$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/208F84112F1A4B695E56F4EB839321D9C18D523D.cer File: 208F84112F1A4B695E56F4EB839321D9C18D523D.cer (raw, json) Hash identifier: aSvv3pN0gPvrBuv0K0OSSTjglVPaSjqCI3rQv5qtdB0= Subject key identifier: 20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2DE743F5EB77771316AE54576CDA5D695EA82A30 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft caRepository: rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 26 Dec 2024 11:23:48 +0000 Certificate not after: Thu 25 Dec 2025 11:28:48 +0000 Subordinate resources: AS: 270258 IP: 45.191.12.0/22 IP: 2804:6940::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e7:43:f5:eb:77:77:13:16:ae:54:57:6c:da:5d:69:5e:a8:2a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 26 11:23:48 2024 GMT Not After : Dec 25 11:28:48 2025 GMT Subject: CN=208F84112F1A4B695E56F4EB839321D9C18D523D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:7a:46:b7:e8:55:07:95:f3:3b:fe:9a:ed: 3a:63:d5:7e:9c:17:91:38:ea:19:30:5e:7a:28:fc: e0:f3:af:bc:58:9c:db:2d:0c:f0:10:f8:7c:4f:aa: a5:90:f4:77:27:06:d0:90:75:3f:67:03:40:97:06: 53:d2:ab:fd:e3:6b:65:6b:96:15:80:c5:2e:29:ed: 75:7f:5c:6b:5a:2c:0b:f1:d5:5c:6d:7f:1b:e1:ab: fa:f5:3f:2a:2c:11:14:7d:3c:e5:10:af:a3:66:10: 20:4a:98:63:81:5c:da:af:b7:ba:b4:01:99:9b:f4: 65:75:18:44:4d:16:c3:be:7b:ef:e7:7b:f2:fc:1f: f2:0f:f0:c1:e5:12:cf:56:ab:49:8f:a2:a2:52:6b: 6f:26:b8:77:e8:79:08:cd:af:82:72:bd:0f:b2:07: ea:bd:2d:d7:b5:2a:65:ba:b6:52:07:a4:ac:21:61: 94:c0:47:cc:81:6a:d2:57:0a:12:c7:13:17:bf:2b: 97:2f:85:45:eb:c8:f5:f0:fa:7b:64:3e:7d:75:c5: 0c:45:b7:65:44:22:b8:69:c9:60:3c:31:69:7a:fe: 0d:dd:81:9d:27:57:ad:57:fe:da:72:3c:0b:0e:87: 6e:85:3c:67:94:6f:c8:aa:88:f2:03:32:9c:72:ff: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:8F:84:11:2F:1A:4B:69:5E:56:F4:EB:83:93:21:D9:C1:8D:52:3D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/0/208F84112F1A4B695E56F4EB839321D9C18D523D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.12.0/22 IPv6: 2804:6940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270258 Signature Algorithm: sha256WithRSAEncryption 74:e9:22:05:0c:1a:bc:36:bb:42:b1:c6:62:6e:08:47:3b:2e: 5b:da:5e:1b:a9:49:30:80:73:fc:95:b3:d2:cd:de:c4:3d:cc: 2e:9e:98:13:ec:04:93:b4:42:12:a6:ad:fd:79:92:0f:36:7f: a0:b7:ef:82:30:b4:7a:81:c4:65:3b:a0:f9:da:71:3e:77:e0: e3:a4:da:5e:c4:64:56:c9:26:0e:41:f5:6a:d7:79:11:f8:e3: 34:07:0e:e9:b4:47:f6:9a:60:5f:cc:ee:b2:6a:b7:43:6e:fb: 77:30:19:4a:b8:f4:2e:82:55:b3:2a:a5:29:85:d6:99:24:3a: c9:a3:80:c5:6d:27:2f:f2:7e:48:35:0a:a7:2f:d2:b4:39:28: 47:6e:4b:a5:0b:7a:6a:af:c1:f4:02:66:16:1c:9d:fd:a7:bf: d2:11:90:f2:8f:d2:75:c1:1c:60:88:b7:d7:92:e3:5f:ae:28: 84:0f:0d:d4:fd:d1:35:36:ae:e4:91:eb:aa:14:b1:29:a2:20: d0:6a:93:e5:c1:05:7b:df:dc:2b:dc:5a:e9:59:ed:2b:b0:90: 51:b6:48:c8:fe:99:b6:8a:9d:2d:88:ad:fe:b2:86:54:c1:92: 03:ab:8f:33:25:40:2c:9d:ec:1d:f4:b7:b7:8d:8f:0e:a7:02: 52:90:8f:bf -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIULedD9et3dxMWrlRXbNpdaV6oKjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMjYxMTIzNDhaFw0yNTEyMjUxMTI4NDhaMDMxMTAvBgNV BAMTKDIwOEY4NDExMkYxQTRCNjk1RTU2RjRFQjgzOTMyMUQ5QzE4RDUyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1U3pGt+hVB5XzO/6a7Tpj1X6c F5E46hkwXnoo/ODzr7xYnNstDPAQ+HxPqqWQ9HcnBtCQdT9nA0CXBlPSq/3ja2Vr lhWAxS4p7XV/XGtaLAvx1Vxtfxvhq/r1PyosERR9POUQr6NmECBKmGOBXNqvt7q0 AZmb9GV1GERNFsO+e+/ne/L8H/IP8MHlEs9Wq0mPoqJSa28muHfoeQjNr4JyvQ+y B+q9Lde1KmW6tlIHpKwhYZTAR8yBatJXChLHExe/K5cvhUXryPXw+ntkPn11xQxF t2VEIrhpyWA8MWl6/g3dgZ0nV61X/tpyPAsOh26FPGeUb8iqiPIDMpxy/1cDAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgj4QRLxpLaV5W 9OuDkyHZwY1SPTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlNR VEZoRktwUTVVSHNzOHNQRFRlVWhaTndXQTlEdlZFZVljSHU0RkRFZHMvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlNR VEZoRktwUTVVSHNzOHNQRFRlVWhaTndXQTlEdlZFZVljSHU0RkRFZHMvMC8yMDhG ODQxMTJGMUE0QjY5NUU1NkY0RUI4MzkzMjFEOUMxOEQ1MjNELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItvwwwDQQCAAIwBwMFACgEaUAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBB+yMA0GCSqGSIb3DQEBCwUAA4IBAQB06SIFDBq8NrtCscZi bghHOy5b2l4bqUkwgHP8lbPSzd7EPcwunpgT7ASTtEISpq39eZIPNn+gt++CMLR6 gcRlO6D52nE+d+DjpNpexGRWySYOQfVq13kR+OM0Bw7ptEf2mmBfzO6yardDbvt3 MBlKuPQuglWzKqUphdaZJDrJo4DFbScv8n5INQqnL9K0OShHbkulC3pqr8H0AmYW HJ39p7/SEZDyj9J1wRxgiLfXkuNfriiEDw3U/dE1Nq7kkeuqFLEpoiDQapPlwQV7 39wr3FrpWe0rsJBRtkjI/pm2ip0tiK3+soZUwZIDq48zJUAsnewd9Le3jY8OpwJS kI+/ -----END CERTIFICATE-----Generated at Wed Feb 19 22:35:38 2025 by rpki-client