$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer File: 132DCDB6019382C752C71B103893EAC01BCC5512.cer (raw, json) Hash identifier: EJbb2Hzq2mnYHz/tIBZmG6g3nWY1RhW9ACgzf0dlm+c= Subject key identifier: 13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4437513F5B37BFBD3FEE5566C1796CA73FEE1B09 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.mft caRepository: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 Nov 2024 18:06:55 +0000 Certificate not after: Tue 11 Nov 2025 18:11:55 +0000 Subordinate resources: AS: 264047 IP: 143.137.220.0/22 IP: 2804:29f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:37:51:3f:5b:37:bf:bd:3f:ee:55:66:c1:79:6c:a7:3f:ee:1b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 12 18:06:55 2024 GMT Not After : Nov 11 18:11:55 2025 GMT Subject: CN=132DCDB6019382C752C71B103893EAC01BCC5512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:db:f7:4d:d0:a4:34:13:18:72:87:26:9d: 64:ba:d9:f8:68:1c:38:1b:ff:61:60:0d:45:95:d3: 7f:bc:11:77:59:78:ab:11:17:4b:db:2a:a7:03:a7: 7c:b4:f6:5b:fb:12:22:b7:a7:f2:31:27:3f:48:cc: 8f:3a:95:f5:fe:e3:d7:bb:90:7a:ce:44:42:a1:7c: f2:ad:f6:01:2a:4c:5b:74:73:5d:c3:66:42:8e:06: 63:d2:f8:6a:56:0c:de:38:9c:43:67:e0:16:bb:67: d1:7b:d1:ba:3e:7d:64:5d:6c:ee:b4:8b:60:d3:c4: e1:6f:b1:b6:c3:39:4d:4f:fa:5b:37:c0:dd:9c:48: 55:c9:fb:af:a5:56:ff:15:6b:b9:47:55:0d:8b:e1: d2:7c:be:10:16:fe:8b:f6:5d:e1:b6:a7:2f:22:f8: cb:56:49:95:a7:b2:96:a7:96:b9:ae:16:f4:7e:ff: 59:6c:9a:9c:17:9c:a5:8f:ac:ab:66:37:89:20:31: a9:98:a3:99:00:b3:9d:6f:43:ff:a6:73:ae:a4:f0: fb:81:5b:8b:c3:43:2f:f7:d5:01:50:c4:9d:3c:ad: 7b:1e:06:3f:ba:7a:0b:11:1c:3f:a9:45:c7:30:8d: be:08:47:81:26:71:36:fa:57:a4:07:0e:63:67:af: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.220.0/22 IPv6: 2804:29f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264047 Signature Algorithm: sha256WithRSAEncryption a5:d4:31:da:27:a8:26:77:66:3c:ec:4b:e0:10:b4:dd:2b:34: 24:82:5f:ea:e9:a9:fa:62:fe:54:02:49:da:71:c5:66:89:ad: 19:98:fb:c1:ff:fe:ac:02:f1:79:3e:5a:10:4e:c7:a7:56:b5: 36:c0:24:0b:f1:8c:e6:75:c4:33:04:73:cd:27:da:fc:e2:f5: 21:0d:5e:dd:f5:f6:1a:94:8c:bf:4e:ae:cc:77:33:82:d0:ad: 44:17:99:30:c5:b9:b9:6f:de:c6:40:3a:df:0e:1c:03:29:c9: 86:a0:c1:9f:3d:3d:b7:38:7b:20:83:e1:cc:32:59:bc:e7:ad: 50:a3:9c:85:b4:f1:6a:ef:e2:5a:f2:95:19:f5:61:83:f4:2d: 07:e5:ee:e7:99:7f:9d:75:cf:ae:c0:8d:93:77:c5:9f:e5:e7: 3a:7e:15:69:fd:6c:17:76:b7:23:a8:3e:1a:10:e0:ff:12:3d: ab:fa:36:3a:35:78:13:7a:25:b4:e1:cb:12:d7:ac:ff:0e:6f: 23:e3:12:44:1a:20:81:f9:75:75:c3:38:84:ed:30:0d:cc:80: e8:9f:cc:3f:67:70:ac:49:77:00:3f:dc:09:f7:f7:38:fb:dc: 14:c9:7b:ac:e9:74:5d:2f:3c:49:50:be:c7:6f:90:09:9d:8b: 56:8e:d2:47 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURDdRP1s3v70/7lVmwXlspz/uGwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTIxODA2NTVaFw0yNTExMTExODExNTVaMDMxMTAvBgNV BAMTKDEzMkRDREI2MDE5MzgyQzc1MkM3MUIxMDM4OTNFQUMwMUJDQzU1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIdv3TdCkNBMYcocmnWS62fho HDgb/2FgDUWV03+8EXdZeKsRF0vbKqcDp3y09lv7EiK3p/IxJz9IzI86lfX+49e7 kHrOREKhfPKt9gEqTFt0c13DZkKOBmPS+GpWDN44nENn4Ba7Z9F70bo+fWRdbO60 i2DTxOFvsbbDOU1P+ls3wN2cSFXJ+6+lVv8Va7lHVQ2L4dJ8vhAW/ov2XeG2py8i +MtWSZWnspanlrmuFvR+/1lsmpwXnKWPrKtmN4kgMamYo5kAs51vQ/+mc66k8PuB W4vDQy/31QFQxJ08rXseBj+6egsRHD+pRccwjb4IR4EmcTb6V6QHDmNnr6FdAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQTLc22AZOCx1LH GxA4k+rAG8xVEjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHdF akF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hWb2UvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHdF akF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hWb2UvMC8xMzJE Q0RCNjAxOTM4MkM3NTJDNzFCMTAzODkzRUFDMDFCQ0M1NTEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKPidwwDQQCAAIwBwMFACgEKfQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAdvMA0GCSqGSIb3DQEBCwUAA4IBAQCl1DHaJ6gmd2Y87Evg ELTdKzQkgl/q6an6Yv5UAknaccVmia0ZmPvB//6sAvF5PloQTsenVrU2wCQL8Yzm dcQzBHPNJ9r84vUhDV7d9fYalIy/Tq7MdzOC0K1EF5kwxbm5b97GQDrfDhwDKcmG oMGfPT23OHsgg+HMMlm8561Qo5yFtPFq7+Ja8pUZ9WGD9C0H5e7nmX+ddc+uwI2T d8Wf5ec6fhVp/WwXdrcjqD4aEOD/Ej2r+jY6NXgTeiW04csS16z/Dm8j4xJEGiCB +XV1wziE7TANzIDon8w/Z3CsSXcAP9wJ9/c4+9wUyXus6XRdLzxJUL7Hb5AJnYtW jtJH -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:57 2025 by rpki-client