$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer File: A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer (raw, json) Hash identifier: vsrj2nMfeinQbKTFvC1M3ac/rf6AKLG07hgJ67YaFOI= Subject key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 186EC47073193B5FDD0217D0FA240409D335339B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft caRepository: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:06 +0000 Certificate not after: Wed 02 Apr 2025 18:31:06 +0000 Subordinate resources: AS: 61614 IP: 45.232.212.0/22 IP: 168.227.208.0/22 IP: 2804:4afc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6e:c4:70:73:19:3b:5f:dd:02:17:d0:fa:24:04:09:d3:35:33:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:06 2024 GMT Not After : Apr 2 18:31:06 2025 GMT Subject: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:23:82:22:ba:29:39:75:9d:b4:11:5f:53: 0a:c4:38:01:42:ae:93:74:9a:f3:94:37:55:27:43: 15:09:db:89:60:21:1a:08:78:1a:37:4e:92:f7:37: 8c:35:35:5a:91:e9:47:f5:b7:19:02:a0:df:4b:f4: c6:05:77:24:18:cf:b5:fe:16:b1:83:9a:a8:d6:1d: 76:b2:fd:61:93:fb:5d:05:11:c0:ed:3a:0e:44:a0: d5:cd:88:52:9b:cd:3e:0e:f6:45:0e:e2:9b:ea:28: 2b:1b:31:01:12:2f:30:93:cd:8e:10:1b:a3:0e:44: 47:b2:f4:19:d7:ab:5f:3b:07:fe:67:02:b2:8d:76: 25:c0:bc:f1:9a:d2:3f:cd:3d:9b:c8:69:f4:04:8a: 91:a9:06:b6:e5:a7:51:dc:71:1f:c0:8c:28:a5:3e: 01:a5:ab:95:4f:bd:32:b4:c3:8b:a8:9b:6f:74:74: 79:3b:f6:4a:e3:a6:98:58:97:2e:45:93:e5:29:d5: b9:af:1a:af:c3:68:02:94:50:7f:c4:b1:dd:0a:9e: c1:d3:ec:17:65:83:c3:2d:0e:fd:76:ed:f7:4f:c8: 4d:b0:3a:1e:45:6b:61:60:c1:8d:a7:97:86:b4:b2: 38:a8:82:20:fc:a9:6f:94:66:3f:81:0c:94:26:fe: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.232.212.0/22 168.227.208.0/22 IPv6: 2804:4afc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61614 Signature Algorithm: sha256WithRSAEncryption 18:df:5b:44:76:03:1b:14:76:c1:38:4e:ea:a2:bb:74:3d:53: ec:e4:d1:76:69:36:40:bb:56:81:56:d7:b3:4b:f2:91:2a:7e: da:4b:55:f3:4d:99:e4:b0:49:2d:f9:e9:d7:fe:79:d9:fc:ff: 39:57:ea:0f:e8:8d:01:d3:b8:ef:bf:73:b2:46:85:b8:31:58: 14:ab:79:12:a5:74:f8:71:25:6f:22:63:3d:cb:4f:8c:1c:bb: 56:41:5a:0a:02:30:6d:ca:50:cd:e6:01:80:d4:ae:ef:92:19: 4c:c0:74:e0:79:5a:62:42:9c:fb:f8:c7:b6:75:20:35:a4:fa: 29:99:51:97:87:83:96:64:d3:38:79:f3:df:a1:1f:37:48:da: 55:64:d9:01:b0:93:0f:76:fa:3d:fd:f0:7a:3b:0e:6a:b9:50: b9:75:aa:0b:22:16:c2:36:79:2a:4f:bb:de:01:97:cd:fc:53: 88:3a:35:0f:b2:a6:17:33:ba:cc:45:d8:ae:51:73:26:9a:de: 00:91:c8:db:81:d3:4d:bf:ec:b8:f0:16:41:2b:29:16:4c:1a: 92:52:61:13:54:68:5e:fd:89:d9:09:7a:16:17:2b:0e:29:b8: 19:6a:54:ac:20:8e:74:67:e8:ee:c1:29:ea:6e:f0:3f:3d:cd: 7f:04:fa:71 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUGG7EcHMZO1/dAhfQ+iQECdM1M5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MDZaFw0yNTA0MDIxODMxMDZaMDMxMTAvBgNV BAMTKEE5RTAxMUIzOEIzQTY4MTBDMTBERTI4NUZEOEQyNTZGQUJDRURCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJiOCIropOXWdtBFfUwrEOAFC rpN0mvOUN1UnQxUJ24lgIRoIeBo3TpL3N4w1NVqR6Uf1txkCoN9L9MYFdyQYz7X+ FrGDmqjWHXay/WGT+10FEcDtOg5EoNXNiFKbzT4O9kUO4pvqKCsbMQESLzCTzY4Q G6MOREey9BnXq187B/5nArKNdiXAvPGa0j/NPZvIafQEipGpBrblp1HccR/AjCil PgGlq5VPvTK0w4uom290dHk79krjpphYly5Fk+Up1bmvGq/DaAKUUH/Esd0KnsHT 7Bdlg8MtDv127fdPyE2wOh5Fa2FgwY2nl4a0sjiogiD8qW+UZj+BDJQm/ieJAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSp4BGzizpoEMEN 4oX9jSVvq87brzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5o OWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMm5o OWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMS9BOUUw MTFCMzhCM0E2ODEwQzEwREUyODVGRDhEMjU2RkFCQ0VEQkFGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIt6NQDBAKo49AwDQQCAAIwBwMFACgESvwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAPCuMA0GCSqGSIb3DQEBCwUAA4IBAQAY31tEdgMb FHbBOE7qort0PVPs5NF2aTZAu1aBVtezS/KRKn7aS1XzTZnksEkt+enX/nnZ/P85 V+oP6I0B07jvv3OyRoW4MVgUq3kSpXT4cSVvImM9y0+MHLtWQVoKAjBtylDN5gGA 1K7vkhlMwHTgeVpiQpz7+Me2dSA1pPopmVGXh4OWZNM4efPfoR83SNpVZNkBsJMP dvo9/fB6Ow5quVC5daoLIhbCNnkqT7veAZfN/FOIOjUPsqYXM7rMRdiuUXMmmt4A kcjbgdNNv+y48BZBKykWTBqSUmETVGhe/YnZCXoWFysOKbgZalSsII50Z+juwSnq bvA/Pc1/BPpx -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:09 2024 by rpki-client on console.sobornost.net