$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer File: 0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer (raw, json) Hash identifier: 3fcmsE7PBxKdusZMX7KG6DLYMXhCYKJWVtxYfN4nBdM= Subject key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3A1B145BCA8850F2AFF50D5BF087FA4CEEBEDFE4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft caRepository: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Jul 2024 19:38:02 +0000 Certificate not after: Mon 07 Jul 2025 19:43:02 +0000 Subordinate resources: AS: 28349 AS: 28647 AS: 53008 AS: 53067 AS: 53143 AS: 262420 AS: 265021 AS: 266206 AS: 267203 AS: 267452 AS: 267484 AS: 268555 AS: 268603 AS: 269112 AS: 269489 IP: 45.161.148.0/22 IP: 45.163.96.0/22 IP: 45.179.0.0/22 IP: 45.187.236.0/22 IP: 45.231.136.0/22 IP: 131.0.84.0/22 IP: 131.100.68.0/22 IP: 168.195.236.0/22 IP: 170.0.160.0/22 IP: 177.84.176.0/21 IP: 177.154.64.0/20 IP: 177.185.160.0/19 IP: 179.107.0.0/21 IP: 181.191.76.0/22 IP: 186.193.112.0/20 IP: 186.194.224.0/20 IP: 186.219.96.0/20 IP: 187.85.192.0/19 IP: 187.86.112.0/20 IP: 187.87.64.0/20 IP: 189.51.128.0/19 IP: 189.113.192.0/20 IP: 189.113.216.0/21 IP: 189.126.160.0/19 IP: 200.71.68.0/22 IP: 201.76.224.0/19 IP: 2804:554::/32 IP: 2804:a50::/32 IP: 2804:b1c::/32 IP: 2804:e50::/32 IP: 2804:1a68::/32 IP: 2804:3184::/32 IP: 2804:3c5c::/32 IP: 2804:41b8::/32 IP: 2804:4230::/32 IP: 2804:49c8::/32 IP: 2804:52fc::/32 IP: 2804:53bc::/32 IP: 2804:5f9c::/32 IP: 2804:656c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 16 Nov 2024 21:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1b:14:5b:ca:88:50:f2:af:f5:0d:5b:f0:87:fa:4c:ee:be:df:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 8 19:38:02 2024 GMT Not After : Jul 7 19:43:02 2025 GMT Subject: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:68:da:db:8e:d6:f9:b6:c2:9e:79:42:8a:4e: 65:f5:c1:81:d6:63:b9:02:7d:28:ec:a5:d2:21:e7: d2:6d:be:ea:b8:dc:a2:62:b5:75:c9:5e:98:69:25: dd:94:76:0f:83:0e:56:fa:c1:44:87:0c:51:f1:97: d5:62:22:5e:e6:bc:ce:fc:7f:73:4b:9b:29:1e:8c: 80:a0:21:04:14:02:1c:fa:a7:69:75:70:72:3b:10: c6:98:34:d3:e1:d2:2f:82:13:85:05:0e:f5:0f:63: 11:55:37:05:37:91:2a:21:98:7a:ea:e1:36:b3:b5: 3e:dc:34:68:c1:75:15:90:d7:76:5f:77:06:75:15: dc:cb:e8:45:01:12:ed:45:79:de:5e:bc:bc:c0:d9: e9:73:7b:50:2b:e8:b1:5e:3b:4f:18:6d:62:f7:1a: 7b:f7:19:4d:a3:9a:4c:10:f7:38:b5:f2:68:40:57: 51:90:8e:80:73:8f:94:ad:74:e7:94:7e:2c:46:cb: c1:55:91:0c:cd:ed:e4:d0:4b:7e:d4:49:03:aa:d4: b7:cc:e3:aa:22:0e:64:eb:94:9c:90:a3:0e:bb:c8: ff:15:30:bd:d3:3e:af:6c:1d:86:2b:d9:98:17:ec: 20:4e:96:bd:30:bf:98:7b:f2:2c:1c:88:eb:a4:9f: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.148.0/22 45.163.96.0/22 45.179.0.0/22 45.187.236.0/22 45.231.136.0/22 131.0.84.0/22 131.100.68.0/22 168.195.236.0/22 170.0.160.0/22 177.84.176.0/21 177.154.64.0/20 177.185.160.0/19 179.107.0.0/21 181.191.76.0/22 186.193.112.0/20 186.194.224.0/20 186.219.96.0/20 187.85.192.0/19 187.86.112.0/20 187.87.64.0/20 189.51.128.0/19 189.113.192.0/20 189.113.216.0/21 189.126.160.0/19 200.71.68.0/22 201.76.224.0/19 IPv6: 2804:554::/32 2804:a50::/32 2804:b1c::/32 2804:e50::/32 2804:1a68::/32 2804:3184::/32 2804:3c5c::/32 