$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer File: 149DF6958A59FCFA910071567BAB07904ED0751D.cer (raw, json) Hash identifier: OEbvSeb1zOVtEl2KyLBu7w/WyZNc+VOWoJgkWqP4Y3E= Subject key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75C2E89C410E56EF48CB3CEE163279E7DFC7F43F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft caRepository: rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:04 +0000 Certificate not after: Wed 02 Apr 2025 18:31:04 +0000 Subordinate resources: AS: 4230 IP: 179.68.0.0/16 IP: 179.136.0.0/13 IP: 179.237.0.0 -- 179.237.25.255 IP: 186.249.160.0/20 IP: 187.28.0.0 -- 187.30.255.255 IP: 187.43.0.0/16 IP: 189.2.0.0/15 IP: 189.16.0.0/15 IP: 189.22.0.0/15 IP: 189.42.0.0/15 IP: 189.52.0.0/15 IP: 189.86.0.0 -- 189.88.255.255 IP: 191.38.0.0/15 IP: 191.56.0.0/13 IP: 200.10.159.0/24 IP: 200.139.192.0/18 IP: 200.166.0.0/15 IP: 200.172.0.0 -- 200.174.255.255 IP: 200.178.0.0/15 IP: 200.182.0.0/15 IP: 200.190.0.0 -- 200.192.63.255 IP: 200.200.0.0/16 IP: 200.208.0.0 -- 200.214.255.255 IP: 200.227.0.0 -- 200.228.255.255 IP: 200.230.0.0/15 IP: 200.241.0.0 -- 200.255.255.255 IP: 201.30.0.0/15 IP: 201.38.0.0/15 IP: 201.44.0.0/15 IP: 201.56.0.0/15 IP: 201.64.0.0/15 IP: 201.72.0.0/15 IP: 201.90.0.0/16 IP: 2804:a8::/32 IP: 2804:17c::/32 IP: 2804:1388::/30 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c2:e8:9c:41:0e:56:ef:48:cb:3c:ee:16:32:79:e7:df:c7:f4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:04 2024 GMT Not After : Apr 2 18:31:04 2025 GMT Subject: CN=149DF6958A59FCFA910071567BAB07904ED0751D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:80:6a:85:84:fc:54:ea:56:5d:f3:08:38: b0:e4:4e:8a:b2:ae:29:79:ee:d8:4a:43:d6:41:92: a1:02:2f:7c:70:d6:ea:ac:f3:56:20:19:41:53:cf: 78:cf:77:48:84:b1:30:d5:7d:c6:2d:b7:05:eb:84: 59:67:a2:24:59:4b:a9:81:42:67:ff:8a:cb:68:81: 6b:61:f8:6e:f1:71:cb:77:1c:57:9b:84:44:f9:c4: 54:e4:b1:62:a6:2b:53:04:e7:c2:2c:cc:ef:80:e8: 36:e3:80:14:92:98:30:37:8b:2e:5c:35:a2:29:61: 5c:0b:82:0c:5d:2d:5d:34:69:30:b3:10:de:c5:97: 76:0d:49:2c:97:ae:e0:2f:8d:6f:f1:c3:00:e4:46: 6f:94:8e:eb:51:28:39:c1:1c:ad:69:3d:84:2a:2d: 09:e8:8d:a7:80:81:51:4c:9a:0d:49:f6:e2:d7:21: 8f:ec:21:30:41:d0:95:00:17:5c:d4:ca:f5:d3:a7: 13:0c:12:21:21:b3:cf:06:6a:30:c5:a7:fc:a1:75: f4:c4:55:88:ad:91:f3:da:80:1f:64:89:a0:bb:93: ed:3b:8d:e9:25:7e:80:d0:77:11:6b:cf:fb:ab:e7: b9:72:d7:97:d0:cb:3b:3d:08:e9:c6:0b:50:9c:85: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.68.0.0/16 179.136.0.0/13 179.237.0.0-179.237.25.255 186.249.160.0/20 187.28.0.0-187.30.255.255 187.43.0.0/16 189.2.0.0/15 189.16.0.0/15 189.22.0.0/15 189.42.0.0/15 189.52.0.0/15 189.86.0.0-189.88.255.255 191.38.0.0/15 191.56.0.0/13 200.10.159.0/24 200.139.192.0/18 200.166.0.0/15 200.172.0.0-200.174.255.255 200.178.0.0/15 200.182.0.0/15 200.190.0.0-200.192.63.255 200.200.0.0/16 200.208.0.0-200.214.255.255 200.227.0.0-200.228.255.255 200.230.0.0/15 200.241.0.0-200.255.255.255 201.30.0.0/15 201.38.0.0/15 201.44.0.0/15 201.56.0.0/15 