$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F4EA95982C1B851684C011C92D67897C746CB48D.cer File: F4EA95982C1B851684C011C92D67897C746CB48D.cer (raw, json) Hash identifier: 1JZRkTcaUsJeU5zAqcG5qBnvdHE6wN9MtSkQnbM8IE8= Subject key identifier: F4:EA:95:98:2C:1B:85:16:84:C0:11:C9:2D:67:89:7C:74:6C:B4:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1EA3A563B074D0968E4AB6FD9087404B837727B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/F4EA95982C1B851684C011C92D67897C746CB48D.mft caRepository: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Jul 2024 19:53:27 +0000 Certificate not after: Fri 04 Jul 2025 19:58:27 +0000 Subordinate resources: AS: 28182 IP: 170.231.128.0/21 IP: 189.89.0.0/20 IP: 2001:1294::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a3:a5:63:b0:74:d0:96:8e:4a:b6:fd:90:87:40:4b:83:77:27:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 5 19:53:27 2024 GMT Not After : Jul 4 19:58:27 2025 GMT Subject: CN=F4EA95982C1B851684C011C92D67897C746CB48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:51:65:e4:c2:e9:39:b9:f6:dc:1a:f5:ae: bc:93:bd:75:d7:ce:77:ec:42:be:cf:0d:bd:b7:3e: 47:1d:74:36:34:5c:6d:0f:b6:7e:35:8d:ab:a7:a6: 22:5b:b2:68:94:60:4b:30:87:e0:36:3e:51:e9:bf: d4:df:2c:6a:77:44:7e:b8:04:f7:a0:87:10:62:3e: 1c:81:1c:41:13:ea:bc:bf:e7:f1:9c:94:b1:60:d5: 99:37:fb:af:63:7e:78:56:27:81:c8:5b:e2:68:27: 95:a4:45:e0:57:c0:55:b3:5c:08:f8:40:b6:a7:3c: 00:2e:f9:63:ef:e6:36:f9:50:17:fc:71:7f:a5:48: 51:f7:03:ef:0e:48:7f:3d:d1:78:ac:46:ae:1d:39: f0:5e:c0:6d:8e:c9:d6:45:49:3f:83:ce:e4:b5:85: 1c:75:82:39:61:c5:33:c5:10:00:34:88:89:8b:7f: 39:30:c9:23:53:2c:e6:b4:a4:a1:28:1c:c6:2c:7c: 7a:68:e9:d0:bb:ed:c7:d0:14:2c:c4:84:4e:57:8f: b2:f1:8c:36:2a:23:b6:42:2f:1c:dc:20:da:e4:3f: 76:3b:db:1e:9e:66:1b:9c:fa:bc:54:85:96:02:0b: a2:17:6b:fa:fa:a3:9e:d1:44:86:41:d0:92:17:e4: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:EA:95:98:2C:1B:85:16:84:C0:11:C9:2D:67:89:7C:74:6C:B4:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/F4EA95982C1B851684C011C92D67897C746CB48D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.128.0/21 189.89.0.0/20 IPv6: 2001:1294::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28182 Signature Algorithm: sha256WithRSAEncryption 5c:e6:1b:51:cf:d3:5b:62:61:ff:70:5b:71:ea:00:92:5c:b1: c0:67:42:2c:02:a6:de:92:83:5f:3e:c8:bf:e2:7f:aa:f7:7f: 36:a2:85:12:c9:42:03:15:b4:a7:7c:28:82:15:55:db:08:09: 87:8a:28:85:16:2c:05:29:81:15:97:69:8f:ca:42:18:c5:f9: 3f:c9:b0:d7:0e:56:0b:08:bd:c9:9d:45:62:30:18:62:16:f9: 72:bd:74:8b:8b:12:57:a5:bd:cf:5e:06:44:e8:56:a7:be:42: 00:47:85:be:e6:4d:54:79:c2:f7:7e:63:2c:ac:48:30:04:20: 99:97:6b:bb:ab:bb:0b:3f:cf:e3:b0:3f:06:0e:e3:81:ba:95: 31:46:e2:35:23:a5:3b:1c:88:63:c1:c1:dd:2d:3c:be:7a:56: 15:9e:6d:5f:f8:bf:9a:e8:36:0d:54:87:1a:ee:69:d1:9c:da: 7e:9b:94:8c:ac:0d:6c:ef:5c:6c:b5:0a:ba:84:83:bb:a7:ba: fe:51:13:1f:78:40:ad:85:fd:3f:b2:43:4b:db:1c:3d:09:79: 8e:62:b2:1a:91:cd:70:73:8f:84:8e:ce:6b:4d:b6:0d:af:39: bf:14:31:ec:40:58:7d:94:36:48:2a:5a:8b:9e:e0:b9:19:5b: 60:70:4b:88 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUHqOlY7B00JaOSrb9kIdAS4N3J7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MDUxOTUzMjdaFw0yNTA3MDQxOTU4MjdaMDMxMTAvBgNV BAMTKEY0RUE5NTk4MkMxQjg1MTY4NEMwMTFDOTJENjc4OTdDNzQ2Q0I0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYlFl5MLpObn23Br1rryTvXXX znfsQr7PDb23PkcddDY0XG0Ptn41jaunpiJbsmiUYEswh+A2PlHpv9TfLGp3RH64 BPeghxBiPhyBHEET6ry/5/GclLFg1Zk3+69jfnhWJ4HIW+JoJ5WkReBXwFWzXAj4 QLanPAAu+WPv5jb5UBf8cX+lSFH3A+8OSH890XisRq4dOfBewG2OydZFST+DzuS1 hRx1gjlhxTPFEAA0iImLfzkwySNTLOa0pKEoHMYsfHpo6dC77cfQFCzEhE5Xj7Lx jDYqI7ZCLxzcINrkP3Y72x6eZhuc+rxUhZYCC6IXa/r6o57RRIZB0JIX5MNbAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT06pWYLBuFFoTA EcktZ4l8dGy0jTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Vq ejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJwNnovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d1 ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAvRjRF QTk1OTgyQzFCODUxNjg0QzAxMUM5MkQ2Nzg5N0M3NDZDQjQ4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDqueAAwQEvVkAMA0EAgACMAcDBQAgARKUMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm4WMA0GCSqGSIb3DQEBCwUAA4IBAQBc5htRz9Nb YmH/cFtx6gCSXLHAZ0IsAqbekoNfPsi/4n+q9382ooUSyUIDFbSnfCiCFVXbCAmH iiiFFiwFKYEVl2mPykIYxfk/ybDXDlYLCL3JnUViMBhiFvlyvXSLixJXpb3PXgZE 6FanvkIAR4W+5k1UecL3fmMsrEgwBCCZl2u7q7sLP8/jsD8GDuOBupUxRuI1I6U7 HIhjwcHdLTy+elYVnm1f+L+a6DYNVIca7mnRnNp+m5SMrA1s71xstQq6hIO7p7r+ URMfeECthf0/skNL2xw9CXmOYrIakc1wc4+Ejs5rTbYNrzm/FDHsQFh9lDZIKlqL nuC5GVtgcEuI -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:22 2024 by rpki-client on console.sobornost.net