$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer File: 05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer (raw, json) Hash identifier: nAP2y5jdxq4QEpxScwM5gnIGjURSnCex2mU/bZahsKA= Subject key identifier: 05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5583A233193C3A9EE6A87C0BB6C70EBF0C577D30 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.mft caRepository: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 21 Nov 2024 18:07:57 +0000 Certificate not after: Thu 20 Nov 2025 18:12:57 +0000 Subordinate resources: AS: 263256 IP: 170.247.200.0/22 IP: 198.58.8.0/22 IP: 2804:17e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:83:a2:33:19:3c:3a:9e:e6:a8:7c:0b:b6:c7:0e:bf:0c:57:7d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 21 18:07:57 2024 GMT Not After : Nov 20 18:12:57 2025 GMT Subject: CN=05263BF4891CB378D051DAE2EA2AF3072FC5FAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:57:c0:77:e3:07:bf:69:05:b3:af:99:dc: bc:59:91:53:63:95:ed:b1:86:0d:6b:99:37:29:f8: a6:42:72:18:10:59:65:bd:f3:13:f5:a1:f2:05:46: ee:68:a3:61:a3:39:ce:c5:07:0b:5d:8f:d1:0f:43: b1:72:17:87:ac:50:88:a6:cd:79:e8:5e:de:9c:4e: 60:9f:a4:7e:93:8f:95:91:74:9a:1a:f1:92:d3:16: b4:04:46:3f:27:ff:4a:cf:64:26:dc:39:24:8b:f1: e5:4e:57:c5:5d:eb:65:67:e3:2f:06:31:02:d2:a9: 63:60:17:2a:90:89:cc:65:7b:36:ac:82:ad:0d:2d: dc:e2:63:9c:16:4f:4e:2d:fc:6c:d1:b8:68:83:09: c3:2d:6f:7e:4a:49:85:96:42:fc:fd:d4:a5:a0:99: 85:7c:d6:8d:62:96:d2:33:17:be:8e:a3:fe:cb:1a: 31:c8:21:1a:20:90:fa:ec:7a:9d:84:b5:92:db:47: a0:b9:43:ab:f8:59:e7:24:d2:96:bf:6a:79:5b:be: b7:13:a5:d9:aa:ec:b6:80:21:80:21:92:64:40:5f: 67:7e:d6:03:96:27:a9:3b:0f:06:58:bb:50:9f:ac: 15:1b:9a:b1:01:a0:61:fc:a8:27:e0:e8:02:2f:31: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.200.0/22 198.58.8.0/22 IPv6: 2804:17e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263256 Signature Algorithm: sha256WithRSAEncryption c7:de:f9:53:8a:ef:c3:41:93:c8:d7:6e:ca:a0:0c:bd:4c:3a: cb:0f:59:e1:19:e8:dd:31:fd:eb:39:23:d6:f4:a1:da:89:a0: c9:9f:1f:df:e4:57:ee:43:fe:54:60:5f:19:c0:a9:fd:19:0b: b3:0e:16:0e:4f:15:d7:39:e0:6e:99:06:d7:7b:81:98:ea:15: 2c:5c:17:02:1f:be:a4:54:15:2c:be:e1:39:3f:a6:7d:36:93: c1:02:ca:11:77:da:e2:21:70:26:00:b2:81:dc:1e:21:12:7c: 74:4b:88:73:46:2a:c7:62:a2:24:03:21:6a:44:e4:9a:bb:80: 13:4e:a5:90:49:a8:85:28:a9:84:34:0f:92:38:3c:6b:26:97: 12:67:5f:e8:01:8b:ff:dd:11:56:17:97:d6:3b:73:04:6c:91: a1:6a:56:8e:f6:c1:ca:e3:15:65:ab:27:0e:a1:39:65:72:50: 6d:6e:41:ec:4a:01:2a:93:fb:a9:dc:e0:c1:ed:b6:d5:d4:b1: 5e:f0:54:dd:dc:13:79:a1:ea:f4:71:8b:83:01:36:a4:dc:c1: 65:82:ef:05:d9:a0:b1:5c:60:ce:d3:d6:d5:f0:86:53:50:11: 36:21:54:1b:79:ce:6e:0c:ba:91:a6:32:cd:b6:bb:31:2e:92: 2d:9b:dc:9e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVYOiMxk8Op7mqHwLtscOvwxXfTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjExODA3NTdaFw0yNTExMjAxODEyNTdaMDMxMTAvBgNV BAMTKDA1MjYzQkY0ODkxQ0IzNzhEMDUxREFFMkVBMkFGMzA3MkZDNUZBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1lfAd+MHv2kFs6+Z3LxZkVNj le2xhg1rmTcp+KZCchgQWWW98xP1ofIFRu5oo2GjOc7FBwtdj9EPQ7FyF4esUIim zXnoXt6cTmCfpH6Tj5WRdJoa8ZLTFrQERj8n/0rPZCbcOSSL8eVOV8Vd62Vn4y8G MQLSqWNgFyqQicxlezasgq0NLdziY5wWT04t/GzRuGiDCcMtb35KSYWWQvz91KWg mYV81o1iltIzF76Oo/7LGjHIIRogkPrsep2EtZLbR6C5Q6v4Weck0pa/anlbvrcT pdmq7LaAIYAhkmRAX2d+1gOWJ6k7DwZYu1CfrBUbmrEBoGH8qCfg6AIvMZA3AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQFJjv0iRyzeNBR 2uLqKvMHL8X67jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXB3 UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw d1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAvMDUy NjNCRjQ4OTFDQjM3OEQwNTFEQUUyRUEyQUYzMDcyRkM1RkFFRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvfIAwQCxjoIMA0EAgACMAcDBQAoBBfgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEWDANBgkqhkiG9w0BAQsFAAOCAQEAx975U4rv w0GTyNduyqAMvUw6yw9Z4Rno3TH96zkj1vSh2omgyZ8f3+RX7kP+VGBfGcCp/RkL sw4WDk8V1zngbpkG13uBmOoVLFwXAh++pFQVLL7hOT+mfTaTwQLKEXfa4iFwJgCy gdweIRJ8dEuIc0Yqx2KiJAMhakTkmruAE06lkEmohSiphDQPkjg8ayaXEmdf6AGL /90RVheX1jtzBGyRoWpWjvbByuMVZasnDqE5ZXJQbW5B7EoBKpP7qdzgwe221dSx XvBU3dwTeaHq9HGLgwE2pNzBZYLvBdmgsVxgztPW1fCGU1ARNiFUG3nObgy6kaYy zba7MS6SLZvcng== -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:40 2024 by rpki-client on console-ams.rpki-client.org