$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer File: 890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer (raw, json) Hash identifier: S9itWSKQB0x2DrjudFKFMstQKh4hAmV5qFDXVefBaRg= Subject key identifier: 89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1AF3CA9D128FF577886BF0CB67E998B04819743F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft caRepository: rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 10:02:52 +0000 Certificate not after: Thu 03 Apr 2025 10:07:52 +0000 Subordinate resources: AS: 269342 IP: 45.184.196.0/22 IP: 2804:6328::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f3:ca:9d:12:8f:f5:77:88:6b:f0:cb:67:e9:98:b0:48:19:74:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 10:02:52 2024 GMT Not After : Apr 3 10:07:52 2025 GMT Subject: CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:f2:c7:46:27:b7:85:f8:ff:5c:7f:88:f6: 03:78:ac:f5:26:9d:52:57:39:7f:45:c2:3c:01:e2: ef:21:27:46:de:a0:0e:45:a0:72:90:38:d5:af:8d: 4e:77:36:13:ae:70:bd:de:3c:29:32:fc:3d:a5:77: af:81:64:2e:f1:4a:50:ab:d1:f5:9c:48:2d:b6:a2: ba:cc:2c:de:d7:9f:ac:24:df:f7:d9:cb:1e:aa:2a: d6:d2:df:9a:4c:2c:f2:ae:84:b0:55:aa:0b:af:2e: 68:f0:24:da:60:f6:38:ee:ec:1d:d9:cf:48:4a:07: cb:c6:e7:17:96:cc:ec:73:80:c4:d6:81:05:cb:3d: 15:a7:9e:ec:4e:66:07:99:40:f6:43:24:22:84:0b: 8b:41:e2:92:8e:b7:46:a9:3c:4a:cf:37:22:db:70: 82:42:83:b5:ef:b0:1b:ca:e5:a6:2e:74:2f:2e:ae: 5c:1c:94:1d:87:c0:a3:eb:ec:38:c6:82:f8:32:04: 05:94:dd:ff:90:3d:ba:a6:80:2f:bd:e6:7e:76:f6: a1:57:d0:69:af:6d:f8:29:cd:5a:07:ac:82:5b:d4: e1:e2:31:dc:5b:a5:a9:c4:0f:cc:50:d5:b6:b0:b5: a3:a2:3b:2f:c5:fb:5d:82:e9:77:0b:9d:0d:a7:be: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.184.196.0/22 IPv6: 2804:6328::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269342 Signature Algorithm: sha256WithRSAEncryption 56:8e:56:cb:e6:dd:75:d2:26:a4:c4:23:cf:a2:72:cb:94:55: a6:45:c8:5c:1d:a7:5a:40:6f:44:2e:a2:b4:12:e0:32:09:ac: c7:98:9b:60:2c:c9:89:3e:65:fd:0a:4b:bb:5c:a7:7e:97:13: 7a:e8:8f:0c:d5:68:43:15:39:f8:df:f7:1a:af:8a:1f:ce:fa: 70:2b:59:01:96:64:d5:fe:f7:c2:8f:23:a6:26:09:0a:41:98: 95:99:fb:c7:44:49:ea:55:f7:db:83:09:33:b5:da:7f:70:62: 08:81:0f:1d:c5:8a:f3:6e:f1:ee:fe:13:a9:fa:db:84:d9:3d: 5f:93:75:38:ff:59:1b:eb:13:e1:8b:68:42:f6:e2:ec:bb:9e: 96:6b:b4:97:c8:9f:c0:27:d4:e9:dd:84:19:66:e2:8e:77:c4: 9e:2c:1b:37:2d:d4:75:e3:cb:d9:1c:25:e1:a2:2b:ee:36:9e: 97:18:c7:89:5e:c9:6f:08:0c:1d:9a:95:f8:13:1c:f3:db:ce: 2e:f2:99:8a:f1:4d:9c:19:2d:f0:0c:64:f2:4e:01:58:f2:34: 63:64:dc:c1:32:03:f6:de:61:49:61:3e:85:ec:42:d5:c8:06: 62:61:b6:82:05:07:60:f8:f8:ef:ff:ac:95:87:9c:b9:0b:f0: 1e:e1:2f:1b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUGvPKnRKP9XeIa/DLZ+mYsEgZdD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMDAyNTJaFw0yNTA0MDMxMDA3NTJaMDMxMTAvBgNV BAMTKDg5MEU4RDFEOUZEOTcwRTJFNEE1RkE4QzQwREJFQkNFQUFGNTkwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTfLHRie3hfj/XH+I9gN4rPUm nVJXOX9FwjwB4u8hJ0beoA5FoHKQONWvjU53NhOucL3ePCky/D2ld6+BZC7xSlCr 0fWcSC22orrMLN7Xn6wk3/fZyx6qKtbS35pMLPKuhLBVqguvLmjwJNpg9jju7B3Z z0hKB8vG5xeWzOxzgMTWgQXLPRWnnuxOZgeZQPZDJCKEC4tB4pKOt0apPErPNyLb cIJCg7XvsBvK5aYudC8urlwclB2HwKPr7DjGgvgyBAWU3f+QPbqmgC+95n529qFX 0GmvbfgpzVoHrIJb1OHiMdxbpanED8xQ1bawtaOiOy/F+12C6XcLnQ2nvuddAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJDo0dn9lw4uSl +oxA2+vOqvWQDjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNENO eHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdmak0vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNENO eHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdmak0vMS84OTBF OEQxRDlGRDk3MEUyRTRBNUZBOEM0MERCRUJDRUFBRjU5MDBFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItuMQwDQQCAAIwBwMFACgEYygwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBweMA0GCSqGSIb3DQEBCwUAA4IBAQBWjlbL5t110iakxCPP onLLlFWmRchcHadaQG9ELqK0EuAyCazHmJtgLMmJPmX9Cku7XKd+lxN66I8M1WhD FTn43/car4ofzvpwK1kBlmTV/vfCjyOmJgkKQZiVmfvHREnqVffbgwkztdp/cGII gQ8dxYrzbvHu/hOp+tuE2T1fk3U4/1kb6xPhi2hC9uLsu56Wa7SXyJ/AJ9Tp3YQZ ZuKOd8SeLBs3LdR148vZHCXhoivuNp6XGMeJXslvCAwdmpX4Exzz284u8pmK8U2c GS3wDGTyTgFY8jRjZNzBMgP23mFJYT6F7ELVyAZiYbaCBQdg+Pjv/6yVh5y5C/Ae 4S8b -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:03 2024 by rpki-client on console.sobornost.net