$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer File: 8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer (raw, json) Hash identifier: 03ha5ECIthBJObJwURYw9h90iMRbiFeUo3nRkf7wUZI= Subject key identifier: 8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 164CA7D9D35BEB867D4E1B0F483DC02682CB5773 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft caRepository: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 25 Jul 2024 19:10:12 +0000 Certificate not after: Thu 24 Jul 2025 19:15:12 +0000 Subordinate resources: AS: 264880 IP: 168.227.56.0/22 IP: 170.246.184.0/22 IP: 2804:2f40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:a7:d9:d3:5b:eb:86:7d:4e:1b:0f:48:3d:c0:26:82:cb:57:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 25 19:10:12 2024 GMT Not After : Jul 24 19:15:12 2025 GMT Subject: CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:9d:56:7a:a5:50:66:43:cb:97:dd:23:0f: 5a:f3:de:67:8d:fc:66:08:7f:8c:09:e5:87:8f:5c: a8:b1:56:f1:9e:31:e4:ac:7e:7b:c9:7c:43:0f:aa: aa:98:5b:41:08:26:1c:18:7d:1d:fc:fb:44:19:68: ce:fa:60:db:37:ad:7c:de:80:ab:60:79:72:5f:9b: 05:d2:87:8a:d2:f2:34:77:e0:00:a0:98:0e:c1:1d: 7e:8f:cf:ae:5c:72:ad:2c:33:6a:f3:f3:41:b6:fd: 3e:88:2e:64:b0:c4:0b:83:ce:ca:26:53:c4:6b:c7: 6c:bb:2e:1e:d5:2c:73:6d:29:8b:e7:c1:0c:13:d3: 93:0a:7e:fd:04:29:f5:a8:45:ee:60:71:19:fb:90: 73:c2:d2:01:03:55:b6:58:7b:ef:82:85:3a:80:75: 68:55:41:98:54:49:f4:b2:1e:8f:98:39:5f:b2:71: 60:84:69:75:7d:66:a7:f2:bd:3d:b4:89:79:bb:79: 96:64:9f:b4:30:3b:b8:3f:4d:58:9a:b1:2d:3c:a0: 53:06:d4:5e:69:46:57:08:82:dc:8f:41:8e:c7:87: f1:fa:b1:66:0d:35:80:ea:4a:1a:13:82:6f:d3:63: 49:c7:2e:c0:37:15:3e:db:7b:fd:05:77:46:e2:85: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.56.0/22 170.246.184.0/22 IPv6: 2804:2f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264880 Signature Algorithm: sha256WithRSAEncryption 6f:33:f3:f6:71:f7:21:b0:2e:c7:87:4d:62:f7:36:ea:35:41: 6e:8c:59:02:bf:36:30:36:89:7e:64:c7:45:7e:9d:31:18:78: 1c:e2:e8:31:28:b8:40:d9:40:73:10:fd:a1:75:d2:b1:f9:4a: 80:d5:d6:04:75:0b:75:8e:0c:33:ae:d6:8f:a6:b5:84:90:2c: e3:88:b5:74:e1:88:15:32:fa:7d:78:63:c2:db:9b:3b:31:8c: e3:7d:60:f0:ee:f3:14:91:0b:fd:07:71:25:c1:91:9d:46:97: af:2c:11:27:49:e7:28:20:e6:61:ee:06:bb:a9:92:b9:77:20: 16:41:9f:96:86:80:4e:b2:35:be:1f:2b:c6:40:c8:a8:f7:45: b5:46:26:fc:5d:80:a4:3d:d5:e9:ec:b4:ee:1a:da:83:5b:01: c7:93:e9:be:0d:9b:bf:c9:f3:54:95:7e:3f:83:7e:e9:03:f0: 9b:0d:45:b8:d3:bf:43:2f:81:91:b3:15:30:18:34:cd:b9:0c: 1d:78:e2:3b:a6:85:fc:23:9f:80:7d:f0:1c:ea:d5:40:ab:78: 75:29:57:2d:65:87:df:31:4a:be:7a:cf:74:15:80:24:05:13: 00:f2:05:d4:9d:70:fa:ec:42:19:cc:5f:84:16:57:ba:58:20: 0f:fc:99:a1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFkyn2dNb64Z9ThsPSD3AJoLLV3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjUxOTEwMTJaFw0yNTA3MjQxOTE1MTJaMDMxMTAvBgNV BAMTKDhEODNCODE3RkNDMUY0NjM0QUY1NjQyQzIyQUQ3RkM5RjYyQUQ1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Jp1WeqVQZkPLl90jD1rz3meN /GYIf4wJ5YePXKixVvGeMeSsfnvJfEMPqqqYW0EIJhwYfR38+0QZaM76YNs3rXze gKtgeXJfmwXSh4rS8jR34ACgmA7BHX6Pz65ccq0sM2rz80G2/T6ILmSwxAuDzsom U8Rrx2y7Lh7VLHNtKYvnwQwT05MKfv0EKfWoRe5gcRn7kHPC0gEDVbZYe++ChTqA dWhVQZhUSfSyHo+YOV+ycWCEaXV9ZqfyvT20iXm7eZZkn7QwO7g/TViasS08oFMG 1F5pRlcIgtyPQY7Hh/H6sWYNNYDqShoTgm/TY0nHLsA3FT7be/0Fd0biheG9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNg7gX/MH0Y0r1 ZCwirX/J9irVlzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0Fz M0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNB czNCZDVvb3NGdE5oUXREdHhUd1h6dGt3UEFoY0UxSmZxOXJTQjdidUNoLzAvOEQ4 M0I4MTdGQ0MxRjQ2MzRBRjU2NDJDMjJBRDdGQzlGNjJBRDU5Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqOM4AwQCqva4MA0EAgACMAcDBQAoBC9AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQKsDANBgkqhkiG9w0BAQsFAAOCAQEAbzPz9nH3 IbAux4dNYvc26jVBboxZAr82MDaJfmTHRX6dMRh4HOLoMSi4QNlAcxD9oXXSsflK gNXWBHULdY4MM67Wj6a1hJAs44i1dOGIFTL6fXhjwtubOzGM431g8O7zFJEL/Qdx JcGRnUaXrywRJ0nnKCDmYe4Gu6mSuXcgFkGfloaATrI1vh8rxkDIqPdFtUYm/F2A pD3V6ey07hrag1sBx5Ppvg2bv8nzVJV+P4N+6QPwmw1FuNO/Qy+BkbMVMBg0zbkM HXjiO6aF/COfgH3wHOrVQKt4dSlXLWWH3zFKvnrPdBWAJAUTAPIF1J1w+uxCGcxf hBZXulggD/yZoQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:04 2024 by rpki-client on console.sobornost.net