2804:41b8::/32 2804:4230::/32 2804:49c8::/32 2804:52fc::/32 2804:53bc::/32 2804:5f9c::/32 2804:656c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28349 28647 53008 53067 53143 262420 265021 266206 267203 267452 267484 268555 268603 269112 269489 Signature Algorithm: sha256WithRSAEncryption 04:ab:47:b8:b8:fe:dc:af:c9:e2:87:be:63:a9:86:4e:38:d9: 4e:a5:e3:08:d1:b5:05:5b:d9:c4:6c:dd:9a:4b:a6:d9:c3:ae: 2f:7d:9b:ed:62:76:ef:38:2d:14:d5:51:2d:a3:f8:9f:f1:79: db:30:bc:8e:7c:cc:0b:22:c8:d6:67:c0:1b:cd:9e:9e:8d:cc: 55:4c:d4:b1:8e:fd:41:f7:ed:cc:e2:ad:cf:23:43:93:00:20: 04:ba:72:16:f3:a9:fe:23:12:9d:3d:43:50:66:b5:ab:84:02: 33:52:7c:78:26:fb:5a:3c:76:36:a7:c1:55:79:29:90:57:99: e9:4d:8f:84:50:33:9b:78:f0:ac:54:4b:ef:10:58:bd:c0:c9: a3:52:0c:86:a3:fe:2c:95:d7:a3:b9:e1:90:9d:d1:b0:e8:db: 30:1f:0f:15:1e:00:db:b3:cf:81:f8:fc:2b:d4:37:6a:c6:22: 97:11:50:00:1b:bf:e5:a1:36:e4:67:a3:58:b0:ff:86:c4:9d: 76:4f:a3:b1:5e:1b:cf:f2:a4:77:13:18:8e:71:0e:83:29:e4: 44:9a:ab:89:fd:63:6c:2a:05:64:5e:6c:77:57:6e:78:43:de: 80:65:d0:d2:48:5e:98:c2:ae:77:1f:df:d5:cc:d8:18:5e:67: ea:3a:18:00 -----BEGIN CERTIFICATE----- MIIHbTCCBlWgAwIBAgIUOhsUW8qIUPKv9Q1b8If6TO6+3+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MDgxOTM4MDJaFw0yNTA3MDcxOTQzMDJaMDMxMTAvBgNV BAMTKDBERUI5MkYzMzA3QjBFOTRDQzcwRDlCMjFCNTBGNkZFMjEzNUNEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4aNrbjtb5tsKeeUKKTmX1wYHW Y7kCfSjspdIh59Jtvuq43KJitXXJXphpJd2Udg+DDlb6wUSHDFHxl9ViIl7mvM78 f3NLmykejICgIQQUAhz6p2l1cHI7EMaYNNPh0i+CE4UFDvUPYxFVNwU3kSohmHrq 4TaztT7cNGjBdRWQ13ZfdwZ1FdzL6EUBEu1Fed5evLzA2elze1Ar6LFeO08YbWL3 Gnv3GU2jmkwQ9zi18mhAV1GQjoBzj5StdOeUfixGy8FVkQzN7eTQS37USQOq1LfM 46oiDmTrlJyQow67yP8VML3TPq9sHYYr2ZgX7CBOlr0wv5h78iwciOukn9RLAgMB AAGjggR3MIIEczAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQN65LzMHsOlMxw 2bIbUPb+ITXNmDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWk1 dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpwNUovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fp NXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzIvMERF QjkyRjMzMDdCMEU5NENDNzBEOUIyMUI1MEY2RkUyMTM1Q0Q5OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUH AQcBAf8EggEUMIIBEDCBowQCAAEwgZwDBAItoZQDBAIto2ADBAItswADBAItu+wD BAIt54gDBAKDAFQDBAKDZEQDBAKow+wDBAKqAKADBAOxVLADBASxmkADBAWxuaAD BAOzawADBAK1v0wDBAS6wXADBAS6wuADBAS622ADBAW7VcADBAS7VnADBAS7V0AD BAW9M4ADBAS9ccADBAO9cdgDBAW9fqADBALIR0QDBAXJTOAwaAQCAAIwYgMFACgE BVQDBQAoBApQAwUAKAQLHAMFACgEDlADBQAoBBpoAwUAKAQxhAMFACgEPFwDBQAo BEG4AwUAKARCMAMFACgEScgDBQAoBFL8AwUAKARTvAMFACgEX5wDBQAoBGVsMF4G CCsGAQUFBwEIAQH/BE8wTaBLMEkCAm69AgJv5wIDAM8QAgMAz0sCAwDPlwIDBAEU AgMECz0CAwQP3gIDBBPDAgMEFLwCAwQU3AIDBBkLAgMEGTsCAwQbOAIDBByxMA0G CSqGSIb3DQEBCwUAA4IBAQAEq0e4uP7cr8nih75jqYZOONlOpeMI0bUFW9nEbN2a S6bZw64vfZvtYnbvOC0U1VEto/if8XnbMLyOfMwLIsjWZ8AbzZ6ejcxVTNSxjv1B 9+3M4q3PI0OTACAEunIW86n+IxKdPUNQZrWrhAIzUnx4JvtaPHY2p8FVeSmQV5np TY+EUDObePCsVEvvEFi9wMmjUgyGo/4sldejueGQndGw6NswHw8VHgDbs8+B+Pwr 1DdqxiKXEVAAG7/loTbkZ6NYsP+GxJ12T6OxXhvP8qR3ExiOcQ6DKeREmquJ/WNs KgVkXmx3V254Q96AZdDSSF6Ywq53H9/VzNgYXmfqOhgA -----END CERTIFICATE-----Generated at Fri Nov 15 22:06:31 2024 by rpki-client on console-ams.rpki-client.org