$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.cer File: 07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.cer (raw, json) Hash identifier: 9wn7XpfL5Wzv77hGRfiolyvk4axvQnuvZ/h3KpjN3po= Subject key identifier: 07:B6:A7:D4:D2:17:66:D2:E4:E9:47:4D:57:0F:8E:AC:FE:1D:BA:75 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 083F9BB99A3F807FF2C422456E0FEBF29D787C2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.mft caRepository: rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Oct 2024 21:49:59 +0000 Certificate not after: Tue 21 Oct 2025 21:54:59 +0000 Subordinate resources: AS: 273436 IP: 2804:8e98::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3f:9b:b9:9a:3f:80:7f:f2:c4:22:45:6e:0f:eb:f2:9d:78:7c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 21:49:59 2024 GMT Not After : Oct 21 21:54:59 2025 GMT Subject: CN=07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:b5:c4:8f:56:f6:ed:6e:43:68:35:1a:46: 6d:68:09:c5:78:02:43:6a:1d:66:48:b9:8f:3b:cc: 3f:2c:c6:cb:b4:44:33:95:ee:0c:26:52:a8:7a:19: 0d:55:cd:68:f9:44:a4:b6:1e:1f:ee:ad:a0:e1:85: 96:ce:ae:e8:fc:4c:4b:17:18:35:17:47:22:f0:34: 6b:94:ad:2a:9a:bf:af:39:68:27:8e:6f:80:3b:c5: 5f:8b:a4:45:89:8e:10:0c:43:25:ed:b0:52:f2:0d: c4:e0:20:0e:17:64:34:6f:d9:05:c5:46:02:c1:5e: bd:5d:34:fd:d4:d8:8b:e9:a7:46:8d:95:65:fe:f7: ac:90:4b:14:1b:c7:36:76:9f:51:88:3a:04:25:3a: 97:11:29:b7:2b:36:01:40:db:e0:dd:2e:9c:8a:ab: a2:be:e9:4c:f7:97:23:52:16:92:d2:28:52:48:67: 30:26:27:be:da:47:a6:79:de:02:93:30:3b:14:8a: 02:b0:9e:6f:6c:87:fd:02:51:bd:19:e0:08:6d:7f: b5:d5:09:b9:55:f0:25:01:f8:9d:e3:b0:bd:fe:5c: ea:e6:8f:7a:d8:74:cd:12:65:c5:3c:31:30:c9:d9: 17:f3:6a:96:93:93:84:6d:d2:b4:46:5a:f8:16:17: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:B6:A7:D4:D2:17:66:D2:E4:E9:47:4D:57:0F:8E:AC:FE:1D:BA:75 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/07B6A7D4D21766D2E4E9474D570F8EACFE1DBA75.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8e98::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273436 Signature Algorithm: sha256WithRSAEncryption 26:6e:20:aa:0e:d6:99:b8:7f:aa:db:cc:15:6c:6c:29:3b:14: d2:5e:25:c1:fa:c8:d2:ed:d4:43:4c:a2:8a:e8:f1:c8:49:04: 3c:66:96:de:e6:4e:69:42:b9:e8:9b:26:1c:18:3c:76:1b:e9: 35:85:2b:e5:ec:02:1b:b0:48:0f:0d:85:d5:08:f8:01:fa:ff: 00:3d:3e:a5:04:c2:af:68:81:0b:99:77:ff:cc:b9:35:fe:63: d2:df:e1:cb:3f:87:36:1e:ec:c1:91:65:3c:fb:22:db:42:e7: 24:31:e9:63:72:29:73:7f:39:df:f8:e9:3c:c0:e0:af:6b:97: 4c:0f:2c:28:9d:3c:c1:d5:71:06:50:41:0a:52:e6:3b:4d:8c: 0c:19:bb:51:3a:4e:66:5e:4f:a7:5e:de:3a:1a:76:46:9a:4b: 77:1e:0f:97:12:b5:3d:d0:d3:64:78:77:65:57:d3:34:9c:cd: cb:db:66:b6:74:12:ca:ba:f2:9d:d6:85:f2:25:57:af:5d:fc: 0a:76:a9:c4:e7:6d:65:67:06:10:d2:4e:fb:bc:7a:0c:20:20: 48:5b:e5:cd:60:96:d3:fa:29:e0:5d:5f:a9:f8:1b:48:41:1f: a9:71:42:2f:f2:26:9c:ce:d4:6a:13:ff:d5:08:b8:e1:e4:09: 3a:84:f0:9a -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUCD+buZo/gH/yxCJFbg/r8p14fC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjIyMTQ5NTlaFw0yNTEwMjEyMTU0NTlaMDMxMTAvBgNV BAMTKDA3QjZBN0Q0RDIxNzY2RDJFNEU5NDc0RDU3MEY4RUFDRkUxREJBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbLXEj1b27W5DaDUaRm1oCcV4 AkNqHWZIuY87zD8sxsu0RDOV7gwmUqh6GQ1VzWj5RKS2Hh/uraDhhZbOruj8TEsX GDUXRyLwNGuUrSqav685aCeOb4A7xV+LpEWJjhAMQyXtsFLyDcTgIA4XZDRv2QXF RgLBXr1dNP3U2Ivpp0aNlWX+96yQSxQbxzZ2n1GIOgQlOpcRKbcrNgFA2+DdLpyK q6K+6Uz3lyNSFpLSKFJIZzAmJ77aR6Z53gKTMDsUigKwnm9sh/0CUb0Z4Ahtf7XV CblV8CUB+J3jsL3+XOrmj3rYdM0SZcU8MTDJ2RfzapaTk4Rt0rRGWvgWF+0fAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQHtqfU0hdm0uTp R01XD46s/h26dTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkgz WjhlUnBiYm5Cek1lUGJENkxvSHZUOFR2blY0TVkzenVaQUtzR2JacXAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZI M1o4ZVJwYmJuQnpNZVBiRDZMb0h2VDhUdm5WNE1ZM3p1WkFLc0diWnFwLzAvMDdC NkE3RDREMjE3NjZEMkU0RTk0NzRENTcwRjhFQUNGRTFEQkE3NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASOmDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LBwwDQYJKoZIhvcNAQELBQADggEBACZuIKoO1pm4f6rbzBVsbCk7FNJeJcH6yNLt 1ENMooro8chJBDxmlt7mTmlCueibJhwYPHYb6TWFK+XsAhuwSA8NhdUI+AH6/wA9 PqUEwq9ogQuZd//MuTX+Y9Lf4cs/hzYe7MGRZTz7IttC5yQx6WNyKXN/Od/46TzA 4K9rl0wPLCidPMHVcQZQQQpS5jtNjAwZu1E6TmZeT6de3joadkaaS3ceD5cStT3Q 02R4d2VX0zSczcvbZrZ0Esq68p3WhfIlV69d/Ap2qcTnbWVnBhDSTvu8egwgIEhb 5c1gltP6KeBdX6n4G0hBH6lxQi/yJpzO1GoT/9UIuOHkCTqE8Jo= -----END CERTIFICATE-----Generated at Fri Nov 22 22:21:17 2024 by rpki-client on console-fra.rpki-client.org