:6a:35:00:c7:99:ed:c3:e3:6a:c2:82: 2e:9f:30:7f:04:b9:80:57:97:a9:28:27:16:93:ea: e8:d9:55:1c:7f:54:82:00:93:dd:19:f3:a3:c4:f7: 24:68:f0:f4:82:4c:45:8d:f0:a3:80:6a:e2:13:8d: fc:d1:32:de:d0:77:34:a7:aa:c5:37:64:45:5b:c0: 74:3b:14:c8:97:a9:3f:a2:17:d4:67:b9:ed:4b:cd: 51:0a:29:cc:db:21:e3:d0:0b:da:79:a3:be:73:00: 96:c1:1e:94:31:86:5d:67:48:85:d0:49:86:10:2a: 28:25:0b:19:39:87:06:b0:d4:59:5c:1b:1b:2e:07: 0c:ea:fd:ca:af:85:45:e2:0e:6e:eb:53:74:b6:d8: 5b:37:40:e3:1f:8d:44:4e:30:6a:0c:30:b1:50:63: 7d:4b:71:a5:04:94:24:42:c7:31:82:d1:18:d8:59: d5:69:7d:54:45:34:12:f8:a2:92:99:49:29:df:cb: c9:f9:16:2f:83:cb:b0:ef:f8:f1:c1:ed:a3:34:c6: 2b:63:16:b6:8b:78:e4:49:34:18:fe:eb:55:2e:16: d2:7f:cb:90:26:56:73:4d:f9:4f:69:6a:59:15:0b: 3b:bb:ad:82:ba:5c:c2:3b:78:2c:a7:fc:05:48:02: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.124.248.0/21 186.227.152.0/22 IPv6: 2804:ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262972 Signature Algorithm: sha256WithRSAEncryption 97:f7:48:45:2d:72:ee:f5:ba:f9:70:cd:12:11:3b:04:f7:01: f1:e1:78:09:e2:58:3f:6d:23:45:f1:4d:8d:95:61:7c:ed:1a: 3a:25:72:fc:c4:27:ff:43:bd:98:38:82:96:ea:73:cc:27:c7: de:a9:8d:12:57:82:0b:3e:a7:34:77:b5:27:e8:72:fc:77:11: c4:40:5a:bf:2e:cb:47:28:4e:53:00:7e:40:02:5a:9f:cd:0d: 5a:9e:78:5f:1a:de:aa:2a:0e:07:c0:f5:d7:3b:c9:4e:a4:20: 32:b0:2e:a8:cf:aa:0e:2e:27:2a:5a:57:27:96:ff:2d:d7:8f: 25:4c:34:ba:5b:6e:c9:5d:60:87:d5:62:ee:5e:c6:ae:78:2a: e3:6d:09:df:43:b3:97:70:63:22:55:7f:18:29:2d:d8:ba:d0: f6:4b:ad:d9:fb:5f:c2:45:16:19:3d:43:c9:b7:13:89:d7:d9: 32:b2:6d:8b:df:71:f4:41:bd:2c:99:8d:48:c1:55:ee:5c:4e: 36:e1:fd:a2:af:8f:01:76:a8:90:43:f2:93:f5:5a:eb:16:8f: 67:69:37:9a:a6:03:68:b3:c9:59:40:dd:78:04:06:79:fa:2a: 0e:8e:57:6e:c4:a0:79:dc:dd:ac:42:80:bd:b8:cc:ec:71:59: 01:0c:82:ee -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUc+gaQyqfTgZ34u1pwtLkRN4BgNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MDQxNDU4MDFaFw0yNTA2MDMxNTAzMDFaMDMxMTAvBgNV BAMTKDU2ODE4NTMyMEJCQkU1NEY5RTRCMkVCMDZBNURCMzM0QjFEQTY4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQejJqNQDHme3D42rCgi6fMH8E uYBXl6koJxaT6ujZVRx/VIIAk90Z86PE9yRo8PSCTEWN8KOAauITjfzRMt7QdzSn qsU3ZEVbwHQ7FMiXqT+iF9Rnue1LzVEKKczbIePQC9p5o75zAJbBHpQxhl1nSIXQ SYYQKiglCxk5hwaw1FlcGxsuBwzq/cqvhUXiDm7rU3S22Fs3QOMfjUROMGoMMLFQ Y31LcaUElCRCxzGC0RjYWdVpfVRFNBL4opKZSSnfy8n5Fi+Dy7Dv+PHB7aM0xitj FraLeORJNBj+61UuFtJ/y5AmVnNN+U9palkVCzu7rYK6XMI7eCyn/AVIAm05AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRWgYUyC7vlT55L LrBqXbM0sdpoiTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHVU aDZOb3Zub1E5OTV4akVFMVROcGJVcWRmRzdQV2l5allQZU42bmJ1Rm4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h1 VGg2Tm92bm9ROTk1eGpFRTFUTnBiVXFkZkc3UFdpeWpZUGVONm5idUZuLzAvNTY4 MTg1MzIwQkJCRTU0RjlFNEIyRUIwNkE1REIzMzRCMURBNjg4OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDs3z4AwQCuuOYMA0EAgACMAcDBQAoBA7AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDPDANBgkqhkiG9w0BAQsFAAOCAQEAl/dIRS1y 7vW6+XDNEhE7BPcB8eF4CeJYP20jRfFNjZVhfO0aOiVy/MQn/0O9mDiClupzzCfH 3qmNEleCCz6nNHe1J+hy/HcRxEBavy7LRyhOUwB+QAJan80NWp54XxreqioOB8D1 1zvJTqQgMrAuqM+qDi4nKlpXJ5b/LdePJUw0ultuyV1gh9Vi7l7Grngq420J30Oz l3BjIlV/GCkt2LrQ9kut2ftfwkUWGT1DybcTidfZMrJti99x9EG9LJmNSMFV7lxO NuH9oq+PAXaokEPyk/Va6xaPZ2k3mqYDaLPJWUDdeAQGefoqDo5XbsSgedzdrEKA vbjM7HFZAQyC7g== -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:55 2024 by rpki-client on console.sobornost.net