$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer File: 25F750CC8B097F02421DA84CAA0417DC66A794EE.cer (raw, json) Hash identifier: 0OeWrRDS8U6FkBxky0S/KFTH4HxhX+rPC57B86NiqW4= Subject key identifier: 25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1AF7AFC9088482F41D67CB8DBE853C75F2A2B1AE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft caRepository: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:27:31 +0000 Certificate not after: Wed 02 Apr 2025 18:32:31 +0000 Subordinate resources: AS: 52995 IP: 177.47.224.0/20 IP: 177.93.248.0/21 IP: 2804:4d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f7:af:c9:08:84:82:f4:1d:67:cb:8d:be:85:3c:75:f2:a2:b1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:27:31 2024 GMT Not After : Apr 2 18:32:31 2025 GMT Subject: CN=25F750CC8B097F02421DA84CAA0417DC66A794EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d6:73:99:fe:93:d0:97:93:a5:76:74:16:9e: 99:30:0b:08:77:99:47:58:99:99:4c:38:94:de:d8: 26:5a:0d:a0:2b:74:08:86:bc:33:c8:48:94:9b:aa: e4:93:04:bb:9e:33:10:d6:57:12:60:be:04:c0:b9: 07:85:db:b3:fe:8f:54:ff:8e:ca:c3:83:84:2c:ad: 23:a7:9b:b6:0a:0c:46:50:8d:8c:bc:9c:41:54:9f: 60:df:f9:ad:b8:03:7a:b9:39:7b:32:3f:8a:4b:df: 7b:3c:d5:a0:c4:8c:49:45:63:54:32:f9:54:02:c9: b4:59:8f:9e:b6:d8:a5:0b:61:fb:86:af:66:ea:58: 93:5b:0b:70:99:84:6b:e4:00:4d:86:8f:9e:c0:38: 42:a7:22:7e:c3:5c:58:de:ae:5e:c7:3b:27:eb:0a: af:6f:80:6c:96:e1:30:ea:a0:42:40:43:74:0d:89: 62:f3:8d:69:f7:39:63:70:3b:5e:cb:52:01:5a:2c: 56:82:10:3b:03:23:6b:05:22:ab:72:d3:f7:38:4e: a2:e9:15:79:18:9d:bd:77:b3:c9:aa:01:6d:6c:c6: f5:b7:58:b3:4c:b2:7c:db:16:30:bd:e7:22:c4:c0: 61:5f:00:a3:36:5e:e5:6c:26:e1:77:1a:63:93:9f: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.47.224.0/20 177.93.248.0/21 IPv6: 2804:4d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52995 Signature Algorithm: sha256WithRSAEncryption bb:52:96:69:47:8a:fb:dd:5e:51:a3:90:26:99:05:6b:54:7a: 9b:d6:68:5d:7f:5a:73:7e:9f:8a:cf:b9:2e:44:4f:e7:c1:f4: c2:b1:fa:e1:ca:dc:5f:5b:63:c1:c0:b9:05:71:5c:b3:51:0c: 37:78:47:98:bc:4c:2b:4b:f2:ae:f2:e3:99:60:f2:bb:f6:38: 1a:52:11:bf:8b:6b:51:f9:fd:f4:e2:a0:bc:44:c2:2f:59:72: d1:93:08:ef:38:14:69:04:55:08:02:e3:28:c1:52:e8:b6:cb: 27:82:d3:36:e6:c4:4e:67:56:b1:dc:29:a8:95:35:88:44:12: 05:e2:9d:73:a0:ce:0b:6f:62:c4:b8:7e:78:4c:1e:42:4d:a7: a3:9e:f3:89:f7:1a:84:bc:44:06:d0:1d:f8:37:ca:58:ea:28: ec:30:f7:55:de:84:1f:6e:61:c0:a5:19:a1:e4:53:f5:65:42: 66:13:02:3f:a4:73:80:e7:80:97:0e:4a:52:19:cb:5c:10:cf: 62:0b:68:94:e0:e2:98:56:31:66:2d:9b:d3:a8:1d:11:6d:65: 7e:41:f7:c5:06:ae:c8:3e:6c:6b:e9:17:93:e2:88:3e:2c:61: 0d:a0:9e:6f:3c:d2:1c:21:dc:48:15:08:64:95:67:ef:c7:cf: f4:17:a9:cf -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUGvevyQiEgvQdZ8uNvoU8dfKisa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI3MzFaFw0yNTA0MDIxODMyMzFaMDMxMTAvBgNV BAMTKDI1Rjc1MENDOEIwOTdGMDI0MjFEQTg0Q0FBMDQxN0RDNjZBNzk0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1nOZ/pPQl5OldnQWnpkwCwh3 mUdYmZlMOJTe2CZaDaArdAiGvDPISJSbquSTBLueMxDWVxJgvgTAuQeF27P+j1T/ jsrDg4QsrSOnm7YKDEZQjYy8nEFUn2Df+a24A3q5OXsyP4pL33s81aDEjElFY1Qy +VQCybRZj5622KULYfuGr2bqWJNbC3CZhGvkAE2Gj57AOEKnIn7DXFjerl7HOyfr Cq9vgGyW4TDqoEJAQ3QNiWLzjWn3OWNwO17LUgFaLFaCEDsDI2sFIqty0/c4TqLp FXkYnb13s8mqAW1sxvW3WLNMsnzbFjC95yLEwGFfAKM2XuVsJuF3GmOTn1bTAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQl91DMiwl/AkId qEyqBBfcZqeU7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3Vw UDlGUTU4YUc4QjExd01kS1IyZmVIUXdVMkNiUWVyZnZoUFdDYmJodTMvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3Vw UDlGUTU4YUc4QjExd01kS1IyZmVIUXdVMkNiUWVyZnZoUFdDYmJodTMvMS8yNUY3 NTBDQzhCMDk3RjAyNDIxREE4NENBQTA0MTdEQzY2QTc5NEVFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBASxL+ADBAOxXfgwDQQCAAIwBwMFACgEBNgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM8DMA0GCSqGSIb3DQEBCwUAA4IBAQC7UpZpR4r7 3V5Ro5AmmQVrVHqb1mhdf1pzfp+Kz7kuRE/nwfTCsfrhytxfW2PBwLkFcVyzUQw3 eEeYvEwrS/Ku8uOZYPK79jgaUhG/i2tR+f304qC8RMIvWXLRkwjvOBRpBFUIAuMo wVLotssngtM25sROZ1ax3CmolTWIRBIF4p1zoM4Lb2LEuH54TB5CTaejnvOJ9xqE vEQG0B34N8pY6ijsMPdV3oQfbmHApRmh5FP1ZUJmEwI/pHOA54CXDkpSGctcEM9i C2iU4OKYVjFmLZvTqB0RbWV+QffFBq7IPmxr6ReT4og+LGENoJ5vPNIcIdxIFQhk lWfvx8/0F6nP -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:47 2024 by rpki-client on console-ams.rpki-client.org