$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95D85AE78879E9C1F337A939AFF0652A7EF31796.cer File: 95D85AE78879E9C1F337A939AFF0652A7EF31796.cer (raw, json) Hash identifier: SI0DYtEVqu9QvEX2PLXYpcH6v35pKv6armrFS227M+8= Subject key identifier: 95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D08847E64E6D98D902AF618ED852F735A77370E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.mft caRepository: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 23 Jul 2024 19:18:03 +0000 Certificate not after: Tue 22 Jul 2025 19:23:03 +0000 Subordinate resources: AS: 266304 IP: 170.79.200.0/22 IP: 2804:35c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 06:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:08:84:7e:64:e6:d9:8d:90:2a:f6:18:ed:85:2f:73:5a:77:37:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 23 19:18:03 2024 GMT Not After : Jul 22 19:23:03 2025 GMT Subject: CN=95D85AE78879E9C1F337A939AFF0652A7EF31796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:b9:57:79:e0:a7:9a:2c:96:29:b0:f3:3f: 40:13:70:07:c0:91:d6:6d:68:cd:2d:76:c2:50:4f: ea:c5:5e:25:8d:f6:d2:83:64:49:a7:d8:a0:c5:e3: bc:5a:49:a2:8f:48:31:56:b3:5f:4f:86:74:22:e7: 5d:54:25:75:a1:f9:9e:57:7e:65:cf:87:43:c6:6b: 82:1a:9d:c0:95:ad:74:cd:3f:8f:62:da:36:60:07: 2c:a0:71:7c:90:6e:1b:79:2a:f6:e6:45:90:cb:89: 14:3f:5b:77:f7:84:98:6f:cf:fc:ac:9d:5f:52:b4: 59:14:b3:0d:b1:f5:85:9f:81:ee:13:30:10:3b:83: 7c:59:29:fb:8d:77:c6:d8:b1:44:9a:60:10:e2:40: 4c:ce:79:6d:40:fc:d1:d0:7b:99:19:69:39:5d:a4: a2:6c:82:75:a9:fd:0d:2a:ca:bb:6d:70:ec:b4:a2: 72:d2:66:17:c7:23:50:26:96:1c:09:aa:07:85:7d: 8a:69:7e:d0:27:63:f7:df:0b:34:0a:de:5d:a4:6d: 94:25:f2:34:42:a8:e6:2e:86:c5:2c:c0:12:16:e6: 3a:db:5f:9f:be:32:9a:a8:34:ad:a0:b4:b0:6e:86: bc:ef:2a:d2:5d:c8:bf:d9:89:e1:e7:b3:ae:c9:f8: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:D8:5A:E7:88:79:E9:C1:F3:37:A9:39:AF:F0:65:2A:7E:F3:17:96 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/95D85AE78879E9C1F337A939AFF0652A7EF31796.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.200.0/22 IPv6: 2804:35c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266304 Signature Algorithm: sha256WithRSAEncryption c0:f9:ce:29:a5:4a:78:ab:b8:ab:ad:dd:f6:6d:c6:a9:fc:f7: da:fd:00:27:f9:74:6a:14:36:e5:4b:11:be:9c:da:f8:13:07: 9c:bc:34:7e:f1:1f:e1:64:69:b0:d7:02:2c:ab:ee:87:73:a5: 9b:c7:1f:55:0f:3c:fe:1a:67:37:65:ce:61:a2:a7:4d:de:b0: 7c:99:7f:e3:5b:20:25:c5:c0:e1:1a:ff:50:77:63:7e:fa:7d: dd:5b:86:3e:72:31:b0:c3:72:51:6c:fc:8f:67:99:6b:82:e1: 5a:e5:cb:94:62:fb:3e:56:98:9f:56:73:47:f2:b6:e8:b8:e8: fd:a8:5a:cb:2a:19:2f:a6:30:65:08:bc:9a:9a:de:1e:b8:39: 91:53:05:22:f1:e5:48:f3:0a:d7:a6:5e:80:c3:45:80:eb:b6: fa:65:33:20:eb:ed:67:1b:b6:a5:55:81:43:29:0f:0b:cc:79: 28:9e:56:5a:d6:3c:be:4d:8b:dc:3c:4c:3d:8e:fe:1e:3c:8c: db:1e:42:b1:c9:ac:12:72:1b:72:10:32:7a:e8:75:f9:ef:4d: ef:56:66:c3:f4:68:93:30:b1:09:22:be:cd:9f:96:43:f3:9b: d7:d8:fd:89:cc:95:4c:18:75:fb:9f:45:93:98:17:32:27:fd: e6:43:05:5b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPQiEfmTm2Y2QKvYY7YUvc1p3Nw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjMxOTE4MDNaFw0yNTA3MjIxOTIzMDNaMDMxMTAvBgNV BAMTKDk1RDg1QUU3ODg3OUU5QzFGMzM3QTkzOUFGRjA2NTJBN0VGMzE3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TblXeeCnmiyWKbDzP0ATcAfA kdZtaM0tdsJQT+rFXiWN9tKDZEmn2KDF47xaSaKPSDFWs19PhnQi511UJXWh+Z5X fmXPh0PGa4IancCVrXTNP49i2jZgByygcXyQbht5KvbmRZDLiRQ/W3f3hJhvz/ys nV9StFkUsw2x9YWfge4TMBA7g3xZKfuNd8bYsUSaYBDiQEzOeW1A/NHQe5kZaTld pKJsgnWp/Q0qyrttcOy0onLSZhfHI1AmlhwJqgeFfYppftAnY/ffCzQK3l2kbZQl 8jRCqOYuhsUswBIW5jrbX5++MpqoNK2gtLBuhrzvKtJdyL/ZieHns67J+Dm/AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSV2FrniHnpwfM3 qTmv8GUqfvMXljAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMnRI aXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0 SGl1eHFvNm5id1p0cUNBcUt4MkRiVTc2dnJIV1VYMUJiWlBGNUU4amZCLzAvOTVE ODVBRTc4ODc5RTlDMUYzMzdBOTM5QUZGMDY1MkE3RUYzMTc5Ni5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqk/IMA0EAgACMAcDBQAoBDXAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQQDANBgkqhkiG9w0BAQsFAAOCAQEAwPnOKaVKeKu4q63d 9m3Gqfz32v0AJ/l0ahQ25UsRvpza+BMHnLw0fvEf4WRpsNcCLKvuh3Olm8cfVQ88 /hpnN2XOYaKnTd6wfJl/41sgJcXA4Rr/UHdjfvp93VuGPnIxsMNyUWz8j2eZa4Lh WuXLlGL7PlaYn1ZzR/K26Ljo/ahayyoZL6YwZQi8mpreHrg5kVMFIvHlSPMK16Ze gMNFgOu2+mUzIOvtZxu2pVWBQykPC8x5KJ5WWtY8vk2L3DxMPY7+HjyM2x5Cscms EnIbchAyeuh1+e9N71Zmw/RokzCxCSK+zZ+WQ/Ob19j9icyVTBh1+59Fk5gXMif9 5kMFWw== -----END CERTIFICATE-----Generated at Mon Oct 21 04:27:14 2024 by rpki-client on console.sobornost.net