$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer File: 9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer (raw, json) Hash identifier: 5iL6FFx6VPLSp+fkHkOIiMmAVvcYU9+VkZd+qZbyrs0= Subject key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 37F613726D871061925AA92EBD056C1B0F40F528 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft caRepository: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 26 Aug 2024 23:55:46 +0000 Certificate not after: Tue 26 Aug 2025 00:00:46 +0000 Subordinate resources: AS: 265240 IP: 168.0.0.0 -- 168.0.2.255 IP: 2804:2cbc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f6:13:72:6d:87:10:61:92:5a:a9:2e:bd:05:6c:1b:0f:40:f5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 26 23:55:46 2024 GMT Not After : Aug 26 00:00:46 2025 GMT Subject: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:d3:55:7b:c0:19:ee:45:8a:b5:91:29:82: f9:f0:08:93:9a:01:4c:09:d7:fa:ef:19:67:3f:53: 0a:05:50:13:d4:0e:a0:a5:9c:be:e9:23:1b:2a:f9: 4d:15:f6:72:c1:f9:ef:f9:7c:dc:50:f8:98:07:77: 43:6a:45:71:2d:b0:3b:32:96:6a:68:f9:e6:13:e5: 69:0a:f4:3c:a7:da:cb:23:fd:d3:91:87:00:8c:bf: 07:d6:57:62:1a:8b:9e:c7:c7:16:66:f0:d2:12:c6: ff:5a:45:b7:e0:9d:dc:41:0c:e6:61:8e:15:1d:e7: ee:3c:1b:ec:a8:37:a5:7c:23:ef:bc:8c:51:40:1a: 75:af:01:f3:7d:8b:53:a0:1e:07:83:fa:03:c5:44: e2:b9:da:de:46:df:0e:87:9e:b6:bf:a5:77:4a:74: 9b:b0:b2:0e:c6:3b:42:46:67:88:19:5b:8d:f3:55: 97:2e:ae:d1:60:f9:cf:d1:fc:ee:a3:59:05:b7:43: 7a:87:b1:0b:57:a0:ae:d5:c4:ea:94:a7:3a:3e:83: 06:da:0c:01:6d:06:73:b4:f3:ed:13:83:91:c9:29: d9:0b:2a:6e:03:2a:b3:dd:77:dc:fb:bd:c0:71:3d: 7f:42:42:2a:d9:b8:fc:65:b4:e0:dd:d6:db:34:99: 55:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.0.0-168.0.2.255 IPv6: 2804:2cbc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265240 Signature Algorithm: sha256WithRSAEncryption d9:82:4d:64:71:66:8c:da:e5:76:17:c2:57:91:dd:fd:d5:a8: e0:21:b2:e0:67:d3:d6:b6:80:06:d2:ec:1a:c8:76:f5:df:81: c6:a5:d9:69:24:21:5a:3f:f2:7c:4f:42:cd:ee:6a:b9:af:78: ee:0c:9e:77:36:22:be:b7:6a:f4:a4:c7:81:44:2e:ae:80:cf: 12:6d:cb:e7:d4:f9:f1:a7:e9:1c:a6:10:62:79:15:71:f6:87: 0f:29:e5:59:ab:1f:d0:57:07:c0:37:50:58:ad:dd:39:24:d1: 42:d1:d9:4e:06:f1:5c:75:8f:73:20:37:d2:fc:3e:f8:4c:aa: 02:3e:24:df:28:40:1e:8b:11:0c:06:42:23:2d:67:30:ad:a0: f5:0a:c1:c4:8e:6e:5c:2e:0a:2f:fc:c6:59:58:cd:8f:f0:b1: de:84:13:d4:69:14:39:fb:dc:89:54:f4:bf:78:c3:ab:e9:f9: e3:2e:9c:f2:0f:f2:fd:bc:e6:cd:ad:b2:b4:a6:42:69:e6:5b: 86:05:80:5a:bd:a4:ee:20:ab:72:9e:34:aa:88:b2:a4:fe:ed: 21:15:c4:d1:2b:2c:0c:35:a3:8b:81:93:3e:29:7b:af:c7:d5: 25:96:23:30:e5:f4:4d:14:f5:05:d9:7f:d7:29:0f:b0:92:15: f9:b8:11:7b -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUN/YTcm2HEGGSWqkuvQVsGw9A9SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjYyMzU1NDZaFw0yNTA4MjYwMDAwNDZaMDMxMTAvBgNV BAMTKDlDQ0VGNDAzQzdBMUEyNTE5MTdFQjZEOUIwQTcxMjM4Qjc4NEEyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Q9NVe8AZ7kWKtZEpgvnwCJOa AUwJ1/rvGWc/UwoFUBPUDqClnL7pIxsq+U0V9nLB+e/5fNxQ+JgHd0NqRXEtsDsy lmpo+eYT5WkK9Dyn2ssj/dORhwCMvwfWV2Iai57HxxZm8NISxv9aRbfgndxBDOZh jhUd5+48G+yoN6V8I++8jFFAGnWvAfN9i1OgHgeD+gPFROK52t5G3w6Hnra/pXdK dJuwsg7GO0JGZ4gZW43zVZcurtFg+c/R/O6jWQW3Q3qHsQtXoK7VxOqUpzo+gwba DAFtBnO08+0Tg5HJKdkLKm4DKrPdd9z7vcBxPX9CQirZuPxltODd1ts0mVUvAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSczvQDx6GiUZF+ ttmwpxI4t4SifTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXRG bUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJSYlUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXRG bUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJSYlUvMS85Q0NF RjQwM0M3QTFBMjUxOTE3RUI2RDlCMEE3MTIzOEI3ODRBMjdELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwwCgMCA6gDBACoAAIwDQQCAAIwBwMFACgELLwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAwYMA0GCSqGSIb3DQEBCwUAA4IBAQDZgk1kcWaM 2uV2F8JXkd391ajgIbLgZ9PWtoAG0uwayHb134HGpdlpJCFaP/J8T0LN7mq5r3ju DJ53NiK+t2r0pMeBRC6ugM8Sbcvn1Pnxp+kcphBieRVx9ocPKeVZqx/QVwfAN1BY rd05JNFC0dlOBvFcdY9zIDfS/D74TKoCPiTfKEAeixEMBkIjLWcwraD1CsHEjm5c Lgov/MZZWM2P8LHehBPUaRQ5+9yJVPS/eMOr6fnjLpzyD/L9vObNrbK0pkJp5luG BYBavaTuIKtynjSqiLKk/u0hFcTRKywMNaOLgZM+KXuvx9UlliMw5fRNFPUF2X/X KQ+wkhX5uBF7 -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:07 2024 by rpki-client on console.sobornost.net