$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer File: 9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer (raw, json) Hash identifier: Xt7MjUitUdQO9hUSV4lNsmkh3RcJJWgERyy+ZwUe6Hs= Subject key identifier: 9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0CE0F61E0EB8DDD523CAAFCC8C3B55E256356D53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft caRepository: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:27:20 +0000 Certificate not after: Thu 03 Apr 2025 07:32:20 +0000 Subordinate resources: AS: 269372 IP: 45.185.96.0/22 IP: 2804:639c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e0:f6:1e:0e:b8:dd:d5:23:ca:af:cc:8c:3b:55:e2:56:35:6d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:27:20 2024 GMT Not After : Apr 3 07:32:20 2025 GMT Subject: CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:11:48:68:14:3e:00:40:e7:a9:1f:6d:48: 1e:05:e9:5e:2d:2c:6b:f3:59:79:73:a9:39:13:ab: a2:0a:be:8d:ed:5b:ce:58:bd:50:cb:4b:fc:a8:ee: 5f:94:92:9e:b1:67:b3:a8:e4:50:c9:45:0b:79:b1: 4a:2a:09:6b:12:fe:92:69:33:89:f4:bd:3b:00:b3: 12:06:51:d5:f2:ac:7a:21:13:8e:bc:17:31:fd:81: ba:0c:50:2a:2f:bb:a6:7d:94:6c:6b:b9:ad:87:02: 7a:9d:e7:49:b3:5e:74:5e:b8:73:ac:af:f1:23:b0: 5e:8f:88:0d:9f:d0:14:c4:04:19:80:39:47:40:b2: 8d:ab:2f:5e:20:a3:c8:4e:8e:85:ff:8c:03:fe:8e: f4:e1:33:89:9c:33:0a:e5:d7:3e:ad:b2:bb:be:a9: 98:9c:31:77:98:4a:53:36:fc:f9:95:44:a4:43:99: 2c:5c:69:0f:25:5f:f8:32:ce:40:56:e7:ed:86:e9: 77:b0:21:2d:90:97:d4:6e:c8:85:21:77:b5:23:2a: 08:dd:a2:0a:ac:20:c9:8a:76:e1:bc:f4:bf:a1:7e: a6:61:2e:44:de:39:ac:df:f3:8b:ce:a4:a5:87:15: c6:37:97:4b:1d:fe:d4:b7:89:14:87:df:e5:b3:7f: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.185.96.0/22 IPv6: 2804:639c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269372 Signature Algorithm: sha256WithRSAEncryption 82:b3:ca:80:36:9c:1d:39:c8:82:8a:67:f2:0d:9f:c4:74:f9: 40:bb:78:a2:1d:bf:1b:96:0e:ac:bc:e1:3c:70:be:53:1b:8a: 5f:36:da:0e:49:69:5e:93:62:61:8f:c7:e2:7f:39:23:1d:ec: 88:8f:03:b0:5b:27:7b:e6:1a:52:be:ce:c5:04:b4:34:ed:46: 06:ca:b4:8d:99:73:30:b4:5c:41:ce:66:52:db:77:db:6c:bb: 09:53:2e:5d:5f:62:45:b4:91:85:fa:13:3f:0c:c2:18:6e:3d: 9b:0b:c2:e3:0c:b7:b6:b8:ca:46:92:61:14:79:e2:73:48:c9: b8:a6:58:36:ea:74:25:ff:45:7f:dc:1e:3e:95:f0:60:ff:2f: 14:39:db:4d:a0:1b:e4:a1:dd:d6:e2:7f:f2:24:cb:bf:af:08: 6a:9b:1d:d2:b2:1c:7e:25:03:0d:2c:61:f9:73:cb:97:85:ae: 59:1a:61:87:c3:0a:b1:7c:ed:05:6d:7e:ce:71:3a:81:05:f5: 5a:4e:48:80:2c:b1:cd:40:b2:76:84:c7:e2:35:a8:36:32:95: 51:53:f8:ab:bb:4e:0b:44:7f:1c:37:54:43:02:32:75:fe:65: 80:8a:d5:34:58:0c:ba:87:c5:47:01:19:2d:57:29:91:1d:de: 0d:41:3c:72 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDOD2Hg643dUjyq/MjDtV4lY1bVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzI3MjBaFw0yNTA0MDMwNzMyMjBaMDMxMTAvBgNV BAMTKDlCQzQ0M0EwQjRBRjZGMjY2MEY5RTRCMjJGQkU2QkZERjRFRUU3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpkRFIaBQ+AEDnqR9tSB4F6V4t LGvzWXlzqTkTq6IKvo3tW85YvVDLS/yo7l+Ukp6xZ7Oo5FDJRQt5sUoqCWsS/pJp M4n0vTsAsxIGUdXyrHohE468FzH9gboMUCovu6Z9lGxrua2HAnqd50mzXnReuHOs r/EjsF6PiA2f0BTEBBmAOUdAso2rL14go8hOjoX/jAP+jvThM4mcMwrl1z6tsru+ qZicMXeYSlM2/PmVRKRDmSxcaQ8lX/gyzkBW5+2G6XewIS2Ql9RuyIUhd7UjKgjd ogqsIMmKduG89L+hfqZhLkTeOazf84vOpKWHFcY3l0sd/tS3iRSH3+Wzf6xVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSbxEOgtK9vJmD5 5LIvvmv99O7nzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG43 OGNUN3d4emNCOTdLZGo4Qm5YN2Y0UVZxdlQ2ZVVwdEhiRnc5bndvclkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ru NzhjVDd3eHpjQjk3S2RqOEJuWDdmNFFWcXZUNmVVcHRIYkZ3OW53b3JZLzEvOUJD NDQzQTBCNEFGNkYyNjYwRjlFNEIyMkZCRTZCRkRGNEVFRTdDQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLblgMA0EAgACMAcDBQAoBGOcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQcPDANBgkqhkiG9w0BAQsFAAOCAQEAgrPKgDacHTnIgopn 8g2fxHT5QLt4oh2/G5YOrLzhPHC+UxuKXzbaDklpXpNiYY/H4n85Ix3siI8DsFsn e+YaUr7OxQS0NO1GBsq0jZlzMLRcQc5mUtt322y7CVMuXV9iRbSRhfoTPwzCGG49 mwvC4wy3trjKRpJhFHnic0jJuKZYNup0Jf9Ff9wePpXwYP8vFDnbTaAb5KHd1uJ/ 8iTLv68Iapsd0rIcfiUDDSxh+XPLl4WuWRphh8MKsXztBW1+znE6gQX1Wk5IgCyx zUCydoTH4jWoNjKVUVP4q7tOC0R/HDdUQwIydf5lgIrVNFgMuofFRwEZLVcpkR3e DUE8cg== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:07 2024 by rpki-client on console.sobornost.net