201.64.0.0/15 201.72.0.0/15 201.90.0.0/16 IPv6: 2804:a8::/32 2804:17c::/32 2804:1388::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4230 Signature Algorithm: sha256WithRSAEncryption cc:9b:cc:1b:8f:95:a2:92:70:d6:f1:80:36:d6:9a:a4:ef:f7: 1b:fe:c6:89:21:2e:ac:f8:18:ea:44:e0:a0:c4:93:bb:55:ad: 97:c9:75:05:a3:82:4b:4c:44:eb:b6:01:6d:8f:c1:dd:5e:f1: 60:f0:c8:c8:0b:fa:06:b6:fd:57:af:61:a4:d7:d3:b3:54:aa: 58:2c:92:08:ba:b0:2a:a4:8b:2a:13:1a:6d:05:7f:e9:0e:c9: f4:84:51:88:91:7e:21:d3:7e:f8:2e:26:c0:ce:08:e5:a2:b9: 67:4e:f7:2f:64:9e:44:b9:3f:13:03:3f:28:5e:61:4e:96:37: 6a:02:ea:73:cb:25:1d:e4:7f:04:2d:29:41:de:07:30:75:f7: 21:92:be:e4:c9:9c:d3:26:78:1a:76:99:8c:be:76:f8:d3:4c: 40:e5:5f:42:9c:01:49:47:3c:82:5f:6e:72:6c:d2:da:bd:4f: 74:25:e4:c5:3a:ee:1b:95:83:4e:4b:ba:f9:8e:cc:c3:9b:5d: e2:12:1d:00:9c:60:59:59:64:b6:93:53:c9:94:62:04:0c:94: 70:f4:35:82:d0:32:ba:e4:e7:b3:3a:39:52:82:a9:c6:30:69: cb:79:5d:20:76:d8:a2:96:48:05:65:a0:d8:77:21:70:b5:86: 29:ff:de:0f -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUdcLonEEOVu9IyzzuFjJ559/H9D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MDRaFw0yNTA0MDIxODMxMDRaMDMxMTAvBgNV BAMTKDE0OURGNjk1OEE1OUZDRkE5MTAwNzE1NjdCQUIwNzkwNEVEMDc1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEYBqhYT8VOpWXfMIOLDkToqy ril57thKQ9ZBkqECL3xw1uqs81YgGUFTz3jPd0iEsTDVfcYttwXrhFlnoiRZS6mB Qmf/istogWth+G7xcct3HFebhET5xFTksWKmK1ME58IszO+A6DbjgBSSmDA3iy5c NaIpYVwLggxdLV00aTCzEN7Fl3YNSSyXruAvjW/xwwDkRm+UjutRKDnBHK1pPYQq LQnojaeAgVFMmg1J9uLXIY/sITBB0JUAF1zUyvXTpxMMEiEhs88GajDFp/yhdfTE VYitkfPagB9kiaC7k+07jeklfoDQdxFrz/ur57ly15fQyzs9COnGC1CchUtHAgMB AAGjggQpMIIEJTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUnfaViln8+pEA cVZ7qweQTtB1HTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1VS NEplZHZaU25iOGhLbU1VZ1E2ODdiNE1YWG0zNW1TWkRNTFFOSFNGcHAvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1VS NEplZHZaU25iOGhLbU1VZ1E2ODdiNE1YWG0zNW1TWkRNTFFOSFNGcHAvMS8xNDlE RjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3NTFELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggEdBggrBgEFBQcB BwEB/wSCAQwwggEIMIHoBAIAATCB4QMDALNEAwMDs4gwCwMDALPtAwQBs+0YAwQE uvmgMAoDAwK7HAMDALseAwMAuysDAwG9AgMDAb0QAwMBvRYDAwG9KgMDAb00MAoD AwG9VgMDAL1YAwMBvyYDAwO/OAMEAMgKnwMEBsiLwAMDAcimMAoDAwLIrAMDAMiu AwMByLIDAwHItjALAwMByL4DBAbIwAADAwDIyDAKAwMEyNADAwDI1jAKAwMAyOMD AwDI5AMDAcjmMAkDAwDI8QMCAMgDAwHJHgMDAckmAwMBySwDAwHJOAMDAclAAwMB yUgDAwDJWjAbBAIAAjAVAwUAKAQAqAMFACgEAXwDBQIoBBOIMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAhCGMA0GCSqGSIb3DQEBCwUAA4IBAQDMm8wbj5WiknDW8YA2 1pqk7/cb/saJIS6s+BjqROCgxJO7Va2XyXUFo4JLTETrtgFtj8HdXvFg8MjIC/oG tv1Xr2Gk19OzVKpYLJIIurAqpIsqExptBX/pDsn0hFGIkX4h0374LibAzgjlorln TvcvZJ5EuT8TAz8oXmFOljdqAupzyyUd5H8ELSlB3gcwdfchkr7kyZzTJngadpmM vnb400xA5V9CnAFJRzyCX25ybNLavU90JeTFOu4blYNOS7r5jszDm13iEh0AnGBZ WWS2k1PJlGIEDJRw9DWC0DK65OezOjlSgqnGMGnLeV0gdtiilkgFZaDYdyFwtYYp /94P -----END CERTIFICATE-----Generated at Mon Jun 3 04:17:59 2024 by rpki-client on console-fra.rpki-client.org