$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer File: E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer (raw, json) Hash identifier: 1cLdJdBf4bU0P3RNlIUb6uAur9jCcMmLeL9WLs2zado= Subject key identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 35D9C99E7F80C69785F39075BA9F8D1158EDFB77 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft caRepository: rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 26 Sep 2024 14:37:22 +0000 Certificate not after: Thu 25 Sep 2025 14:42:22 +0000 Subordinate resources: AS: 262901 IP: 177.22.192.0/20 IP: 191.240.176.0/20 IP: 2804:1110::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d9:c9:9e:7f:80:c6:97:85:f3:90:75:ba:9f:8d:11:58:ed:fb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 26 14:37:22 2024 GMT Not After : Sep 25 14:42:22 2025 GMT Subject: CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:f8:01:72:c9:a8:a1:6e:ca:2f:07:f9:b9: bc:15:c1:ef:81:a1:8e:34:7d:3e:12:01:9a:d0:ad: 03:4f:ae:b3:30:8d:3c:81:7e:71:48:6b:06:4d:2f: 0e:0b:8d:af:15:f6:17:65:9c:84:7b:8b:b6:93:54: 9c:67:fe:e0:27:aa:1f:ef:f7:b7:2e:03:48:f7:fb: 8d:c1:0a:51:ae:b9:63:19:00:99:16:2e:41:69:80: 49:05:8d:fb:6d:4c:d0:41:05:46:2a:bf:42:9a:a6: b4:40:c2:cf:6e:71:e3:5a:61:fe:b4:22:e5:2b:59: 14:7f:c5:90:db:ed:e9:95:78:3f:7a:07:26:7f:94: 69:14:3f:7b:bb:76:67:51:2b:53:15:9a:a4:88:bf: 29:d5:71:7d:ad:ce:34:b1:9e:6e:02:73:a9:20:1c: a9:96:c4:19:9d:c7:33:4c:25:58:16:71:6b:29:a2: 49:8b:c8:fd:21:b1:e3:f2:35:2a:fd:20:99:89:40: b9:40:ba:30:29:a6:97:63:d4:60:79:63:ce:d2:dc: b6:33:ac:29:35:d1:dc:5a:bb:4a:9b:5b:4b:b0:cb: 0a:f1:f1:bb:61:91:e2:ac:5d:e5:ed:b2:48:df:dc: 25:57:f8:30:59:9e:30:eb:52:e9:2e:95:0d:d5:d1: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.22.192.0/20 191.240.176.0/20 IPv6: 2804:1110::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262901 Signature Algorithm: sha256WithRSAEncryption 62:cd:3c:23:0f:48:1f:42:b1:ca:e5:30:70:28:bf:41:13:4b: c6:40:85:d7:07:85:b8:1a:80:fa:12:e9:33:79:27:a8:91:10: f4:71:06:10:75:28:35:9c:d0:3b:2a:97:3a:5c:56:d9:7f:db: c8:b5:60:0f:04:ea:dc:38:76:52:f7:ac:5d:a8:e7:90:f8:c8: fd:04:0c:19:11:2b:2f:07:5a:76:ab:cb:b3:de:bb:60:16:d2: 49:26:fd:d0:59:9d:60:20:56:35:a8:f4:c8:a5:d2:44:8d:74: bc:05:2a:8b:2c:2b:70:de:cb:81:1f:53:b3:3e:a2:13:39:cb: 2a:14:db:bb:3e:b3:5c:61:9c:4b:2c:3b:62:8a:38:f8:05:76: 00:d8:20:25:a4:53:01:aa:7c:57:85:13:01:01:bc:ee:37:f0: 6a:70:74:e4:25:c0:40:b2:c1:48:58:5e:37:87:85:ed:b1:30: a3:d4:d6:1a:72:43:9d:0a:89:31:45:73:0e:8b:e3:56:f9:36: 5e:38:f5:68:99:65:9c:0a:fc:7e:f3:53:75:9e:a5:bb:08:8d: e0:02:51:da:94:47:cd:3e:ba:d5:cc:86:c1:b0:db:5f:36:36: 4f:ad:78:34:8e:02:96:39:93:f1:1c:b5:86:cd:46:b3:3a:e6: 43:84:1a:43 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNdnJnn+AxpeF85B1up+NEVjt+3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjYxNDM3MjJaFw0yNTA5MjUxNDQyMjJaMDMxMTAvBgNV BAMTKEU3OTJCREU2M0Q1OTk5Qjk0MjU3NTg0MUMyQUY4RDk0NEIzQjRCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv/gBcsmooW7KLwf5ubwVwe+B oY40fT4SAZrQrQNPrrMwjTyBfnFIawZNLw4Lja8V9hdlnIR7i7aTVJxn/uAnqh/v 97cuA0j3+43BClGuuWMZAJkWLkFpgEkFjfttTNBBBUYqv0KaprRAws9uceNaYf60 IuUrWRR/xZDb7emVeD96ByZ/lGkUP3u7dmdRK1MVmqSIvynVcX2tzjSxnm4Cc6kg HKmWxBmdxzNMJVgWcWspokmLyP0hsePyNSr9IJmJQLlAujApppdj1GB5Y87S3LYz rCk10dxau0qbW0uwywrx8bthkeKsXeXtskjf3CVX+DBZnjDrUukulQ3V0e87AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTnkr3mPVmZuUJX WEHCr42USztL4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUVz MjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFHcGovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVF czI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzAvRTc5 MkJERTYzRDU5OTlCOTQyNTc1ODQxQzJBRjhEOTQ0QjNCNEJFMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsRbAAwQEv/CwMA0EAgACMAcDBQAoBBEQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQC9TANBgkqhkiG9w0BAQsFAAOCAQEAYs08Iw9I H0KxyuUwcCi/QRNLxkCF1weFuBqA+hLpM3knqJEQ9HEGEHUoNZzQOyqXOlxW2X/b yLVgDwTq3Dh2UvesXajnkPjI/QQMGRErLwdadqvLs967YBbSSSb90FmdYCBWNaj0 yKXSRI10vAUqiywrcN7LgR9Tsz6iEznLKhTbuz6zXGGcSyw7Yoo4+AV2ANggJaRT Aap8V4UTAQG87jfwanB05CXAQLLBSFheN4eF7bEwo9TWGnJDnQqJMUVzDovjVvk2 Xjj1aJllnAr8fvNTdZ6luwiN4AJR2pRHzT661cyGwbDbXzY2T614NI4CljmT8Ry1 hs1GszrmQ4QaQw== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:19 2024 by rpki-client on console.sobornost.net