$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FDEB6F2A7830019E9B7FED71E610A949A14233E8.cer File: FDEB6F2A7830019E9B7FED71E610A949A14233E8.cer (raw, json) Hash identifier: Bi/y2yXd51H+H6cUqAcwUPIIT0nwEFzfNwdOgFfcrLY= Subject key identifier: FD:EB:6F:2A:78:30:01:9E:9B:7F:ED:71:E6:10:A9:49:A1:42:33:E8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 664FD47FCDA60BF1DDD2813D8162AB6A24456C53 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/FDEB6F2A7830019E9B7FED71E610A949A14233E8.mft caRepository: rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 28 Sep 2024 14:34:10 +0000 Certificate not after: Sat 27 Sep 2025 14:39:10 +0000 Subordinate resources: AS: 268518 IP: 45.162.128.0/22 IP: 2804:5270::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4f:d4:7f:cd:a6:0b:f1:dd:d2:81:3d:81:62:ab:6a:24:45:6c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 28 14:34:10 2024 GMT Not After : Sep 27 14:39:10 2025 GMT Subject: CN=FDEB6F2A7830019E9B7FED71E610A949A14233E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:af:7e:48:39:45:3b:5a:b4:11:3f:fc:cb: cd:8e:35:35:9f:09:fa:ba:8a:74:c9:ae:d3:20:bf: 73:01:61:2e:04:9b:6c:0c:19:c4:31:cd:60:73:83: 55:b2:7d:7e:1a:fe:25:2d:f1:8a:94:6d:43:37:80: 33:72:e8:28:06:0f:5d:c3:46:fb:45:25:48:1d:00: 1f:ca:08:88:a9:81:b1:d8:36:15:6c:31:24:9d:0e: 2d:29:a7:7a:5e:1f:c8:26:48:28:87:7c:0a:dc:46: 82:9f:79:d9:36:40:9f:c0:6e:8f:85:5a:86:0b:61: bf:eb:d6:96:98:dc:80:17:60:6b:44:f7:4f:c2:ca: 21:f0:c6:c7:09:ce:b9:86:90:f1:be:e6:1d:9f:6a: d5:3e:85:be:cf:8e:6c:fb:bc:ca:bf:83:db:6c:08: 3f:c5:73:e7:8a:d4:d6:f1:ff:39:73:7b:9a:da:b2: 56:7a:82:f6:5b:d7:71:2a:88:82:90:82:a5:8b:f9: 4f:d2:c9:81:b4:a5:a1:17:30:03:e8:51:22:22:ec: 24:e3:73:e9:0f:91:2a:df:df:89:79:b1:ba:dd:3b: 8d:85:27:33:3f:11:a5:ce:ee:a3:2a:9d:d1:44:79: 86:6d:fe:1e:78:9d:34:17:00:e6:5b:d1:9c:ee:94: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:EB:6F:2A:78:30:01:9E:9B:7F:ED:71:E6:10:A9:49:A1:42:33:E8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/FDEB6F2A7830019E9B7FED71E610A949A14233E8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.128.0/22 IPv6: 2804:5270::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268518 Signature Algorithm: sha256WithRSAEncryption d4:b9:6e:83:24:e5:2a:59:78:a7:4e:d8:2d:dd:ae:8b:32:7b: 24:1e:e8:26:76:42:ba:cf:3a:6e:3c:5a:9d:e1:4c:0d:41:7e: d9:0c:15:0b:ec:cb:c2:c9:9e:6a:5b:d4:ce:b4:30:30:f5:f0: bc:25:a5:f3:a9:f6:3c:7a:18:66:b8:d0:f6:1b:2e:ba:77:c6: 42:8e:e9:0c:d0:01:6b:b3:d9:a1:ff:97:fa:85:65:9e:48:bc: 4f:00:b9:7b:4d:6d:98:4d:70:e9:84:0f:16:e1:07:40:30:7f: 19:f6:78:0b:5d:b8:fb:e3:a7:ec:7b:4f:58:34:6c:b8:95:a1: b7:09:af:3e:6a:73:25:32:a0:b6:b4:ac:24:74:34:4c:64:8d: 62:8d:3e:7d:6b:9a:af:2d:e3:e3:29:bc:70:be:d3:c9:be:33: ae:97:77:74:06:44:a1:62:3f:bc:d0:61:fc:a4:a1:f7:55:bb: cf:76:41:a4:82:8a:52:e1:ad:3e:3a:9b:d5:7a:76:95:99:3f: 3a:92:ec:aa:21:bf:d3:43:d8:b7:7e:2c:6c:a6:de:19:81:bd: 3b:35:f9:a2:e6:3b:75:2d:87:d1:68:47:2d:e1:c5:94:80:0e: 78:43:45:64:53:f2:f6:0f:31:61:95:7c:c3:c7:51:8b:b8:53: 5a:7d:0e:f4 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUZk/Uf82mC/Hd0oE9gWKraiRFbFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjgxNDM0MTBaFw0yNTA5MjcxNDM5MTBaMDMxMTAvBgNV BAMTKEZERUI2RjJBNzgzMDAxOUU5QjdGRUQ3MUU2MTBBOTQ5QTE0MjMzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p69+SDlFO1q0ET/8y82ONTWf Cfq6inTJrtMgv3MBYS4Em2wMGcQxzWBzg1WyfX4a/iUt8YqUbUM3gDNy6CgGD13D RvtFJUgdAB/KCIipgbHYNhVsMSSdDi0pp3peH8gmSCiHfArcRoKfedk2QJ/Abo+F WoYLYb/r1paY3IAXYGtE90/CyiHwxscJzrmGkPG+5h2fatU+hb7Pjmz7vMq/g9ts CD/Fc+eK1Nbx/zlze5raslZ6gvZb13EqiIKQgqWL+U/SyYG0paEXMAPoUSIi7CTj c+kPkSrf34l5sbrdO42FJzM/EaXO7qMqndFEeYZt/h54nTQXAOZb0ZzulLl9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9628qeDABnpt/ 7XHmEKlJoUIz6DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkNB UFhVVm9kU2EyVktqTVgxWGFUQTkzdnZ0cjdOQldiZlhkZDJCTHJLUXUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JD QVBYVVZvZFNhMlZLak1YMVhhVEE5M3Z2dHI3TkJXYmZYZGQyQkxyS1F1LzAvRkRF QjZGMkE3ODMwMDE5RTlCN0ZFRDcxRTYxMEE5NDlBMTQyMzNFOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaKAMA0EAgACMAcDBQAoBFJwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQY5jANBgkqhkiG9w0BAQsFAAOCAQEA1LlugyTlKll4p07Y Ld2uizJ7JB7oJnZCus86bjxaneFMDUF+2QwVC+zLwsmealvUzrQwMPXwvCWl86n2 PHoYZrjQ9hsuunfGQo7pDNABa7PZof+X+oVlnki8TwC5e01tmE1w6YQPFuEHQDB/ GfZ4C124++On7HtPWDRsuJWhtwmvPmpzJTKgtrSsJHQ0TGSNYo0+fWuary3j4ym8 cL7Tyb4zrpd3dAZEoWI/vNBh/KSh91W7z3ZBpIKKUuGtPjqb1Xp2lZk/OpLsqiG/ 00PYt34sbKbeGYG9OzX5ouY7dS2H0WhHLeHFlIAOeENFZFPy9g8xYZV8w8dRi7hT Wn0O9A== -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:23 2024 by rpki-client on console.sobornost.net