$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer File: F123104F555ACBDED882CABD933FE8C954781940.cer (raw, json) Hash identifier: 3W0d4gFvxJdDZs8vVLMgCTLNvnhrG22S9LCNaBk8I3I= Subject key identifier: F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5F9D79F2B3D6D854C1D680E907742218D6EC5E46 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F123104F555ACBDED882CABD933FE8C954781940.mft caRepository: rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 17:22:02 +0000 Certificate not after: Mon 08 Sep 2025 17:27:02 +0000 Subordinate resources: AS: 271577 IP: 181.232.228.0/22 IP: 2804:7db4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9d:79:f2:b3:d6:d8:54:c1:d6:80:e9:07:74:22:18:d6:ec:5e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 9 17:22:02 2024 GMT Not After : Sep 8 17:27:02 2025 GMT Subject: CN=F123104F555ACBDED882CABD933FE8C954781940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:2d:e1:69:2b:68:92:c0:a1:e3:75:26:c1: 39:47:d7:c7:7a:38:f5:45:6b:1e:7a:56:e2:cb:9c: b2:e7:89:4e:fe:e4:81:d3:ed:e7:96:64:1a:df:26: fb:d2:46:33:56:04:9f:25:68:0b:b8:98:af:2f:47: 27:a0:a6:8e:a1:de:3f:af:05:f1:7b:0d:24:11:73: 2f:55:c4:35:cd:6c:26:94:ab:61:bc:e6:9f:e3:20: ad:a8:8f:67:6e:46:33:47:aa:14:4d:f4:8e:b6:06: db:c6:c9:4f:e5:b0:58:c6:66:0c:ef:ea:71:8d:87: 2a:76:f0:dd:5e:02:36:c5:e6:69:d9:89:bf:b4:99: b5:a7:0a:f5:9a:02:7b:52:10:ba:de:02:0d:e2:58: 2f:58:22:08:7b:0b:59:30:e1:67:7d:f3:2d:8b:6e: 37:68:89:cb:34:39:ee:04:07:54:8c:91:b1:e0:1b: ac:96:98:ed:c6:32:2f:8e:7f:f1:5d:aa:31:d1:ae: 3f:72:d6:62:d9:ef:e6:92:6a:42:68:c0:1c:03:fd: ce:95:64:d5:1d:a4:5f:b4:15:65:8e:74:37:1b:8c: 5c:50:fa:75:c5:e5:5a:a8:3d:79:0c:55:5c:ab:70: e4:fd:c7:78:f2:dd:26:1a:2c:a2:25:37:e2:21:91: 56:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F123104F555ACBDED882CABD933FE8C954781940.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.228.0/22 IPv6: 2804:7db4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271577 Signature Algorithm: sha256WithRSAEncryption cc:30:3c:c5:26:8c:de:92:30:70:ee:4a:bc:be:a8:27:98:06: 43:79:b9:b0:91:85:98:ba:f7:e7:83:d0:95:c5:1b:0e:bf:f5: bd:79:23:e9:5c:35:60:d3:2d:32:76:d1:37:40:0e:70:ae:f0: 38:a9:a2:41:9a:05:6b:38:f6:27:9f:82:33:e6:4b:c1:57:d4: 5e:87:c2:1d:95:ac:61:ef:bf:b3:22:00:18:72:7c:76:7a:f3: 7c:13:1c:b0:c8:c2:f6:26:aa:5c:a9:7f:fb:c1:b5:42:ff:41: d3:5e:1d:93:6d:64:83:87:02:b1:1a:4e:b4:f5:ee:ae:77:83: 26:4c:68:87:e7:06:9a:fa:f7:83:e6:c5:be:0a:69:e8:37:55: 4b:9c:13:43:4d:75:73:c2:87:68:3b:7e:cc:35:01:76:a2:7f: 5b:41:8c:68:a8:52:e7:b3:71:20:0a:ab:86:52:0a:25:ba:01: 4f:31:c4:3b:54:6d:a9:0c:3f:09:55:da:af:6a:71:78:c9:7d: 41:97:10:fb:96:9b:dd:85:71:c5:8e:f9:c3:a8:f3:23:e4:95: 78:de:ea:13:e8:cb:77:16:b8:32:c2:45:2c:27:d9:c3:98:f2: 24:a9:4a:b3:53:09:61:0b:aa:89:11:1d:fc:11:8e:ca:e3:0d: 9b:3b:34:d2 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUX5158rPW2FTB1oDpB3QiGNbsXkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDkxNzIyMDJaFw0yNTA5MDgxNzI3MDJaMDMxMTAvBgNV BAMTKEYxMjMxMDRGNTU1QUNCREVEODgyQ0FCRDkzM0ZFOEM5NTQ3ODE5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGC3haStoksCh43UmwTlH18d6 OPVFax56VuLLnLLniU7+5IHT7eeWZBrfJvvSRjNWBJ8laAu4mK8vRyegpo6h3j+v BfF7DSQRcy9VxDXNbCaUq2G85p/jIK2oj2duRjNHqhRN9I62BtvGyU/lsFjGZgzv 6nGNhyp28N1eAjbF5mnZib+0mbWnCvWaAntSELreAg3iWC9YIgh7C1kw4Wd98y2L bjdoics0Oe4EB1SMkbHgG6yWmO3GMi+Of/FdqjHRrj9y1mLZ7+aSakJowBwD/c6V ZNUdpF+0FWWOdDcbjFxQ+nXF5VqoPXkMVVyrcOT9x3jy3SYaLKIlN+IhkVb3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxIxBPVVrL3tiC yr2TP+jJVHgZQDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXpm OXR5MUN1eTZ2U3h2UjdRWlh6QmRMeTRrMjV3SjZkSFROeDE4TDFZbjEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V6 Zjl0eTFDdXk2dlN4dlI3UVpYekJkTHk0azI1d0o2ZEhUTngxOEwxWW4xLzAvRjEy MzEwNEY1NTVBQ0JERUQ4ODJDQUJEOTMzRkU4Qzk1NDc4MTk0MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCtejkMA0EAgACMAcDBQAoBH20MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQk2TANBgkqhkiG9w0BAQsFAAOCAQEAzDA8xSaM3pIwcO5K vL6oJ5gGQ3m5sJGFmLr354PQlcUbDr/1vXkj6Vw1YNMtMnbRN0AOcK7wOKmiQZoF azj2J5+CM+ZLwVfUXofCHZWsYe+/syIAGHJ8dnrzfBMcsMjC9iaqXKl/+8G1Qv9B 014dk21kg4cCsRpOtPXurneDJkxoh+cGmvr3g+bFvgpp6DdVS5wTQ011c8KHaDt+ zDUBdqJ/W0GMaKhS57NxIAqrhlIKJboBTzHEO1RtqQw/CVXar2pxeMl9QZcQ+5ab 3YVxxY75w6jzI+SVeN7qE+jLdxa4MsJFLCfZw5jyJKlKs1MJYQuqiREd/BGOyuMN mzs00g== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:21 2024 by rpki-client on console.sobornost.net