$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.cer File: D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.cer (raw, json) Hash identifier: irKGmv+MSWn9r5D/7nylf9DGaM999h6s7k6beSHiDC8= Subject key identifier: D9:B5:5D:E2:DD:29:45:6B:0C:FB:2E:D2:81:84:37:4E:BC:A8:DE:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 76FEAFB55E42A3861CFD380843ABE034AF5AA182 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.mft caRepository: rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 04 Oct 2024 23:07:10 +0000 Certificate not after: Fri 03 Oct 2025 23:12:10 +0000 Subordinate resources: AS: 263326 IP: 191.7.176.0/21 IP: 2804:1458::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fe:af:b5:5e:42:a3:86:1c:fd:38:08:43:ab:e0:34:af:5a:a1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 4 23:07:10 2024 GMT Not After : Oct 3 23:12:10 2025 GMT Subject: CN=D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:69:11:21:d2:55:f9:b0:37:d7:f2:09:70: 38:df:18:b9:44:05:4e:02:8e:e2:6e:f8:81:8f:43: 30:50:28:16:e4:3b:8f:da:c9:b1:ca:e1:6d:4f:35: a0:b9:a1:a1:ea:03:b3:77:a8:ca:4f:0f:01:03:1a: 61:da:13:a3:ef:26:96:8c:81:4b:fd:1e:36:d0:f2: b1:dc:64:71:2c:48:55:06:50:82:4a:ef:36:a3:3f: c8:ff:9b:2b:cc:20:80:3a:38:ac:e1:39:e4:c2:16: e9:d8:62:7c:30:3b:4c:d0:23:fb:03:8d:5e:c9:4f: 0e:b5:87:56:87:97:5c:eb:a5:3b:ce:3f:9b:8d:64: 64:82:26:e0:ca:99:bc:0f:22:f6:1a:74:d5:d5:0b: 78:7a:4d:71:a9:61:56:f5:59:1a:b3:41:70:e7:b1: a4:61:56:de:99:86:4e:25:45:d1:4b:13:dc:81:ec: 47:ce:ea:d5:64:7d:68:c8:31:18:c0:f0:9c:81:70: 98:7c:b9:ac:da:fe:7a:05:b3:43:3f:8b:f0:da:8b: 6f:bc:25:02:a4:33:39:df:7a:6b:1e:a8:9a:a4:c8: fd:ea:a8:10:15:bc:57:91:9f:d2:97:8e:12:d7:f2: 87:a2:fd:e4:37:be:33:6c:e9:19:59:2a:98:e9:78: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:B5:5D:E2:DD:29:45:6B:0C:FB:2E:D2:81:84:37:4E:BC:A8:DE:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/D9B55DE2DD29456B0CFB2ED28184374EBCA8DE9B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.7.176.0/21 IPv6: 2804:1458::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263326 Signature Algorithm: sha256WithRSAEncryption 9c:42:4d:2a:45:3c:07:83:48:87:5d:17:9d:01:5e:2c:09:5a: 7c:4e:8c:43:5d:6a:fb:0c:22:16:a4:6d:53:e9:52:b2:07:15: 34:cd:0a:a2:87:59:0d:56:bf:46:f4:3a:ca:37:35:cc:37:41: 5f:37:9c:5e:e9:4f:2f:d7:8b:ef:cd:9e:b4:c2:e7:e7:b1:ae: a9:0c:b1:00:56:34:05:e4:55:7e:75:d8:f7:a9:11:86:69:8c: 84:b0:ec:74:7a:a6:c4:4d:6f:07:51:08:95:58:7b:cf:41:e6: 06:17:10:40:90:a0:a7:79:03:d2:82:64:0b:5f:4c:86:a8:07: 2f:74:c7:88:0a:0b:fd:49:18:83:37:38:3b:0a:2d:76:24:3b: 6d:46:41:d1:e7:4c:b4:c4:2a:a5:d2:b1:4e:41:77:57:cc:75: 63:bd:28:c9:21:00:ab:e8:a5:1c:58:c0:ab:f1:02:2d:44:2e: b8:5b:f2:0d:46:4c:89:eb:18:6f:19:c5:a4:ca:3d:f7:c5:97: 6c:dd:7b:af:39:52:18:f1:49:55:61:5d:3a:6a:10:b4:56:c5: 45:8c:c2:61:eb:52:71:0a:f3:f7:9e:8c:5e:ef:17:08:a9:90: 80:63:c8:5f:e0:d4:6d:84:a7:a2:d0:ae:42:57:ef:b0:4a:aa: 0c:f2:f2:e8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdv6vtV5Co4Yc/TgIQ6vgNK9aoYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMDQyMzA3MTBaFw0yNTEwMDMyMzEyMTBaMDMxMTAvBgNV BAMTKEQ5QjU1REUyREQyOTQ1NkIwQ0ZCMkVEMjgxODQzNzRFQkNBOERFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYWkRIdJV+bA31/IJcDjfGLlE BU4CjuJu+IGPQzBQKBbkO4/aybHK4W1PNaC5oaHqA7N3qMpPDwEDGmHaE6PvJpaM gUv9HjbQ8rHcZHEsSFUGUIJK7zajP8j/myvMIIA6OKzhOeTCFunYYnwwO0zQI/sD jV7JTw61h1aHl1zrpTvOP5uNZGSCJuDKmbwPIvYadNXVC3h6TXGpYVb1WRqzQXDn saRhVt6Zhk4lRdFLE9yB7EfO6tVkfWjIMRjA8JyBcJh8uaza/noFs0M/i/Dai2+8 JQKkMznfemseqJqkyP3qqBAVvFeRn9KXjhLX8oei/eQ3vjNs6RlZKpjpeIXPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZtV3i3SlFawz7 LtKBhDdOvKjemzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmZW ZGZzcWJ0QzdtSGtKRVl4M0hFbmo3NjNpZTFFMVdLdHB0Z01GdXBVSmkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zm VmRmc3FidEM3bUhrSkVZeDNIRW5qNzYzaWUxRTFXS3RwdGdNRnVwVUppLzAvRDlC NTVERTJERDI5NDU2QjBDRkIyRUQyODE4NDM3NEVCQ0E4REU5Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDvwewMA0EAgACMAcDBQAoBBRYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQEnjANBgkqhkiG9w0BAQsFAAOCAQEAnEJNKkU8B4NIh10X nQFeLAlafE6MQ11q+wwiFqRtU+lSsgcVNM0KoodZDVa/RvQ6yjc1zDdBXzecXulP L9eL782etMLn57GuqQyxAFY0BeRVfnXY96kRhmmMhLDsdHqmxE1vB1EIlVh7z0Hm BhcQQJCgp3kD0oJkC19MhqgHL3THiAoL/UkYgzc4OwotdiQ7bUZB0edMtMQqpdKx TkF3V8x1Y70oySEAq+ilHFjAq/ECLUQuuFvyDUZMiesYbxnFpMo998WXbN17rzlS GPFJVWFdOmoQtFbFRYzCYetScQrz956MXu8XCKmQgGPIX+DUbYSnotCuQlfvsEqq DPLy6A== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:17 2024 by rpki-client on console.sobornost.net