$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/212063977863A474A988E1839F9F6296FA77E899.cer File: 212063977863A474A988E1839F9F6296FA77E899.cer (raw, json) Hash identifier: wq8p2Sbo8ktSnwPqAPnyYG98Gm4pEVLclmhdbovWCzo= Subject key identifier: 21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0799C457BEF0B561C5FF0EB1446A84966DC7E793 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.mft caRepository: rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 05:13:45 +0000 Certificate not after: Thu 03 Apr 2025 05:18:45 +0000 Subordinate resources: AS: 265274 IP: 168.0.180.0/22 IP: 170.80.220.0/22 IP: 2804:2d50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:99:c4:57:be:f0:b5:61:c5:ff:0e:b1:44:6a:84:96:6d:c7:e7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 05:13:45 2024 GMT Not After : Apr 3 05:18:45 2025 GMT Subject: CN=212063977863A474A988E1839F9F6296FA77E899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:85:61:c9:0b:c5:63:1b:27:23:c3:7d:bd: e1:e8:2b:d5:1e:f3:29:8d:3b:7a:4d:d2:c2:c6:e9: 2c:64:b3:52:aa:83:fb:6a:33:82:f3:4a:2c:21:af: 26:7d:81:fa:69:23:71:9d:fa:3d:78:22:4e:d5:cf: b3:ba:c8:91:31:fe:ab:14:a1:37:ea:5b:bb:fc:ac: c9:b4:68:41:03:2b:ae:a2:c3:75:22:74:e6:52:18: 19:df:71:0c:14:2b:40:17:ca:37:d3:b5:42:6a:65: 04:d8:8a:e0:a3:b9:cb:e7:c7:95:a3:3a:03:c7:36: 61:3a:df:48:1d:b5:15:d0:3d:bc:5a:df:43:86:8d: cd:6f:89:5e:b4:c1:36:94:74:23:62:26:29:33:a6: 40:60:5c:ce:3f:fb:e4:c9:22:10:85:97:cd:82:77: 06:c1:e4:d0:16:93:bb:72:99:9c:1a:a4:82:3e:ad: 53:5c:2c:f4:a8:76:43:57:70:16:d6:0f:23:64:bd: dc:c0:e8:a7:cb:eb:ba:00:05:0c:7b:f8:bf:f3:b2: 9c:0f:cf:e7:da:b7:0f:ef:70:ff:05:88:60:d9:5a: 60:14:fb:cd:e8:d1:b3:35:21:aa:06:3d:49:11:4e: 75:06:81:5c:1f:d1:ab:f5:6d:b6:2d:f1:d4:4e:a7: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:20:63:97:78:63:A4:74:A9:88:E1:83:9F:9F:62:96:FA:77:E8:99 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7hqVi6AdvR3kyeBXXT63GGjSj4tJzXch27FpeBFPcnq4/1/212063977863A474A988E1839F9F6296FA77E899.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.0.180.0/22 170.80.220.0/22 IPv6: 2804:2d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265274 Signature Algorithm: sha256WithRSAEncryption 77:f6:84:ff:2f:81:45:72:0a:22:c6:d7:39:f5:5c:4a:fc:75: 1d:fa:38:a0:d3:96:15:65:5c:03:55:61:ea:4e:55:5d:45:83: 95:21:4a:d5:1e:d5:97:e6:96:ae:c4:d1:88:b1:63:7d:05:46: 75:7c:9d:32:7d:b4:31:77:0b:e1:12:38:54:1f:05:da:e2:73: c1:ec:7a:b8:fe:1e:85:cc:6f:bc:4b:46:a4:1a:e3:f6:ac:95: 3c:41:1c:96:94:5e:1f:5e:86:a1:17:69:df:2b:e9:12:8c:a5: ce:df:06:85:cf:33:e6:f2:04:e4:63:44:de:d4:9c:5f:01:7c: f8:31:18:15:26:a5:df:33:21:24:b5:2b:4f:93:b9:f7:19:1b: a0:41:20:65:4a:fb:31:79:5a:59:de:d1:b2:1a:29:44:90:84: 8a:b0:66:d0:90:01:71:a6:ec:5d:87:ee:aa:eb:cd:6c:49:b9: f5:c8:b3:35:25:85:37:25:74:13:8a:75:87:23:f1:03:a8:a4: d6:b7:81:71:98:08:2f:4c:33:91:7b:45:95:21:07:28:b0:0e: 02:fe:e5:14:73:ac:92:3c:e8:57:12:c3:5f:ef:53:5d:e4:14: a1:0f:49:82:0b:3c:43:4f:14:d4:62:e2:b0:53:90:58:9f:89: e8:7f:2b:56 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUB5nEV77wtWHF/w6xRGqElm3H55MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNTEzNDVaFw0yNTA0MDMwNTE4NDVaMDMxMTAvBgNV BAMTKDIxMjA2Mzk3Nzg2M0E0NzRBOTg4RTE4MzlGOUY2Mjk2RkE3N0U4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwBoVhyQvFYxsnI8N9veHoK9Ue 8ymNO3pN0sLG6Sxks1Kqg/tqM4LzSiwhryZ9gfppI3Gd+j14Ik7Vz7O6yJEx/qsU oTfqW7v8rMm0aEEDK66iw3UidOZSGBnfcQwUK0AXyjfTtUJqZQTYiuCjucvnx5Wj OgPHNmE630gdtRXQPbxa30OGjc1viV60wTaUdCNiJikzpkBgXM4/++TJIhCFl82C dwbB5NAWk7tymZwapII+rVNcLPSodkNXcBbWDyNkvdzA6KfL67oABQx7+L/zspwP z+fatw/vcP8FiGDZWmAU+83o0bM1IaoGPUkRTnUGgVwf0av1bbYt8dROp4fXAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhIGOXeGOkdKmI 4YOfn2KW+nfomTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2hx Vmk2QWR2UjNreWVCWFhUNjNHR2pTajR0SnpYY2gyN0ZwZUJGUGNucTQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2hx Vmk2QWR2UjNreWVCWFhUNjNHR2pTajR0SnpYY2gyN0ZwZUJGUGNucTQvMS8yMTIw NjM5Nzc4NjNBNDc0QTk4OEUxODM5RjlGNjI5NkZBNzdFODk5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKoALQDBAKqUNwwDQQCAAIwBwMFACgELVAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAw6MA0GCSqGSIb3DQEBCwUAA4IBAQB39oT/L4FF cgoixtc59VxK/HUd+jig05YVZVwDVWHqTlVdRYOVIUrVHtWX5pauxNGIsWN9BUZ1 fJ0yfbQxdwvhEjhUHwXa4nPB7Hq4/h6FzG+8S0akGuP2rJU8QRyWlF4fXoahF2nf K+kSjKXO3waFzzPm8gTkY0Te1JxfAXz4MRgVJqXfMyEktStPk7n3GRugQSBlSvsx eVpZ3tGyGilEkISKsGbQkAFxpuxdh+6q681sSbn1yLM1JYU3JXQTinWHI/EDqKTW t4FxmAgvTDORe0WVIQcosA4C/uUUc6ySPOhXEsNf71Nd5BShD0mCCzxDTxTUYuKw U5BYn4nofytW -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:56 2024 by rpki-client on console-ams.rpki-client.org