$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer (raw, json) Hash identifier: GHUxdYB3vjB3DrcnjGO2cjGImFwZPl9jsQaOK4VumSI= Subject key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 06BB9E1845807D9905BAA98CCE9DAEAD7ACE4B55 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft caRepository: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 28 Aug 2024 16:29:46 +0000 Certificate not after: Wed 27 Aug 2025 16:34:46 +0000 Subordinate resources: AS: 268500 IP: 45.161.36.0/22 IP: 2804:522c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:bb:9e:18:45:80:7d:99:05:ba:a9:8c:ce:9d:ae:ad:7a:ce:4b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 28 16:29:46 2024 GMT Not After : Aug 27 16:34:46 2025 GMT Subject: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:0f:fa:7d:07:29:2a:c5:cc:8a:c1:f7:51: e0:27:dc:31:57:5e:c3:72:75:47:73:7f:a2:89:be: dd:63:5f:38:2c:91:64:cd:60:c8:df:e0:17:ae:32: 17:09:89:60:5b:2d:16:26:e4:b6:6a:de:dd:9a:84: cd:a2:71:2f:fc:ca:fe:7c:bc:90:dc:a1:21:d2:6b: 35:c3:aa:7d:92:2f:10:e6:3c:7c:cf:f3:5c:58:fb: 25:9f:35:6a:7a:67:bd:4a:91:53:25:4e:11:49:c3: 7e:80:bf:4e:6f:aa:b4:5b:4a:b1:49:d9:2e:c9:1a: af:69:aa:46:c5:fc:2c:c7:cb:5e:b4:20:4a:69:35: fd:e3:53:91:1e:b4:df:22:82:3d:15:04:2b:6d:86: e1:c5:63:e6:7e:33:66:1e:2a:42:9c:11:e0:8f:a1: c2:2c:f5:44:2a:5e:c1:0c:a5:11:b0:45:9f:d3:d4: a5:4b:90:1c:81:9a:fe:ec:25:cc:f7:35:d5:39:e4: 06:fd:74:ac:9e:3c:5d:7f:45:47:16:be:a9:72:68: 98:35:12:08:e3:64:ee:b3:99:a7:e1:f2:c8:48:bf: 7c:72:6a:7a:a6:69:50:f0:f5:bc:d5:07:80:d2:c0: dd:c6:56:5b:b3:e2:3d:16:20:bd:00:59:91:89:82: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.36.0/22 IPv6: 2804:522c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268500 Signature Algorithm: sha256WithRSAEncryption a9:cc:7b:b4:cb:7d:25:88:08:8d:c8:e5:05:0c:aa:37:b9:93: 52:fc:a4:d5:0f:ff:44:2a:75:60:5a:6c:d6:a7:3b:40:fb:88: 6e:c0:9e:d7:bb:b8:20:73:c9:df:2a:4b:41:07:af:24:65:6c: a7:41:61:9d:cf:ec:da:6d:a3:9d:96:81:8a:57:a6:8f:94:e6: 40:8a:37:93:df:59:a8:41:0c:e5:0b:0a:ae:c2:98:8b:af:f0: 0f:53:09:99:f7:ae:4d:72:58:d3:14:b4:b0:67:05:8f:62:a8: 0f:3f:da:4b:5d:8c:d0:55:d5:84:e4:aa:a9:28:f8:a0:7e:61: 2d:f9:f9:35:04:2c:00:bc:b4:2a:6c:70:e8:3f:11:10:f8:ce: bc:ea:ab:cf:ce:95:c3:09:90:9b:2a:83:5e:c1:73:7f:17:ab: 3e:57:27:4b:ac:65:8e:3c:e2:49:5a:99:8e:27:f1:c3:09:53: a0:f0:74:7f:2b:20:10:59:b6:e7:62:15:7d:f0:c0:af:a9:af: d8:05:77:13:30:13:a8:7f:d3:0f:c2:aa:76:55:0a:ff:c9:94: 0d:91:c8:9d:e3:9c:da:cf:91:ba:7a:4e:b7:05:12:94:90:81: 99:42:26:91:27:8c:5a:02:df:4f:e2:d8:fd:2d:61:61:cc:2f: f7:32:87:28 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBrueGEWAfZkFuqmMzp2urXrOS1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjgxNjI5NDZaFw0yNTA4MjcxNjM0NDZaMDMxMTAvBgNV BAMTKDA5RDhENEE2NzA2OTU4MEUzNEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKDg/6fQcpKsXMisH3UeAn3DFX XsNydUdzf6KJvt1jXzgskWTNYMjf4BeuMhcJiWBbLRYm5LZq3t2ahM2icS/8yv58 vJDcoSHSazXDqn2SLxDmPHzP81xY+yWfNWp6Z71KkVMlThFJw36Av05vqrRbSrFJ 2S7JGq9pqkbF/CzHy160IEppNf3jU5EetN8igj0VBCtthuHFY+Z+M2YeKkKcEeCP ocIs9UQqXsEMpRGwRZ/T1KVLkByBmv7sJcz3NdU55Ab9dKyePF1/RUcWvqlyaJg1 EgjjZO6zmafh8shIv3xyanqmaVDw9bzVB4DSwN3GVluz4j0WIL0AWZGJgk3bAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ2NSmcGlYDjTx arBHQgvUoI1P8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQnlM MURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J5 TDFEVDF3a1pidDNtdUFxYTFUWDFaelgzUGpjNkNmUGhhOWZBeDJvQ1FrLzAvMDlE OEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRBMDhENEZGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaEkMA0EAgACMAcDBQAoBFIsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQY1DANBgkqhkiG9w0BAQsFAAOCAQEAqcx7tMt9JYgIjcjl BQyqN7mTUvyk1Q//RCp1YFps1qc7QPuIbsCe17u4IHPJ3ypLQQevJGVsp0Fhnc/s 2m2jnZaBilemj5TmQIo3k99ZqEEM5QsKrsKYi6/wD1MJmfeuTXJY0xS0sGcFj2Ko Dz/aS12M0FXVhOSqqSj4oH5hLfn5NQQsALy0Kmxw6D8REPjOvOqrz86VwwmQmyqD XsFzfxerPlcnS6xljjziSVqZjifxwwlToPB0fysgEFm252IVffDAr6mv2AV3EzAT qH/TD8KqdlUK/8mUDZHIneOc2s+RunpOtwUSlJCBmUImkSeMWgLfT+LY/S1hYcwv 9zKHKA== -----END CERTIFICATE-----Generated at Mon Feb 17 08:18:33 2025 by rpki-client