$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer (raw, json) Hash identifier: ekQvYiCTBJSebFsSM6s98ZXfBH5QAZfrOI9l0lUpB9w= Subject key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B9B2CDA46AB45DFF86CBCB83C356D92974FAEB6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft caRepository: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 00:30:43 +0000 Certificate not after: Thu 03 Apr 2025 00:35:43 +0000 Subordinate resources: AS: 263083 IP: 179.106.192.0/18 IP: 186.233.12.0/22 IP: 2801:b6::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9b:2c:da:46:ab:45:df:f8:6c:bc:b8:3c:35:6d:92:97:4f:ae:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 00:30:43 2024 GMT Not After : Apr 3 00:35:43 2025 GMT Subject: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:04:fc:f1:47:1b:97:92:ed:09:dc:a9:07: 42:1e:d7:73:be:3e:ca:96:80:64:72:43:de:e6:45: 4e:12:9c:2e:39:fb:f7:b1:8a:26:dd:35:25:df:ed: 60:93:4d:58:1e:2f:f2:18:00:46:1c:b8:a6:1b:4f: a3:e3:1a:c0:22:b0:be:dc:d0:10:32:28:30:13:c4: 33:7f:f7:c4:41:aa:42:e1:ca:b9:de:30:88:4b:b4: 71:3b:f4:a0:ab:24:b1:56:83:2d:15:8d:05:75:d7: 6e:ca:e5:d0:30:0f:48:d7:cb:f3:b2:ca:06:a3:f0: 45:25:b6:11:9f:75:03:1c:87:e7:5a:5d:cf:e1:79: af:21:7e:cd:c0:4b:97:29:f6:5e:17:0e:3c:f1:7a: f6:58:5b:2f:d4:4a:65:e8:fa:c2:b6:d8:6c:e8:26: 0c:2b:77:d6:96:82:22:5d:6a:0b:62:88:24:1c:20: ba:f7:32:cd:79:e9:15:83:53:2d:d8:ba:c8:d5:dd: b9:67:a3:a6:8c:a2:36:ff:86:35:1a:ee:60:b5:e0: 10:ea:d2:12:24:94:4e:70:05:1d:a6:27:c9:c6:68: 84:78:8e:10:58:5b:1f:6f:a1:62:ce:2d:87:af:27: f7:ee:97:63:db:f9:12:bd:14:9d:f4:86:2a:a0:21: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.106.192.0/18 186.233.12.0/22 IPv6: 2801:b6::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263083 Signature Algorithm: sha256WithRSAEncryption b9:3a:82:10:50:c7:26:bc:b7:64:f8:98:c0:df:65:4f:a8:bd: 05:ff:d8:49:8c:25:fa:c8:d9:04:e3:72:b6:ed:0b:d9:3a:cf: d6:e5:09:8f:fa:94:7d:c0:2e:9a:64:5b:aa:8e:db:0a:79:6f: 98:27:c7:ce:81:c6:d4:ac:a1:da:cc:52:9e:94:3e:56:48:92: 41:21:62:a5:96:85:a6:76:c1:49:fe:e9:d3:fc:ff:6d:59:39: ed:f0:a0:a8:2f:82:b9:3a:a4:f0:4a:aa:60:5d:4a:c9:7a:43: 6e:81:3a:ab:b1:33:cb:97:b9:25:8c:a2:46:db:f8:b4:42:ed: 36:8d:b7:67:91:be:4b:d5:b8:2b:0d:4c:33:35:d1:42:77:f8: 90:68:1f:55:50:c7:fd:fc:da:49:54:a0:d0:3d:d1:e1:05:b8: 7f:31:c2:d9:7d:fa:b7:b7:ef:bd:68:bc:8c:96:7f:b3:5a:cf: 14:44:d6:97:fd:f9:2a:33:03:f1:06:af:b7:d6:66:1a:a2:d1: 58:b7:c0:9c:57:5f:d2:95:ba:42:46:7d:0b:01:32:97:1e:41: ca:d8:85:ed:75:db:b5:f9:b3:79:ab:cb:a7:90:c5:d2:97:e1: e2:c2:05:8d:30:14:7d:8f:83:56:0c:92:69:a3:1b:ce:25:a3: 76:d3:fd:26 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUe5ss2karRd/4bLy4PDVtkpdPrrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMDMwNDNaFw0yNTA0MDMwMDM1NDNaMDMxMTAvBgNV BAMTKEYwQTk4Rjc3OUQzQkVGNjU5NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FgT88Ucbl5LtCdypB0Ie13O+ PsqWgGRyQ97mRU4SnC45+/exiibdNSXf7WCTTVgeL/IYAEYcuKYbT6PjGsAisL7c 0BAyKDATxDN/98RBqkLhyrneMIhLtHE79KCrJLFWgy0VjQV1127K5dAwD0jXy/Oy ygaj8EUlthGfdQMch+daXc/hea8hfs3AS5cp9l4XDjzxevZYWy/USmXo+sK22Gzo Jgwrd9aWgiJdagtiiCQcILr3Ms156RWDUy3YusjV3blno6aMojb/hjUa7mC14BDq 0hIklE5wBR2mJ8nGaIR4jhBYWx9voWLOLYevJ/ful2Pb+RK9FJ30hiqgIaCHAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTwqY93nTvvZZWW tksyso62r+jqtTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNE5u WjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRO blo4MmEya0p2Yjlmd2FIZ2pKVm9vYk1WN1duWEs5SEQ0c1B4MVJUbTliLzEvRjBB OThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZBRkU4RUFCNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQGs2rAAwQCuukMMA0EAgACMAcDBQAoAQC2MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDqzANBgkqhkiG9w0BAQsFAAOCAQEAuTqCEFDH Jry3ZPiYwN9lT6i9Bf/YSYwl+sjZBONytu0L2TrP1uUJj/qUfcAummRbqo7bCnlv mCfHzoHG1Kyh2sxSnpQ+VkiSQSFipZaFpnbBSf7p0/z/bVk57fCgqC+CuTqk8Eqq YF1KyXpDboE6q7Ezy5e5JYyiRtv4tELtNo23Z5G+S9W4Kw1MMzXRQnf4kGgfVVDH /fzaSVSg0D3R4QW4fzHC2X36t7fvvWi8jJZ/s1rPFETWl/35KjMD8Qavt9ZmGqLR WLfAnFdf0pW6QkZ9CwEylx5BytiF7XXbtfmzeavLp5DF0pfh4sIFjTAUfY+DVgyS aaMbziWjdtP9Jg== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:21 2024 by rpki-client on console.sobornost.net