$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D313C5EF344C636E0D5A8A3E94850385A1F86F34.cer File: D313C5EF344C636E0D5A8A3E94850385A1F86F34.cer (raw, json) Hash identifier: Mq5q9dnVOl6Iz81aESPzXK5j0dvV1WVSo8bNGBmsAxA= Subject key identifier: D3:13:C5:EF:34:4C:63:6E:0D:5A:8A:3E:94:85:03:85:A1:F8:6F:34 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 17D6BB6F5C5E186A3931E74F0CCE27EC4CF7FF87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/D313C5EF344C636E0D5A8A3E94850385A1F86F34.mft caRepository: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 14 Oct 2024 01:38:25 +0000 Certificate not after: Mon 13 Oct 2025 01:43:25 +0000 Subordinate resources: AS: 263665 IP: 45.165.20.0/22 IP: 45.227.188.0/22 IP: 131.161.108.0/22 IP: 131.255.156.0/22 IP: 138.255.172.0/22 IP: 168.196.20.0/22 IP: 170.150.112.0/22 IP: 170.150.204.0/22 IP: 191.241.32.0/21 IP: 2804:1134::/32 IP: 2804:343c::/32 IP: 2804:47c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d6:bb:6f:5c:5e:18:6a:39:31:e7:4f:0c:ce:27:ec:4c:f7:ff:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 14 01:38:25 2024 GMT Not After : Oct 13 01:43:25 2025 GMT Subject: CN=D313C5EF344C636E0D5A8A3E94850385A1F86F34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:21:ca:72:1b:40:9a:8f:5a:71:78:37:cf: 06:c6:7f:70:9d:06:93:bf:53:f2:7f:d5:05:b7:bd: cf:e8:9a:d8:97:bb:b3:87:d5:c8:7e:17:0b:07:9a: 24:e8:31:df:89:e8:b9:80:20:df:76:42:25:68:54: 66:bb:f5:03:ca:e0:e2:a3:29:d1:e7:7a:2a:e9:06: 39:a0:3d:a1:5c:a4:42:e3:07:9a:78:d6:f0:85:14: e5:bb:86:bc:c7:01:e4:bd:98:54:9f:41:85:50:82: 18:5f:2b:2d:10:f1:b6:8c:b4:d2:a4:8e:41:3f:fc: de:9d:48:0d:4e:d2:fd:db:15:1a:ff:21:90:ea:b6: 4f:9d:4b:c7:cb:11:82:1d:b6:9d:2e:eb:37:7a:1a: da:5f:d3:94:23:8e:76:7c:8b:0d:f6:38:2e:87:c2: 77:6e:07:b6:34:a7:64:28:1e:3f:9f:2c:32:c2:56: bf:1b:0e:06:c6:48:ca:bc:61:b7:20:13:f0:09:09: c9:5e:08:ee:6b:04:ca:15:88:2b:5c:7d:f6:a8:2a: 0a:21:93:70:dd:40:cc:bd:3c:b5:b9:04:70:ad:c2: 65:e5:35:7b:ad:91:6a:80:f0:b6:f9:00:1a:01:2d: 3f:7a:cc:db:8d:4e:ec:40:a7:21:a2:40:07:49:f7: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:13:C5:EF:34:4C:63:6E:0D:5A:8A:3E:94:85:03:85:A1:F8:6F:34 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/D313C5EF344C636E0D5A8A3E94850385A1F86F34.