$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.cer File: E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.cer (raw, json) Hash identifier: vhuiwcr4/n5d0MnHnUZRtctzPzP6j/piIN0hTga3VUM= Subject key identifier: E9:86:D8:D3:14:6A:4D:08:E3:6F:EA:EA:C7:3B:87:E7:E5:A3:F9:90 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2EAAEB5CB01FA13D4FC87D8BDA7EE81C30895D51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.mft caRepository: rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:18 +0000 Certificate not after: Wed 02 Apr 2025 18:30:18 +0000 Subordinate resources: AS: 28327 IP: 131.0.20.0/22 IP: 189.50.80.0/20 IP: 2804:c3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Jun 2024 13:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:aa:eb:5c:b0:1f:a1:3d:4f:c8:7d:8b:da:7e:e8:1c:30:89:5d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:18 2024 GMT Not After : Apr 2 18:30:18 2025 GMT Subject: CN=E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:e4:3b:46:1b:5e:ab:51:5d:86:e3:80:1a: ff:88:2f:3a:95:2d:cd:02:15:0d:74:0e:92:20:0e: 0f:4f:83:86:ae:e1:59:05:1e:30:e0:8a:50:96:7f: 3c:e0:a1:25:76:ac:df:f6:cd:b1:f0:91:82:2b:12: 37:e5:78:b4:32:89:a1:80:df:da:ff:2b:1a:b4:46: 71:5e:d5:ff:9a:61:5c:3f:b5:dd:69:5b:54:39:b4: 5c:69:f7:22:5f:88:1e:10:9e:b6:04:36:d2:57:d8: d6:8d:9f:7e:12:84:cb:c9:de:4f:16:85:fa:44:04: 60:6f:4d:7c:85:21:d6:af:fa:fc:f7:39:c0:72:65: 48:f4:47:e5:46:f0:8f:98:35:ab:aa:9a:15:61:20: b1:8a:4f:ed:e2:cb:0a:1c:7b:15:55:92:95:e5:71: 0d:af:33:03:90:15:ad:0c:d2:3f:23:2d:68:37:e0: a2:73:a1:fe:61:87:d6:9f:c7:b1:67:40:8b:76:c9: cb:46:e6:ca:12:3c:0c:99:dd:d3:21:ac:43:a7:db: 24:1b:07:d0:35:c1:74:bc:98:75:a4:81:af:34:43: 6f:a8:f4:e8:03:5d:59:1b:30:52:fc:4a:ae:7a:82: 73:a7:76:32:d7:30:4b:5e:25:05:91:ce:f5:71:16: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:86:D8:D3:14:6A:4D:08:E3:6F:EA:EA:C7:3B:87:E7:E5:A3:F9:90 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6nv9YEtscDbQDhUhSUHDE1e9tFUewaWtiRXCAwMyCd87/1/E986D8D3146A4D08E36FEAEAC73B87E7E5A3F990.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.20.0/22 189.50.80.0/20 IPv6: 2804:c3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28327 Signature Algorithm: sha256WithRSAEncryption d8:9c:72:68:9d:e5:8d:da:d1:fc:ab:65:f0:d5:61:fe:37:3d: 5c:01:14:15:9a:99:af:f4:aa:6b:f4:27:ab:78:a1:c4:f6:32: a1:4e:55:5f:f6:f1:b6:52:4f:21:55:6a:ca:87:97:57:54:21: 47:f9:29:b8:e2:04:61:1f:13:80:ee:8d:1a:f7:c3:d6:e4:c3: 94:25:49:8e:e8:2d:56:a1:24:52:cd:e5:63:36:3a:51:ee:9e: 46:17:e3:6d:5f:4e:65:28:3e:4a:99:c3:f1:90:81:ba:be:96: b4:d2:0b:cd:40:34:e2:8c:87:53:64:f2:42:12:65:40:ea:6d: 87:af:16:48:88:4b:a8:22:e6:c3:b2:56:83:dc:57:bc:f7:7c: b9:ac:8e:dd:86:39:2a:fa:df:63:91:a0:17:d2:e0:04:47:b9: db:4b:5f:c8:a8:cb:9f:17:5b:c4:e4:a2:2b:ee:e9:0c:22:0d: aa:9a:26:d0:ad:ea:df:97:24:f2:36:64:04:b3:a7:f7:98:c7: 1b:a6:5e:70:1e:df:3d:94:d0:63:4c:15:2a:db:4f:eb:da:fe: a4:39:36:f3:73:fe:85:d4:ad:0e:02:8c:1c:33:be:a1:c9:a6: 2e:83:f1:fb:c0:01:e3:e3:ad:fa:db:42:02:ac:90:c8:03:6b: ae:87:a0:0a -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIULqrrXLAfoT1PyH2L2n7oHDCJXVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1MThaFw0yNTA0MDIxODMwMThaMDMxMTAvBgNV BAMTKEU5ODZEOEQzMTQ2QTREMDhFMzZGRUFFQUM3M0I4N0U3RTVBM0Y5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLeQ7Rhteq1FdhuOAGv+ILzqV Lc0CFQ10DpIgDg9Pg4au4VkFHjDgilCWfzzgoSV2rN/2zbHwkYIrEjfleLQyiaGA 39r/Kxq0RnFe1f+aYVw/td1pW1Q5tFxp9yJfiB4QnrYENtJX2NaNn34ShMvJ3k8W hfpEBGBvTXyFIdav+vz3OcByZUj0R+VG8I+YNauqmhVhILGKT+3iywocexVVkpXl cQ2vMwOQFa0M0j8jLWg34KJzof5hh9afx7FnQIt2yctG5soSPAyZ3dMhrEOn2yQb B9A1wXS8mHWkga80Q2+o9OgDXVkbMFL8Sq56gnOndjLXMEteJQWRzvVxFnctAgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTphtjTFGpNCONv 6urHO4fn5aP5kDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNm52 OVlFdHNjRGJRRGhVaFNVSERFMWU5dEZVZXdhV3RpUlhDQXdNeUNkODcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNm52 OVlFdHNjRGJRRGhVaFNVSERFMWU5dEZVZXdhV3RpUlhDQXdNeUNkODcvMS9FOTg2 RDhEMzE0NkE0RDA4RTM2RkVBRUFDNzNCODdFN0U1QTNGOTkwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKDABQDBAS9MlAwDQQCAAIwBwMFACgEDDwwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICbqcwDQYJKoZIhvcNAQELBQADggEBANiccmid5Y3a 0fyrZfDVYf43PVwBFBWama/0qmv0J6t4ocT2MqFOVV/28bZSTyFVasqHl1dUIUf5 KbjiBGEfE4DujRr3w9bkw5QlSY7oLVahJFLN5WM2OlHunkYX421fTmUoPkqZw/GQ gbq+lrTSC81ANOKMh1Nk8kISZUDqbYevFkiIS6gi5sOyVoPcV7z3fLmsjt2GOSr6 32ORoBfS4ARHudtLX8ioy58XW8Tkoivu6QwiDaqaJtCt6t+XJPI2ZASzp/eYxxum XnAe3z2U0GNMFSrbT+va/qQ5NvNz/oXUrQ4CjBwzvqHJpi6D8fvAAePjrfrbQgKs kMgDa66HoAo= -----END CERTIFICATE-----Generated at Thu Jun 20 15:16:28 2024 by rpki-client on console.sobornost.net