$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer (raw, json) Hash identifier: zsIqSSRKhN4JQWlocCklvffOi5gZ0FB0wP3Enn46tjQ= Subject key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F7C6D27CA5E2E8AAA804E16ED882A7C8FA38D64 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft caRepository: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 02:04:52 +0000 Certificate not after: Fri 04 Apr 2025 02:09:52 +0000 Subordinate resources: AS: 52576 IP: 177.86.200.0/21 IP: 2804:cf0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7c:6d:27:ca:5e:2e:8a:aa:80:4e:16:ed:88:2a:7c:8f:a3:8d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 02:04:52 2024 GMT Not After : Apr 4 02:09:52 2025 GMT Subject: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:24:28:4a:2f:77:c1:68:9d:e8:3b:84:ba: 5e:ea:0b:09:5c:e2:07:7d:77:b8:31:ff:a9:60:6b: 6f:2d:a9:7a:79:5f:6b:7d:c4:da:ed:58:a3:ea:01: 73:bd:38:1f:cf:0e:29:99:8d:32:7c:ab:c5:81:ad: c5:d3:95:9f:c5:35:bc:29:cc:57:35:74:bf:c0:d0: 7f:ec:7b:5e:a4:90:bd:16:92:a9:70:8d:59:9a:fd: 3f:a1:7f:8c:8f:7c:fd:21:4e:a6:3d:50:42:71:75: fe:b1:d2:f3:d9:85:6e:72:46:8b:20:01:ce:0e:58: e2:2a:56:4c:d1:8d:a8:6c:02:44:9c:94:e4:17:8a: 58:4e:cc:2f:2b:e2:ca:f7:c6:c2:86:fb:80:78:86: 82:08:c3:51:ec:8a:25:68:75:aa:43:82:17:62:ce: fe:64:a0:51:2d:b7:36:e2:ce:b7:bd:d1:83:cb:f9: 06:81:95:43:5f:ab:3d:24:75:f7:c8:8e:64:d3:2f: 51:e7:08:9d:cf:de:a2:2c:3c:47:68:42:ed:48:19: d6:2a:d4:e9:97:b6:e6:64:85:36:15:6d:82:9f:a8: 61:8d:4d:55:32:1d:d6:2d:9d:a4:c6:4e:bc:20:f3: 69:ac:41:61:de:3a:6c:5b:38:8d:1e:91:1b:f8:10: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.86.200.0/21 IPv6: 2804:cf0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52576 Signature Algorithm: sha256WithRSAEncryption 50:c6:a3:2c:48:79:db:d6:a8:f1:58:00:f0:d5:92:e5:e5:67: 9c:46:46:22:a0:ea:ed:a0:44:b1:e1:d7:3a:92:e0:4e:e2:1f: 11:a0:e2:60:57:8e:f4:fd:b7:71:ba:2b:ab:d8:b5:78:a6:05: 3b:30:3e:cf:8b:70:13:8f:c5:1a:29:9c:96:76:2b:79:74:7e: 20:d2:f6:d5:35:c8:db:3d:c5:6d:af:78:8a:a7:f0:6a:60:a3: dc:d6:88:ca:a2:de:8c:96:91:b2:5b:4b:fc:59:54:b1:65:27: aa:b8:dc:49:e1:81:61:e7:a2:19:4a:36:09:ae:5a:02:af:62: 5a:1b:15:e9:9b:d4:59:e3:82:24:0a:27:4f:59:ec:fc:dd:c1: a1:26:45:74:42:e5:02:46:93:2e:9e:06:6e:9e:af:91:78:e7: 5c:a9:78:61:82:c5:d0:35:e5:20:d3:33:64:c9:ac:34:cd:57: 48:f8:83:8b:eb:ef:44:af:8f:db:92:f3:2f:cb:c5:30:78:25: 54:98:d9:dc:bc:74:af:f7:1a:de:5b:55:e3:36:6f:8e:90:bc: 12:76:9e:70:8a:bc:da:05:38:d6:6d:f9:f0:fa:15:91:8f:31: 26:9a:07:28:fe:24:8c:2a:e5:b2:62:42:21:fc:8c:88:82:f6: b3:71:69:47 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUX3xtJ8peLoqqgE4W7YgqfI+jjWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMjA0NTJaFw0yNTA0MDQwMjA5NTJaMDMxMTAvBgNV BAMTKDg1QUM3RkYwNzIyNDA5MTE2QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3iQoSi93wWid6DuEul7qCwlc 4gd9d7gx/6lga28tqXp5X2t9xNrtWKPqAXO9OB/PDimZjTJ8q8WBrcXTlZ/FNbwp zFc1dL/A0H/se16kkL0WkqlwjVma/T+hf4yPfP0hTqY9UEJxdf6x0vPZhW5yRosg Ac4OWOIqVkzRjahsAkSclOQXilhOzC8r4sr3xsKG+4B4hoIIw1HsiiVodapDghdi zv5koFEttzbizre90YPL+QaBlUNfqz0kdffIjmTTL1HnCJ3P3qIsPEdoQu1IGdYq 1OmXtuZkhTYVbYKfqGGNTVUyHdYtnaTGTrwg82msQWHeOmxbOI0ekRv4EOoZAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFrH/wciQJEWwe PED+R+qmA93ZlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWNu YTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVj bmE2ZVJNOVRzV2dyYzJ2U3hlN0E0TDNqYmdKSGpvTlhFVUo2Q01HSlhSLzEvODVB QzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYwM0RERDk5NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsVbIMA0EAgACMAcDBQAoBAzwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDNYDANBgkqhkiG9w0BAQsFAAOCAQEAUMajLEh529ao8VgA 8NWS5eVnnEZGIqDq7aBEseHXOpLgTuIfEaDiYFeO9P23cborq9i1eKYFOzA+z4tw E4/FGimclnYreXR+INL21TXI2z3Fba94iqfwamCj3NaIyqLejJaRsltL/FlUsWUn qrjcSeGBYeeiGUo2Ca5aAq9iWhsV6ZvUWeOCJAonT1ns/N3BoSZFdELlAkaTLp4G bp6vkXjnXKl4YYLF0DXlINMzZMmsNM1XSPiDi+vvRK+P25LzL8vFMHglVJjZ3Lx0 r/ca3ltV4zZvjpC8EnaecIq82gU41m358PoVkY8xJpoHKP4kjCrlsmJCIfyMiIL2 s3FpRw== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:03 2024 by rpki-client on console.sobornost.net