$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer File: B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.cer (raw, json) Hash identifier: 2INC5RV8MSWAW0bQ8n6QJjE465SJCOKw1zEBsH74If4= Subject key identifier: B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AD29C9D25981935FED4B1A79E85807F22AA4CEA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.mft caRepository: rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 19:13:31 +0000 Certificate not after: Wed 02 Apr 2025 19:18:31 +0000 Subordinate resources: AS: 53167 IP: 143.202.132.0/22 IP: 177.22.176.0/21 IP: 186.219.128.0/20 IP: 2804:2a4c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d2:9c:9d:25:98:19:35:fe:d4:b1:a7:9e:85:80:7f:22:aa:4c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:13:31 2024 GMT Not After : Apr 2 19:18:31 2025 GMT Subject: CN=B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:c1:d4:5b:26:45:ae:c4:81:fb:37:71:af: 3d:b6:24:fe:c5:f0:15:6f:58:cd:a2:68:a2:bb:68: 60:1c:20:0f:d0:d2:c0:4c:9c:16:38:68:b1:46:7d: 80:6d:5f:13:f5:3b:d1:7c:4c:04:84:1c:5d:3b:44: bd:92:cd:81:6d:53:d1:40:08:4d:91:ab:50:f6:b5: 11:c1:f9:f9:90:d2:a5:26:a4:8e:76:62:19:e3:a7: e6:2a:69:1d:bc:e8:17:17:79:f2:d2:97:af:d7:07: ec:ca:ed:fb:b9:bb:ae:62:f8:9e:ae:08:8f:e1:a5: b6:03:f4:31:45:ce:61:a4:87:34:97:46:65:e0:50: 57:69:cb:62:61:39:7c:f4:7d:19:14:61:4c:eb:63: e1:cc:c3:4e:6a:25:d1:16:8a:af:f3:bc:dc:0c:03: fe:85:eb:0e:5d:30:ae:f6:e0:4a:cb:e5:10:28:3a: ae:53:76:f3:63:ce:43:a8:07:48:bb:2a:8a:44:8a: dc:7f:28:4a:75:fe:e0:6e:9e:8f:2b:58:a1:30:b0: f2:b3:a0:25:9c:95:f2:63:75:52:30:0d:1c:24:7d: 2b:9c:21:7e:8b:e9:81:1b:5f:5c:f5:0f:43:97:63: e9:f5:ed:2b:39:95:4e:8b:61:36:1f:88:8c:82:90: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:A0:4B:6E:71:FC:9D:EC:92:4E:3D:35:36:A1:EE:0B:27:01:E5:F4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/1/B7A04B6E71FC9DEC924E3D3536A1EE0B2701E5F4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.202.132.0/22 177.22.176.0/21 186.219.128.0/20 IPv6: 2804:2a4c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53167 Signature Algorithm: sha256WithRSAEncryption 23:7b:86:0a:1c:57:75:74:23:40:b6:00:8d:7a:f3:15:44:ff: 1f:63:d2:27:55:ea:bf:42:64:ca:09:0c:ff:8f:e5:c8:10:99: fa:92:53:a7:2c:50:88:69:c6:83:4d:80:99:62:77:d6:13:b4: 8d:5d:6f:53:90:24:43:23:9b:f3:9f:72:fd:74:fa:fb:e7:fc: fb:f9:14:44:36:d7:05:e1:07:3d:e0:d3:6c:a0:d6:e5:48:5b: 62:cd:85:2d:56:9c:1f:ae:9f:26:b5:3c:0b:0d:b5:fd:3c:74: 1b:2d:39:f7:b9:be:cd:b9:55:75:fe:3f:0a:57:ef:42:bf:27: 3b:40:58:53:6b:04:eb:08:f3:bc:1a:5a:bc:61:77:73:16:f5: 36:72:9f:47:8d:f4:0a:b0:41:35:90:d8:5a:56:99:f2:2f:1a: 2d:7e:66:c1:f7:48:f7:32:b7:f3:fb:9d:47:cc:03:dd:b1:46: 17:83:ad:4f:b3:70:49:1d:ac:9b:47:c8:13:f3:55:fe:84:5b: af:87:65:ad:f0:a3:12:b0:b1:e8:6e:72:6f:24:6c:50:7d:a8: 55:b0:9b:74:87:5c:f7:43:5f:cd:7f:89:f1:58:7b:59:78:96: fb:97:30:15:19:b1:e7:9b:4f:bd:9d:96:f5:45:8a:af:40:d8: 95:09:a6:19 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUOtKcnSWYGTX+1LGnnoWAfyKqTOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxOTEzMzFaFw0yNTA0MDIxOTE4MzFaMDMxMTAvBgNV BAMTKEI3QTA0QjZFNzFGQzlERUM5MjRFM0QzNTM2QTFFRTBCMjcwMUU1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ucHUWyZFrsSB+zdxrz22JP7F 8BVvWM2iaKK7aGAcIA/Q0sBMnBY4aLFGfYBtXxP1O9F8TASEHF07RL2SzYFtU9FA CE2Rq1D2tRHB+fmQ0qUmpI52Yhnjp+YqaR286BcXefLSl6/XB+zK7fu5u65i+J6u CI/hpbYD9DFFzmGkhzSXRmXgUFdpy2JhOXz0fRkUYUzrY+HMw05qJdEWiq/zvNwM A/6F6w5dMK724ErL5RAoOq5TdvNjzkOoB0i7KopEitx/KEp1/uBuno8rWKEwsPKz oCWclfJjdVIwDRwkfSucIX6L6YEbX1z1D0OXY+n17Ss5lU6LYTYfiIyCkASbAgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS3oEtucfyd7JJO PTU2oe4LJwHl9DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1pG UlVWaTJVNFpqUTc4QmdFRjc5TlFmelZ4RjVMeFRUOXZ2ZDlvZHUxVlAvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Na RlJVVmkyVTRaalE3OEJnRUY3OU5RZnpWeEY1THhUVDl2dmQ5b2R1MVZQLzEvQjdB MDRCNkU3MUZDOURFQzkyNEUzRDM1MzZBMUVFMEIyNzAxRTVGNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCj8qEAwQDsRawAwQEutuAMA0EAgACMAcDBQAoBCpM MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDPrzANBgkqhkiG9w0BAQsFAAOCAQEA I3uGChxXdXQjQLYAjXrzFUT/H2PSJ1Xqv0JkygkM/4/lyBCZ+pJTpyxQiGnGg02A mWJ31hO0jV1vU5AkQyOb859y/XT6++f8+/kURDbXBeEHPeDTbKDW5UhbYs2FLVac H66fJrU8Cw21/Tx0Gy0597m+zblVdf4/ClfvQr8nO0BYU2sE6wjzvBpavGF3cxb1 NnKfR430CrBBNZDYWlaZ8i8aLX5mwfdI9zK38/udR8wD3bFGF4OtT7NwSR2sm0fI E/NV/oRbr4dlrfCjErCx6G5ybyRsUH2oVbCbdIdc90NfzX+J8Vh7WXiW+5cwFRmx 55tPvZ2W9UWKr0DYlQmmGQ== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:11 2024 by rpki-client on console.sobornost.net