$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer File: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer (raw, json) Hash identifier: FNdrw4tjp/GJKttF5k5o7k5FlAhgyReCZ05SeDI5hHc= Subject key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 46C694EBE917B4025B00232195A638B559F5A3EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft caRepository: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 06 Jul 2024 15:04:36 +0000 Certificate not after: Sat 05 Jul 2025 15:09:36 +0000 Subordinate resources: AS: 266650 IP: 128.201.216.0/22 IP: 2804:3f48::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c6:94:eb:e9:17:b4:02:5b:00:23:21:95:a6:38:b5:59:f5:a3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 6 15:04:36 2024 GMT Not After : Jul 5 15:09:36 2025 GMT Subject: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:c4:36:1c:38:19:ad:e8:2c:06:e3:f6:a4: 01:c7:d0:a0:2c:16:6b:06:0a:51:1c:cc:ed:e7:b0: 05:52:a3:9c:83:7a:3e:0b:3a:9d:4b:e5:a9:b0:51: 7c:3d:54:e1:70:34:e5:e1:6e:ca:cd:81:4a:df:cc: ea:4d:f7:92:c6:76:31:0e:94:0b:70:a5:ca:6f:01: 8d:e3:22:72:24:7b:25:f9:3b:3b:4a:e4:3d:96:d9: 2e:07:85:e3:13:9f:8e:68:75:e0:68:4d:0a:82:9d: 57:9c:54:07:3e:a8:f3:00:95:70:cb:88:a6:8f:06: 7b:0d:19:c7:1a:62:b0:fa:71:a5:e8:63:39:25:f6: f5:66:42:f8:34:a1:67:88:39:07:cf:43:cd:13:7f: 1a:81:06:69:00:86:63:a8:c6:9b:cf:08:07:c1:4b: de:52:02:bf:38:df:a5:c4:b7:2d:5c:99:95:1d:9d: 6a:55:f9:b6:ab:7d:56:fc:39:b2:02:d0:aa:2b:ed: 18:85:4b:23:3e:c2:4d:4b:2c:21:10:17:2c:e0:21: 6d:76:5c:5a:34:8a:6b:97:44:27:4c:cc:4d:cd:36: 5f:24:6d:d8:c4:ad:47:ca:d4:ac:aa:b6:34:31:cb: c9:8a:84:58:21:db:de:a1:0c:0d:e0:b0:71:6f:a7: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.201.216.0/22 IPv6: 2804:3f48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266650 Signature Algorithm: sha256WithRSAEncryption c0:f8:42:3e:2d:08:20:3b:1a:83:a3:5f:ca:fa:8c:9c:72:17: a0:e5:6b:92:d0:7e:72:a4:d6:75:9e:b9:08:f6:8a:ed:aa:80: 4e:d9:eb:1c:ea:39:ec:b2:e7:c5:34:05:80:36:dc:b9:8b:40: 78:9d:c3:ab:6b:b4:54:5c:e4:9e:cf:2d:6e:41:84:ad:12:2b: 72:7c:49:2f:22:1f:4a:58:08:e3:11:00:7c:e8:63:f7:21:1a: 9f:97:ae:4a:af:cc:68:8d:8a:d2:95:e4:7d:41:e3:1b:39:5e: 8c:95:91:b8:44:6a:aa:1a:3f:90:b6:11:86:14:12:0e:04:9a: 8b:bb:ce:4d:ce:ae:d6:53:aa:58:9f:5b:2d:10:19:f2:e1:bb: fe:71:08:ae:27:05:ca:68:b0:3f:36:ad:66:58:6a:b8:15:91: 5a:4c:66:d1:76:0d:13:3a:bf:12:db:be:90:95:aa:15:d2:cf: 8a:48:34:50:31:8d:1c:76:a0:cd:20:87:fe:1d:8b:9d:43:6e: f6:27:e2:eb:9e:4e:c7:b1:2e:17:6c:2a:39:7c:65:3c:34:1a: 40:53:e0:03:37:14:53:db:36:a6:ff:5d:d9:62:45:8e:20:e3: 1c:7b:6c:ca:3a:de:4d:44:44:90:8c:45:39:a5:78:a4:67:8e: 2e:aa:ae:44 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURsaU6+kXtAJbACMhlaY4tVn1o+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MDYxNTA0MzZaFw0yNTA3MDUxNTA5MzZaMDMxMTAvBgNV BAMTKDIzQUNBODM5RUNCNDZDQzNCNUJENkM4NkJGNjk5N0MxOEU4Mjc3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+icQ2HDgZregsBuP2pAHH0KAs FmsGClEczO3nsAVSo5yDej4LOp1L5amwUXw9VOFwNOXhbsrNgUrfzOpN95LGdjEO lAtwpcpvAY3jInIkeyX5OztK5D2W2S4HheMTn45odeBoTQqCnVecVAc+qPMAlXDL iKaPBnsNGccaYrD6caXoYzkl9vVmQvg0oWeIOQfPQ80TfxqBBmkAhmOoxpvPCAfB S95SAr8436XEty1cmZUdnWpV+barfVb8ObIC0Kor7RiFSyM+wk1LLCEQFyzgIW12 XFo0imuXRCdMzE3NNl8kbdjErUfK1KyqtjQxy8mKhFgh296hDA3gsHFvp0btAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjrKg57LRsw7W9 bIa/aZfBjoJ32jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTJY Ylp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ey WGJaeVZiQVBEWU5HazZrTTg1VkUzcjI0RWpHYVg2d1lDbVFGTHVaOTJRLzAvMjNB Q0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4RTgyNzdEQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgMnYMA0EAgACMAcDBQAoBD9IMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRmjANBgkqhkiG9w0BAQsFAAOCAQEAwPhCPi0IIDsag6Nf yvqMnHIXoOVrktB+cqTWdZ65CPaK7aqATtnrHOo57LLnxTQFgDbcuYtAeJ3Dq2u0 VFzkns8tbkGErRIrcnxJLyIfSlgI4xEAfOhj9yEan5euSq/MaI2K0pXkfUHjGzle jJWRuERqqho/kLYRhhQSDgSai7vOTc6u1lOqWJ9bLRAZ8uG7/nEIricFymiwPzat ZlhquBWRWkxm0XYNEzq/Etu+kJWqFdLPikg0UDGNHHagzSCH/h2LnUNu9ifi655O x7EuF2wqOXxlPDQaQFPgAzcUU9s2pv9d2WJFjiDjHHtsyjreTUREkIxFOaV4pGeO LqquRA== -----END CERTIFICATE-----Generated at Wed Nov 27 01:59:48 2024 by rpki-client on console-ams.rpki-client.org