$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer File: 1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer (raw, json) Hash identifier: cQaFqF1obySofa5UJ8t7m/Mu6LkOxiXHORsQmrLSDgE= Subject key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 691F24A57246292BAC1A399E9673DD0BBC043CCD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft caRepository: rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 00:20:24 +0000 Certificate not after: Fri 04 Apr 2025 00:25:24 +0000 Subordinate resources: AS: 271000 IP: 177.223.128.0/22 IP: 2804:74bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1f:24:a5:72:46:29:2b:ac:1a:39:9e:96:73:dd:0b:bc:04:3c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 00:20:24 2024 GMT Not After : Apr 4 00:25:24 2025 GMT Subject: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:95:b8:ad:9b:b9:5b:2a:3a:d1:05:f5:77: 06:05:c1:a7:bd:ae:ce:75:11:b2:69:2f:e1:c7:2f: 93:95:45:96:b4:00:a9:82:1a:62:13:b6:89:7c:5b: 3c:74:ad:af:cc:9e:23:f7:1c:19:25:c9:65:46:e7: 06:f9:a6:d5:ec:16:c4:5b:ab:35:5c:cf:d7:77:fc: 99:85:3f:bc:68:fb:06:29:0d:33:02:79:b3:55:ac: 0b:51:dd:00:d7:45:da:3a:92:42:8e:82:38:be:40: 68:2e:25:24:97:43:61:87:58:e9:9e:44:12:e2:24: 13:49:80:dc:fd:55:56:4e:1a:be:6c:59:51:43:21: 08:33:ca:c5:d5:c0:55:a4:d9:74:2d:77:53:65:91: 13:dd:bf:ba:85:c2:5b:2b:43:b6:e3:79:f1:64:cb: c8:35:60:ee:0d:73:71:a9:8b:7e:89:c6:b0:c6:9a: ec:ae:20:c8:d1:e6:71:27:91:a5:e1:9b:f6:12:5c: 27:5e:1f:0e:3f:34:28:41:cb:c9:37:26:40:0a:5e: e7:f7:a6:c3:f2:4e:39:8a:3c:08:8e:fd:e2:f8:90: e0:ab:60:7c:85:2a:f5:c9:7c:b5:26:bf:bb:cc:39: 8f:0c:7e:12:16:ce:f0:ba:50:1b:97:6a:20:c5:5b: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.223.128.0/22 IPv6: 2804:74bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271000 Signature Algorithm: sha256WithRSAEncryption a2:db:d9:91:10:b1:ec:6d:a3:38:ec:87:70:9c:9b:65:13:ff: 16:57:36:f3:c2:15:cc:d7:88:ca:d5:96:6b:4d:f4:98:a1:0d: 0f:89:18:3e:5a:f0:ee:95:ef:c0:98:3d:d1:21:54:a0:69:39: 7b:23:6a:bc:86:ed:31:11:9c:5d:e5:fb:2f:95:3a:85:3d:33: 22:c1:f4:a1:89:91:0c:8d:27:8f:be:d5:2f:17:67:d2:3e:49: 1b:4a:2f:d9:bb:60:98:f7:72:ab:60:de:19:14:c9:70:22:8a: a0:7e:2f:e5:b3:39:e8:94:3f:18:d4:de:d9:f5:fb:d0:33:5a: 42:e0:27:11:0d:88:10:53:77:91:7d:37:7d:f5:20:27:8e:d3: 5a:0f:9a:d8:3f:c7:16:d8:09:c2:8d:6f:1c:73:ae:8a:8a:e4: 90:1f:45:40:2d:7b:d7:7f:64:46:b2:04:ac:91:a2:3f:b8:b8: e5:61:97:7e:a3:2d:18:94:61:58:64:97:31:38:06:3c:3b:69: 4a:f0:cc:e7:d0:e2:be:4c:64:fa:67:05:15:64:c1:7c:e1:11: 19:86:10:68:34:4c:f8:82:38:d4:a6:0c:93:ae:15:c7:fd:3c: 99:5f:d3:bd:30:8f:94:40:53:ad:9f:42:0b:28:69:8a:a3:42: 7c:39:bd:e6 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUaR8kpXJGKSusGjmelnPdC7wEPM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMDIwMjRaFw0yNTA0MDQwMDI1MjRaMDMxMTAvBgNV BAMTKDFCOERBNDVDMzlDMERGNkZCNzRCMDZGMEY4MDk4QUM2OTE2ODY0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IpW4rZu5Wyo60QX1dwYFwae9 rs51EbJpL+HHL5OVRZa0AKmCGmITtol8Wzx0ra/MniP3HBklyWVG5wb5ptXsFsRb qzVcz9d3/JmFP7xo+wYpDTMCebNVrAtR3QDXRdo6kkKOgji+QGguJSSXQ2GHWOme RBLiJBNJgNz9VVZOGr5sWVFDIQgzysXVwFWk2XQtd1NlkRPdv7qFwlsrQ7bjefFk y8g1YO4Nc3Gpi36JxrDGmuyuIMjR5nEnkaXhm/YSXCdeHw4/NChBy8k3JkAKXuf3 psPyTjmKPAiO/eL4kOCrYHyFKvXJfLUmv7vMOY8MfhIWzvC6UBuXaiDFW1unAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbjaRcOcDfb7dL BvD4CYrGkWhk2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN1ZW clFib25jQWRwZ2NLcWhKaVh3dTRqU1J0UWVtUTNyYWZ6ak5GREs1WWcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdW VnJRYm9uY0FkcGdjS3FoSmlYd3U0alNSdFFlbVEzcmFmempORkRLNVlnLzEvMUI4 REE0NUMzOUMwREY2RkI3NEIwNkYwRjgwOThBQzY5MTY4NjREQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsd+AMA0EAgACMAcDBQAoBHS8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQimDANBgkqhkiG9w0BAQsFAAOCAQEAotvZkRCx7G2jOOyH cJybZRP/Flc288IVzNeIytWWa030mKEND4kYPlrw7pXvwJg90SFUoGk5eyNqvIbt MRGcXeX7L5U6hT0zIsH0oYmRDI0nj77VLxdn0j5JG0ov2btgmPdyq2DeGRTJcCKK oH4v5bM56JQ/GNTe2fX70DNaQuAnEQ2IEFN3kX03ffUgJ47TWg+a2D/HFtgJwo1v HHOuiorkkB9FQC17139kRrIErJGiP7i45WGXfqMtGJRhWGSXMTgGPDtpSvDM59Di vkxk+mcFFWTBfOERGYYQaDRM+II41KYMk64Vx/08mV/TvTCPlEBTrZ9CCyhpiqNC fDm95g== -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:54 2024 by rpki-client on console-ams.rpki-client.org