$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BB8D12F61F027D2250EA527497904D61BD80DD58.cer File: BB8D12F61F027D2250EA527497904D61BD80DD58.cer (raw, json) Hash identifier: Ra9wQNR50zs0fwNcCYJ11yJyC4T7HrSSDW544hF2r3A= Subject key identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 03D33F6E64F18CEE8751BDB34E4549DD46A435DB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft caRepository: rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 31 Jul 2024 17:38:15 +0000 Certificate not after: Wed 30 Jul 2025 17:43:15 +0000 Subordinate resources: AS: 267348 IP: 45.233.188.0/22 IP: 2804:4c14::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d3:3f:6e:64:f1:8c:ee:87:51:bd:b3:4e:45:49:dd:46:a4:35:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 31 17:38:15 2024 GMT Not After : Jul 30 17:43:15 2025 GMT Subject: CN=BB8D12F61F027D2250EA527497904D61BD80DD58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:cc:6e:91:94:9b:e4:33:52:f9:f3:2a:30: e2:9a:38:b8:df:39:bb:eb:f4:ab:93:a4:33:c6:f2: 8d:5e:c7:34:f6:0e:1d:3d:0e:a3:95:31:75:af:16: 96:7c:dd:a8:55:91:c6:5c:25:11:0b:5f:8c:d2:80: 16:e6:18:f7:44:62:b0:6c:ca:de:c6:7f:44:64:03: 25:b1:53:28:d8:36:86:50:b3:74:d8:6a:7d:15:01: 69:f8:88:f9:f2:6f:b1:36:61:6e:13:44:7e:62:dc: 35:08:41:5c:70:c9:bc:0b:8a:20:ac:6f:8d:4c:5f: b4:34:f1:6f:d6:b6:49:2c:39:a7:78:89:c8:d8:e9: 75:4b:0c:eb:c7:d7:e5:0d:de:4a:db:13:99:70:1b: f8:e1:26:3c:31:00:5e:4e:22:6c:e5:33:aa:aa:b6: 76:ad:d8:aa:5e:3f:58:35:0c:aa:3d:02:a0:f8:dd: 26:a8:bf:b2:e5:15:e8:83:e7:a4:1c:64:15:2b:2c: d8:57:a7:97:09:4c:d5:69:87:e3:10:ab:19:91:ba: 79:79:6e:8b:12:49:ab:34:d9:bb:95:92:88:02:0b: 63:29:28:67:8f:a7:d1:12:60:64:42:25:e3:d3:1e: 70:28:20:b5:12:01:11:2b:bb:4c:13:de:59:4f:8e: a6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:8D:12:F6:1F:02:7D:22:50:EA:52:74:97:90:4D:61:BD:80:DD:58 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4udUjJqHHg8QQNB8AeVjc1BSBiAjfB2DuaZyChzcHgB/0/BB8D12F61F027D2250EA527497904D61BD80DD58.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.188.0/22 IPv6: 2804:4c14::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267348 Signature Algorithm: sha256WithRSAEncryption c0:51:7c:77:db:c1:a4:fe:35:73:19:1f:47:21:2f:f0:84:56: 07:8c:92:a0:a1:22:01:ed:6e:0d:6d:11:a6:a6:b3:67:da:c1: 91:55:af:f8:56:51:ff:02:c5:3a:00:e5:f8:be:cb:a4:4d:2a: 34:7b:30:db:c8:b6:8a:13:76:ae:61:e5:6b:eb:f1:ac:d4:ea: 18:b8:7f:d3:7a:f8:c0:bf:85:c6:13:12:8d:80:d3:cd:b8:48: 69:78:9b:8d:33:e8:5d:45:0b:eb:82:35:8e:4d:0a:1c:53:9e: a2:c1:22:23:d0:e7:ad:b1:c4:a5:e0:e3:44:f7:65:f3:a9:f1: 3e:d8:04:55:10:a0:fa:b7:8f:51:98:ef:55:af:2e:b3:ad:d9: 41:a2:98:ae:b7:ee:7c:d5:8b:cf:33:21:0f:2a:66:cc:4f:ab: 6e:19:6d:ea:40:0f:07:3c:11:e0:bb:a6:07:7c:ff:9a:c1:34: dc:16:76:2d:45:8d:22:9d:21:29:01:e7:a0:14:cd:a3:ef:17: 80:34:7d:38:2b:78:76:9f:aa:3a:88:41:46:30:54:8c:7a:b1: 8c:a8:77:7f:aa:33:b6:81:ff:d0:40:83:0e:f7:ca:06:97:c4: 6f:db:16:59:4d:91:2e:0d:90:83:17:2e:db:87:3b:98:c5:78: 04:23:82:ef -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUA9M/bmTxjO6HUb2zTkVJ3UakNdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MzExNzM4MTVaFw0yNTA3MzAxNzQzMTVaMDMxMTAvBgNV BAMTKEJCOEQxMkY2MUYwMjdEMjI1MEVBNTI3NDk3OTA0RDYxQkQ4MERENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWsxukZSb5DNS+fMqMOKaOLjf Obvr9KuTpDPG8o1exzT2Dh09DqOVMXWvFpZ83ahVkcZcJRELX4zSgBbmGPdEYrBs yt7Gf0RkAyWxUyjYNoZQs3TYan0VAWn4iPnyb7E2YW4TRH5i3DUIQVxwybwLiiCs b41MX7Q08W/WtkksOad4icjY6XVLDOvH1+UN3krbE5lwG/jhJjwxAF5OImzlM6qq tnat2KpeP1g1DKo9AqD43Saov7LlFeiD56QcZBUrLNhXp5cJTNVph+MQqxmRunl5 bosSSas02buVkogCC2MpKGePp9ESYGRCJePTHnAoILUSAREru0wT3llPjqbvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7jRL2HwJ9IlDq UnSXkE1hvYDdWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDR1 ZFVqSnFISGc4UVFOQjhBZVZqYzFCU0JpQWpmQjJEdWFaeUNoemNIZ0IvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g0 dWRVakpxSEhnOFFRTkI4QWVWamMxQlNCaUFqZkIyRHVhWnlDaHpjSGdCLzAvQkI4 RDEyRjYxRjAyN0QyMjUwRUE1Mjc0OTc5MDRENjFCRDgwREQ1OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLem8MA0EAgACMAcDBQAoBEwUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQUVDANBgkqhkiG9w0BAQsFAAOCAQEAwFF8d9vBpP41cxkf RyEv8IRWB4ySoKEiAe1uDW0RpqazZ9rBkVWv+FZR/wLFOgDl+L7LpE0qNHsw28i2 ihN2rmHla+vxrNTqGLh/03r4wL+FxhMSjYDTzbhIaXibjTPoXUUL64I1jk0KHFOe osEiI9DnrbHEpeDjRPdl86nxPtgEVRCg+rePUZjvVa8us63ZQaKYrrfufNWLzzMh DypmzE+rbhlt6kAPBzwR4LumB3z/msE03BZ2LUWNIp0hKQHnoBTNo+8XgDR9OCt4 dp+qOohBRjBUjHqxjKh3f6oztoH/0ECDDvfKBpfEb9sWWU2RLg2Qgxcu24c7mMV4 BCOC7w== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:12 2024 by rpki-client on console.sobornost.net