$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer File: B69F04A56302F33CF21A166C862CB615F9EB1C0F.cer (raw, json) Hash identifier: jA3JydAlVcwYH15grGPmnUfwncbXgWDB6hxEYetcpoc= Subject key identifier: B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 658DE9F6684FE5CFDE7F672D197DB6389312DA0C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.mft caRepository: rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 10 May 2024 17:15:37 +0000 Certificate not after: Fri 09 May 2025 17:20:37 +0000 Subordinate resources: AS: 262760 IP: 179.106.32.0/20 IP: 186.225.16.0/20 IP: 2804:414::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8d:e9:f6:68:4f:e5:cf:de:7f:67:2d:19:7d:b6:38:93:12:da:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 10 17:15:37 2024 GMT Not After : May 9 17:20:37 2025 GMT Subject: CN=B69F04A56302F33CF21A166C862CB615F9EB1C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b9:3e:54:42:f0:b6:9b:4f:c7:77:54:f7:87: 72:7f:34:cd:ec:fc:fd:37:c3:c1:4d:88:fa:4c:ba: 41:a5:4f:af:7e:cd:6e:b8:cf:7f:a6:52:44:2c:7e: 5d:cf:3d:45:e7:09:4a:56:c1:d9:f3:9e:ca:53:ee: a9:b8:71:03:09:69:5d:bd:00:d4:d6:94:90:04:1e: 14:99:41:92:29:4b:7d:95:b3:b1:d6:4d:8a:c3:21: e0:c8:b4:47:48:11:23:24:a6:0a:f1:81:fd:ff:cf: 40:f8:af:52:c3:17:8b:74:75:15:e9:a9:53:ae:58: 24:09:80:1d:76:f9:b3:11:8d:b3:e7:ef:11:29:ec: 4f:4b:2d:b6:35:19:52:c6:96:f8:cd:12:d3:f7:90: 21:5e:e4:02:c5:d5:09:92:d1:5a:96:fc:be:25:59: e8:6a:bd:44:2e:a8:90:07:e8:77:f8:40:a3:03:dc: 86:c5:4e:98:dc:a3:72:25:bd:dd:33:cc:3d:82:92: 0f:1e:3f:c1:e3:00:72:74:c4:b9:57:87:a8:ee:7d: 3b:e6:55:41:71:56:4d:7f:b0:13:e0:e7:44:da:81: e1:37:24:2d:15:a4:9e:53:19:d6:f6:a1:d2:97:83: 66:8a:7a:b6:34:2b:3d:b0:84:45:97:36:b9:3f:07: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:9F:04:A5:63:02:F3:3C:F2:1A:16:6C:86:2C:B6:15:F9:EB:1C:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BzXN43uF6HQuFHbqHMinDSniVFh9PHx9Awn5DAmUxS29/0/B69F04A56302F33CF21A166C862CB615F9EB1C0F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.106.32.0/20 186.225.16.0/20 IPv6: 2804:414::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262760 Signature Algorithm: sha256WithRSAEncryption 70:00:0d:25:5f:67:d7:a8:92:48:1a:1b:16:3a:51:1f:ed:58: a3:d6:91:77:92:09:b6:7f:72:74:a8:f4:14:16:b8:b6:5b:1f: 61:c0:da:6c:df:57:eb:83:82:71:01:ef:5d:9b:3e:65:fd:92: c1:91:cf:d5:44:a6:55:60:97:73:63:c8:9a:1f:d8:d5:0d:13: 9f:4d:44:c9:51:f2:27:a2:4b:37:cb:74:85:a5:19:be:a7:70: 23:08:00:4c:b6:36:12:03:49:73:7a:06:2b:8e:fc:ec:62:4f: d9:20:05:92:1f:89:bf:f1:76:5e:41:11:8e:a7:f7:85:14:c1: 88:e0:39:aa:ab:7b:bc:1d:56:03:6d:99:93:09:49:34:24:e6: a6:07:f7:7e:82:e4:50:30:b6:73:31:a4:6d:f7:3d:14:2e:62: 69:af:c4:85:58:3c:81:50:61:01:e8:24:6a:0a:39:8e:57:82: 2a:3a:41:4e:b4:30:6d:6c:88:87:b1:3e:b1:b4:b4:6a:78:8e: 6f:7e:e5:63:e9:cc:5a:f9:ee:9c:2d:de:4e:6f:73:c3:f2:83: 0b:63:a1:87:1d:85:ec:7b:5a:a6:63:25:c1:72:62:f4:80:33: c3:e5:d8:a5:a9:8e:4c:ab:12:66:52:98:84:ae:0f:c1:24:39: 3c:2b:7b:a1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZY3p9mhP5c/ef2ctGX22OJMS2gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MTAxNzE1MzdaFw0yNTA1MDkxNzIwMzdaMDMxMTAvBgNV BAMTKEI2OUYwNEE1NjMwMkYzM0NGMjFBMTY2Qzg2MkNCNjE1RjlFQjFDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwuT5UQvC2m0/Hd1T3h3J/NM3s /P03w8FNiPpMukGlT69+zW64z3+mUkQsfl3PPUXnCUpWwdnznspT7qm4cQMJaV29 ANTWlJAEHhSZQZIpS32Vs7HWTYrDIeDItEdIESMkpgrxgf3/z0D4r1LDF4t0dRXp qVOuWCQJgB12+bMRjbPn7xEp7E9LLbY1GVLGlvjNEtP3kCFe5ALF1QmS0VqW/L4l WehqvUQuqJAH6Hf4QKMD3IbFTpjco3Ilvd0zzD2Ckg8eP8HjAHJ0xLlXh6jufTvm VUFxVk1/sBPg50TageE3JC0VpJ5TGdb2odKXg2aKerY0Kz2whEWXNrk/B+/fAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2nwSlYwLzPPIa FmyGLLYV+escDzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnpY TjQzdUY2SFF1RkhicUhNaW5EU25pVkZoOVBIeDlBd241REFtVXhTMjkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6 WE40M3VGNkhRdUZIYnFITWluRFNuaVZGaDlQSHg5QXduNURBbVV4UzI5LzAvQjY5 RjA0QTU2MzAyRjMzQ0YyMUExNjZDODYyQ0I2MTVGOUVCMUMwRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEs2ogAwQEuuEQMA0EAgACMAcDBQAoBAQUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCaDANBgkqhkiG9w0BAQsFAAOCAQEAcAANJV9n 16iSSBobFjpRH+1Yo9aRd5IJtn9ydKj0FBa4tlsfYcDabN9X64OCcQHvXZs+Zf2S wZHP1USmVWCXc2PImh/Y1Q0Tn01EyVHyJ6JLN8t0haUZvqdwIwgATLY2EgNJc3oG K4787GJP2SAFkh+Jv/F2XkERjqf3hRTBiOA5qqt7vB1WA22ZkwlJNCTmpgf3foLk UDC2czGkbfc9FC5iaa/EhVg8gVBhAegkago5jleCKjpBTrQwbWyIh7E+sbS0aniO b37lY+nMWvnunC3eTm9zw/KDC2Ohhx2F7HtapmMlwXJi9IAzw+XYpamOTKsSZlKY hK4PwSQ5PCt7oQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:11 2024 by rpki-client on console.sobornost.net