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.20.0/22 45.227.188.0/22 131.161.108.0/22 131.255.156.0/22 138.255.172.0/22 168.196.20.0/22 170.150.112.0/22 170.150.204.0/22 191.241.32.0/21 IPv6: 2804:1134::/32 2804:343c::/32 2804:47c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263665 Signature Algorithm: sha256WithRSAEncryption ae:52:91:24:8e:0f:af:39:67:2c:64:ed:ac:a7:17:46:33:14: 50:72:5a:55:c5:58:49:40:9c:b3:67:b8:b7:c7:a7:e4:e3:c5: dd:d7:0d:12:0c:ad:47:fd:04:1f:5d:6a:f2:76:37:cb:35:86: 11:48:54:52:1c:72:6b:9b:16:0a:74:ea:f6:18:8c:d8:44:29: e4:8e:13:f3:70:13:9f:d3:49:98:b1:fb:57:6d:4f:90:0a:b9: 3a:23:bf:a2:b8:02:d2:85:13:bf:9c:d2:7d:f1:67:bd:ae:08: 20:df:e5:0b:00:5f:22:e7:f4:be:80:bd:9a:72:eb:7d:44:09: db:a7:70:01:59:77:28:ac:4f:45:d3:1e:93:19:d6:fd:3b:e3: d0:6b:59:10:e6:1f:37:68:36:3a:3b:98:0b:a6:9d:96:80:da: 3e:49:24:54:b6:af:0c:9f:a7:bd:24:c2:3a:1b:b0:aa:1a:03: 00:bc:41:4b:a8:fe:a0:18:d3:a6:2c:d1:57:16:e5:57:08:68: c2:79:6c:29:60:eb:90:71:a9:ca:75:42:8f:bb:5c:55:18:36: 0d:34:f6:e6:0f:f3:f5:bb:7c:77:68:09:18:1d:45:ea:5e:39: b4:bc:f5:41:aa:b9:a1:73:8d:ff:bc:df:5c:0b:57:21:7d:d5: 09:7f:4c:1d -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUF9a7b1xeGGo5MedPDM4n7Ez3/4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMTQwMTM4MjVaFw0yNTEwMTMwMTQzMjVaMDMxMTAvBgNV BAMTKEQzMTNDNUVGMzQ0QzYzNkUwRDVBOEEzRTk0ODUwMzg1QTFGODZGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtiHKchtAmo9acXg3zwbGf3Cd BpO/U/J/1QW3vc/omtiXu7OH1ch+FwsHmiToMd+J6LmAIN92QiVoVGa79QPK4OKj KdHneirpBjmgPaFcpELjB5p41vCFFOW7hrzHAeS9mFSfQYVQghhfKy0Q8baMtNKk jkE//N6dSA1O0v3bFRr/IZDqtk+dS8fLEYIdtp0u6zd6Gtpf05QjjnZ8iw32OC6H wnduB7Y0p2QoHj+fLDLCVr8bDgbGSMq8YbcgE/AJCcleCO5rBMoViCtcffaoKgoh k3DdQMy9PLW5BHCtwmXlNXutkWqA8Lb5ABoBLT96zNuNTuxApyGiQAdJ9/HFAgMB AAGjggN4MIIDdDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTTE8XvNExjbg1a ij6UhQOFofhvNDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU03 WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1ncmYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlN N1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAvRDMx M0M1RUYzNDRDNjM2RTBENUE4QTNFOTQ4NTAzODVBMUY4NkYzNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEH AQH/BF0wWzA8BAIAATA2AwQCLaUUAwQCLeO8AwQCg6FsAwQCg/+cAwQCiv+sAwQC qMQUAwQCqpZwAwQCqpbMAwQDv/EgMBsEAgACMBUDBQAoBBE0AwUAKAQ0PAMFACgE R8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAXxMA0GCSqGSIb3DQEBCwUAA4IB AQCuUpEkjg+vOWcsZO2spxdGMxRQclpVxVhJQJyzZ7i3x6fk48Xd1w0SDK1H/QQf XWrydjfLNYYRSFRSHHJrmxYKdOr2GIzYRCnkjhPzcBOf00mYsftXbU+QCrk6I7+i uALShRO/nNJ98We9rggg3+ULAF8i5/S+gL2acut9RAnbp3ABWXcorE9F0x6TGdb9 O+PQa1kQ5h83aDY6O5gLpp2WgNo+SSRUtq8Mn6e9JMI6G7CqGgMAvEFLqP6gGNOm LNFXFuVXCGjCeWwpYOuQcanKdUKPu1xVGDYNNPbmD/P1u3x3aAkYHUXqXjm0vPVB qrmhc43/vN9cC1chfdUJf0wd -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:16 2024 by rpki-client on console.sobornost.net