$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer File: A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer (raw, json) Hash identifier: PSL5Lu9yLjbFJ6tzwlTvccDd5OXYBlodWJmq3oQ7AhY= Subject key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1275CA000FB238CEC7CA2863AE1BC10E88A699C1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft caRepository: rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:44 +0000 Certificate not after: Wed 02 Apr 2025 18:30:44 +0000 Subordinate resources: AS: 268054 IP: 45.167.104.0/22 IP: 2804:5740::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:75:ca:00:0f:b2:38:ce:c7:ca:28:63:ae:1b:c1:0e:88:a6:99:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:44 2024 GMT Not After : Apr 2 18:30:44 2025 GMT Subject: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:a8:81:90:b5:90:f9:e3:f0:c7:5d:be:64: 98:3c:0e:ba:68:0c:f5:bb:7c:5f:3a:db:b8:04:fa: 4c:ce:9f:68:63:f6:ea:07:7b:9a:32:d9:35:85:9f: 37:30:db:0e:c9:70:e3:1c:b8:e1:f9:7a:1f:db:72: 01:b1:20:9f:67:34:41:9d:1f:b7:9e:b9:bd:7a:62: 97:be:4b:75:90:40:09:14:2b:01:61:2b:a8:e2:e6: 3c:92:75:e8:d9:c2:64:b7:1e:91:79:90:4d:60:5e: 29:e3:c2:23:68:4d:9c:60:aa:2e:86:f1:d6:b0:6e: 76:07:24:00:ca:34:ef:62:ce:98:5f:71:cd:89:dd: 84:32:65:f4:bd:c6:3a:50:2a:c0:61:b6:07:42:0f: 78:26:84:8c:67:b1:7e:56:ca:b5:fe:7d:bc:17:b1: 36:02:83:f3:1e:a6:2e:31:0e:6e:91:ad:a7:ba:43: 1d:90:cc:ac:40:7d:86:0e:d4:2d:a4:ca:83:f9:cd: a8:0a:e2:25:b0:1b:cb:af:e7:80:19:40:a6:af:d6: 29:e0:0d:d4:df:94:c8:65:ea:fe:28:46:49:45:f2: 75:1a:71:f0:ea:f9:d3:4d:84:ae:5a:50:97:62:ca: d7:4e:c9:d3:a1:e9:af:d5:bd:7c:46:fa:70:3b:f7: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.104.0/22 IPv6: 2804:5740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268054 Signature Algorithm: sha256WithRSAEncryption d6:fe:56:c9:a7:29:97:ef:5f:03:c7:ab:b7:58:24:fe:65:f2: d9:e2:b5:4d:e3:5b:67:54:d7:2f:ea:26:02:f1:52:8b:e0:df: 4a:03:f9:08:ef:13:33:55:c0:9b:99:c8:9d:f1:86:07:6f:4d: 9e:24:1a:f5:99:5d:0a:09:15:42:af:e1:fc:a2:e7:90:ed:a7: a1:83:92:47:ef:55:b1:d4:c7:4e:6c:19:3b:de:ad:db:6a:6b: 34:84:3c:85:68:b5:a4:fa:1c:5c:70:cb:d4:0b:19:23:a5:1d: 48:c6:86:b8:47:1a:99:38:1e:06:57:f0:3d:6f:17:c1:48:5d: d4:e2:bf:ae:63:b4:c2:7d:18:80:e2:3c:cf:75:57:34:1a:1a: 85:29:81:2d:62:4d:c1:11:48:1e:fd:45:6b:56:2a:e7:1f:61: 8a:d4:56:7d:58:47:8c:6e:87:19:0f:9f:c0:ac:af:62:d5:72: c9:a2:12:fa:03:db:d0:96:f6:a9:31:f8:41:2e:af:f9:b7:90: 94:20:a3:d8:7e:28:a2:97:01:5d:82:ca:f3:1e:ff:d7:9d:57: 48:b4:86:f1:79:70:ae:6e:8c:9c:ea:9c:1b:50:bd:3b:b8:26: 46:1c:06:89:aa:bc:73:14:6f:4a:b0:84:e8:b3:b8:4e:32:88: cf:70:8f:37 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUEnXKAA+yOM7HyihjrhvBDoimmcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1NDRaFw0yNTA0MDIxODMwNDRaMDMxMTAvBgNV BAMTKEE5NDRGRTdBQTNCNEI5OUIyODQyNkU5QTdFMjAxMjRBNTA0NTBEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx96iBkLWQ+ePwx12+ZJg8Drpo DPW7fF8627gE+kzOn2hj9uoHe5oy2TWFnzcw2w7JcOMcuOH5eh/bcgGxIJ9nNEGd H7eeub16Ype+S3WQQAkUKwFhK6ji5jySdejZwmS3HpF5kE1gXinjwiNoTZxgqi6G 8dawbnYHJADKNO9izphfcc2J3YQyZfS9xjpQKsBhtgdCD3gmhIxnsX5WyrX+fbwX sTYCg/Mepi4xDm6Rrae6Qx2QzKxAfYYO1C2kyoP5zagK4iWwG8uv54AZQKav1ing DdTflMhl6v4oRklF8nUacfDq+dNNhK5aUJdiytdOydOh6a/VvXxG+nA79/k5AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSpRP56o7S5myhC bpp+IBJKUEUNEjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlRS VnYyeHM5VnlhZjhwejZ5M1pvMVNmUTFMVldncjJaaE5oajFEcjY1TEYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlRS VnYyeHM5VnlhZjhwejZ5M1pvMVNmUTFMVldncjJaaE5oajFEcjY1TEYvMS9BOTQ0 RkU3QUEzQjRCOTlCMjg0MjZFOUE3RTIwMTI0QTUwNDUwRDEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItp2gwDQQCAAIwBwMFACgEV0AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBcWMA0GCSqGSIb3DQEBCwUAA4IBAQDW/lbJpymX718Dx6u3 WCT+ZfLZ4rVN41tnVNcv6iYC8VKL4N9KA/kI7xMzVcCbmcid8YYHb02eJBr1mV0K CRVCr+H8oueQ7aehg5JH71Wx1MdObBk73q3bams0hDyFaLWk+hxccMvUCxkjpR1I xoa4RxqZOB4GV/A9bxfBSF3U4r+uY7TCfRiA4jzPdVc0GhqFKYEtYk3BEUge/UVr VirnH2GK1FZ9WEeMbocZD5/ArK9i1XLJohL6A9vQlvapMfhBLq/5t5CUIKPYfiii lwFdgsrzHv/XnVdItIbxeXCuboyc6pwbUL07uCZGHAaJqrxzFG9KsITos7hOMojP cI83 -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:09 2024 by rpki-client on console.sobornost.net