$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.cer File: 1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.cer (raw, json) Hash identifier: M/gmJcfO5wbDHqoTOjVpGF0OjP789vUTarCYArLYRTo= Subject key identifier: 1D:96:E2:AE:EE:C9:57:1D:01:04:A2:2D:42:31:0F:31:CF:CA:81:C8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6378467BA7808D2468EE71C58B32D08074C80E76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.mft caRepository: rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Oct 2024 00:39:51 +0000 Certificate not after: Wed 22 Oct 2025 00:44:51 +0000 Subordinate resources: AS: 52973 IP: 186.216.192.0/20 IP: 2804:3b00::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:78:46:7b:a7:80:8d:24:68:ee:71:c5:8b:32:d0:80:74:c8:0e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 23 00:39:51 2024 GMT Not After : Oct 22 00:44:51 2025 GMT Subject: CN=1D96E2AEEEC9571D0104A22D42310F31CFCA81C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:c2:02:23:96:9e:ad:74:52:65:c8:35:c4: b2:8c:71:f2:32:b5:1a:93:dd:5f:ed:46:10:54:3d: 72:e7:05:b7:9d:d8:2d:07:5d:6c:5d:16:0e:93:6d: df:a5:40:27:6f:48:57:55:d3:b7:78:8c:dd:a5:61: 5b:50:5f:0f:d7:f5:e6:13:5e:d2:de:ac:bb:80:e0: 9c:8b:57:f7:26:be:10:b3:e1:25:dd:53:5f:04:61: 29:57:c0:41:58:14:2c:29:8b:ad:f9:2c:67:17:32: 25:4b:17:de:42:04:1d:b8:47:c8:58:44:55:ed:c5: c4:5b:36:50:15:9c:9c:d8:47:84:f0:44:1e:a3:bb: d8:73:24:a2:cc:10:e8:24:e6:e1:ba:40:28:77:05: 59:13:ef:f6:c6:db:1f:80:d6:0e:af:74:2e:eb:a0: eb:a0:53:bd:74:1f:49:7a:22:2c:57:81:e5:4a:9d: 13:65:4f:3b:18:a7:03:2f:ff:7d:86:48:03:ef:1e: 7f:df:85:d7:dd:08:dc:6e:44:40:19:aa:0e:1b:1a: 0d:76:5b:22:68:cf:7c:c7:20:69:51:61:27:4d:fa: 50:78:96:6d:60:98:62:83:1a:2c:92:b9:2c:71:5c: 30:73:ed:59:8d:4d:50:da:97:88:f2:61:70:86:f9: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:96:E2:AE:EE:C9:57:1D:01:04:A2:2D:42:31:0F:31:CF:CA:81:C8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AuYJJKZ7gA8MerSMYof7MbQN7Y3h9hZYk5bZSBabtKXq/0/1D96E2AEEEC9571D0104A22D42310F31CFCA81C8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.216.192.0/20 IPv6: 2804:3b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52973 Signature Algorithm: sha256WithRSAEncryption 01:d4:f9:9a:35:36:be:90:69:a9:0a:e8:9d:e1:63:58:fb:3e: c6:28:49:e5:cb:d9:09:e4:db:96:43:37:0f:35:9f:fb:f9:d9: 6f:77:48:e2:f5:e7:09:21:a3:b3:a4:a6:cc:74:b1:82:6f:b5: c0:ec:17:ac:33:b4:46:b1:35:40:18:29:b4:df:e1:de:94:ab: e9:20:c5:8f:db:84:b5:c1:5f:21:68:09:84:fa:1b:cf:f2:98: f0:b9:b0:6d:82:13:83:ed:c8:79:32:3f:33:2a:32:15:49:30: 8b:db:e9:50:29:10:42:2d:da:94:82:c1:16:e1:f1:38:42:2d: 23:ba:15:1d:9c:49:e8:b4:5f:1a:13:0a:e1:3c:fc:d3:e8:2a: 79:91:8d:67:f5:aa:31:ad:ee:ea:91:4e:15:8c:a3:34:56:3d: f7:11:3e:95:b6:39:4d:e5:3c:1e:04:4f:07:c4:2b:2d:3f:37: 20:81:a6:c8:6b:69:5e:97:ef:70:d4:5a:ff:57:a4:ff:4a:15: cd:3b:64:04:5a:9a:c6:4b:f2:a7:6e:01:97:86:d6:15:c3:ba: 67:01:3a:be:4e:4b:ed:0b:02:10:59:b1:4c:1c:61:cf:cc:ba: 7c:a2:1d:f0:68:26:4f:cd:0e:c3:82:f7:33:a1:fd:a8:3f:d8: 49:3d:1f:e8 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUY3hGe6eAjSRo7nHFizLQgHTIDnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjMwMDM5NTFaFw0yNTEwMjIwMDQ0NTFaMDMxMTAvBgNV BAMTKDFEOTZFMkFFRUVDOTU3MUQwMTA0QTIyRDQyMzEwRjMxQ0ZDQTgxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLMICI5aerXRSZcg1xLKMcfIy tRqT3V/tRhBUPXLnBbed2C0HXWxdFg6Tbd+lQCdvSFdV07d4jN2lYVtQXw/X9eYT XtLerLuA4JyLV/cmvhCz4SXdU18EYSlXwEFYFCwpi635LGcXMiVLF95CBB24R8hY RFXtxcRbNlAVnJzYR4TwRB6ju9hzJKLMEOgk5uG6QCh3BVkT7/bG2x+A1g6vdC7r oOugU710H0l6IixXgeVKnRNlTzsYpwMv/32GSAPvHn/fhdfdCNxuREAZqg4bGg12 WyJoz3zHIGlRYSdN+lB4lm1gmGKDGiySuSxxXDBz7VmNTVDal4jyYXCG+eUJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdluKu7slXHQEE oi1CMQ8xz8qByDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQXVZ SkpLWjdnQThNZXJTTVlvZjdNYlFON1kzaDloWllrNWJaU0JhYnRLWHEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F1 WUpKS1o3Z0E4TWVyU01Zb2Y3TWJRTjdZM2g5aFpZazViWlNCYWJ0S1hxLzAvMUQ5 NkUyQUVFRUM5NTcxRDAxMDRBMjJENDIzMTBGMzFDRkNBODFDOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEutjAMA0EAgACMAcDBQAoBDsAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDO7TANBgkqhkiG9w0BAQsFAAOCAQEAAdT5mjU2vpBpqQro neFjWPs+xihJ5cvZCeTblkM3DzWf+/nZb3dI4vXnCSGjs6SmzHSxgm+1wOwXrDO0 RrE1QBgptN/h3pSr6SDFj9uEtcFfIWgJhPobz/KY8LmwbYITg+3IeTI/MyoyFUkw i9vpUCkQQi3alILBFuHxOEItI7oVHZxJ6LRfGhMK4Tz80+gqeZGNZ/WqMa3u6pFO FYyjNFY99xE+lbY5TeU8HgRPB8QrLT83IIGmyGtpXpfvcNRa/1ek/0oVzTtkBFqa xkvyp24Bl4bWFcO6ZwE6vk5L7QsCEFmxTBxhz8y6fKId8GgmT80Ow4L3M6H9qD/Y ST0f6A== -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:40 2024 by rpki-client on console-ams.rpki-client.org