$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer File: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer (raw, json) Hash identifier: egqVTZ4KRoYN2SzznLkqLiAjb4ZJQVKsmq5EZxZIgm8= Subject key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 41AC812EE37DEF6E7DC04890C38D2A160D752D02 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft caRepository: rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:46 +0000 Certificate not after: Wed 02 Apr 2025 18:30:46 +0000 Subordinate resources: AS: 271330 IP: 207.248.4.0/22 IP: 2804:79d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ac:81:2e:e3:7d:ef:6e:7d:c0:48:90:c3:8d:2a:16:0d:75:2d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:46 2024 GMT Not After : Apr 2 18:30:46 2025 GMT Subject: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:43:d0:ef:fd:b2:2c:fd:55:7e:87:17:94: e3:17:20:a6:3e:93:e6:f6:40:59:6d:33:a4:73:02: 76:e5:7f:f7:4b:d7:4d:81:cb:bf:e0:dc:0e:d4:6f: 99:62:ac:80:15:d3:3a:cc:85:62:f6:82:1d:a7:6e: fd:1f:41:1a:3b:9f:07:ee:e8:92:2d:ea:5f:8e:d1: e0:27:4a:7d:8c:a4:db:d6:81:41:76:28:40:1b:8f: 6e:33:8c:87:de:69:3a:46:01:a2:e6:c7:ea:da:95: ee:4a:34:a7:6b:b5:c9:e6:88:68:a7:df:da:fe:d0: b6:33:80:39:c9:68:91:f2:71:a1:99:de:d8:d1:57: e7:76:b0:52:de:27:c0:b0:24:ea:03:72:0c:20:4f: 9a:e2:4c:30:b0:62:d1:01:41:18:a4:4b:c6:e0:54: 77:29:b5:81:81:1a:21:d6:e8:1a:e3:69:04:6e:1b: d1:7e:60:5b:54:7b:81:0b:88:ef:5b:b7:96:49:b8: 8e:bf:74:92:b3:5f:51:0a:cf:c7:ff:1f:9b:9d:f0: d0:d8:eb:44:16:f6:57:0b:e0:83:25:26:e2:eb:0c: 05:95:ff:5b:54:bb:07:74:36:fd:e7:89:81:ca:9f: bb:c8:96:0a:52:6e:f1:f3:30:c7:5c:dc:93:db:be: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.248.4.0/22 IPv6: 2804:79d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271330 Signature Algorithm: sha256WithRSAEncryption 13:e5:df:52:b9:52:37:12:0d:61:1c:b6:19:f1:03:03:55:37: a3:fb:b0:16:d0:a1:34:03:1f:0d:dd:3c:e7:0d:92:c7:90:61: 63:1e:4c:f9:ee:e6:a2:f5:b4:d5:76:84:5f:f8:13:35:73:bc: 77:3a:18:92:5c:19:38:d5:a4:9b:4a:2c:f1:f2:6a:4f:83:48: 13:6d:0d:30:57:fc:fc:2c:25:6b:9a:8b:b2:8b:00:c0:b4:ff: 4a:56:b7:63:68:c7:11:6c:ab:a1:4c:0b:51:9c:c7:6e:fd:21: 4a:a1:85:85:8e:f6:bb:f3:9b:3f:41:b5:21:a1:ac:78:2f:62: 52:21:cb:47:9c:88:2d:a6:7b:fa:6b:d7:5a:e1:9a:fc:a2:f9: bf:35:32:4d:42:52:f6:43:cd:7e:bc:aa:a3:35:41:a6:46:a8: 0f:7f:ae:09:d8:54:c2:be:ec:a9:e2:5f:00:bd:00:35:f2:bc: 6e:8f:2e:d2:18:9f:13:e5:66:55:15:09:e4:d6:20:4d:f5:ae: bc:15:af:24:ac:ff:b0:a1:7b:ba:b3:15:52:c2:db:85:ce:16: 0b:80:da:26:0d:6c:a7:bb:49:49:2e:2e:16:5d:7c:1e:26:af: cf:08:62:84:b9:1f:78:4c:66:55:ad:bb:09:0c:85:26:4a:d5: 56:1e:91:bf -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUQayBLuN97259wEiQw40qFg11LQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1NDZaFw0yNTA0MDIxODMwNDZaMDMxMTAvBgNV BAMTKEJCMEExRUVGRDY3RjM2QjdEN0Y2MEE2NDMxQzcyQzgxMzgwMjA2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4A0PQ7/2yLP1VfocXlOMXIKY+ k+b2QFltM6RzAnblf/dL102By7/g3A7Ub5lirIAV0zrMhWL2gh2nbv0fQRo7nwfu 6JIt6l+O0eAnSn2MpNvWgUF2KEAbj24zjIfeaTpGAaLmx+rale5KNKdrtcnmiGin 39r+0LYzgDnJaJHycaGZ3tjRV+d2sFLeJ8CwJOoDcgwgT5riTDCwYtEBQRikS8bg VHcptYGBGiHW6BrjaQRuG9F+YFtUe4ELiO9bt5ZJuI6/dJKzX1EKz8f/H5ud8NDY 60QW9lcL4IMlJuLrDAWV/1tUuwd0Nv3niYHKn7vIlgpSbvHzMMdc3JPbvrtNAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7Ch7v1n82t9f2 CmQxxyyBOAIGYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkZ3 R3BLZWhKalFweExxck1kU3VrZzZzNXZiSGd1bkhudFNtVUZla2FuVksvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkZ3 R3BLZWhKalFweExxck1kU3VrZzZzNXZiSGd1bkhudFNtVUZla2FuVksvMS9CQjBB MUVFRkQ2N0YzNkI3RDdGNjBBNjQzMUM3MkM4MTM4MDIwNjYxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALP+AQwDQQCAAIwBwMFACgEedQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCPiMA0GCSqGSIb3DQEBCwUAA4IBAQAT5d9SuVI3Eg1hHLYZ 8QMDVTej+7AW0KE0Ax8N3TznDZLHkGFjHkz57uai9bTVdoRf+BM1c7x3OhiSXBk4 1aSbSizx8mpPg0gTbQ0wV/z8LCVrmouyiwDAtP9KVrdjaMcRbKuhTAtRnMdu/SFK oYWFjva785s/QbUhoax4L2JSIctHnIgtpnv6a9da4Zr8ovm/NTJNQlL2Q81+vKqj NUGmRqgPf64J2FTCvuyp4l8AvQA18rxujy7SGJ8T5WZVFQnk1iBN9a68Fa8krP+w oXu6sxVSwtuFzhYLgNomDWynu0lJLi4WXXweJq/PCGKEuR94TGZVrbsJDIUmStVW HpG/ -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:12 2024 by rpki-client on console.sobornost.net