$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer File: A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer (raw, json) Hash identifier: 2OUbRWoM1abZA/IMaUtlDYjzspstL4/pP7UPy/rChIE= Subject key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1F447A9A1EE75C6745A7D6B20AAED3BFB98E02A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft caRepository: rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 Aug 2024 14:33:57 +0000 Certificate not after: Mon 11 Aug 2025 14:38:57 +0000 Subordinate resources: AS: 262812 IP: 186.250.112.0/22 IP: 200.66.112.0/20 IP: 2804:268::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:44:7a:9a:1e:e7:5c:67:45:a7:d6:b2:0a:ae:d3:bf:b9:8e:02:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 12 14:33:57 2024 GMT Not After : Aug 11 14:38:57 2025 GMT Subject: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:54:85:ab:9c:82:4f:a0:e3:bb:23:05:00: 41:cc:b0:38:ea:cb:36:84:e0:91:25:2d:2f:2e:7d: 66:f2:33:7e:14:91:9a:65:9d:a2:30:d5:42:cb:f4: 54:56:d6:76:28:95:9c:b4:6a:63:46:6b:2b:78:cd: 08:4e:6a:32:27:ee:65:f8:5b:a7:6a:d5:30:6e:d5: 32:12:a6:5c:68:6b:87:1e:0b:3e:fc:b8:57:81:a5: e6:cb:00:41:60:a1:7f:59:d8:86:cd:1d:04:e9:a9: 6b:c4:2a:db:33:09:fb:99:57:37:5d:b8:da:5e:9c: ef:d4:7b:b9:91:31:53:dc:8f:f3:c9:e1:fe:56:24: 9c:d3:06:b2:09:c4:4a:96:c1:bd:80:c7:44:a4:17: 0a:29:b4:9e:5f:eb:8c:b5:bf:51:00:0e:6d:e4:64: a0:a1:ef:03:7f:4f:74:36:51:5f:23:3d:07:9e:e3: eb:db:73:91:59:63:ab:89:43:af:02:3b:e9:cd:fa: 08:b2:a0:4c:88:a5:21:1d:ca:61:97:b0:10:92:3f: f4:51:2f:2c:56:01:4e:c1:39:ea:a5:25:04:96:92: a3:26:d4:c5:8e:fa:96:dd:12:1b:f4:b9:55:ee:f6: bb:91:69:c7:cf:29:64:2b:e4:9c:fd:f6:f3:d8:52: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.250.112.0/22 200.66.112.0/20 IPv6: 2804:268::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262812 Signature Algorithm: sha256WithRSAEncryption 35:60:51:7c:e4:16:15:2c:42:a3:62:c3:13:ac:1c:59:41:e7: 88:51:33:8e:8d:e3:18:48:7b:05:90:9a:8e:00:f3:b3:6f:5e: 79:bd:1d:30:2e:2d:8a:60:91:16:ef:6a:59:46:83:a1:de:fe: 4b:3b:5d:ee:ff:f8:70:e1:d7:3f:5a:36:34:52:2c:b2:9c:02: 6a:8b:f1:2c:d8:92:7b:89:6b:d3:26:3d:d4:a8:65:df:b3:31: 70:22:7a:5c:d3:c6:ea:35:cd:53:4f:52:ab:58:7a:99:ed:6a: b4:4d:23:ed:bc:13:e3:c9:fd:a4:f9:c2:7c:b9:ef:d7:4f:a6: 78:4e:f8:31:45:2a:54:b0:43:54:36:fe:46:9e:bb:fb:5d:8f: 11:47:5e:4e:d1:80:fc:4f:79:8e:a5:dc:8e:5a:68:da:d2:90: 58:6d:a7:63:68:46:13:fe:c5:e3:c7:d3:ee:9a:af:d2:e8:05: dd:0c:3e:ab:39:9e:21:0b:a3:58:0f:86:38:e2:dc:f9:c4:ec: 6b:3a:ea:20:90:98:d3:20:35:28:da:24:ff:df:a6:50:66:4e: 86:2a:81:8f:00:65:6b:f7:35:0c:ce:a0:9f:90:b8:2b:24:9a: d6:1d:b6:b1:d7:f0:c0:c6:5d:ed:61:ef:27:e3:2e:29:b0:b7: e1:09:7b:e3 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUH0R6mh7nXGdFp9ayCq7Tv7mOAqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MTIxNDMzNTdaFw0yNTA4MTExNDM4NTdaMDMxMTAvBgNV BAMTKEE4QzQwRDg1MUVFMDZGNzQ1NERFOTU4N0JEODcxMENBM0VBQjg1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqFSFq5yCT6DjuyMFAEHMsDjq yzaE4JElLS8ufWbyM34UkZplnaIw1ULL9FRW1nYolZy0amNGayt4zQhOajIn7mX4 W6dq1TBu1TISplxoa4ceCz78uFeBpebLAEFgoX9Z2IbNHQTpqWvEKtszCfuZVzdd uNpenO/Ue7mRMVPcj/PJ4f5WJJzTBrIJxEqWwb2Ax0SkFwoptJ5f64y1v1EADm3k ZKCh7wN/T3Q2UV8jPQee4+vbc5FZY6uJQ68CO+nN+giyoEyIpSEdymGXsBCSP/RR LyxWAU7BOeqlJQSWkqMm1MWO+pbdEhv0uVXu9ruRacfPKWQr5Jz99vPYUuMtAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSoxA2FHuBvdFTe lYe9hxDKPquFNjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Jw ZENGNVRqUVVndEI1dmJ5NGRMaU1TbkVFRjFrV0IzOHJyNjN3Nkx3ZncvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ny cGRDRjVUalFVZ3RCNXZieTRkTGlNU25FRUYxa1dCMzhycjYzdzZMd2Z3LzAvQThD NDBEODUxRUUwNkY3NDU0REU5NTg3QkQ4NzEwQ0EzRUFCODUzNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCuvpwAwQEyEJwMA0EAgACMAcDBQAoBAJoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCnDANBgkqhkiG9w0BAQsFAAOCAQEANWBRfOQW FSxCo2LDE6wcWUHniFEzjo3jGEh7BZCajgDzs29eeb0dMC4timCRFu9qWUaDod7+ Sztd7v/4cOHXP1o2NFIsspwCaovxLNiSe4lr0yY91Khl37MxcCJ6XNPG6jXNU09S q1h6me1qtE0j7bwT48n9pPnCfLnv10+meE74MUUqVLBDVDb+Rp67+12PEUdeTtGA /E95jqXcjlpo2tKQWG2nY2hGE/7F48fT7pqv0ugF3Qw+qzmeIQujWA+GOOLc+cTs azrqIJCY0yA1KNok/9+mUGZOhiqBjwBla/c1DM6gn5C4KySa1h22sdfwwMZd7WHv J+MuKbC34Ql74w== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:09 2024 by rpki-client on console.sobornost.net