$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer (raw, json) Hash identifier: Qezp9MIaSNahnriQ2+CUNHZ8TENK+ntEnx7bLJgizPU= Subject key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0CDACC61E399860C09A05ACDA884DDC2C2026AF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft caRepository: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:56:17 +0000 Certificate not after: Thu 03 Apr 2025 03:01:17 +0000 Subordinate resources: AS: 264992 IP: 170.84.96.0/22 IP: 2804:3118::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:da:cc:61:e3:99:86:0c:09:a0:5a:cd:a8:84:dd:c2:c2:02:6a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:56:17 2024 GMT Not After : Apr 3 03:01:17 2025 GMT Subject: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:0a:b2:48:4d:cd:4b:95:0b:b3:09:a8:31: ad:88:9e:2d:58:6c:b7:07:b6:1a:27:45:da:ca:8b: e3:f4:a0:5a:08:50:65:86:f0:49:4f:da:22:12:7b: fb:ce:df:9e:a9:31:7b:9a:cb:ca:ac:73:2e:53:1e: 79:78:b5:f8:43:64:da:a7:0e:6f:84:d6:9b:ed:6b: b1:6b:c9:4e:78:06:4c:d3:65:50:e3:ca:9e:90:86: ab:0e:3e:eb:a7:4f:67:1b:36:b0:ce:59:0d:ae:6b: af:f6:c1:a3:3c:24:a7:6f:c0:8d:f3:35:e3:66:b6: 46:ef:1e:87:92:90:00:1d:cf:16:36:85:31:94:36: f8:7f:2b:36:7c:53:8e:33:63:c8:5f:7e:cd:7b:d3: 29:2f:c0:26:52:13:5a:ab:fb:3d:85:eb:07:47:17: 9d:03:10:97:80:c2:4c:2d:38:7d:ee:e2:38:25:e8: 62:2a:d8:92:5a:fe:07:a0:a7:26:c4:d2:74:b2:c3: a3:84:0a:e7:11:09:9e:2a:0f:a6:5d:0f:9a:c2:62: b7:e8:cc:45:7a:27:1f:49:21:57:13:59:2b:e6:e5: 24:a2:d9:48:3a:c1:35:e8:6b:bc:67:39:ec:cb:ff: 9a:a0:53:ee:8e:d0:09:15:6e:73:f6:25:ce:7c:fd: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.96.0/22 IPv6: 2804:3118::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264992 Signature Algorithm: sha256WithRSAEncryption 5e:54:e4:b7:04:59:68:62:37:fa:b3:eb:99:1a:04:b1:b6:ea: 1f:b5:93:73:84:13:5d:5e:5e:c8:bc:85:42:9d:52:27:9c:85: d2:27:03:ad:8f:3b:02:c3:f8:bf:fd:7d:37:0c:bb:0f:7f:af: 1a:98:e2:b1:ba:3a:68:7d:c7:fc:d8:ec:ba:8f:fb:ca:01:e4: d1:04:e7:34:c2:c0:4c:f0:46:e7:bb:57:f9:a7:35:11:59:e3: 8d:72:c3:d2:dc:62:2f:a4:69:38:7f:9d:d7:3e:ea:50:12:aa: db:7e:39:61:f1:7c:fb:1f:71:24:6d:50:38:5d:71:1a:0b:14: a9:b8:3a:5b:cc:39:97:7e:af:b4:96:69:c3:ab:a4:ae:5b:9b: bf:ae:7a:51:84:c2:f8:cd:69:92:1c:2c:be:26:3f:ac:6e:86: 0d:e1:cc:19:3c:de:f7:09:c4:02:c0:0d:bd:54:19:f2:61:2e: 85:20:08:fb:5c:4a:d1:34:21:d0:4a:94:f0:9e:6d:35:64:a0: 4e:6c:30:b1:c3:ef:66:f4:93:9d:66:c8:bf:35:3f:6d:f7:82: 6d:82:c9:6f:8d:4e:c7:84:a2:6c:ad:38:9e:54:d5:8c:ce:ff: c3:38:c7:13:bb:57:0b:61:49:ba:7b:d6:2a:33:3d:8d:d1:27: 7e:9e:d0:bd -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUDNrMYeOZhgwJoFrNqITdwsICavQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjU2MTdaFw0yNTA0MDMwMzAxMTdaMDMxMTAvBgNV BAMTKERBNDhDQUMxQUQ5Mjc2OEI1Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgQqySE3NS5ULswmoMa2Ini1Y bLcHthonRdrKi+P0oFoIUGWG8ElP2iISe/vO356pMXuay8qscy5THnl4tfhDZNqn Dm+E1pvta7FryU54BkzTZVDjyp6QhqsOPuunT2cbNrDOWQ2ua6/2waM8JKdvwI3z NeNmtkbvHoeSkAAdzxY2hTGUNvh/KzZ8U44zY8hffs170ykvwCZSE1qr+z2F6wdH F50DEJeAwkwtOH3u4jgl6GIq2JJa/gegpybE0nSyw6OECucRCZ4qD6ZdD5rCYrfo zEV6Jx9JIVcTWSvm5SSi2Ug6wTXoa7xnOezL/5qgU+6O0AkVbnP2Jc58/aAbAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTaSMrBrZJ2i1y8 YSGdum/rzYoiPzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRO b3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQjRO b3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9EQTQ4 Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqVGAwDQQCAAIwBwMFACgEMRgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAsgMA0GCSqGSIb3DQEBCwUAA4IBAQBeVOS3BFloYjf6s+uZ GgSxtuoftZNzhBNdXl7IvIVCnVInnIXSJwOtjzsCw/i//X03DLsPf68amOKxujpo fcf82Oy6j/vKAeTRBOc0wsBM8Ebnu1f5pzURWeONcsPS3GIvpGk4f53XPupQEqrb fjlh8Xz7H3EkbVA4XXEaCxSpuDpbzDmXfq+0lmnDq6SuW5u/rnpRhML4zWmSHCy+ Jj+sboYN4cwZPN73CcQCwA29VBnyYS6FIAj7XErRNCHQSpTwnm01ZKBObDCxw+9m 9JOdZsi/NT9t94JtgslvjU7HhKJsrTieVNWMzv/DOMcTu1cLYUm6e9YqMz2N0Sd+ ntC9 -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:17 2024 by rpki-client on console.sobornost.net