$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer File: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer (raw, json) Hash identifier: 5mS5Tl9FFNmbkOaIbMkDM72ajdJBGFPIFskPAzum68E= Subject key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2385C1A7F036306A3405A34045D40DABBD56E032 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft caRepository: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Oct 2024 13:14:21 +0000 Certificate not after: Mon 13 Oct 2025 13:19:21 +0000 Subordinate resources: AS: 265282 IP: 168.90.208.0/22 IP: 2804:2d70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:85:c1:a7:f0:36:30:6a:34:05:a3:40:45:d4:0d:ab:bd:56:e0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 14 13:14:21 2024 GMT Not After : Oct 13 13:19:21 2025 GMT Subject: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:60:6f:a8:d6:e0:da:dd:b0:6b:70:9a:05: 9a:a7:81:df:7b:5d:95:65:d6:9e:b5:26:74:e7:66: c8:91:33:74:80:bb:11:3f:c4:5c:48:46:ec:a7:5d: 6a:58:2f:d6:de:b4:da:f5:11:e5:52:9a:81:9a:b1: 66:9c:d1:29:b7:01:f8:99:d9:e1:74:df:9f:1c:03: 10:1b:ec:ce:2e:c4:fc:1c:5b:eb:60:54:3e:a3:0b: df:60:76:2d:fc:84:a3:43:97:73:ff:4a:6f:1c:62: 06:f2:0b:a1:b3:21:85:6e:1f:a1:ad:12:a7:fa:58: 6c:05:95:73:d3:9f:91:e5:0d:5d:06:f0:d9:30:fc: 4c:68:62:9e:83:d6:39:a2:7d:1e:28:a4:bb:cb:ca: 00:ee:90:b2:c1:bf:be:0b:89:3b:cb:8f:c5:82:b1: 4e:48:b1:a6:0f:20:d0:d0:03:ac:d6:4c:2b:c8:31: a1:6d:1d:a4:72:77:a2:65:40:79:55:da:d3:a3:bf: c3:e2:ab:62:46:2d:69:c8:73:75:e5:15:28:3e:d3: f6:03:bf:b7:18:d8:2e:b5:67:e6:8c:af:92:b4:1f: c9:a0:ac:70:4e:f2:e5:16:28:ee:95:95:3e:18:96: e3:39:a7:6f:66:f5:20:4d:f6:91:c0:5b:53:53:27: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.208.0/22 IPv6: 2804:2d70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265282 Signature Algorithm: sha256WithRSAEncryption da:bf:53:8d:35:4e:59:bf:39:16:de:f9:af:4c:05:bf:1d:66: 88:4c:cf:c5:63:92:22:ed:63:34:3b:a6:66:d9:42:fc:eb:54: 01:fc:47:0c:a5:2a:6a:fc:f0:0c:69:c3:ca:a2:2d:c6:0f:8f: 8c:46:ed:b5:92:18:82:4e:eb:1b:c3:b0:8c:3b:42:52:5b:f4: db:fc:39:52:64:08:1d:27:f5:09:0c:cf:98:ed:5b:00:96:c6: ec:ba:ba:87:f3:52:03:4b:56:a3:7e:ad:7e:4d:eb:da:a2:65: 9a:57:5f:d7:9e:e3:d4:10:e6:e6:95:79:c5:a0:5a:c8:0f:25: 19:6d:cd:d1:7d:d7:e7:65:f3:5d:29:e2:06:e6:b1:14:83:bb: 97:f8:df:54:72:76:77:7a:86:4e:58:62:6f:83:5e:1e:b3:8a: 78:0a:9d:df:c1:de:99:81:b2:82:bd:72:fd:c8:25:50:d6:50: d2:6a:d8:c5:92:cf:29:2f:be:77:aa:78:b3:f5:48:76:d3:45: 18:15:f8:aa:17:24:1e:a4:06:e9:8e:fa:ba:15:28:0c:ce:24: 66:f0:8d:37:71:6c:65:01:4e:65:ed:eb:a2:23:1e:7c:23:e5: b6:6a:d5:5e:e5:55:2d:83:f6:7a:8d:34:f2:33:04:c8:a1:c1: 29:33:1f:42 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUI4XBp/A2MGo0BaNARdQNq71W4DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMTQxMzE0MjFaFw0yNTEwMTMxMzE5MjFaMDMxMTAvBgNV BAMTKDlDQjZENUVDNTMwMEQxQTM2RkY4OTNDNjBGMzkwRDY0QkYwMEYxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKamBvqNbg2t2wa3CaBZqngd97 XZVl1p61JnTnZsiRM3SAuxE/xFxIRuynXWpYL9betNr1EeVSmoGasWac0Sm3AfiZ 2eF0358cAxAb7M4uxPwcW+tgVD6jC99gdi38hKNDl3P/Sm8cYgbyC6GzIYVuH6Gt Eqf6WGwFlXPTn5HlDV0G8Nkw/ExoYp6D1jmifR4opLvLygDukLLBv74LiTvLj8WC sU5IsaYPINDQA6zWTCvIMaFtHaRyd6JlQHlV2tOjv8Piq2JGLWnIc3XlFSg+0/YD v7cY2C61Z+aMr5K0H8mgrHBO8uUWKO6VlT4YluM5p29m9SBN9pHAW1NTJ/xrAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBScttXsUwDRo2/4 k8YPOQ1kvwDx7DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHZ4 ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRFTk4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h2 eGYzZUo1eDJDTHhrMk5GYVVGYVJ4aEdtV3hSMUdvM3RXWXR0RDhkRU5OLzAvOUNC NkQ1RUM1MzAwRDFBMzZGRjg5M0M2MEYzOTBENjRCRjAwRjFFQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqFrQMA0EAgACMAcDBQAoBC1wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMQjANBgkqhkiG9w0BAQsFAAOCAQEA2r9TjTVOWb85Ft75 r0wFvx1miEzPxWOSIu1jNDumZtlC/OtUAfxHDKUqavzwDGnDyqItxg+PjEbttZIY gk7rG8OwjDtCUlv02/w5UmQIHSf1CQzPmO1bAJbG7Lq6h/NSA0tWo36tfk3r2qJl mldf157j1BDm5pV5xaBayA8lGW3N0X3X52XzXSniBuaxFIO7l/jfVHJ2d3qGTlhi b4NeHrOKeAqd38HemYGygr1y/cglUNZQ0mrYxZLPKS++d6p4s/VIdtNFGBX4qhck HqQG6Y76uhUoDM4kZvCNN3FsZQFOZe3roiMefCPltmrVXuVVLYP2eo008jMEyKHB KTMfQg== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:07 2024 by rpki-client on console.sobornost.net