$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer File: FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer (raw, json) Hash identifier: FiGHGeABzLo4rn/4sXx5qpAOvBSaRcVwGxJHCsefXj4= Subject key identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AF0B4CFD763BC8A310C8C5CF1880AB66C774B9B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft caRepository: rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 10 Sep 2024 12:01:47 +0000 Certificate not after: Tue 09 Sep 2025 12:06:47 +0000 Subordinate resources: AS: 270255 IP: 45.184.88.0/22 IP: 200.108.168.0/22 IP: 2804:6934::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f0:b4:cf:d7:63:bc:8a:31:0c:8c:5c:f1:88:0a:b6:6c:77:4b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 10 12:01:47 2024 GMT Not After : Sep 9 12:06:47 2025 GMT Subject: CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:75:cf:7d:64:d0:84:9e:b1:15:58:43:cd: 25:69:c2:9f:e9:e9:23:54:65:6c:14:9d:58:7a:b9: 9f:1b:c7:48:9e:a0:60:e7:af:eb:b7:9e:f0:40:e5: b5:cb:ec:9c:3d:f0:ae:d0:fd:00:52:3e:e0:81:27: ba:25:dd:3a:24:68:00:b7:66:1a:9b:1b:9a:35:9c: 86:0e:41:3b:d3:58:89:4a:d2:a9:1d:41:a5:a8:65: dc:71:bf:6a:d6:74:78:a8:58:a7:3a:c6:36:35:48: 11:01:db:27:ce:10:34:bc:6c:74:7a:b9:38:47:52: b1:31:9e:0a:7e:2d:e8:3c:1c:c6:b4:b9:4e:85:1c: 8c:2e:38:d1:6e:d8:30:d8:96:3c:24:52:f3:b6:a8: 55:98:c4:2e:df:2b:f5:ef:1c:19:bd:e9:39:94:73: 9a:1f:06:ad:46:9c:d5:66:af:c7:e8:6f:f4:e5:9a: ab:1f:a4:19:68:cf:34:42:ad:7b:10:0f:01:eb:f2: 8a:fa:8c:0a:1e:e3:1e:b7:4d:96:76:2d:4f:cd:a7: 20:c7:1d:97:f9:99:c5:6d:0a:86:5a:b7:eb:92:bb: e0:7c:df:78:18:bb:c3:ec:a4:80:f4:8c:28:5f:4a: cd:31:5d:c1:b2:78:44:a9:51:43:12:36:26:ee:ea: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.184.88.0/22 200.108.168.0/22 IPv6: 2804:6934::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270255 Signature Algorithm: sha256WithRSAEncryption 5d:ca:29:95:2f:72:98:af:a3:52:a9:5b:9a:4e:31:6f:6e:94: e8:db:06:be:7e:4b:03:67:ad:ba:88:7f:ad:f3:b3:ca:8e:bc: 09:b3:d6:15:66:b9:f1:42:49:42:b7:52:0c:d2:5b:9f:95:4f: e6:c7:1e:50:d3:dc:31:41:41:4a:81:a2:8a:fa:65:08:b8:ec: 7b:49:81:ed:47:65:0b:33:93:24:00:7c:ac:8f:1a:2e:26:9c: 19:b0:5d:2f:de:90:46:ff:1b:de:94:c7:d5:7b:1e:c1:5a:82: 6c:ad:cc:68:91:66:24:ae:79:b8:78:2d:d4:ca:ba:74:bd:7b: 38:b8:99:36:b6:a3:a9:02:c8:e0:8c:3f:0a:54:1c:00:20:d3: 64:7a:32:b5:79:d7:26:31:87:7b:65:25:0b:97:e1:33:da:da: f0:ef:40:31:33:0c:a5:62:09:97:c1:38:26:d9:dc:07:61:6a: 42:52:14:88:74:a4:24:68:ef:59:aa:b9:84:89:61:96:3b:c6: c9:da:94:9c:d8:e3:20:35:8f:92:69:e5:62:9f:68:eb:25:02: 97:e4:eb:32:85:11:59:4d:65:df:16:b0:c5:c4:bf:25:be:d3: e6:f9:d2:45:9b:08:73:75:02:5b:10:af:8c:8a:da:7b:a5:08: 2c:e5:bd:3a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOvC0z9djvIoxDIxc8YgKtmx3S5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MTAxMjAxNDdaFw0yNTA5MDkxMjA2NDdaMDMxMTAvBgNV BAMTKEZCMjc4OEJDRkE5NUJGMjIyNEU0OTI3OENEQTUxNzQ3RDYyNUJDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsnXPfWTQhJ6xFVhDzSVpwp/p 6SNUZWwUnVh6uZ8bx0ieoGDnr+u3nvBA5bXL7Jw98K7Q/QBSPuCBJ7ol3TokaAC3 ZhqbG5o1nIYOQTvTWIlK0qkdQaWoZdxxv2rWdHioWKc6xjY1SBEB2yfOEDS8bHR6 uThHUrExngp+Leg8HMa0uU6FHIwuONFu2DDYljwkUvO2qFWYxC7fK/XvHBm96TmU c5ofBq1GnNVmr8fob/TlmqsfpBlozzRCrXsQDwHr8or6jAoe4x63TZZ2LU/NpyDH HZf5mcVtCoZat+uSu+B833gYu8PspID0jChfSs0xXcGyeESpUUMSNibu6kejAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT7J4i8+pW/IiTk knjNpRdH1iW8PzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREVD UGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdRczMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RF Q1Bnd2FjZFFNMnlEUWZzWU5Vc0d1R1dBekJCWHhDUGZqZFdOUlE3UXMzLzAvRkIy Nzg4QkNGQTk1QkYyMjI0RTQ5Mjc4Q0RBNTE3NDdENjI1QkMzRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbhYAwQCyGyoMA0EAgACMAcDBQAoBGk0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQfrzANBgkqhkiG9w0BAQsFAAOCAQEAXcoplS9y mK+jUqlbmk4xb26U6NsGvn5LA2etuoh/rfOzyo68CbPWFWa58UJJQrdSDNJbn5VP 5sceUNPcMUFBSoGiivplCLjse0mB7UdlCzOTJAB8rI8aLiacGbBdL96QRv8b3pTH 1XsewVqCbK3MaJFmJK55uHgt1Mq6dL17OLiZNrajqQLI4Iw/ClQcACDTZHoytXnX JjGHe2UlC5fhM9ra8O9AMTMMpWIJl8E4JtncB2FqQlIUiHSkJGjvWaq5hIlhljvG ydqUnNjjIDWPkmnlYp9o6yUCl+TrMoURWU1l3xawxcS/Jb7T5vnSRZsIc3UCWxCv jIrae6UILOW9Og== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:23 2024 by rpki-client on console.sobornost.net