$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer File: 7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer (raw, json) Hash identifier: ayEb8SymEo+GugaN0fwuklkOgi4m7eukZ1NqWTbb/DE= Subject key identifier: 7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 292BEE3084BAAB5A3B9ED5315F1A3EBC8F18677D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft caRepository: rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 27 Sep 2024 19:12:45 +0000 Certificate not after: Fri 26 Sep 2025 19:17:45 +0000 Subordinate resources: AS: 61574 -- 61576 AS: 263842 -- 263844 IP: 138.185.228.0/22 IP: 2804:269c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2b:ee:30:84:ba:ab:5a:3b:9e:d5:31:5f:1a:3e:bc:8f:18:67:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 27 19:12:45 2024 GMT Not After : Sep 26 19:17:45 2025 GMT Subject: CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:97:1d:da:b4:af:65:bd:84:d9:ad:f8:0c:34: 88:3e:cd:9f:0e:e0:84:a5:c6:a8:ac:d1:53:e8:38: 92:6a:57:30:eb:dc:8c:f4:a3:01:4a:c4:5a:06:4b: 39:7f:d7:85:54:cb:ee:e7:c0:44:eb:80:92:e4:2e: ef:8d:84:db:fd:05:82:26:4e:f0:a0:52:9b:b6:7b: 0b:48:f6:2c:ba:dd:f3:91:0a:dd:08:64:bb:4a:5e: 56:9a:0d:50:2f:28:48:c3:1f:56:f2:b1:d1:1b:93: 76:d0:4c:ef:72:32:e4:d7:5d:d7:b8:3d:58:1d:38: 39:5c:f8:f5:12:d6:79:6f:39:88:06:85:64:dd:2c: fa:81:2f:66:a7:58:c0:24:ff:55:a6:62:8a:41:9e: 4e:12:e1:2e:9a:4f:7e:45:b1:42:81:02:59:aa:cb: 60:91:a2:f0:6d:a1:71:4a:31:64:08:7d:ed:36:d7: 32:b5:a5:73:54:85:ed:ce:5b:46:ff:03:9f:4a:57: 96:5a:77:92:37:c9:a4:bf:e9:32:15:de:92:bb:b7: fe:b9:58:8d:6d:6e:da:32:88:0d:cf:d2:52:eb:4c: 17:3b:04:2e:7c:c8:ee:fe:02:12:7c:15:05:f7:a4: 0d:4e:7a:d0:d1:47:78:56:bc:0a:00:61:a0:e9:df: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 IPv6: 2804:269c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 263842-263844 Signature Algorithm: sha256WithRSAEncryption d3:dd:44:d3:56:bf:88:fb:f4:ec:5c:1a:4e:f0:d1:af:52:fe: d6:99:ee:a0:b3:05:45:d5:8a:60:b1:90:e4:bd:71:77:5a:2a: 5c:8a:19:95:3b:65:ae:ba:85:3e:eb:d8:0e:e9:bd:bb:63:7a: 65:a4:98:07:4a:6a:f5:ff:80:3b:69:e9:bd:51:95:7e:6f:de: b0:55:9b:32:b1:d6:48:23:de:70:ec:da:3d:96:0b:02:90:24: 6d:b2:52:84:e9:44:a2:12:1d:f3:46:08:77:83:bd:f7:cc:4c: ad:b1:5a:8a:ff:5d:11:e2:9d:99:8f:79:80:90:84:3d:c2:6c: 82:c9:91:4e:ff:f4:68:36:be:94:eb:1f:11:be:61:a6:37:a6: 20:b9:8a:2f:51:0e:08:47:54:30:32:a2:96:40:ee:7e:1b:cd: c0:b6:37:0e:da:be:a1:6c:f4:9b:83:e7:06:dd:55:8e:65:a3: 55:0b:5a:6a:db:80:1c:40:33:96:29:51:14:80:82:33:17:5e: 33:cd:8a:02:99:8c:3b:38:ef:d8:60:66:39:37:48:da:cb:f7: ce:03:5c:0c:9d:4a:fc:c9:0b:04:6b:3d:a1:9e:8f:39:da:6c: 83:ba:12:89:cd:d1:2c:f7:5a:82:ac:47:e1:cf:ab:5f:85:71: be:3f:b3:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUKSvuMIS6q1o7ntUxXxo+vI8YZ30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjcxOTEyNDVaFw0yNTA5MjYxOTE3NDVaMDMxMTAvBgNV BAMTKDdCNjY0MUE1QzZFRTQ0QzY4QzczQzI1QUZGNUNGMjQ3OTAyQ0Q1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYlx3atK9lvYTZrfgMNIg+zZ8O 4ISlxqis0VPoOJJqVzDr3Iz0owFKxFoGSzl/14VUy+7nwETrgJLkLu+NhNv9BYIm TvCgUpu2ewtI9iy63fORCt0IZLtKXlaaDVAvKEjDH1bysdEbk3bQTO9yMuTXXde4 PVgdODlc+PUS1nlvOYgGhWTdLPqBL2anWMAk/1WmYopBnk4S4S6aT35FsUKBAlmq y2CRovBtoXFKMWQIfe021zK1pXNUhe3OW0b/A59KV5Zad5I3yaS/6TIV3pK7t/65 WI1tbtoyiA3P0lLrTBc7BC58yO7+AhJ8FQX3pA1OetDRR3hWvAoAYaDp36zfAgMB AAGjggNNMIIDSTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR7ZkGlxu5Exoxz wlr/XPJHkCzVTTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEhW WTQySzdZVVM2NDlGTlozREp2R0pXV2JCSjN2MTYyd1NuOUp0N1F5TksvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRI Vlk0Mks3WVVTNjQ5Rk5aM0RKdkdKV1diQkozdjE2MndTbjlKdDdReU5LLzAvN0I2 NjQxQTVDNkVFNDRDNjhDNzNDMjVBRkY1Q0YyNDc5MDJDRDU0RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCirnkMA0EAgACMAcDBQAoBCacMC0GCCsGAQUFBwEI AQH/BB4wHKAaMBgwCgIDAPCGAgMA8IgwCgIDBAaiAgMEBqQwDQYJKoZIhvcNAQEL BQADggEBANPdRNNWv4j79OxcGk7w0a9S/taZ7qCzBUXVimCxkOS9cXdaKlyKGZU7 Za66hT7r2A7pvbtjemWkmAdKavX/gDtp6b1RlX5v3rBVmzKx1kgj3nDs2j2WCwKQ JG2yUoTpRKISHfNGCHeDvffMTK2xWor/XRHinZmPeYCQhD3CbILJkU7/9Gg2vpTr HxG+YaY3piC5ii9RDghHVDAyopZA7n4bzcC2Nw7avqFs9JuD5wbdVY5lo1ULWmrb gBxAM5YpURSAgjMXXjPNigKZjDs479hgZjk3SNrL984DXAydSvzJCwRrPaGejzna bIO6EonN0Sz3WoKsR+HPq1+Fcb4/s1Q= -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:01 2024 by rpki-client on console.sobornost.net