$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D63959B514900E44DD7BE86715D804ACD701828D.cer File: D63959B514900E44DD7BE86715D804ACD701828D.cer (raw, json) Hash identifier: +KVV05YHXyF/CpJGvGf1auhJVaj7Mxs1XBBYfrqQ5wM= Subject key identifier: D6:39:59:B5:14:90:0E:44:DD:7B:E8:67:15:D8:04:AC:D7:01:82:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C6696606FDC321EE4965B831F3CBD3F8D242A53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/D63959B514900E44DD7BE86715D804ACD701828D.mft caRepository: rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 03 May 2024 19:42:15 +0000 Certificate not after: Fri 02 May 2025 19:47:15 +0000 Subordinate resources: AS: 262834 IP: 186.251.192.0/21 IP: 189.90.28.0/22 IP: 2804:2c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:66:96:60:6f:dc:32:1e:e4:96:5b:83:1f:3c:bd:3f:8d:24:2a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 3 19:42:15 2024 GMT Not After : May 2 19:47:15 2025 GMT Subject: CN=D63959B514900E44DD7BE86715D804ACD701828D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:a1:38:77:37:92:c4:91:35:88:e1:d4:db: 7e:07:9e:98:46:d7:1b:20:5f:70:f1:72:e6:98:c9: d3:d4:58:ba:23:3a:bf:36:74:d3:ee:eb:c7:e0:86: 2d:51:18:97:1c:35:46:9a:48:42:68:17:65:8e:eb: 2e:4c:53:a7:b4:a1:d9:0a:11:76:82:95:50:21:1e: 9a:b5:46:eb:7d:a1:ed:e6:d7:aa:12:cc:c8:74:87: 79:2f:c9:94:a1:6a:e7:2e:be:a3:fe:a3:40:f8:d8: 01:d0:2e:d1:7e:53:e8:20:50:da:8f:15:b8:1c:ca: 7d:61:06:87:6e:83:f8:c8:65:69:b6:99:a2:1c:47: 4c:1f:42:2f:49:d3:16:3c:ee:fd:41:02:ad:7f:8a: b5:43:b7:94:4f:11:01:d9:31:97:95:f0:04:76:0e: f7:04:ac:49:04:6f:2e:17:56:74:fe:4d:70:ee:21: 54:f8:30:7a:6c:09:49:5d:c6:88:e8:50:9d:3f:89: 1a:24:7d:29:b7:63:7a:28:20:0a:d8:dd:96:f4:b8: 68:de:07:10:59:db:95:2f:8f:ac:a8:a7:3d:a4:02: 99:d9:54:ba:f3:95:66:13:b0:68:63:b0:7e:ad:11: c2:93:62:96:db:0a:bd:08:9c:ab:3b:e4:a8:a8:50: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:39:59:B5:14:90:0E:44:DD:7B:E8:67:15:D8:04:AC:D7:01:82:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AHzZY53KQrdqWEWn8dYu1boQnKh9vf9BeR4mnbNE8NS/0/D63959B514900E44DD7BE86715D804ACD701828D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.251.192.0/21 189.90.28.0/22 IPv6: 2804:2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262834 Signature Algorithm: sha256WithRSAEncryption b7:62:e8:4f:76:09:aa:af:03:05:a3:91:6e:5b:71:40:bc:e7: a3:72:79:a5:8e:40:42:dc:46:45:10:2c:ac:2b:a2:87:15:ad: 8e:44:3d:29:b8:91:04:ec:96:45:75:83:19:b8:27:57:f4:81: 47:71:ab:07:a7:ca:0e:f8:d8:6e:f5:04:41:d0:ad:29:e4:fe: 8e:71:85:92:ab:91:5c:f0:fb:ac:f8:91:c3:3b:95:03:12:5e: 7a:ed:49:37:7e:02:29:1b:9e:20:6a:9a:a5:9b:cb:31:85:c5: 58:58:b3:f4:b7:b0:71:ef:ac:5a:2f:3b:ec:26:ff:ed:ec:e5: 42:fd:6c:d4:89:66:25:6b:4d:80:7d:65:2f:28:30:ba:e7:70: 22:48:49:98:10:9a:0d:e5:f7:79:e1:93:e6:71:fd:b9:3b:b0: 83:6d:bf:8e:0a:a5:72:78:37:4c:b0:15:5f:25:81:78:94:2e: d2:81:a3:bb:ca:06:12:15:c3:26:8a:4a:51:2d:5b:c9:61:dc: 4f:8c:27:04:32:52:d9:f8:fc:d1:75:4a:70:b2:59:f8:60:c5: 80:c6:49:9a:a8:68:31:54:dd:65:06:a5:dc:f5:63:ac:6f:66: 9e:be:46:c7:2e:81:68:5d:b5:0a:ed:14:44:40:bc:15:65:f3: 00:3a:4f:23 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfGaWYG/cMh7klluDHzy9P40kKlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MDMxOTQyMTVaFw0yNTA1MDIxOTQ3MTVaMDMxMTAvBgNV BAMTKEQ2Mzk1OUI1MTQ5MDBFNDRERDdCRTg2NzE1RDgwNEFDRDcwMTgyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPd6E4dzeSxJE1iOHU234HnphG 1xsgX3DxcuaYydPUWLojOr82dNPu68fghi1RGJccNUaaSEJoF2WO6y5MU6e0odkK EXaClVAhHpq1Rut9oe3m16oSzMh0h3kvyZShaucuvqP+o0D42AHQLtF+U+ggUNqP Fbgcyn1hBodug/jIZWm2maIcR0wfQi9J0xY87v1BAq1/irVDt5RPEQHZMZeV8AR2 DvcErEkEby4XVnT+TXDuIVT4MHpsCUldxojoUJ0/iRokfSm3Y3ooIArY3Zb0uGje BxBZ25Uvj6yopz2kApnZVLrzlWYTsGhjsH6tEcKTYpbbCr0InKs75KioUMZhAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWOVm1FJAORN17 6GcV2ASs1wGCjTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEFI elpZNTNLUXJkcVdFV244ZFl1MWJvUW5LaDl2ZjlCZVI0bW5iTkU4TlMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhB SHpaWTUzS1FyZHFXRVduOGRZdTFib1FuS2g5dmY5QmVSNG1uYk5FOE5TLzAvRDYz OTU5QjUxNDkwMEU0NEREN0JFODY3MTVEODA0QUNENzAxODI4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDuvvAAwQCvVocMA0EAgACMAcDBQAoBALAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCsjANBgkqhkiG9w0BAQsFAAOCAQEAt2LoT3YJ qq8DBaORbltxQLzno3J5pY5AQtxGRRAsrCuihxWtjkQ9KbiRBOyWRXWDGbgnV/SB R3GrB6fKDvjYbvUEQdCtKeT+jnGFkquRXPD7rPiRwzuVAxJeeu1JN34CKRueIGqa pZvLMYXFWFiz9Lewce+sWi877Cb/7ezlQv1s1IlmJWtNgH1lLygwuudwIkhJmBCa DeX3eeGT5nH9uTuwg22/jgqlcng3TLAVXyWBeJQu0oGju8oGEhXDJopKUS1byWHc T4wnBDJS2fj80XVKcLJZ+GDFgMZJmqhoMVTdZQal3PVjrG9mnr5Gxy6BaF21Cu0U REC8FWXzADpPIw== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:16 2024 by rpki-client on console.sobornost.net