$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer File: 1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer (raw, json) Hash identifier: 9sTFHw1R44FamZoDHSlXXFV/b+P6Y1dK5kI9YQ2UeI8= Subject key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4881CF03892F6FD818E3AFC81A456B51FE1D30F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft caRepository: rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 12:09:45 +0000 Certificate not after: Thu 03 Apr 2025 12:14:45 +0000 Subordinate resources: AS: 271002 IP: 177.223.144.0/22 IP: 2804:74c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:81:cf:03:89:2f:6f:d8:18:e3:af:c8:1a:45:6b:51:fe:1d:30:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 12:09:45 2024 GMT Not After : Apr 3 12:14:45 2025 GMT Subject: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:e3:09:41:72:44:65:d3:d0:11:02:61:1a: 49:25:47:d0:2a:5e:a5:3d:c3:6e:af:ef:09:cd:2d: 9b:4f:03:f6:9c:63:d4:74:38:cc:36:05:17:0d:7f: 5f:01:e8:e4:18:9b:e8:cc:b7:1a:87:9d:e2:5e:1d: 7f:9f:67:54:cc:aa:b0:de:92:0e:28:81:92:5b:7f: 29:ba:84:3d:47:78:c5:25:d8:0d:e7:20:bb:f9:bd: 97:5d:cd:d9:a9:3c:44:e9:14:2a:83:e5:ce:48:5b: b6:58:5d:e4:f2:8f:45:b2:4f:4d:08:bc:4a:f0:d9: c6:b0:f1:44:18:13:2c:1d:7c:86:3f:0f:32:38:94: df:e9:1a:58:20:2b:db:1e:76:80:52:aa:61:5d:90: 40:2e:cf:70:2f:0e:b5:5d:2f:c1:9a:1b:76:e7:3d: d1:48:9e:24:f4:6e:61:91:39:85:ee:13:9a:4c:ec: d8:c6:49:7c:a7:12:ea:81:4f:1a:ed:78:1a:b3:33: 41:87:33:b7:93:67:fb:46:b2:82:37:7f:4c:2c:1e: d0:6d:33:1d:3c:49:c7:96:0b:aa:18:30:ce:1e:41: 58:81:70:9a:0a:d5:6d:42:df:a6:81:05:d6:87:5d: b8:60:3a:9b:2d:26:55:cf:e7:9d:cb:50:28:6b:fb: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.223.144.0/22 IPv6: 2804:74c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271002 Signature Algorithm: sha256WithRSAEncryption 34:cb:41:2a:c8:e8:bf:4c:e2:75:9c:33:e0:6a:17:00:90:4e: 4c:d7:fe:f3:99:03:fd:b8:d8:5a:22:d3:94:79:e9:9b:26:2a: 7a:6e:65:9f:6d:a9:6d:39:1d:43:8a:e0:9b:43:b6:b2:bc:77: c9:d4:f2:3c:5f:a1:e3:9e:56:a9:18:7d:9f:ef:b8:2a:80:00: 92:96:3a:f2:44:9b:76:9f:1f:74:4d:15:64:f7:84:00:87:80: 54:a4:13:7d:29:e5:2f:0f:00:40:54:ee:eb:00:70:00:f0:16: 94:34:46:29:dd:63:1d:eb:3e:a7:85:43:93:c1:15:c2:94:b8: 89:c3:b2:33:69:bc:66:71:2b:22:6f:97:43:1f:e5:50:0d:df: 8c:6c:24:29:30:c3:30:48:52:7a:dc:ab:54:3c:1e:26:e3:b9: 31:6e:3e:11:2d:25:bb:14:09:13:1d:4f:91:56:6c:19:d3:45: 7e:7d:35:61:2a:e0:a5:c4:dc:a0:83:5d:11:80:3a:2d:29:ce: cc:2c:3d:b0:c4:5a:da:1f:ad:fc:d3:90:9e:e5:ce:07:13:e9: 5e:1d:2f:7d:b6:c6:5c:24:27:f4:74:93:d0:3b:e0:7b:12:64: bb:a6:40:89:0b:3c:37:aa:47:a7:a5:5f:86:ba:0d:1b:92:1b: 93:7d:0e:79 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUSIHPA4kvb9gY46/IGkVrUf4dMPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMjA5NDVaFw0yNTA0MDMxMjE0NDVaMDMxMTAvBgNV BAMTKDE2NzJBNkFDNURGQkU4NUI3QjEwQ0ZDOEFEQUNERjZCQkEwOEE0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLuMJQXJEZdPQEQJhGkklR9Aq XqU9w26v7wnNLZtPA/acY9R0OMw2BRcNf18B6OQYm+jMtxqHneJeHX+fZ1TMqrDe kg4ogZJbfym6hD1HeMUl2A3nILv5vZddzdmpPETpFCqD5c5IW7ZYXeTyj0WyT00I vErw2caw8UQYEywdfIY/DzI4lN/pGlggK9sedoBSqmFdkEAuz3AvDrVdL8GaG3bn PdFIniT0bmGROYXuE5pM7NjGSXynEuqBTxrteBqzM0GHM7eTZ/tGsoI3f0wsHtBt Mx08SceWC6oYMM4eQViBcJoK1W1C36aBBdaHXbhgOpstJlXP553LUChr+3XTAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQWcqasXfvoW3sQ z8itrN9rugikzDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkQ2 YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpuU3cvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkQ2 YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpuU3cvMS8xNjcy QTZBQzVERkJFODVCN0IxMENGQzhBREFDREY2QkJBMDhBNENDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKx35AwDQQCAAIwBwMFACgEdMQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCKaMA0GCSqGSIb3DQEBCwUAA4IBAQA0y0EqyOi/TOJ1nDPg ahcAkE5M1/7zmQP9uNhaItOUeembJip6bmWfbaltOR1DiuCbQ7ayvHfJ1PI8X6Hj nlapGH2f77gqgACSljryRJt2nx90TRVk94QAh4BUpBN9KeUvDwBAVO7rAHAA8BaU NEYp3WMd6z6nhUOTwRXClLiJw7IzabxmcSsib5dDH+VQDd+MbCQpMMMwSFJ63KtU PB4m47kxbj4RLSW7FAkTHU+RVmwZ00V+fTVhKuClxNygg10RgDotKc7MLD2wxFra H63805Ce5c4HE+leHS99tsZcJCf0dJPQO+B7EmS7pkCJCzw3qkenpV+Gug0bkhuT fQ55 -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:53 2024 by rpki-client on console-ams.rpki-client.org