$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer File: 2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer (raw, json) Hash identifier: vbmbXVJXSgnHUnoSY+XlZtpnAQJBVsJZPsydbBgXKuo= Subject key identifier: 24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 61B6DA121B4C178BD4599DD80EA4F31E8BE08047 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.mft caRepository: rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 23 Aug 2024 19:35:52 +0000 Certificate not after: Fri 22 Aug 2025 19:40:52 +0000 Subordinate resources: AS: 264193 IP: 138.36.84.0/22 IP: 138.97.184.0/22 IP: 2804:23f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b6:da:12:1b:4c:17:8b:d4:59:9d:d8:0e:a4:f3:1e:8b:e0:80:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 23 19:35:52 2024 GMT Not After : Aug 22 19:40:52 2025 GMT Subject: CN=2440DBC75A5488453C448BFED7D6C1E9C975F2EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:73:85:4e:b3:57:52:4b:5c:44:4e:18:dd: be:4e:3e:ce:08:a3:86:62:b3:63:cc:02:0b:a3:9f: ff:13:7f:47:6e:23:6b:4f:f2:b7:ba:f6:e4:13:0d: 54:0e:1a:5b:6c:49:51:54:7b:05:52:ed:d9:b7:f2: 5f:ad:a1:b2:c9:22:4e:13:25:e3:db:b3:4f:c6:1f: 4c:e4:3f:5a:53:3d:79:a0:cb:87:ce:8b:3c:fc:59: 62:9d:c8:45:eb:09:87:4c:38:98:db:48:2c:d4:af: ed:76:29:84:7b:0d:00:61:87:9c:94:12:d6:8a:a7: 45:04:4f:42:39:1b:35:90:96:02:72:ba:c7:5c:fb: 2d:0e:f8:a3:2e:2a:98:3e:c9:dd:04:e7:a0:98:f2: f4:c5:e0:21:5f:28:46:1e:6a:84:33:be:64:f2:13: 05:40:b3:f8:08:90:0b:af:b5:5e:ea:2a:8b:6b:01: b7:af:8a:cf:f9:ac:b4:cf:e1:83:94:8d:ec:1c:e6: 76:5f:73:84:0d:93:2b:82:0b:03:da:18:f0:aa:34: 67:db:5f:57:ad:e3:0f:07:ca:21:14:ea:ea:76:8c: 8e:75:47:a5:48:f3:c6:23:c1:cd:b2:f3:d4:33:5f: 2e:ee:63:7f:a0:4c:28:cb:3d:e1:57:a2:5b:d9:6f: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.84.0/22 138.97.184.0/22 IPv6: 2804:23f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264193 Signature Algorithm: sha256WithRSAEncryption bb:ce:14:c5:3a:bb:9d:79:a3:c8:85:f9:3a:4b:3e:86:22:2c: 5b:c0:ac:77:05:55:58:fe:fc:13:7c:d5:6b:17:3e:08:52:b2: 5c:4b:78:ac:2b:8d:6b:f0:a8:6a:e5:bb:ce:63:29:5d:c1:84: f8:0a:8a:71:77:7f:22:21:27:89:94:a3:c2:e9:a7:e4:5b:2f: c1:e3:9c:c1:ab:7f:11:a0:ab:2c:d3:d0:ea:d7:d4:24:2d:8f: c8:65:1f:62:29:9a:47:83:5a:e9:d4:61:e0:b6:8f:62:62:8c: ec:5c:9d:5b:39:dc:83:79:3a:88:7b:14:20:04:0f:e9:b1:c0: a1:e2:f1:e0:db:46:7a:c5:19:9c:5e:ed:7f:e5:56:f6:c7:e8: e2:c1:f0:59:9d:31:e3:fd:a0:2f:de:6d:15:49:33:99:05:d1: e0:cd:bf:65:ab:4c:4b:0a:b3:ba:22:61:84:19:65:ec:fb:09: 7e:07:c9:6a:21:8a:b2:92:28:fa:51:59:06:c5:2a:d6:22:ea: cf:35:f9:8a:07:1b:fd:fd:c2:01:3f:3c:c4:a2:ed:f8:0c:19: 06:b5:58:9c:a4:32:01:7a:f3:04:b9:43:fd:9c:b7:ac:7a:66: 4e:a9:da:57:08:d2:38:32:8a:84:0d:cf:ad:d7:41:09:94:aa: f9:45:1a:6c -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYbbaEhtMF4vUWZ3YDqTzHovggEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjMxOTM1NTJaFw0yNTA4MjIxOTQwNTJaMDMxMTAvBgNV BAMTKDI0NDBEQkM3NUE1NDg4NDUzQzQ0OEJGRUQ3RDZDMUU5Qzk3NUYyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzXOFTrNXUktcRE4Y3b5OPs4I o4Zis2PMAgujn/8Tf0duI2tP8re69uQTDVQOGltsSVFUewVS7dm38l+tobLJIk4T JePbs0/GH0zkP1pTPXmgy4fOizz8WWKdyEXrCYdMOJjbSCzUr+12KYR7DQBhh5yU EtaKp0UET0I5GzWQlgJyusdc+y0O+KMuKpg+yd0E56CY8vTF4CFfKEYeaoQzvmTy EwVAs/gIkAuvtV7qKotrAbevis/5rLTP4YOUjewc5nZfc4QNkyuCCwPaGPCqNGfb X1et4w8HyiEU6up2jI51R6VI88Yjwc2y89QzXy7uY3+gTCjLPeFXolvZb6S3AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkQNvHWlSIRTxE i/7X1sHpyXXy7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREZT Z3FycUN3Snp2b0VSelYxdHlMWWJ1ZFhWRVNFNDFyTXVYUkVRWDJKRlEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RG U2dxcnFDd0p6dm9FUnpWMXR5TFlidWRYVkVTRTQxck11WFJFUVgySkZRLzAvMjQ0 MERCQzc1QTU0ODg0NTNDNDQ4QkZFRDdENkMxRTlDOTc1RjJFRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiiRUAwQCimG4MA0EAgACMAcDBQAoBCP0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIATANBgkqhkiG9w0BAQsFAAOCAQEAu84UxTq7 nXmjyIX5Oks+hiIsW8CsdwVVWP78E3zVaxc+CFKyXEt4rCuNa/CoauW7zmMpXcGE +AqKcXd/IiEniZSjwumn5FsvweOcwat/EaCrLNPQ6tfUJC2PyGUfYimaR4Na6dRh 4LaPYmKM7FydWzncg3k6iHsUIAQP6bHAoeLx4NtGesUZnF7tf+VW9sfo4sHwWZ0x 4/2gL95tFUkzmQXR4M2/ZatMSwqzuiJhhBll7PsJfgfJaiGKspIo+lFZBsUq1iLq zzX5igcb/f3CAT88xKLt+AwZBrVYnKQyAXrzBLlD/Zy3rHpmTqnaVwjSODKKhA3P rddBCZSq+UUabA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:21:25 2024 by rpki-client on console-fra.rpki-client.org