$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer File: 8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer (raw, json) Hash identifier: 5UVk5EgbDZoUroL6RChy5Fn3tNLgq5f2mot75pbdW+Y= Subject key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5755060A4E3BEEACD4D875EF05702277DDFDDCC1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.mft caRepository: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 19 Aug 2024 18:23:48 +0000 Certificate not after: Mon 18 Aug 2025 18:28:48 +0000 Subordinate resources: AS: 271504 IP: 200.53.64.0/22 IP: 2804:7c90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:55:06:0a:4e:3b:ee:ac:d4:d8:75:ef:05:70:22:77:dd:fd:dc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 19 18:23:48 2024 GMT Not After : Aug 18 18:28:48 2025 GMT Subject: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:7f:5f:09:66:fa:f6:fe:7f:3a:2d:44:45: 21:fd:3e:11:e5:b8:35:62:a9:54:92:0b:e7:8d:91: 94:c4:d0:39:cf:39:07:79:6e:66:75:aa:b9:de:3d: d5:f9:72:bb:8d:ab:be:fc:e1:5f:01:1a:74:e3:b6: 94:1a:1f:a6:54:f3:c2:09:fc:2c:1e:3d:25:09:ca: e2:29:c2:84:12:ba:35:8f:93:49:06:a5:1f:a2:66: b3:50:94:73:71:44:fc:43:3f:03:cf:48:01:d9:b9: 3a:2a:75:eb:a0:8d:95:7b:61:ff:10:d4:50:a0:4a: 14:a9:bc:8f:38:71:c6:b6:49:a8:1c:e4:5b:68:24: b1:7c:ab:c0:ac:3f:55:2a:63:46:af:ce:05:cf:3f: d1:5d:b7:d5:72:f8:71:e6:19:55:aa:e4:15:f2:08: 08:43:cf:cc:57:ed:c3:a7:a0:cc:1f:bf:c0:16:87: af:63:14:03:0c:b1:33:8f:06:7b:6d:69:11:07:3b: de:28:bc:f8:0e:a4:ea:a0:35:be:31:a9:d5:4e:3d: 87:b9:94:2e:30:9a:85:89:d7:92:65:26:8b:0a:c9: 39:ae:94:cf:d9:e9:2c:8c:6b:d8:0f:8c:22:3e:7a: 55:eb:60:c4:73:ba:14:0c:e4:23:02:97:fe:cd:3c: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.53.64.0/22 IPv6: 2804:7c90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271504 Signature Algorithm: sha256WithRSAEncryption 29:f8:56:78:50:74:a2:1b:b2:eb:48:5c:07:53:86:3e:78:26: f2:b3:a2:6a:d7:85:b2:65:1e:bc:ea:67:cd:5a:8d:a0:08:35: 2c:1b:6e:87:6a:e0:5d:af:06:00:85:cd:25:38:ff:c1:ee:f5: ce:c8:cc:96:de:1b:1f:64:37:bb:dd:60:4a:28:6b:7d:c3:ad: 10:fb:f9:b8:f8:e2:6b:da:c8:40:07:0e:4c:15:c3:5b:94:5d: 04:15:fc:1a:17:de:1f:93:87:22:85:64:d7:05:4b:77:c7:ae: 8e:f6:d2:c0:67:fa:7c:42:b3:b3:08:7e:5a:ce:4d:8d:3a:0e: b7:c8:c3:02:07:4c:32:11:b8:96:27:c4:27:2c:33:b5:3d:80: fd:e5:bd:7b:2b:8c:8b:c2:08:87:2d:a1:78:dc:f0:c5:c3:88: c5:b2:dd:19:d3:a7:db:01:32:04:1d:5e:30:00:97:b4:63:42: 1f:4a:3c:c0:3f:ea:ce:dd:a1:9d:32:b0:d8:a6:20:f6:d1:27: f7:99:3c:99:cf:96:04:83:e3:a2:b0:4f:34:a8:ae:55:fb:55: d8:d9:e4:8e:d0:f3:96:17:ff:6f:c6:d1:35:1a:90:42:46:34: 32:dd:f1:35:75:4c:5d:61:91:a3:5a:2c:5a:07:f5:ce:00:ac: 8f:96:1a:8b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUV1UGCk477qzU2HXvBXAid9393MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MTkxODIzNDhaFw0yNTA4MTgxODI4NDhaMDMxMTAvBgNV BAMTKDhDRUVBRjAyNkQ1QUQ5MURENzFFMDlFNzdBRjdBOTBFREI1OTZBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKX9fCWb69v5/Oi1ERSH9PhHl uDViqVSSC+eNkZTE0DnPOQd5bmZ1qrnePdX5cruNq7784V8BGnTjtpQaH6ZU88IJ /CwePSUJyuIpwoQSujWPk0kGpR+iZrNQlHNxRPxDPwPPSAHZuToqdeugjZV7Yf8Q 1FCgShSpvI84cca2Sagc5FtoJLF8q8CsP1UqY0avzgXPP9Fdt9Vy+HHmGVWq5BXy CAhDz8xX7cOnoMwfv8AWh69jFAMMsTOPBnttaREHO94ovPgOpOqgNb4xqdVOPYe5 lC4wmoWJ15JlJosKyTmulM/Z6SyMa9gPjCI+elXrYMRzuhQM5CMCl/7NPOIjAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM7q8CbVrZHdce Ced696kO21lq+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFdQ Nnd6N3hyZXNzb1NCY2dYS3FtUW9BV0ZmMmZyOEs2aFNrZjFRR3ZMOXovMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFdQ Nnd6N3hyZXNzb1NCY2dYS3FtUW9BV0ZmMmZyOEs2aFNrZjFRR3ZMOXovMi84Q0VF QUYwMjZENUFEOTFERDcxRTA5RTc3QUY3QTkwRURCNTk2QUY5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALINUAwDQQCAAIwBwMFACgEfJAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCSQMA0GCSqGSIb3DQEBCwUAA4IBAQAp+FZ4UHSiG7LrSFwH U4Y+eCbys6Jq14WyZR686mfNWo2gCDUsG26HauBdrwYAhc0lOP/B7vXOyMyW3hsf ZDe73WBKKGt9w60Q+/m4+OJr2shABw5MFcNblF0EFfwaF94fk4cihWTXBUt3x66O 9tLAZ/p8QrOzCH5azk2NOg63yMMCB0wyEbiWJ8QnLDO1PYD95b17K4yLwgiHLaF4 3PDFw4jFst0Z06fbATIEHV4wAJe0Y0IfSjzAP+rO3aGdMrDYpiD20Sf3mTyZz5YE g+OisE80qK5V+1XY2eSO0POWF/9vxtE1GpBCRjQy3fE1dUxdYZGjWixaB/XOAKyP lhqL -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:04 2024 by rpki-client on console.sobornost.net