$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer File: 653D1900116E7E41CE869340B5477E400370D802.cer (raw, json) Hash identifier: Y6DZ/Ri4fsPKuefCJNVtWNXHr9684My3EDMR2lMAwB4= Subject key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2DC037F84D920BDD5ABC68F76CA9566A4C6C7A17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft caRepository: rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 27 Aug 2024 19:52:06 +0000 Certificate not after: Tue 26 Aug 2025 19:57:06 +0000 Subordinate resources: AS: 52796 IP: 177.52.44.0/22 IP: 2804:b94::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c0:37:f8:4d:92:0b:dd:5a:bc:68:f7:6c:a9:56:6a:4c:6c:7a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 27 19:52:06 2024 GMT Not After : Aug 26 19:57:06 2025 GMT Subject: CN=653D1900116E7E41CE869340B5477E400370D802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:8d:6a:23:26:a1:57:cd:10:44:ea:0b:65: 7e:d1:7e:b3:a1:d3:cd:9b:05:21:c9:d8:4d:3d:83: e0:ef:2f:f1:d3:76:29:af:55:d2:84:ee:46:3b:8d: ad:cf:8e:00:71:d0:62:30:44:0a:23:ef:02:a5:83: 91:4a:00:0e:d5:ac:53:3b:d9:f5:b5:dc:02:70:3a: 22:09:45:4a:09:73:43:92:72:3a:84:3d:b4:c4:4b: 58:86:6d:23:5f:79:c0:cd:6e:0f:0f:9e:6f:77:90: c0:4c:13:3e:be:6f:0c:78:38:2a:b4:fd:ed:38:b8: da:dc:37:35:a0:c5:a5:87:e3:2a:5e:7b:6a:0f:a1: 53:41:b7:ad:d1:5e:a7:d1:b5:a1:07:a6:37:f6:9a: 72:a3:38:4e:b9:41:97:b8:ac:2a:d6:ab:fd:dd:74: 7a:58:0c:12:38:4b:25:ae:f6:be:72:df:88:b7:e8: 1e:16:89:91:d6:2c:c2:3c:39:2a:d5:99:0d:7a:0a: f3:37:6d:7d:9c:45:5f:1c:83:0c:75:a4:1e:2c:1d: d8:2e:41:7d:0e:33:30:fb:87:59:a2:06:84:02:d4: cc:71:0c:e8:74:43:5d:55:2f:f4:66:1b:9d:04:5c: 96:b9:02:6b:ca:32:65:41:1b:3d:11:64:96:57:95: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.52.44.0/22 IPv6: 2804:b94::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52796 Signature Algorithm: sha256WithRSAEncryption 3d:8f:86:c2:e8:19:44:e2:30:bb:ea:18:ac:2f:85:ef:a1:f9: ca:d0:6b:a3:96:76:4a:2f:6c:42:94:2e:43:8e:c4:ee:60:44: f1:5f:79:94:9b:18:16:b8:20:c5:91:7e:4b:ec:23:be:84:8b: b2:c6:47:42:47:0b:55:cd:77:3e:5b:66:06:46:4a:f9:ea:9a: d0:fb:31:18:ad:77:ce:1d:d6:6d:8a:d5:96:b7:90:83:58:fb: 44:b2:bd:12:ae:1a:71:19:cc:a2:c4:78:e2:6e:3f:3e:84:27: 57:bb:f4:77:0e:4d:14:49:3a:3d:9f:55:4e:1e:b2:d9:81:85: 51:cc:31:96:8d:90:09:ee:75:e5:48:97:82:84:f4:a0:8e:dd: e4:4b:c0:d5:86:3b:cf:eb:f0:c3:30:38:64:68:19:d1:31:86: b5:26:80:48:ed:a4:fd:de:a4:59:fe:68:09:4a:dd:0e:8c:f6: f0:0e:c7:46:3e:ba:40:3f:ed:68:92:2b:3e:7d:1a:a4:b2:df: a2:00:f2:37:46:c1:a8:03:38:65:de:b6:60:ba:3b:94:e2:d8: 41:ed:53:73:b4:00:97:65:e5:a9:dd:b4:54:82:ac:1c:8a:46: 0e:9a:a1:55:06:62:45:a3:a2:05:52:ab:36:49:1d:7b:63:9c: 1c:4e:d9:15 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULcA3+E2SC91avGj3bKlWakxsehcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjcxOTUyMDZaFw0yNTA4MjYxOTU3MDZaMDMxMTAvBgNV BAMTKDY1M0QxOTAwMTE2RTdFNDFDRTg2OTM0MEI1NDc3RTQwMDM3MEQ4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbY1qIyahV80QROoLZX7RfrOh 082bBSHJ2E09g+DvL/HTdimvVdKE7kY7ja3PjgBx0GIwRAoj7wKlg5FKAA7VrFM7 2fW13AJwOiIJRUoJc0OScjqEPbTES1iGbSNfecDNbg8Pnm93kMBMEz6+bwx4OCq0 /e04uNrcNzWgxaWH4ypee2oPoVNBt63RXqfRtaEHpjf2mnKjOE65QZe4rCrWq/3d dHpYDBI4SyWu9r5y34i36B4WiZHWLMI8OSrVmQ16CvM3bX2cRV8cgwx1pB4sHdgu QX0OMzD7h1miBoQC1MxxDOh0Q11VL/RmG50EXJa5AmvKMmVBGz0RZJZXle2fAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlPRkAEW5+Qc6G k0C1R35AA3DYAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHJv ZExwZGRuWlQ4b1FCSlkyb2lLd2JDSjI5ZVBVa3lFOVF3UU5TNWZuTWcvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHJv ZExwZGRuWlQ4b1FCSlkyb2lLd2JDSjI5ZVBVa3lFOVF3UU5TNWZuTWcvMC82NTNE MTkwMDExNkU3RTQxQ0U4NjkzNDBCNTQ3N0U0MDAzNzBEODAyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKxNCwwDQQCAAIwBwMFACgEC5QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAM48MA0GCSqGSIb3DQEBCwUAA4IBAQA9j4bC6BlE4jC76his L4XvofnK0GujlnZKL2xClC5DjsTuYETxX3mUmxgWuCDFkX5L7CO+hIuyxkdCRwtV zXc+W2YGRkr56prQ+zEYrXfOHdZtitWWt5CDWPtEsr0SrhpxGcyixHjibj8+hCdX u/R3Dk0USTo9n1VOHrLZgYVRzDGWjZAJ7nXlSJeChPSgjt3kS8DVhjvP6/DDMDhk aBnRMYa1JoBI7aT93qRZ/mgJSt0OjPbwDsdGPrpAP+1okis+fRqkst+iAPI3RsGo Azhl3rZgujuU4thB7VNztACXZeWp3bRUgqwcikYOmqFVBmJFo6IFUqs2SR17Y5wc TtkV -----END CERTIFICATE-----Generated at Mon Oct 21 06:36:58 2024 by rpki-client on console.sobornost.net