$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2CBC68920860178BF6324607635148F318DE957.cer File: F2CBC68920860178BF6324607635148F318DE957.cer (raw, json) Hash identifier: AD1hSV1+PSoRARFv3RZND9FFFUyftHYH73TuCAcj4Z4= Subject key identifier: F2:CB:C6:89:20:86:01:78:BF:63:24:60:76:35:14:8F:31:8D:E9:57 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 08E284DB83954D321754D4ADD7EDF22604296234 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/F2CBC68920860178BF6324607635148F318DE957.mft caRepository: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 11 Sep 2024 18:10:19 +0000 Certificate not after: Wed 10 Sep 2025 18:15:19 +0000 Subordinate resources: AS: 263891 IP: 138.204.48.0/22 IP: 170.78.160.0/22 IP: 2804:2748::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e2:84:db:83:95:4d:32:17:54:d4:ad:d7:ed:f2:26:04:29:62:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 11 18:10:19 2024 GMT Not After : Sep 10 18:15:19 2025 GMT Subject: CN=F2CBC68920860178BF6324607635148F318DE957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:07:f3:08:9b:f0:ab:c5:b6:75:3b:ec:de: 9e:35:47:48:ef:b4:d3:b0:b2:67:84:51:7e:20:7a: de:1c:14:c0:59:fb:ca:c1:1b:90:7e:9b:4a:6b:fc: b9:61:ac:0a:e3:02:ab:22:3e:06:71:a8:17:29:22: e2:48:8a:95:ca:2d:d4:bb:be:e1:7f:20:e8:07:96: 58:f4:49:f4:a2:10:da:5c:64:c7:8b:88:d2:24:d8: 47:2b:b5:f7:75:65:d0:7e:40:5f:34:84:d4:cc:16: 24:4f:7d:00:3c:79:38:5d:f4:14:00:36:1f:3e:93: 0e:ce:e8:a7:c1:81:1c:58:4c:3a:dd:50:e1:dd:28: f1:78:8a:be:56:f7:68:2c:c2:17:9a:86:39:7d:a4: eb:cb:0b:2f:ff:fe:e3:4e:91:7c:3a:ce:fd:ac:29: f4:d0:a9:98:a1:6d:31:d9:66:25:ae:65:72:d0:21: 12:24:46:25:06:6a:f4:b6:10:59:ba:8d:61:49:c8: 8e:e8:92:85:a8:cc:d6:31:a6:be:41:83:c9:25:2e: a7:86:a0:64:c9:f9:8e:af:19:01:d2:3f:d8:52:49: 66:76:f3:e8:ea:42:85:2c:c6:1b:69:34:fd:bb:3e: 86:f9:51:0b:2b:57:dc:2d:b2:68:f2:57:44:99:87: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:CB:C6:89:20:86:01:78:BF:63:24:60:76:35:14:8F:31:8D:E9:57 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/F2CBC68920860178BF6324607635148F318DE957.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.48.0/22 170.78.160.0/22 IPv6: 2804:2748::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263891 Signature Algorithm: sha256WithRSAEncryption 11:58:b3:e1:37:f0:0a:c5:ab:81:d3:45:05:21:a5:65:f2:37: 9b:9e:0d:92:bb:19:07:56:11:92:0e:26:ac:f9:b5:72:eb:3a: 27:46:17:06:06:d8:40:7b:f4:29:70:18:29:ca:f1:21:29:58: 0d:27:0c:8a:bb:2a:ad:c1:a1:40:2a:95:09:c5:a1:5c:aa:dd: ec:cf:6d:c9:af:25:cc:6a:d6:1d:9a:3c:2c:75:4b:d3:c6:7f: 60:42:42:e4:21:07:86:37:f6:d4:5c:b6:66:fe:c4:a4:31:cd: 05:1a:16:eb:b7:85:6f:ca:67:49:5a:87:1c:a5:e5:20:63:c9: a3:56:f5:01:6b:09:61:85:3d:f6:06:bf:92:74:a1:98:5d:b4: bf:1c:58:7f:21:6d:34:d9:08:03:4a:e9:4a:e7:56:d7:4d:9d: 9d:31:92:32:43:0d:b8:52:11:66:aa:1e:60:e8:73:fe:92:ab: 2c:3a:93:02:73:87:2a:9f:72:30:e2:dc:1e:89:73:7e:95:84: f4:ec:cd:b7:48:9b:cb:12:1d:14:81:12:23:4d:46:5b:ce:4e: ce:04:e3:02:be:ff:d9:0b:15:6e:a8:0e:21:6c:ca:38:0e:1d: 89:04:07:0e:17:7b:a6:f8:5c:f2:6a:e8:ac:58:92:7c:79:39: 98:34:a5:98 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCOKE24OVTTIXVNSt1+3yJgQpYjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MTExODEwMTlaFw0yNTA5MTAxODE1MTlaMDMxMTAvBgNV BAMTKEYyQ0JDNjg5MjA4NjAxNzhCRjYzMjQ2MDc2MzUxNDhGMzE4REU5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJgfzCJvwq8W2dTvs3p41R0jv tNOwsmeEUX4get4cFMBZ+8rBG5B+m0pr/LlhrArjAqsiPgZxqBcpIuJIipXKLdS7 vuF/IOgHllj0SfSiENpcZMeLiNIk2Ecrtfd1ZdB+QF80hNTMFiRPfQA8eThd9BQA Nh8+kw7O6KfBgRxYTDrdUOHdKPF4ir5W92gswheahjl9pOvLCy///uNOkXw6zv2s KfTQqZihbTHZZiWuZXLQIRIkRiUGavS2EFm6jWFJyI7okoWozNYxpr5Bg8klLqeG oGTJ+Y6vGQHSP9hSSWZ28+jqQoUsxhtpNP27Pob5UQsrV9wtsmjyV0SZh1+vAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTyy8aJIIYBeL9j JGB2NRSPMY3pVzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlFn QWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVVNFovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JR Z0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAvRjJD QkM2ODkyMDg2MDE3OEJGNjMyNDYwNzYzNTE0OEYzMThERTk1Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiswwAwQCqk6gMA0EAgACMAcDBQAoBCdIMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG0zANBgkqhkiG9w0BAQsFAAOCAQEAEViz4Tfw CsWrgdNFBSGlZfI3m54NkrsZB1YRkg4mrPm1cus6J0YXBgbYQHv0KXAYKcrxISlY DScMirsqrcGhQCqVCcWhXKrd7M9tya8lzGrWHZo8LHVL08Z/YEJC5CEHhjf21Fy2 Zv7EpDHNBRoW67eFb8pnSVqHHKXlIGPJo1b1AWsJYYU99ga/knShmF20vxxYfyFt NNkIA0rpSudW102dnTGSMkMNuFIRZqoeYOhz/pKrLDqTAnOHKp9yMOLcHolzfpWE 9OzNt0ibyxIdFIESI01GW85OzgTjAr7/2QsVbqgOIWzKOA4diQQHDhd7pvhc8mro rFiSfHk5mDSlmA== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:22 2024 by rpki-client on console.sobornost.net