$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.cer File: 202A215BC63DBE2780EE0F38F4AF642154D4DDD6.cer (raw, json) Hash identifier: EyibNFHOtGveJl+vweQ60nCwWiDZIUKrkRCBHW8govM= Subject key identifier: 20:2A:21:5B:C6:3D:BE:27:80:EE:0F:38:F4:AF:64:21:54:D4:DD:D6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 11AB6CEF57F28A12FA76BAB38A9AD23A908B0D20 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.mft caRepository: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 25 Nov 2024 12:46:01 +0000 Certificate not after: Mon 24 Nov 2025 12:51:01 +0000 Subordinate resources: AS: 263468 IP: 131.255.96.0/22 IP: 177.73.60.0/22 IP: 2804:124c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ab:6c:ef:57:f2:8a:12:fa:76:ba:b3:8a:9a:d2:3a:90:8b:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 25 12:46:01 2024 GMT Not After : Nov 24 12:51:01 2025 GMT Subject: CN=202A215BC63DBE2780EE0F38F4AF642154D4DDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:52:4c:fc:9a:37:41:d0:3b:b4:60:f9:02: 9e:44:a6:ca:fc:0f:4e:35:98:7d:76:1a:a6:b1:f5: 55:86:62:db:50:98:67:95:7a:20:c2:97:14:af:24: 86:3c:96:90:96:d1:3d:01:23:c4:b1:4b:b8:d0:d5: ea:c1:71:11:00:88:be:c6:e6:4b:6f:78:07:77:aa: 7f:fa:84:92:82:06:e5:95:bf:d5:f8:cf:9f:e9:01: 84:95:0e:99:e2:15:99:a3:fb:39:db:79:93:0c:09: b4:90:7d:b8:06:b3:1f:d1:99:7d:a2:a5:f2:1b:44: 1b:25:7e:0d:cb:39:3e:d8:c6:ce:44:5b:16:67:e3: 1a:4d:81:a0:bb:19:03:e7:cc:4c:6f:64:c5:0c:9f: aa:ca:4b:33:d5:b6:86:33:ee:e6:73:88:50:6a:55: 11:43:48:c7:3c:df:cc:99:21:f5:1d:8b:c8:a0:08: f0:21:6d:46:38:cf:d0:0d:b9:6b:14:86:f4:3e:35: ed:ec:95:71:22:8d:b8:19:23:59:71:41:12:00:54: 1b:70:96:fe:d4:5c:73:63:66:5c:ec:69:fe:ba:59: 7f:18:28:8a:1e:9f:c7:34:42:19:1f:66:08:8a:4b: 32:cc:70:e2:d1:24:0e:bd:dc:5f:00:47:d4:34:91: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:2A:21:5B:C6:3D:BE:27:80:EE:0F:38:F4:AF:64:21:54:D4:DD:D6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/202A215BC63DBE2780EE0F38F4AF642154D4DDD6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.96.0/22 177.73.60.0/22 IPv6: 2804:124c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263468 Signature Algorithm: sha256WithRSAEncryption 2a:25:8f:e0:f0:41:f5:3c:66:49:c3:5a:6b:6b:d6:a9:94:af: 73:f3:66:e9:18:cd:7a:49:c7:a7:a6:aa:68:64:13:36:89:f2: 36:f5:89:9e:5f:59:17:e0:cb:ed:c0:bd:12:29:1a:d3:0f:ed: 82:1f:1e:5a:ec:16:6e:83:ea:e1:12:b2:91:6b:6c:7f:87:e8: 44:e2:a3:14:4a:9f:33:d2:5e:89:79:a6:15:43:02:a1:7f:d9: a8:ad:09:36:ae:6f:bf:ea:38:36:2d:a9:04:32:9a:02:96:f7: 12:8a:87:10:1c:80:9f:01:77:f3:ac:2b:d0:1b:e1:01:f9:37: 22:6a:e5:ed:dc:54:68:a9:33:7d:e9:51:50:b3:fc:c4:40:66: 20:af:2c:2f:50:ad:73:53:67:38:4b:85:c8:62:0b:2a:a7:5b: 1b:03:60:d2:f1:63:09:87:2a:69:29:9b:a0:36:57:5f:73:92: ce:e5:e8:b5:2d:e6:a5:fc:e2:f1:7e:59:ce:23:18:5b:ea:4a: 52:cf:16:ec:63:a5:d3:5f:bc:3c:29:1d:13:6c:7b:8c:c0:fd: 66:df:1d:b7:28:0a:29:f5:7f:3a:0c:3a:98:42:9e:30:a2:35: 70:cd:f3:dd:93:fe:e2:3f:ed:c7:0d:39:f2:45:c2:9f:2e:86: 4f:e0:34:15 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUEats71fyihL6drqziprSOpCLDSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjUxMjQ2MDFaFw0yNTExMjQxMjUxMDFaMDMxMTAvBgNV BAMTKDIwMkEyMTVCQzYzREJFMjc4MEVFMEYzOEY0QUY2NDIxNTRENERERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiVJM/Jo3QdA7tGD5Ap5Epsr8 D041mH12Gqax9VWGYttQmGeVeiDClxSvJIY8lpCW0T0BI8SxS7jQ1erBcREAiL7G 5ktveAd3qn/6hJKCBuWVv9X4z5/pAYSVDpniFZmj+znbeZMMCbSQfbgGsx/RmX2i pfIbRBslfg3LOT7Yxs5EWxZn4xpNgaC7GQPnzExvZMUMn6rKSzPVtoYz7uZziFBq VRFDSMc838yZIfUdi8igCPAhbUY4z9ANuWsUhvQ+Ne3slXEijbgZI1lxQRIAVBtw lv7UXHNjZlzsaf66WX8YKIoen8c0QhkfZgiKSzLMcOLRJA693F8AR9Q0kQKfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgKiFbxj2+J4Du Dzj0r2QhVNTd1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMk41 WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJO NVk2MjVnblRBTlBpVm1UTHROeDVQNlJKSHRNRVJjZXNLY2czcWNFYW5ZLzAvMjAy QTIxNUJDNjNEQkUyNzgwRUUwRjM4RjRBRjY0MjE1NEQ0RERENi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg/9gAwQCsUk8MA0EAgACMAcDBQAoBBJMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFLDANBgkqhkiG9w0BAQsFAAOCAQEAKiWP4PBB 9TxmScNaa2vWqZSvc/Nm6RjNeknHp6aqaGQTNonyNvWJnl9ZF+DL7cC9Eika0w/t gh8eWuwWboPq4RKykWtsf4foROKjFEqfM9JeiXmmFUMCoX/ZqK0JNq5vv+o4Ni2p BDKaApb3EoqHEByAnwF386wr0BvhAfk3Imrl7dxUaKkzfelRULP8xEBmIK8sL1Ct c1NnOEuFyGILKqdbGwNg0vFjCYcqaSmboDZXX3OSzuXotS3mpfzi8X5ZziMYW+pK Us8W7GOl01+8PCkdE2x7jMD9Zt8dtygKKfV/Ogw6mEKeMKI1cM3z3ZP+4j/txw05 8kXCny6GT+A0FQ== -----END CERTIFICATE-----Generated at Wed Nov 27 01:59:47 2024 by rpki-client on console-ams.rpki-client.org