$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/905E0ACD3548A57B3861824FB67B35DA2DD0B922.cer File: 905E0ACD3548A57B3861824FB67B35DA2DD0B922.cer (raw, json) Hash identifier: AQNzgIKMELODflQDZCQGra/UUbZYSuZbm0P3clIvfOY= Subject key identifier: 90:5E:0A:CD:35:48:A5:7B:38:61:82:4F:B6:7B:35:DA:2D:D0:B9:22 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 719FC82B46835413A860E2CB06C78BA536A1F01B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/905E0ACD3548A57B3861824FB67B35DA2DD0B922.mft caRepository: rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 29 Jul 2024 13:06:16 +0000 Certificate not after: Mon 28 Jul 2025 13:11:16 +0000 Subordinate resources: AS: 268721 IP: 45.171.152.0/22 IP: 2804:59b8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9f:c8:2b:46:83:54:13:a8:60:e2:cb:06:c7:8b:a5:36:a1:f0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 29 13:06:16 2024 GMT Not After : Jul 28 13:11:16 2025 GMT Subject: CN=905E0ACD3548A57B3861824FB67B35DA2DD0B922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:80:50:e6:bd:87:11:af:ae:15:dc:25:5c: 55:ea:b5:56:3d:f6:54:cc:af:ce:fc:a6:78:9b:dd: 60:3f:b2:ce:f0:c9:ef:63:da:7a:40:d7:89:4f:17: 7a:39:f2:29:76:4d:c5:e2:9f:de:1d:d0:96:8b:74: 70:51:1b:e0:30:0c:c9:f6:8b:29:23:0d:4e:b6:c2: 58:a5:ba:34:0e:fb:99:cf:0f:0f:f5:2e:08:b9:c2: 24:35:4f:70:8e:58:63:1b:c0:fa:bb:9a:b9:51:0a: 6f:47:89:ef:6f:cf:49:5b:c7:55:fe:70:35:64:82: 3a:05:20:e6:52:fe:38:eb:58:63:a8:8c:8f:8c:f7: c4:89:b7:f8:ef:28:a1:fb:a7:57:47:81:c5:b2:ef: 1a:e6:be:9f:8c:e1:17:67:92:19:a6:fb:bb:39:c0: 06:a8:fe:c0:d0:56:7f:8c:91:e2:34:d4:dd:53:39: 11:78:f9:85:5b:1f:a1:37:97:00:da:34:5a:88:3d: f5:9e:76:2a:22:5e:e6:b5:1d:f9:65:e4:ca:77:6e: 8b:c8:e2:ac:8b:8a:90:89:9d:f9:45:13:53:bd:33: ba:5e:ab:30:e0:c1:e2:60:ca:d5:ee:17:e1:3a:1e: 9c:78:dc:7f:1b:ab:ab:c9:31:f6:c0:a5:b0:ab:04: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:5E:0A:CD:35:48:A5:7B:38:61:82:4F:B6:7B:35:DA:2D:D0:B9:22 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5pBgSzxuyJDZKsDxiWfTbNDKzJQLXbTq5gQ73UZ3gMs/0/905E0ACD3548A57B3861824FB67B35DA2DD0B922.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.152.0/22 IPv6: 2804:59b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268721 Signature Algorithm: sha256WithRSAEncryption c7:da:be:28:06:14:7e:fd:bc:92:25:fe:29:60:60:ef:8a:f0: 20:6d:e3:2a:ea:41:24:91:65:d0:c8:64:49:84:ea:ba:86:69: 87:ea:0d:8a:75:84:bf:e7:6f:b0:79:8e:63:1e:1e:50:e2:8b: a7:ca:22:20:1f:f9:02:75:27:68:e5:a3:60:40:9a:23:a1:1d: da:ad:a6:3f:d5:24:a7:19:80:38:50:bb:7b:c8:2a:82:7b:89: 6f:a0:59:1c:3d:3a:2b:6a:07:b5:4f:32:54:34:ad:0e:5a:5a: 70:e7:50:b2:6f:fc:15:23:ad:e1:79:43:9b:8d:0b:0f:81:f9: ef:0d:20:00:e7:3d:cc:d1:e3:3e:95:13:cf:d4:ed:2c:c9:d0: b4:16:f2:87:0e:9b:03:38:70:58:2c:44:14:a4:a5:ad:34:65: da:9e:27:bd:48:e6:fa:06:46:52:ab:5e:28:c4:6e:10:54:e3: 6a:7d:52:e0:b9:7b:40:a4:81:f1:41:32:4b:e4:5d:40:f3:b1: 2b:63:46:b3:da:ca:41:d0:5f:c6:48:05:a5:1d:c6:32:fa:78: 22:c9:29:8f:dc:05:20:7b:65:90:8c:3f:d3:8c:e9:23:3b:46: ca:84:b4:17:3a:34:56:73:db:5f:91:23:90:c7:96:3c:8f:ab: df:c9:b8:ce -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcZ/IK0aDVBOoYOLLBseLpTah8BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjkxMzA2MTZaFw0yNTA3MjgxMzExMTZaMDMxMTAvBgNV BAMTKDkwNUUwQUNEMzU0OEE1N0IzODYxODI0RkI2N0IzNURBMkREMEI5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAYBQ5r2HEa+uFdwlXFXqtVY9 9lTMr878pnib3WA/ss7wye9j2npA14lPF3o58il2TcXin94d0JaLdHBRG+AwDMn2 iykjDU62wlilujQO+5nPDw/1Lgi5wiQ1T3COWGMbwPq7mrlRCm9Hie9vz0lbx1X+ cDVkgjoFIOZS/jjrWGOojI+M98SJt/jvKKH7p1dHgcWy7xrmvp+M4Rdnkhmm+7s5 wAao/sDQVn+MkeI01N1TORF4+YVbH6E3lwDaNFqIPfWedioiXua1Hfll5Mp3bovI 4qyLipCJnflFE1O9M7peqzDgweJgytXuF+E6Hpx43H8bq6vJMfbApbCrBGoRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSQXgrNNUilezhh gk+2ezXaLdC5IjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDVw QmdTenh1eUpEWktzRHhpV2ZUYk5ES3pKUUxYYlRxNWdRNzNVWjNnTXMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g1 cEJnU3p4dXlKRFpLc0R4aVdmVGJOREt6SlFMWGJUcTVnUTczVVozZ01zLzAvOTA1 RTBBQ0QzNTQ4QTU3QjM4NjE4MjRGQjY3QjM1REEyREQwQjkyMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLauYMA0EAgACMAcDBQAoBFm4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZsTANBgkqhkiG9w0BAQsFAAOCAQEAx9q+KAYUfv28kiX+ KWBg74rwIG3jKupBJJFl0MhkSYTquoZph+oNinWEv+dvsHmOYx4eUOKLp8oiIB/5 AnUnaOWjYECaI6Ed2q2mP9UkpxmAOFC7e8gqgnuJb6BZHD06K2oHtU8yVDStDlpa cOdQsm/8FSOt4XlDm40LD4H57w0gAOc9zNHjPpUTz9TtLMnQtBbyhw6bAzhwWCxE FKSlrTRl2p4nvUjm+gZGUqteKMRuEFTjan1S4Ll7QKSB8UEyS+RdQPOxK2NGs9rK QdBfxkgFpR3GMvp4Iskpj9wFIHtlkIw/04zpIztGyoS0Fzo0VnPbX5EjkMeWPI+r 38m4zg== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:05 2024 by rpki-client on console.sobornost.net