$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C229093821B288EE3264DE1144D4D961651D060.cer File: 8C229093821B288EE3264DE1144D4D961651D060.cer (raw, json) Hash identifier: RkUDaziRL3wMU5uYn+8GpZqMqCFJ0+TyF773NS+6sYM= Subject key identifier: 8C:22:90:93:82:1B:28:8E:E3:26:4D:E1:14:4D:4D:96:16:51:D0:60 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4EE6A52CAD5CF2CB19364FC1AFAE9F97B34EBA55 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/8C229093821B288EE3264DE1144D4D961651D060.mft caRepository: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 19:58:41 +0000 Certificate not after: Mon 30 Jun 2025 20:03:41 +0000 Subordinate resources: AS: 267128 IP: 45.229.138.0/23 IP: 2804:488c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e6:a5:2c:ad:5c:f2:cb:19:36:4f:c1:af:ae:9f:97:b3:4e:ba:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 1 19:58:41 2024 GMT Not After : Jun 30 20:03:41 2025 GMT Subject: CN=8C229093821B288EE3264DE1144D4D961651D060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:93:f3:45:a6:e0:1a:bb:06:36:b3:3b:07: cb:99:e5:0c:75:10:5d:d1:9b:87:db:eb:a6:d2:40: ea:5c:a7:73:e2:fb:ad:19:ca:1e:28:fc:34:dd:cd: 2b:db:20:6f:be:ce:85:11:2a:49:77:60:d6:22:02: 44:93:98:aa:bb:61:f6:16:0c:c4:23:83:6d:11:d9: cf:ed:b0:2e:b9:0f:af:2d:38:d1:b8:f7:c1:64:e9: 52:d3:98:7d:b6:2b:76:ce:2d:a5:c4:25:56:97:bf: 6b:fb:fb:35:bf:6e:ef:9c:51:3a:94:b9:e3:c3:56: 74:4c:bc:1e:ab:a0:f1:c7:19:ab:d0:e6:a5:46:fa: 34:be:f0:04:e2:78:88:c8:7c:1c:ca:cb:63:af:ff: 41:05:d6:86:7c:20:ec:43:fd:63:4b:84:ec:40:e1: e1:ca:c9:94:e8:09:58:26:91:2b:1f:32:56:78:0e: c3:f6:0a:62:45:08:60:fb:0c:e1:75:a1:91:3e:9e: 52:6d:0e:a5:02:7f:39:b3:24:4e:62:ab:80:7e:86: 2f:80:1a:1d:b0:91:b9:67:0b:05:8d:94:d9:14:f5: 66:f3:a8:13:d1:67:e4:0c:24:64:c0:26:d9:b1:f1: 31:7a:2b:92:be:8e:4a:b0:b5:cb:c8:fc:3a:17:a4: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:22:90:93:82:1B:28:8E:E3:26:4D:E1:14:4D:4D:96:16:51:D0:60 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/8C229093821B288EE3264DE1144D4D961651D060.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.138.0/23 IPv6: 2804:488c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267128 Signature Algorithm: sha256WithRSAEncryption 2b:bb:2b:f6:ea:9c:9f:e9:4f:70:eb:a9:bc:25:52:80:1c:3f: 6a:b2:33:5f:bf:01:9f:20:38:7d:ab:f9:0d:8a:b9:dd:32:8b: 5e:ac:fa:08:00:0c:32:cd:16:94:3d:3c:4c:9a:a2:ec:0f:de: e0:50:80:05:a4:43:91:ce:7a:15:3e:5f:0a:1d:29:f5:f2:9c: 19:d5:d2:b4:6e:95:27:fc:cb:27:d3:d7:47:75:82:0c:a9:89: 5c:ea:c4:04:4c:d7:23:3d:6b:a3:5d:b6:f9:e9:73:90:64:2b: 67:3b:36:60:ec:c4:b1:9b:bf:58:30:82:d7:7f:7f:13:b9:74: 5d:bd:b8:94:1d:bf:53:42:96:e3:4e:1b:79:17:41:5e:d5:f2: 3d:c1:29:86:3b:48:57:16:62:e0:77:67:06:2e:39:5b:b0:1a: be:da:ec:dc:bb:74:f3:38:bb:48:92:e4:47:3c:a2:c7:62:71: 12:64:ea:9b:f9:8b:38:94:26:58:90:d2:dd:b3:3b:90:c4:5f: 32:26:29:cf:97:2f:99:4b:89:4f:59:1c:24:61:70:d4:c0:02: 3a:16:aa:15:5a:d2:10:a0:a9:d2:75:b8:7d:17:66:2b:7a:a5: 52:54:f2:c5:54:c9:4f:2e:9d:ed:85:12:3b:d5:14:05:ea:68: be:f0:e4:87 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUTualLK1c8ssZNk/Br66fl7NOulUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MDExOTU4NDFaFw0yNTA2MzAyMDAzNDFaMDMxMTAvBgNV BAMTKDhDMjI5MDkzODIxQjI4OEVFMzI2NERFMTE0NEQ0RDk2MTY1MUQwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvJPzRabgGrsGNrM7B8uZ5Qx1 EF3Rm4fb66bSQOpcp3Pi+60Zyh4o/DTdzSvbIG++zoURKkl3YNYiAkSTmKq7YfYW DMQjg20R2c/tsC65D68tONG498Fk6VLTmH22K3bOLaXEJVaXv2v7+zW/bu+cUTqU uePDVnRMvB6roPHHGavQ5qVG+jS+8ATieIjIfBzKy2Ov/0EF1oZ8IOxD/WNLhOxA 4eHKyZToCVgmkSsfMlZ4DsP2CmJFCGD7DOF1oZE+nlJtDqUCfzmzJE5iq4B+hi+A Gh2wkblnCwWNlNkU9WbzqBPRZ+QMJGTAJtmx8TF6K5K+jkqwtcvI/DoXpMDnAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMIpCTghsojuMm TeEUTU2WFlHQYDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3pG bWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1RaZmsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N6 Rm1nWUsyWlZ0c1doNHdOWVA1ZEpLdm9YQnh6RDlOcm5OdnhIMm9UWmZrLzAvOEMy MjkwOTM4MjFCMjg4RUUzMjY0REUxMTQ0RDREOTYxNjUxRDA2MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBLeWKMA0EAgACMAcDBQAoBEiMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTeDANBgkqhkiG9w0BAQsFAAOCAQEAK7sr9uqcn+lPcOup vCVSgBw/arIzX78BnyA4fav5DYq53TKLXqz6CAAMMs0WlD08TJqi7A/e4FCABaRD kc56FT5fCh0p9fKcGdXStG6VJ/zLJ9PXR3WCDKmJXOrEBEzXIz1ro122+elzkGQr Zzs2YOzEsZu/WDCC139/E7l0Xb24lB2/U0KW404beRdBXtXyPcEphjtIVxZi4Hdn Bi45W7Aavtrs3Lt08zi7SJLkRzyix2JxEmTqm/mLOJQmWJDS3bM7kMRfMiYpz5cv mUuJT1kcJGFw1MACOhaqFVrSEKCp0nW4fRdmK3qlUlTyxVTJTy6d7YUSO9UUBepo vvDkhw== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:04 2024 by rpki-client on console.sobornost.net