$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer File: AA7F3B6BBB93519197F744AAD322DACA6D94222A.cer (raw, json) Hash identifier: zfgG8GOYFjX+ChnX35ewZ9hiUZhYaX4qz2jC15cV+cI= Subject key identifier: AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 065CA1896B2760952312726B556D34DF75C3B88A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/AA7F3B6BBB93519197F744AAD322DACA6D94222A.mft caRepository: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 13:38:50 +0000 Certificate not after: Mon 08 Sep 2025 13:43:50 +0000 Subordinate resources: AS: 53019 IP: 177.70.160.0/20 IP: 2804:5dc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5c:a1:89:6b:27:60:95:23:12:72:6b:55:6d:34:df:75:c3:b8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 9 13:38:50 2024 GMT Not After : Sep 8 13:43:50 2025 GMT Subject: CN=AA7F3B6BBB93519197F744AAD322DACA6D94222A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:66:7f:0c:1e:86:e5:ad:1c:74:87:3d:1f: ac:39:5a:f5:ad:2c:db:0e:ef:8d:1a:eb:3a:a8:f8: 79:b9:75:ed:d5:db:e2:90:7e:bc:85:39:8f:a5:d4: 41:6a:88:bc:6d:cb:e2:d3:ae:dd:d2:b3:6e:1d:17: f4:9a:4d:af:7a:7b:0a:d6:dc:48:8f:30:c6:0a:de: ff:aa:97:b9:e3:81:df:7b:be:5d:a8:05:bb:24:75: 2a:3f:02:70:97:be:51:6e:0d:5c:8c:25:b2:3d:ee: 01:92:a7:55:41:d3:2d:70:c8:2b:e8:e8:32:d4:3f: fe:95:50:df:08:0e:80:29:82:ab:9f:68:08:41:52: 33:5e:eb:1e:d4:b1:80:30:57:a9:a2:24:ab:ba:d5: b9:81:20:ab:ed:02:c0:c4:45:8b:75:d8:14:f5:03: 60:2a:63:4d:07:32:8b:64:82:82:43:02:4b:e5:ef: 56:0a:86:a5:97:ed:1f:ff:0e:bb:2b:f4:53:05:d4: f3:82:ed:4f:0a:6b:cd:00:7d:b7:42:d1:31:d4:b7: ac:71:fd:2f:f8:d1:7d:89:1d:08:68:23:83:74:a2: ae:1f:8d:82:0f:79:b2:fd:24:5c:a0:9f:1c:ca:b8: 74:a8:de:68:0f:05:68:87:95:df:a1:4c:ad:c7:e4: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:7F:3B:6B:BB:93:51:91:97:F7:44:AA:D3:22:DA:CA:6D:94:22:2A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/AA7F3B6BBB93519197F744AAD322DACA6D94222A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.70.160.0/20 IPv6: 2804:5dc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53019 Signature Algorithm: sha256WithRSAEncryption bf:70:d6:8d:50:77:68:13:0e:ee:7f:23:9d:00:2d:49:8d:d1: 8f:fc:0c:ff:04:91:aa:f1:67:19:c7:8c:2c:6f:bd:f1:2a:37: 87:c2:0a:6e:83:cd:12:06:bf:ad:8c:0f:00:e8:85:66:f3:d3: a4:9d:57:0b:fd:34:e7:84:12:e1:96:a3:24:ce:3e:9e:3b:83: 06:a0:f5:50:79:09:d4:20:d5:71:3b:ef:49:ba:ca:8d:e4:07: ac:94:31:1c:c3:af:b2:51:d4:f3:95:d3:83:00:f8:3b:bb:b9: 15:c6:44:59:1c:09:f3:4f:c2:31:d6:61:6e:77:e0:95:fd:a3: 39:17:46:76:ad:c9:3c:dd:78:5c:26:ff:8f:cd:22:eb:b5:63: e1:48:7f:ac:7f:82:58:d4:cb:31:fd:0d:3f:e1:d0:bc:fd:b1: 2c:c3:08:44:77:4a:c0:19:00:e2:af:93:ee:8b:99:0c:35:a3: 77:0c:8e:15:08:ff:2c:3e:8b:28:3d:0d:33:c3:f8:7e:fe:48: d9:80:a1:0a:7d:0a:9d:9e:36:f2:58:97:49:71:09:e9:f0:6a: 62:88:ec:5b:14:e8:79:89:6c:5d:97:fa:e7:16:59:84:4f:dc: dd:50:d2:ef:5d:db:88:28:7c:62:4a:1e:b6:71:21:76:aa:48: b3:67:51:84 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUBlyhiWsnYJUjEnJrVW0033XDuIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDkxMzM4NTBaFw0yNTA5MDgxMzQzNTBaMDMxMTAvBgNV BAMTKEFBN0YzQjZCQkI5MzUxOTE5N0Y3NDRBQUQzMjJEQUNBNkQ5NDIyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtGZ/DB6G5a0cdIc9H6w5WvWt LNsO740a6zqo+Hm5de3V2+KQfryFOY+l1EFqiLxty+LTrt3Ss24dF/SaTa96ewrW 3EiPMMYK3v+ql7njgd97vl2oBbskdSo/AnCXvlFuDVyMJbI97gGSp1VB0y1wyCvo 6DLUP/6VUN8IDoApgqufaAhBUjNe6x7UsYAwV6miJKu61bmBIKvtAsDERYt12BT1 A2AqY00HMotkgoJDAkvl71YKhqWX7R//Drsr9FMF1POC7U8Ka80AfbdC0THUt6xx /S/40X2JHQhoI4N0oq4fjYIPebL9JFygnxzKuHSo3mgPBWiHld+hTK3H5GWHAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqfztru5NRkZf3 RKrTItrKbZQiKjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMXRU MU05OTZqZ0hGclFqQndxcFJCYXNzZDZFaFVGckNlcGtYaWNTN3BRVy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMXRU MU05OTZqZ0hGclFqQndxcFJCYXNzZDZFaFVGckNlcGtYaWNTN3BRVy8wL0FBN0Yz QjZCQkI5MzUxOTE5N0Y3NDRBQUQzMjJEQUNBNkQ5NDIyMkEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEBLFGoDANBAIAAjAHAwUAKAQF3DAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMAzxswDQYJKoZIhvcNAQELBQADggEBAL9w1o1Qd2gTDu5/I50A LUmN0Y/8DP8EkarxZxnHjCxvvfEqN4fCCm6DzRIGv62MDwDohWbz06SdVwv9NOeE EuGWoyTOPp47gwag9VB5CdQg1XE770m6yo3kB6yUMRzDr7JR1POV04MA+Du7uRXG RFkcCfNPwjHWYW534JX9ozkXRnatyTzdeFwm/4/NIuu1Y+FIf6x/gljUyzH9DT/h 0Lz9sSzDCER3SsAZAOKvk+6LmQw1o3cMjhUI/yw+iyg9DTPD+H7+SNmAoQp9Cp2e NvJYl0lxCenwamKI7FsU6HmJbF2X+ucWWYRP3N1Q0u9d24gofGJKHrZxIXaqSLNn UYQ= -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:09 2024 by rpki-client on console.sobornost.net