$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.cer File: 9842039AC3B384E016FBCFF2C783844A2F64CE38.cer (raw, json) Hash identifier: BTFZsyqTnd5rVBD+SD6PuI3/kOMu+P00sqHZIlEPXpE= Subject key identifier: 98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 20436C5351D0732D919202C58E5F22F1E36A5E5C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.mft caRepository: rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 10:09:33 +0000 Certificate not after: Thu 03 Apr 2025 10:14:33 +0000 Subordinate resources: AS: 264987 IP: 170.84.12.0/22 IP: 181.191.56.0/22 IP: 2804:3104::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jul 2024 12:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:43:6c:53:51:d0:73:2d:91:92:02:c5:8e:5f:22:f1:e3:6a:5e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 10:09:33 2024 GMT Not After : Apr 3 10:14:33 2025 GMT Subject: CN=9842039AC3B384E016FBCFF2C783844A2F64CE38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:d2:31:e0:93:40:d6:87:2d:c4:e8:e1:fe: c4:1c:39:ce:d9:89:aa:03:3d:84:4a:de:5d:86:02: b9:a0:ee:00:77:16:1b:e6:47:c5:5c:db:a4:78:63: a5:9e:b7:bb:82:16:ff:d5:00:e7:ff:da:38:00:e5: c1:f2:88:fc:47:64:91:79:61:e0:3e:47:52:a6:2e: 93:2a:09:0d:44:77:ee:03:10:77:ce:3c:e5:e4:39: 2a:8b:42:de:d8:86:87:c6:2d:b5:1a:6a:02:1c:ac: 73:9e:c0:0f:77:07:51:a3:1b:f2:1e:7f:ac:d2:fc: b9:95:ca:ab:0a:b9:48:c3:0f:59:de:e5:07:b3:89: 9d:67:d4:35:56:f7:64:85:b7:fc:ef:01:cb:54:50: 46:07:f5:1b:de:e1:3a:4e:4c:9e:43:e9:c7:c0:5b: cc:84:fa:d0:e5:1e:60:29:6f:8a:dc:d7:db:57:58: ab:ed:20:e1:cd:3f:82:2b:4f:41:c1:d1:e3:55:36: a3:8f:8f:6c:14:20:21:7a:68:fc:44:f5:94:44:7d: 81:3c:6c:42:86:78:1f:83:de:58:3c:ca:e3:45:6a: 11:2c:fb:0a:b5:03:4b:60:d3:18:2d:58:18:7c:e0: 03:13:2f:aa:a5:1d:3d:19:e5:20:cf:44:11:36:83: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:42:03:9A:C3:B3:84:E0:16:FB:CF:F2:C7:83:84:4A:2F:64:CE:38 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/1/9842039AC3B384E016FBCFF2C783844A2F64CE38.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.12.0/22 181.191.56.0/22 IPv6: 2804:3104::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264987 Signature Algorithm: sha256WithRSAEncryption 21:12:5b:f4:66:81:a1:a7:d4:1e:3a:85:de:69:fb:e2:f5:34: 4c:c7:86:5b:dd:1c:08:0a:cf:90:e7:4b:2f:38:cb:24:62:4e: d6:56:04:92:82:36:0e:ce:0e:68:ee:dc:68:c8:8d:2e:56:d7: 3c:a5:d6:67:ab:73:ba:e6:0e:98:3f:73:5e:9a:cd:51:5a:bc: be:27:14:e8:92:32:47:ce:48:57:f1:ec:40:e7:28:e5:8e:51: eb:51:28:da:d7:5c:3c:0a:69:09:7a:d8:5d:be:cd:ad:94:34: d3:49:22:d0:d4:40:50:cf:fe:88:c5:4a:89:9f:7e:58:a7:8d: 18:50:b3:c1:78:a0:20:65:fc:fb:02:8b:98:99:7f:3b:15:42: 59:f8:ef:13:e8:d8:cc:7c:65:ac:29:1c:7a:d6:d2:cf:d3:74: 80:44:5c:85:62:83:38:0c:cb:7c:2b:04:da:ef:03:65:11:72: fd:18:8f:b9:0a:e3:58:46:86:3c:83:b6:49:0e:f3:8e:17:a9: d5:e9:6b:e2:3b:aa:7d:18:4f:a7:42:1e:02:44:3b:ba:e7:c4: dd:e9:c6:11:10:60:4e:95:23:8b:f5:6e:03:e8:c1:85:46:8f: a5:11:d3:8b:d5:d4:3f:51:92:95:7c:03:91:a0:c0:4e:12:19: b5:f8:f5:0b -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUIENsU1HQcy2RkgLFjl8i8eNqXlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMDA5MzNaFw0yNTA0MDMxMDE0MzNaMDMxMTAvBgNV BAMTKDk4NDIwMzlBQzNCMzg0RTAxNkZCQ0ZGMkM3ODM4NDRBMkY2NENFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0R9Ix4JNA1octxOjh/sQcOc7Z iaoDPYRK3l2GArmg7gB3FhvmR8Vc26R4Y6Wet7uCFv/VAOf/2jgA5cHyiPxHZJF5 YeA+R1KmLpMqCQ1Ed+4DEHfOPOXkOSqLQt7YhofGLbUaagIcrHOewA93B1GjG/Ie f6zS/LmVyqsKuUjDD1ne5QeziZ1n1DVW92SFt/zvActUUEYH9Rve4TpOTJ5D6cfA W8yE+tDlHmApb4rc19tXWKvtIOHNP4IrT0HB0eNVNqOPj2wUICF6aPxE9ZREfYE8 bEKGeB+D3lg8yuNFahEs+wq1A0tg0xgtWBh84AMTL6qlHT0Z5SDPRBE2g5YBAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYQgOaw7OE4Bb7 z/LHg4RKL2TOODAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0dp RlpYSmFiVzY0dGZmWm1QcXFQSnpvVXR3RXd6TWVyTFo4WnNIdWJLTHQvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dH aUZaWEphYlc2NHRmZlptUHFxUEp6b1V0d0V3ek1lckxaOFpzSHViS0x0LzEvOTg0 MjAzOUFDM0IzODRFMDE2RkJDRkYyQzc4Mzg0NEEyRjY0Q0UzOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqlQMAwQCtb84MA0EAgACMAcDBQAoBDEEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQLGzANBgkqhkiG9w0BAQsFAAOCAQEAIRJb9GaB oafUHjqF3mn74vU0TMeGW90cCArPkOdLLzjLJGJO1lYEkoI2Ds4OaO7caMiNLlbX PKXWZ6tzuuYOmD9zXprNUVq8vicU6JIyR85IV/HsQOco5Y5R61Eo2tdcPAppCXrY Xb7NrZQ000ki0NRAUM/+iMVKiZ9+WKeNGFCzwXigIGX8+wKLmJl/OxVCWfjvE+jY zHxlrCkcetbSz9N0gERchWKDOAzLfCsE2u8DZRFy/RiPuQrjWEaGPIO2SQ7zjhep 1elr4juqfRhPp0IeAkQ7uufE3enGERBgTpUji/VuA+jBhUaPpRHTi9XUP1GSlXwD kaDAThIZtfj1Cw== -----END CERTIFICATE-----Generated at Sun Jul 14 11:07:37 2024 by rpki-client on console.sobornost.net