$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer File: CF89ECF1906934B8868749FE10703ECBB434D3B9.cer (raw, json) Hash identifier: 50jP8BC0wffVA0tsuZS/P2IlZOvaiS+ToRvr2B64HB0= Subject key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 53A5B08EA72D524CBD6D4A369486A68F5715EC9F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.mft caRepository: rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 22:37:15 +0000 Certificate not after: Wed 02 Apr 2025 22:42:15 +0000 Subordinate resources: AS: 262505 IP: 177.55.144.0/20 IP: 177.66.224.0/20 IP: 2804:544::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jul 2024 12:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a5:b0:8e:a7:2d:52:4c:bd:6d:4a:36:94:86:a6:8f:57:15:ec:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 22:37:15 2024 GMT Not After : Apr 2 22:42:15 2025 GMT Subject: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:bd:ee:b4:58:7e:3e:dc:8d:f2:be:7a:78: 79:d2:26:99:b9:e8:f1:97:d0:bb:95:d2:35:42:98: e8:79:e7:2e:65:fb:f4:69:61:73:6a:b1:dd:f1:4a: 7b:d7:29:63:ab:28:5c:45:6a:ab:5b:a9:dd:2f:dc: e2:e7:70:55:a9:b2:d0:89:82:b9:7f:94:10:7b:ec: 3a:3f:8e:ad:c0:a8:ef:b2:17:30:59:cf:f7:bd:1f: a8:ce:88:af:38:d9:30:af:6a:16:85:12:b8:96:79: 23:a2:02:43:57:59:88:52:61:b9:36:e8:49:fe:80: bb:4e:dc:02:c8:1a:34:a0:3c:54:8d:77:15:45:36: f0:b7:05:9f:22:1b:3a:1b:91:b3:9e:12:29:ae:22: 5a:cd:b1:dd:5a:78:2c:2b:49:ad:32:a6:0d:80:ab: 2e:d2:d7:94:95:11:50:b8:54:2c:42:4e:7b:12:d0: f3:35:25:86:08:ab:57:43:92:e0:dc:28:1d:db:c0: c3:a3:f2:da:74:3a:12:9f:63:e0:e8:6d:84:be:3c: 23:7c:1a:31:d1:1e:1c:0f:f2:21:60:fc:19:3c:43: 04:ef:c5:35:35:17:ae:99:1a:d2:dd:8a:50:7e:5c: f3:f1:0d:f4:db:38:29:46:19:24:e1:03:bc:c8:36: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.55.144.0/20 177.66.224.0/20 IPv6: 2804:544::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262505 Signature Algorithm: sha256WithRSAEncryption d5:bf:69:a1:5d:cf:c5:1a:a2:63:a4:f8:c0:ac:1f:c1:46:c9: fb:88:4a:a9:00:f1:47:f1:9b:68:2a:f1:b8:70:ab:2f:25:e4: 65:8e:b3:8d:c0:04:ff:29:f6:82:b0:b3:ef:ff:35:ce:5e:4a: f4:ce:5b:f3:2d:d3:f3:7a:36:3b:4d:42:c7:29:de:cd:9d:07: 8e:c0:f5:f6:18:1c:d8:19:86:9a:9f:09:a5:b7:23:59:4c:0f: 7b:83:fb:04:30:3a:10:59:84:a8:ac:d3:b0:58:6d:23:f0:f1: 24:22:a6:66:a1:bb:9b:47:f0:5c:86:d6:9d:61:f5:51:dc:e2: 1e:d7:e4:08:74:b5:cb:a0:89:c2:16:c2:31:2e:2e:f1:fe:e3: 44:d0:06:8b:c0:41:d6:33:2d:5c:fc:bb:29:e9:f6:2e:b3:63: fd:58:e5:7f:ec:8b:d5:16:21:cc:51:7a:cd:77:ac:f9:8b:47: 2d:17:89:2b:6a:71:76:21:ba:37:5d:1b:25:82:f0:6d:d4:3b: 19:42:1d:f6:13:35:ae:3c:f2:0d:d8:7a:8e:4e:e7:62:58:8f: 0d:31:c7:38:13:13:0d:fc:9d:f4:88:4e:05:34:9b:9f:6f:48: 27:4d:dd:bd:66:e0:3d:68:45:d3:14:60:c0:fd:21:51:d7:bb: 6d:7c:14:91 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUU6WwjqctUky9bUo2lIamj1cV7J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMjM3MTVaFw0yNTA0MDIyMjQyMTVaMDMxMTAvBgNV BAMTKENGODlFQ0YxOTA2OTM0Qjg4Njg3NDlGRTEwNzAzRUNCQjQzNEQzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJ73utFh+PtyN8r56eHnSJpm5 6PGX0LuV0jVCmOh55y5l+/RpYXNqsd3xSnvXKWOrKFxFaqtbqd0v3OLncFWpstCJ grl/lBB77Do/jq3AqO+yFzBZz/e9H6jOiK842TCvahaFEriWeSOiAkNXWYhSYbk2 6En+gLtO3ALIGjSgPFSNdxVFNvC3BZ8iGzobkbOeEimuIlrNsd1aeCwrSa0ypg2A qy7S15SVEVC4VCxCTnsS0PM1JYYIq1dDkuDcKB3bwMOj8tp0OhKfY+DobYS+PCN8 GjHRHhwP8iFg/Bk8QwTvxTU1F66ZGtLdilB+XPPxDfTbOClGGSThA7zINtKhAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTPiezxkGk0uIaH Sf4QcD7LtDTTuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1ZK emdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdpNUMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdW SnpnZEpDajV2R3Y2V0FxV0xrMkxvZ2lUUFRZemREZDgyZnE2TE03aTVDLzEvQ0Y4 OUVDRjE5MDY5MzRCODg2ODc0OUZFMTA3MDNFQ0JCNDM0RDNCOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsTeQAwQEsULgMA0EAgACMAcDBQAoBAVEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBaTANBgkqhkiG9w0BAQsFAAOCAQEA1b9poV3P xRqiY6T4wKwfwUbJ+4hKqQDxR/GbaCrxuHCrLyXkZY6zjcAE/yn2grCz7/81zl5K 9M5b8y3T83o2O01CxynezZ0HjsD19hgc2BmGmp8JpbcjWUwPe4P7BDA6EFmEqKzT sFhtI/DxJCKmZqG7m0fwXIbWnWH1UdziHtfkCHS1y6CJwhbCMS4u8f7jRNAGi8BB 1jMtXPy7Ken2LrNj/Vjlf+yL1RYhzFF6zXes+YtHLReJK2pxdiG6N10bJYLwbdQ7 GUId9hM1rjzyDdh6jk7nYliPDTHHOBMTDfyd9IhOBTSbn29IJ03dvWbgPWhF0xRg wP0hUde7bXwUkQ== -----END CERTIFICATE-----Generated at Sun Jul 14 11:07:42 2024 by rpki-client on console.sobornost.net