$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer File: B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer (raw, json) Hash identifier: rAv6g7Nlw6h4NSHOvPPW+7WKVWlJbslwmIpCn8Vgy5I= Subject key identifier: B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5DBDA0F3C12011C8E8178B6A5235E491DA841086 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.mft caRepository: rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 01 Aug 2024 03:12:36 +0000 Certificate not after: Thu 31 Jul 2025 03:17:36 +0000 Subordinate resources: AS: 266546 IP: 160.238.196.0/22 IP: 2804:3dac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bd:a0:f3:c1:20:11:c8:e8:17:8b:6a:52:35:e4:91:da:84:10:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 1 03:12:36 2024 GMT Not After : Jul 31 03:17:36 2025 GMT Subject: CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:1e:11:e3:57:89:d7:60:74:a0:ce:61:6f: 88:92:81:a7:44:5e:db:e0:7a:64:a9:f5:d2:ea:7d: 97:56:58:32:23:42:32:2e:3e:16:ef:40:ae:82:e6: 66:19:be:a9:3d:c1:df:b1:8a:db:23:59:e4:04:db: 79:16:c5:6a:a4:7e:9e:ed:fa:9e:9b:2e:f3:9c:e6: 25:5e:63:d3:0f:0f:13:7e:3c:6a:dc:77:56:aa:27: c9:5c:61:d9:61:72:c7:47:9b:4b:59:02:fe:f3:62: b1:57:ff:e6:a4:2c:0c:cb:d4:bc:ac:a0:86:d8:c2: 67:f7:94:e0:7e:72:9d:a7:33:a4:ab:c8:6e:45:b8: 63:50:a5:4f:5e:fe:37:33:d8:57:9b:f7:8b:e8:9f: 6c:cd:e9:80:25:98:c2:2b:25:e8:94:b0:f5:c1:2e: 68:f8:23:77:01:3e:ea:ba:2e:04:31:7d:5a:bb:47: 54:75:d4:85:61:17:a6:5e:ed:ef:01:e2:1c:ea:15: c3:5b:69:dc:59:fe:6a:44:18:7d:bb:b0:9c:83:05: 9e:2a:06:59:b9:2e:c1:bc:00:cc:89:7f:ff:fe:be: 0d:99:a6:cd:9b:7e:a3:d1:1a:c1:c3:41:ea:aa:fe: 2c:07:b9:28:47:39:b1:bd:59:3e:e2:f0:85:e7:d9: bb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.238.196.0/22 IPv6: 2804:3dac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266546 Signature Algorithm: sha256WithRSAEncryption 7c:35:4a:89:0e:90:a7:c5:cc:86:42:12:98:38:ea:58:eb:e7: 83:12:82:4d:60:c9:a1:c0:f4:57:89:e9:05:2e:b2:0d:58:94: 60:1e:26:65:43:c5:5a:04:31:30:a8:3f:8f:7e:08:84:10:d0: cd:fa:f0:4c:b1:83:ae:45:be:27:75:1c:ed:9b:0b:84:ef:4d: 42:53:a6:0c:8f:f0:f4:fc:59:c3:70:40:76:16:23:0e:e6:ab: 75:1a:73:4c:b3:23:fa:04:88:fe:91:f0:cc:bc:88:fd:c5:6e: 0a:10:7c:a4:7c:48:e3:12:8d:24:c6:55:b3:d0:46:ba:37:b4: 72:74:9b:1b:1e:3a:39:5b:9f:58:fc:d2:4c:c0:55:f3:e9:dc: a6:93:b8:6c:43:b1:24:32:08:24:00:43:80:64:d1:34:a8:f6: 2a:3c:2a:a4:a3:a3:23:62:9e:40:46:78:a3:22:ac:77:4d:6c: 10:76:15:70:d6:2b:dc:ab:aa:65:7a:23:c3:0a:43:1d:66:56: cb:3c:0f:b7:81:ab:d3:26:c6:de:c7:61:03:e5:6e:f5:81:3d: 28:13:bd:57:f3:49:87:58:33:b7:60:0e:4b:6a:f5:c5:d8:98: 42:0a:e1:f7:8d:41:90:50:bb:6f:12:dd:3e:59:aa:fe:1b:9f: bc:2f:52:a2 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUXb2g88EgEcjoF4tqUjXkkdqEEIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDEwMzEyMzZaFw0yNTA3MzEwMzE3MzZaMDMxMTAvBgNV BAMTKEI4NTBBODc4NThGRTdCNEMzMTcwMkRCOTNEN0NFNkNDMkRGNzk0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCR4R41eJ12B0oM5hb4iSgadE XtvgemSp9dLqfZdWWDIjQjIuPhbvQK6C5mYZvqk9wd+xitsjWeQE23kWxWqkfp7t +p6bLvOc5iVeY9MPDxN+PGrcd1aqJ8lcYdlhcsdHm0tZAv7zYrFX/+akLAzL1Lys oIbYwmf3lOB+cp2nM6SryG5FuGNQpU9e/jcz2Feb94von2zN6YAlmMIrJeiUsPXB Lmj4I3cBPuq6LgQxfVq7R1R11IVhF6Ze7e8B4hzqFcNbadxZ/mpEGH27sJyDBZ4q Blm5LsG8AMyJf//+vg2Zps2bfqPRGsHDQeqq/iwHuShHObG9WT7i8IXn2btDAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4UKh4WP57TDFw Lbk9fObMLfeUTDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWhn RDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1FoeEU4aGUyUFhXRXovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vo Z0QxVGhIQ05NVXoya0FEa01XSnRlU2ZwblROcHdRaHhFOGhlMlBYV0V6LzAvQjg1 MEE4Nzg1OEZFN0I0QzMxNzAyREI5M0Q3Q0U2Q0MyREY3OTQ0Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCoO7EMA0EAgACMAcDBQAoBD2sMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRMjANBgkqhkiG9w0BAQsFAAOCAQEAfDVKiQ6Qp8XMhkIS mDjqWOvngxKCTWDJocD0V4npBS6yDViUYB4mZUPFWgQxMKg/j34IhBDQzfrwTLGD rkW+J3Uc7ZsLhO9NQlOmDI/w9PxZw3BAdhYjDuardRpzTLMj+gSI/pHwzLyI/cVu ChB8pHxI4xKNJMZVs9BGuje0cnSbGx46OVufWPzSTMBV8+ncppO4bEOxJDIIJABD gGTRNKj2KjwqpKOjI2KeQEZ4oyKsd01sEHYVcNYr3KuqZXojwwpDHWZWyzwPt4Gr 0ybG3sdhA+Vu9YE9KBO9V/NJh1gzt2AOS2r1xdiYQgrh941BkFC7bxLdPlmq/huf vC9Sog== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:11 2024 by rpki-client on console.sobornost.net