$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer File: 8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer (raw, json) Hash identifier: 7KzFAaxjusa3tW9HcfH1dQXkZWmMUIlcLyEaOCTtLt8= Subject key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18EF4C4051B6A5E5376313A0972E084D1D4D16B0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.mft caRepository: rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Sep 2024 13:27:26 +0000 Certificate not after: Mon 22 Sep 2025 13:32:26 +0000 Subordinate resources: AS: 268663 IP: 45.165.12.0/22 IP: 2804:54a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ef:4c:40:51:b6:a5:e5:37:63:13:a0:97:2e:08:4d:1d:4d:16:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 13:27:26 2024 GMT Not After : Sep 22 13:32:26 2025 GMT Subject: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:a5:4c:67:07:a5:3c:b5:bf:ff:ee:4b:46: bd:6b:98:64:75:1b:9f:a5:8a:bb:d9:af:c8:bc:47: 73:c9:5d:07:ec:03:70:ab:ad:5d:d5:7e:26:85:b4: d4:e5:e3:e4:e4:b2:e1:20:5f:b6:76:f2:05:e0:2c: e4:5c:03:10:2a:d0:9b:ee:52:bf:9f:46:9c:fc:b8: 55:1e:06:e2:3f:54:33:cb:30:74:4a:c5:ff:20:30: 1e:ea:36:af:88:b3:b1:c7:46:de:5b:6d:2c:d6:ad: d4:61:fc:e3:26:36:1d:70:2e:af:eb:b9:2f:59:9c: 51:21:c3:9f:5c:ee:a5:e1:87:bf:25:d3:a7:2d:df: c6:a3:73:4e:0c:d5:ac:3c:f2:ec:27:f1:76:20:04: 56:9c:f1:bf:65:42:ee:fe:be:61:c1:19:d9:6e:36: 38:72:84:53:10:3a:93:54:72:8a:79:65:dd:79:1e: b6:b1:f3:59:95:ab:4c:9d:1d:32:92:d1:d7:3f:36: 6c:b9:8c:ba:4c:ab:b9:bc:fc:03:ad:7d:c2:4b:74: 4e:47:2d:f7:5b:8c:50:70:5d:c7:e3:17:6c:be:88: b9:39:52:96:6b:1b:dd:5c:ab:ca:b7:81:27:83:b8: 6f:5f:96:0d:e4:ed:07:9a:b4:f9:90:92:20:8c:e1: e3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.12.0/22 IPv6: 2804:54a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268663 Signature Algorithm: sha256WithRSAEncryption 75:7b:48:37:b8:81:71:29:3a:41:52:33:59:18:94:af:cb:3f: 55:e3:17:79:61:77:d0:f1:98:68:7f:19:13:0f:91:25:2a:7f: 9b:a6:38:d5:51:81:f9:7d:6d:7d:e4:66:9f:23:a5:81:fe:1e: 1f:01:89:aa:77:09:5d:a7:ee:77:4c:4e:18:44:c6:1f:b3:3a: af:aa:72:e7:49:7d:72:ed:40:27:ea:e7:87:33:39:89:16:ba: 1c:7c:67:42:fd:44:bd:f8:cf:d5:1a:02:d0:8a:f8:57:ea:31: d0:d3:ea:6a:ce:d1:5e:a0:7b:d0:62:05:d7:55:39:5d:6a:7e: ab:fd:e1:c4:91:f1:5e:42:93:47:74:da:39:7e:ba:05:72:60: 5b:53:a4:93:a8:7c:46:a7:ae:53:50:96:14:aa:ea:a7:14:88: 47:21:4f:dc:c9:53:d0:06:3b:5b:6e:5d:6e:13:dd:1e:1e:e9: f0:d8:50:c7:2b:fe:85:64:73:37:2c:b6:ed:00:8c:53:42:7f: cf:e2:4d:54:e2:fa:2b:97:19:24:d6:3a:7e:6c:f8:0b:33:dd: f7:fb:ee:42:bd:53:84:fa:ec:70:57:58:72:ba:5c:1f:29:e5: d7:2a:0f:6e:e6:8d:68:85:12:e1:77:0a:28:25:42:16:c2:00: 9b:88:02:00 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUGO9MQFG2peU3YxOgly4ITR1NFrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjMxMzI3MjZaFw0yNTA5MjIxMzMyMjZaMDMxMTAvBgNV BAMTKDhDRTI0Q0VCNkIxNDAxN0EwMTRCMUNGRTgxQkRDOTlBQTcwN0IxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OqVMZwelPLW//+5LRr1rmGR1 G5+lirvZr8i8R3PJXQfsA3CrrV3VfiaFtNTl4+TksuEgX7Z28gXgLORcAxAq0Jvu Ur+fRpz8uFUeBuI/VDPLMHRKxf8gMB7qNq+Is7HHRt5bbSzWrdRh/OMmNh1wLq/r uS9ZnFEhw59c7qXhh78l06ct38ajc04M1aw88uwn8XYgBFac8b9lQu7+vmHBGdlu NjhyhFMQOpNUcop5Zd15Hrax81mVq0ydHTKS0dc/Nmy5jLpMq7m8/AOtfcJLdE5H LfdbjFBwXcfjF2y+iLk5UpZrG91cq8q3gSeDuG9flg3k7QeatPmQkiCM4eM9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM4kzraxQBegFL HP6BvcmapwexijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1Vh M1lDVkZrNXQ1TFVodDJVcEpQY2FoeG9rdEZoS1dHN0RSbURuNXk3QWovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NV YTNZQ1ZGazV0NUxVaHQyVXBKUGNhaHhva3RGaEtXRzdEUm1EbjV5N0FqLzAvOENF MjRDRUI2QjE0MDE3QTAxNEIxQ0ZFODFCREM5OUFBNzA3QjE4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaUMMA0EAgACMAcDBQAoBFSoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZdzANBgkqhkiG9w0BAQsFAAOCAQEAdXtIN7iBcSk6QVIz WRiUr8s/VeMXeWF30PGYaH8ZEw+RJSp/m6Y41VGB+X1tfeRmnyOlgf4eHwGJqncJ Xafud0xOGETGH7M6r6py50l9cu1AJ+rnhzM5iRa6HHxnQv1EvfjP1RoC0Ir4V+ox 0NPqas7RXqB70GIF11U5XWp+q/3hxJHxXkKTR3TaOX66BXJgW1Okk6h8RqeuU1CW FKrqpxSIRyFP3MlT0AY7W25dbhPdHh7p8NhQxyv+hWRzNyy27QCMU0J/z+JNVOL6 K5cZJNY6fmz4CzPd9/vuQr1ThPrscFdYcrpcHynl1yoPbuaNaIUS4XcKKCVCFsIA m4gCAA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:04 2024 by rpki-client on console.sobornost.net