$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer File: C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer (raw, json) Hash identifier: 733TvliMqfbj/hh0m1uGNubKLIMx+zUbfClRGDFc50w= Subject key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 10BB8E49DE9FC244D050E2C9A4698103CB5F6402 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft caRepository: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 01 Aug 2024 17:21:02 +0000 Certificate not after: Thu 31 Jul 2025 17:26:02 +0000 Subordinate resources: AS: 52662 IP: 177.67.24.0/22 IP: 189.113.128.0/20 IP: 2804:33b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bb:8e:49:de:9f:c2:44:d0:50:e2:c9:a4:69:81:03:cb:5f:64:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 1 17:21:02 2024 GMT Not After : Jul 31 17:26:02 2025 GMT Subject: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:94:b9:eb:f6:cb:ab:a9:7b:e5:23:21:e8: 9f:7b:fd:b7:6e:48:c2:f3:23:77:8a:fd:ab:f7:7d: ef:d9:93:80:71:d3:08:b7:bd:27:c6:c7:21:91:d8: 50:6a:b4:d9:69:f0:ee:b8:33:aa:17:99:bf:7a:3a: 54:e9:ed:8a:a7:33:13:01:43:26:07:98:26:5e:8a: 4a:c2:24:72:2c:14:ed:42:f8:b5:56:b5:9d:dd:25: dc:3c:d6:e1:0b:a0:3a:b0:6d:0d:0a:d6:6a:15:6c: 67:c5:55:f8:b3:8f:43:4b:7c:c1:d6:6e:5c:91:66: 73:82:ec:c2:13:dd:f6:cc:e6:be:0f:f2:9d:51:35: 28:89:ed:2c:ef:e2:05:de:99:79:6d:9c:bc:79:76: 10:a2:e4:9f:5e:8e:4f:a0:4d:16:73:b4:b5:d0:fd: e6:88:74:0b:f3:b2:ed:ab:38:dd:43:d3:07:a3:db: 8f:3e:aa:b0:09:c6:0b:e5:9d:f1:94:fa:8c:81:5e: 0d:ef:e2:88:4c:a7:4a:91:39:eb:11:68:5c:e6:2a: f6:c0:e0:d3:d9:0e:66:f8:6e:72:1f:20:1a:ae:63: b6:da:94:0d:49:04:f1:0c:93:41:53:f0:4f:ca:a1: d4:87:55:d0:f9:0a:94:11:82:d1:ad:79:4a:0e:24: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.67.24.0/22 189.113.128.0/20 IPv6: 2804:33b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52662 Signature Algorithm: sha256WithRSAEncryption 82:31:37:af:4f:79:f8:d7:a7:d6:9a:89:2d:e7:10:8b:72:45: 34:53:a5:ca:e6:d7:c0:0c:d1:5d:92:67:bc:65:9f:eb:0b:70: 8e:a8:8c:be:a0:7f:13:aa:09:35:78:fe:ad:d4:23:29:f9:ed: 21:ec:60:3a:a4:72:58:8a:83:79:d3:54:71:b3:0b:89:4b:df: f6:59:92:03:9d:ae:45:19:92:ce:63:d9:58:4e:43:66:72:1b: d1:a0:57:89:f1:6e:51:ee:c7:4a:3f:d2:4f:f5:a7:75:e5:67: d9:63:57:57:8a:58:0c:34:9d:08:c8:0d:ca:ad:24:a1:31:44: a1:ba:63:01:d2:9d:0e:49:51:45:38:0c:f0:a5:35:3e:01:58: da:1c:99:2a:14:08:fe:6c:25:b2:2e:a9:40:d1:5b:ee:dc:68: 87:7a:4d:bf:35:84:98:37:39:92:d5:18:a5:8e:98:64:73:ae: 98:ad:f4:dd:71:de:f4:2b:59:bf:0b:e3:33:ce:f4:69:45:6e: cb:28:56:20:f7:5b:e7:02:d2:c0:d5:86:f9:fe:c3:12:f6:28: a3:33:08:fc:72:a2:2d:5f:1e:5d:af:f1:af:6f:69:7c:83:a9: 62:b9:a0:31:07:0a:1e:2a:6c:01:2a:98:d3:5f:89:2b:87:c2: 65:20:6b:0c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUELuOSd6fwkTQUOLJpGmBA8tfZAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDExNzIxMDJaFw0yNTA3MzExNzI2MDJaMDMxMTAvBgNV BAMTKEM1QzI5NUU2QTU4M0VFNUFGRUQ2ODhCRjY3RkI1RDYyRENFMTZGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCpS56/bLq6l75SMh6J97/bdu SMLzI3eK/av3fe/Zk4Bx0wi3vSfGxyGR2FBqtNlp8O64M6oXmb96OlTp7YqnMxMB QyYHmCZeikrCJHIsFO1C+LVWtZ3dJdw81uELoDqwbQ0K1moVbGfFVfizj0NLfMHW blyRZnOC7MIT3fbM5r4P8p1RNSiJ7Szv4gXemXltnLx5dhCi5J9ejk+gTRZztLXQ /eaIdAvzsu2rON1D0wej248+qrAJxgvlnfGU+oyBXg3v4ohMp0qROesRaFzmKvbA 4NPZDmb4bnIfIBquY7balA1JBPEMk0FT8E/KodSHVdD5CpQRgtGteUoOJJ29AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFwpXmpYPuWv7W iL9n+11i3OFvtzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWo4 Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tDRFQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVq OENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAvQzVD Mjk1RTZBNTgzRUU1QUZFRDY4OEJGNjdGQjVENjJEQ0UxNkZCNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsUMYAwQEvXGAMA0EAgACMAcDBQAoBDOwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNtjANBgkqhkiG9w0BAQsFAAOCAQEAgjE3r095 +Nen1pqJLecQi3JFNFOlyubXwAzRXZJnvGWf6wtwjqiMvqB/E6oJNXj+rdQjKfnt IexgOqRyWIqDedNUcbMLiUvf9lmSA52uRRmSzmPZWE5DZnIb0aBXifFuUe7HSj/S T/WndeVn2WNXV4pYDDSdCMgNyq0koTFEobpjAdKdDklRRTgM8KU1PgFY2hyZKhQI /mwlsi6pQNFb7txoh3pNvzWEmDc5ktUYpY6YZHOumK303XHe9CtZvwvjM870aUVu yyhWIPdb5wLSwNWG+f7DEvYoozMI/HKiLV8eXa/xr29pfIOpYrmgMQcKHipsASqY 01+JK4fCZSBrDA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:13 2024 by rpki-client on console.sobornost.net