$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer File: 891F7710A149035BE2C13EAA45697B7BC29B0E36.cer (raw, json) Hash identifier: E/HXZ57H9Hf0mRt/Z6fGr6kWhmNNn0nj3czpJintrj4= Subject key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5914A6FF47D0824227A5061D4783D1AFABAD2EFB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.mft caRepository: rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 23 Aug 2024 19:51:37 +0000 Certificate not after: Fri 22 Aug 2025 19:56:37 +0000 Subordinate resources: AS: 267395 IP: 45.233.196.0/22 IP: 2804:4cd4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:14:a6:ff:47:d0:82:42:27:a5:06:1d:47:83:d1:af:ab:ad:2e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 23 19:51:37 2024 GMT Not After : Aug 22 19:56:37 2025 GMT Subject: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:9e:2b:72:76:98:32:7f:ef:77:b1:4b:86: 7b:dc:03:d8:3a:c6:ed:64:ed:24:1c:eb:a7:17:70: b7:bc:62:0e:06:34:28:13:70:4a:b5:26:a0:cd:55: 84:f4:94:c8:68:21:5e:0f:39:ef:80:22:0c:27:3f: f9:9d:59:fa:58:d2:f2:e7:75:7b:4c:ff:4a:c0:cb: ea:c9:51:ad:a7:da:23:66:ce:30:05:80:0b:26:da: 24:36:86:37:3b:ca:49:37:58:34:26:3f:bc:d9:ae: 51:46:4e:4f:2f:c5:15:55:90:d6:df:67:3a:e4:64: 38:16:36:99:93:2b:7b:96:35:66:e0:47:50:7e:4e: ac:2f:d2:c8:c2:b9:eb:a6:1d:ce:88:fc:d7:6f:2f: fe:59:cd:05:09:ae:be:0b:7c:23:35:f9:fc:e6:25: b3:e1:1f:98:ad:31:70:6a:29:16:87:65:39:cd:6b: c2:7a:19:19:0d:3a:7b:a4:83:73:00:51:26:b1:09: 92:eb:07:2d:7a:85:13:92:9b:ae:2e:4b:b0:86:6b: 46:5d:7c:2f:29:36:28:15:2d:89:43:42:dd:68:b7: a9:5b:70:70:20:72:40:c2:16:5d:cb:b0:2b:96:39: 2f:db:50:df:ed:b4:57:99:81:c2:10:aa:67:d6:c0: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.196.0/22 IPv6: 2804:4cd4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267395 Signature Algorithm: sha256WithRSAEncryption 1a:6a:72:08:1e:0b:b2:02:b2:08:a7:df:2b:e3:4f:9a:6a:31: 85:ab:a9:d1:6f:30:6f:66:6c:7f:b9:78:3e:4e:5c:18:40:d5: 24:a0:17:6b:30:a6:b0:d1:59:c4:a2:6a:94:a4:a9:8f:a0:73: 75:27:6b:45:b9:b0:87:a9:1a:c7:ec:95:de:f7:3d:ac:54:1a: 98:43:0b:96:cd:8c:f4:77:36:f2:98:ea:34:56:d7:b7:b7:e8: d1:d5:35:c5:a5:35:31:d8:01:5d:70:ec:8a:69:ad:fb:a5:fd: cc:04:8d:86:c5:ef:7e:3d:87:35:d4:db:42:6c:3d:1a:8e:59: 96:52:98:fb:5d:3e:d8:04:4e:23:ce:08:70:4b:c7:88:2e:0d: 69:97:ea:ce:d0:e2:d2:75:9a:8e:f3:e6:3e:3c:ee:76:c2:2c: 65:46:c9:08:52:7e:d3:14:ac:d9:38:e9:29:27:8b:35:7e:8c: 5d:be:40:0a:fd:f0:71:07:d9:6e:05:53:b0:0e:0d:1d:c6:04: 55:65:0c:6f:70:0d:e6:63:57:71:57:d8:e1:62:8f:dc:11:90: 42:8b:b8:95:c1:88:36:b0:12:39:a7:2c:c5:68:f8:0b:a1:77: 6e:91:d0:69:0f:79:73:e5:8b:0a:04:75:f3:33:62:0e:82:ca: e2:a0:77:51 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWRSm/0fQgkInpQYdR4PRr6utLvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjMxOTUxMzdaFw0yNTA4MjIxOTU2MzdaMDMxMTAvBgNV BAMTKDg5MUY3NzEwQTE0OTAzNUJFMkMxM0VBQTQ1Njk3QjdCQzI5QjBFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/l54rcnaYMn/vd7FLhnvcA9g6 xu1k7SQc66cXcLe8Yg4GNCgTcEq1JqDNVYT0lMhoIV4POe+AIgwnP/mdWfpY0vLn dXtM/0rAy+rJUa2n2iNmzjAFgAsm2iQ2hjc7ykk3WDQmP7zZrlFGTk8vxRVVkNbf ZzrkZDgWNpmTK3uWNWbgR1B+Tqwv0sjCueumHc6I/NdvL/5ZzQUJrr4LfCM1+fzm JbPhH5itMXBqKRaHZTnNa8J6GRkNOnukg3MAUSaxCZLrBy16hROSm64uS7CGa0Zd fC8pNigVLYlDQt1ot6lbcHAgckDCFl3LsCuWOS/bUN/ttFeZgcIQqmfWwBmPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJH3cQoUkDW+LB PqpFaXt7wpsONjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUtj UGY2QXM4eVNwU2pXNW5lSHpkeUF3aXVyYVFRNlgza2Y2eWExVE1Wam0vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FL Y1BmNkFzOHlTcFNqVzVuZUh6ZHlBd2l1cmFRUTZYM2tmNnlhMVRNVmptLzAvODkx Rjc3MTBBMTQ5MDM1QkUyQzEzRUFBNDU2OTdCN0JDMjlCMEUzNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLenEMA0EAgACMAcDBQAoBEzUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUgzANBgkqhkiG9w0BAQsFAAOCAQEAGmpyCB4LsgKyCKff K+NPmmoxhaup0W8wb2Zsf7l4Pk5cGEDVJKAXazCmsNFZxKJqlKSpj6BzdSdrRbmw h6kax+yV3vc9rFQamEMLls2M9Hc28pjqNFbXt7fo0dU1xaU1MdgBXXDsimmt+6X9 zASNhsXvfj2HNdTbQmw9Go5ZllKY+10+2AROI84IcEvHiC4NaZfqztDi0nWajvPm PjzudsIsZUbJCFJ+0xSs2TjpKSeLNX6MXb5ACv3wcQfZbgVTsA4NHcYEVWUMb3AN 5mNXcVfY4WKP3BGQQou4lcGINrASOacsxWj4C6F3bpHQaQ95c+WLCgR18zNiDoLK 4qB3UQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:03 2024 by rpki-client on console.sobornost.net