$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer File: 72D4C5EE34A043798ED938051AE717D10692045C.cer (raw, json) Hash identifier: Eok0Dxs+wi8BPCxAi1j/rpgsZneCJz431tj8eEH0lUs= Subject key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A74BF576F08E7367C5E3CAB651B8AAB69EF0CBD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft caRepository: rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 05 Jun 2024 14:56:38 +0000 Certificate not after: Wed 04 Jun 2025 15:01:38 +0000 Subordinate resources: AS: 268449 IP: 45.161.72.0/22 IP: 2804:5164::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:74:bf:57:6f:08:e7:36:7c:5e:3c:ab:65:1b:8a:ab:69:ef:0c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 5 14:56:38 2024 GMT Not After : Jun 4 15:01:38 2025 GMT Subject: CN=72D4C5EE34A043798ED938051AE717D10692045C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:14:e5:56:6a:82:3e:c8:94:b3:5c:bc:07: 54:1f:d4:82:1b:fa:ba:28:bc:10:6e:fc:21:4d:59: cf:7d:4c:27:ab:cc:a0:b6:e9:ed:89:16:49:e7:13: 96:83:8e:34:8c:4e:8e:27:e4:0f:85:4e:9f:31:cb: 44:25:ec:72:9e:99:a2:4f:39:e2:1b:f2:4c:41:4f: 28:93:ee:d5:ae:11:73:85:7e:b8:c4:f6:76:d5:54: 18:19:9c:1e:e9:8c:53:f3:00:22:4f:30:22:fe:e9: 4e:5a:06:05:c6:b4:36:eb:53:2a:8b:48:b1:56:5d: be:b8:82:53:05:c8:4f:99:e5:a9:2e:24:f5:bd:71: d7:6f:a8:ae:45:87:5d:08:fc:f0:bd:42:db:fb:6e: 71:7e:70:70:de:98:dc:ec:aa:a1:d5:48:98:ab:34: d9:ca:5b:ef:6e:d7:b9:2f:54:ad:c4:f8:82:3d:c4: 9c:59:1c:16:83:e5:3f:ae:0f:57:f4:4f:51:6c:cb: 1f:37:70:18:00:e0:da:65:fa:63:5b:00:d2:7b:85: 3b:33:77:22:d5:a0:08:50:9c:3f:44:c9:84:3c:be: ae:0f:24:2a:3a:a7:cb:41:34:cb:bd:b0:ea:10:2d: 1d:b1:f9:b5:8f:ee:e4:8b:ca:7e:c0:7c:35:79:a4: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.72.0/22 IPv6: 2804:5164::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268449 Signature Algorithm: sha256WithRSAEncryption be:f7:48:82:a9:4a:07:37:46:cb:af:4d:82:d2:b9:47:c2:68: 97:f4:7a:ce:f9:83:3f:03:fd:1a:e5:2c:5e:46:5d:d0:37:c5: 1f:f5:a2:42:03:87:6b:99:28:0d:b6:83:40:c6:fb:cc:23:2d: 90:0b:1c:de:42:f2:56:c7:15:8b:16:98:99:84:e0:01:88:49: 1e:e7:bb:ab:6e:b5:d4:96:92:f9:5f:36:bb:04:1c:df:1d:5e: 18:af:6b:e6:40:06:7b:b5:6d:53:8c:3c:e8:1e:84:1a:73:fd: 35:f1:62:76:5b:21:7b:b5:3f:bf:bc:25:99:79:b3:e6:c1:e0: c1:ef:2b:0b:29:90:58:8c:7b:ed:72:87:d8:fa:4c:d3:9c:83: a5:17:e5:95:7b:46:58:6f:ff:b4:9f:ec:05:fc:c7:8a:73:6f: 6a:40:3f:cd:d3:06:c7:2d:d7:e5:6b:3e:75:e5:42:52:3e:20: ff:eb:53:5d:20:3c:90:cd:dc:0c:66:d7:6b:8e:ea:07:fb:2e: 87:b9:08:af:3f:06:df:7b:6b:4d:86:45:cb:51:da:1f:32:5a: 86:dc:4c:d5:d8:7d:db:49:8c:10:56:07:ef:4a:7d:45:c6:60: b0:8b:98:83:54:0b:71:2f:6c:7d:83:63:36:e0:cc:0d:6f:38: 19:55:c0:1c -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWnS/V28I5zZ8XjyrZRuKq2nvDL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MDUxNDU2MzhaFw0yNTA2MDQxNTAxMzhaMDMxMTAvBgNV BAMTKDcyRDRDNUVFMzRBMDQzNzk4RUQ5MzgwNTFBRTcxN0QxMDY5MjA0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQPRTlVmqCPsiUs1y8B1Qf1IIb +roovBBu/CFNWc99TCerzKC26e2JFknnE5aDjjSMTo4n5A+FTp8xy0Ql7HKemaJP OeIb8kxBTyiT7tWuEXOFfrjE9nbVVBgZnB7pjFPzACJPMCL+6U5aBgXGtDbrUyqL SLFWXb64glMFyE+Z5akuJPW9cddvqK5Fh10I/PC9Qtv7bnF+cHDemNzsqqHVSJir NNnKW+9u17kvVK3E+II9xJxZHBaD5T+uD1f0T1Fsyx83cBgA4Npl+mNbANJ7hTsz dyLVoAhQnD9EyYQ8vq4PJCo6p8tBNMu9sOoQLR2x+bWP7uSLyn7AfDV5pLNdAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRy1MXuNKBDeY7Z OAUa5xfRBpIEXDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHBa Q05MMU1GcVA0N1hERHJnRHZUcHRrUlpTV2Y3am11UVVlS21ja2I2aXAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRw WkNOTDFNRnFQNDdYRERyZ0R2VHB0a1JaU1dmN2ptdVFVZUttY2tiNmlwLzAvNzJE NEM1RUUzNEEwNDM3OThFRDkzODA1MUFFNzE3RDEwNjkyMDQ1Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaFIMA0EAgACMAcDBQAoBFFkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQYoTANBgkqhkiG9w0BAQsFAAOCAQEAvvdIgqlKBzdGy69N gtK5R8Jol/R6zvmDPwP9GuUsXkZd0DfFH/WiQgOHa5koDbaDQMb7zCMtkAsc3kLy VscVixaYmYTgAYhJHue7q2611JaS+V82uwQc3x1eGK9r5kAGe7VtU4w86B6EGnP9 NfFidlshe7U/v7wlmXmz5sHgwe8rCymQWIx77XKH2PpM05yDpRfllXtGWG//tJ/s BfzHinNvakA/zdMGxy3X5Ws+deVCUj4g/+tTXSA8kM3cDGbXa47qB/suh7kIrz8G 33trTYZFy1HaHzJahtxM1dh920mMEFYH70p9RcZgsIuYg1QLcS9sfYNjNuDMDW84 GVXAHA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:00 2024 by rpki-client on console.sobornost.net