$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer File: E3C11484C8B4CD3F766170F9E324672A733D9604.cer (raw, json) Hash identifier: 7yYbC1CtxDQpaZFKofE5KcK8x078r2F7JMbIrkKUI+Y= Subject key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0EFA04724178CA0D1D40F6C075805962FC699A84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft caRepository: rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 10:15:22 +0000 Certificate not after: Thu 03 Apr 2025 10:20:22 +0000 Subordinate resources: AS: 264128 IP: 138.97.52.0/22 IP: 170.78.240.0/22 IP: 2804:22e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fa:04:72:41:78:ca:0d:1d:40:f6:c0:75:80:59:62:fc:69:9a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 10:15:22 2024 GMT Not After : Apr 3 10:20:22 2025 GMT Subject: CN=E3C11484C8B4CD3F766170F9E324672A733D9604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:8b:c1:e4:cc:38:80:04:01:d3:f2:62:e8: ad:92:2a:d1:8d:8f:a3:bc:a4:08:3e:9f:10:ff:63: 88:fd:28:e8:18:5d:af:2c:8b:a0:a3:6a:ad:5b:5e: a2:d1:87:df:3f:29:26:e7:51:8f:4d:ad:27:cc:5a: 68:4f:12:dd:25:a0:7c:db:81:d0:02:b2:04:cb:74: de:2d:32:d7:7c:fa:3b:db:54:f4:4d:89:84:d5:7d: 11:44:90:d9:f4:28:69:1a:c6:57:0a:b5:9e:d1:74: 55:4a:1f:71:1c:cb:b8:9f:6c:c3:96:d7:ba:2d:16: a2:aa:10:12:8b:51:0b:34:a0:e9:af:87:2e:fb:6e: 5a:cd:a8:32:34:71:0b:36:4b:d4:aa:f2:e7:0c:50: 15:96:e3:48:9a:f6:99:3d:2b:79:4c:26:e5:56:3a: 78:e3:fa:fb:7e:1c:cf:8f:6f:4f:25:09:ad:65:f8: 37:42:15:0c:2e:cd:6d:c3:47:ff:56:2d:10:c0:27: e2:93:68:b9:a0:a4:ce:30:6a:2b:88:61:84:12:ce: 72:59:17:18:b3:33:28:17:b5:1c:e7:f0:4e:7d:df: 0c:22:a7:01:49:9a:8c:0d:e9:1f:50:4f:63:63:34: 1a:70:5c:2f:43:1f:01:54:c2:5a:86:04:bb:8d:51: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.52.0/22 170.78.240.0/22 IPv6: 2804:22e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264128 Signature Algorithm: sha256WithRSAEncryption 1f:0b:17:7e:18:1d:b1:e9:bc:74:e0:e3:af:27:d0:03:48:36: e7:fb:0c:7b:c8:1e:84:bd:7d:10:6a:13:bc:ce:15:09:d0:ab: 03:b2:07:58:cc:66:a7:3c:11:76:02:57:9b:38:91:22:b5:e1: 2b:d0:f7:e8:93:37:ab:6d:00:73:ab:d3:b4:ab:1f:13:81:9f: fd:e5:73:71:d7:2c:c3:c9:bc:fd:21:cc:81:7a:1d:ae:2d:a0: cd:cc:53:56:3f:32:e1:55:78:6b:87:68:4d:7f:4e:66:09:88: fb:32:60:7e:b8:7f:62:69:b3:a9:64:ab:1c:a7:ff:3f:4f:4d: 78:b5:95:cd:19:11:bb:47:d4:d2:5f:b4:49:9e:2f:b5:a5:d3: 81:1d:4f:20:2d:80:0e:ae:8a:c1:4a:3d:cd:24:44:be:c5:c3: 0a:f2:0c:31:8c:31:59:bb:b7:1a:1c:bd:b4:37:f2:cc:f9:f6: 73:aa:5a:05:79:92:d3:e6:33:43:02:d1:02:40:87:1b:94:97: 9b:5e:f3:59:ff:cb:9e:a0:99:e3:a4:1d:ce:c4:d7:c4:a1:37: b1:26:50:34:5a:da:ae:af:3a:93:5f:96:7f:99:af:72:4f:f6: 6b:5f:6d:01:eb:6e:1e:0f:a1:2a:a6:b5:af:a7:53:cf:b4:d5: 31:0c:76:f1 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDvoEckF4yg0dQPbAdYBZYvxpmoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMDE1MjJaFw0yNTA0MDMxMDIwMjJaMDMxMTAvBgNV BAMTKEUzQzExNDg0QzhCNENEM0Y3NjYxNzBGOUUzMjQ2NzJBNzMzRDk2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUf4vB5Mw4gAQB0/Ji6K2SKtGN j6O8pAg+nxD/Y4j9KOgYXa8si6Cjaq1bXqLRh98/KSbnUY9NrSfMWmhPEt0loHzb gdACsgTLdN4tMtd8+jvbVPRNiYTVfRFEkNn0KGkaxlcKtZ7RdFVKH3Ecy7ifbMOW 17otFqKqEBKLUQs0oOmvhy77blrNqDI0cQs2S9Sq8ucMUBWW40ia9pk9K3lMJuVW Onjj+vt+HM+Pb08lCa1l+DdCFQwuzW3DR/9WLRDAJ+KTaLmgpM4waiuIYYQSznJZ FxizMygXtRzn8E593wwipwFJmowN6R9QT2NjNBpwXC9DHwFUwlqGBLuNUWGNAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjwRSEyLTNP3Zh cPnjJGcqcz2WBDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEdv bVJSRmNUZ1FWeExmU3NoYWpRTG4xdEtiblZxN3kyN3pjRXlSSGVYRUgvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRH b21SUkZjVGdRVnhMZlNzaGFqUUxuMXRLYm5WcTd5Mjd6Y0V5UkhlWEVILzEvRTND MTE0ODRDOEI0Q0QzRjc2NjE3MEY5RTMyNDY3MkE3MzNEOTYwNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimE0AwQCqk7wMA0EAgACMAcDBQAoBCLgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHwDANBgkqhkiG9w0BAQsFAAOCAQEAHwsXfhgd sem8dODjryfQA0g25/sMe8gehL19EGoTvM4VCdCrA7IHWMxmpzwRdgJXmziRIrXh K9D36JM3q20Ac6vTtKsfE4Gf/eVzcdcsw8m8/SHMgXodri2gzcxTVj8y4VV4a4do TX9OZgmI+zJgfrh/YmmzqWSrHKf/P09NeLWVzRkRu0fU0l+0SZ4vtaXTgR1PIC2A Dq6KwUo9zSREvsXDCvIMMYwxWbu3Ghy9tDfyzPn2c6paBXmS0+YzQwLRAkCHG5SX m17zWf/LnqCZ46QdzsTXxKE3sSZQNFrarq86k1+Wf5mvck/2a19tAetuHg+hKqa1 r6dTz7TVMQx28Q== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:19 2024 by rpki-client on console.sobornost.net