$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer File: 27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer (raw, json) Hash identifier: M7khompi5/78rDnIftTzhMQJlFxPIUTgdZmXQdFDOxc= Subject key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 05E424AB246DFE534202AA9FA815432856A45FD1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft caRepository: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 02 Sep 2024 12:46:52 +0000 Certificate not after: Mon 01 Sep 2025 12:51:52 +0000 Subordinate resources: AS: 263541 IP: 191.5.164.0/22 IP: 191.241.20.0/22 IP: 2804:1398::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Sep 2024 02:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e4:24:ab:24:6d:fe:53:42:02:aa:9f:a8:15:43:28:56:a4:5f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 12:46:52 2024 GMT Not After : Sep 1 12:51:52 2025 GMT Subject: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:72:4c:f8:81:c8:53:7d:4d:a0:d8:67:ea: fc:77:7b:41:a7:f2:41:8c:2e:8a:0a:89:06:0c:41: 5e:dc:09:3b:f9:ce:78:db:b5:14:7a:09:ad:e0:09: 56:aa:e5:2f:ac:67:b1:bf:08:af:2b:5c:10:31:a3: d9:74:d7:36:a2:f3:39:8f:f7:04:e1:fc:f2:13:9d: 2b:d9:17:b7:b7:50:8d:cb:d5:6f:0d:f7:28:95:ff: 90:90:af:12:03:73:fa:ab:a6:40:d3:d9:79:78:c7: e4:b4:dc:ea:71:98:a0:f5:3d:55:8b:e6:12:47:63: 27:2c:28:20:93:55:89:2c:f0:3d:86:df:c1:c9:fe: c0:4c:9c:cb:1d:97:c6:85:dd:74:70:9a:a6:88:33: ad:26:db:94:4e:93:20:1e:c7:2f:99:5a:45:19:5f: 3f:1f:9b:ed:85:9b:0c:30:cd:48:28:05:33:fb:05: 71:87:53:e0:18:0c:65:79:59:f5:d3:d9:a5:9e:a2: 7f:35:09:df:d2:db:ed:33:04:3c:61:5c:ce:97:6d: ea:c4:a9:dd:98:01:12:e8:a2:88:92:6a:90:0f:b9: 87:74:16:b8:f6:0c:e1:5f:c0:44:20:ed:3f:ae:fd: 28:da:c7:f0:ac:19:a3:bd:c6:d4:a3:ff:09:91:28: dc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.5.164.0/22 191.241.20.0/22 IPv6: 2804:1398::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263541 Signature Algorithm: sha256WithRSAEncryption 25:fe:bb:b6:4a:04:5b:17:50:41:c0:e0:48:a6:89:fd:64:f3: c8:2f:a9:a2:ff:00:51:2e:26:98:32:ae:4b:a2:0f:1a:fb:e5: 7c:00:dd:27:34:2d:43:23:37:77:c8:5a:16:db:46:69:e3:90: 79:6c:c5:41:e7:23:10:bf:a4:09:40:d8:27:c9:c2:f8:43:8d: e3:13:8f:0e:52:66:12:36:10:64:43:2a:fd:ab:c3:c7:9d:be: 2e:e1:51:b3:03:48:6f:e7:0b:24:03:9a:53:a7:b1:a3:0e:51: d3:f9:19:62:2d:96:b8:2a:60:dd:ba:05:ff:cc:d6:16:a4:f2: 80:53:bd:5a:a8:8a:aa:ff:3e:5a:ae:83:b5:14:13:7a:d3:e7: 95:eb:df:53:12:da:82:6b:f0:a1:7d:d0:65:bb:c1:34:58:64: 0e:e9:ba:64:78:9d:84:de:35:98:3d:5f:7a:17:3d:76:aa:17: 84:d8:60:91:88:a1:e2:e0:73:21:12:dc:85:05:b6:ac:e8:06: 00:54:0f:e6:3e:47:dc:78:29:f8:35:41:d6:86:53:3a:05:3e: 91:a0:67:86:0b:f1:86:11:f9:b2:f2:40:4a:18:8e:3a:11:e8: 00:cc:ab:a2:72:34:bc:51:98:6e:68:eb:56:89:05:2d:74:88: 91:79:f1:d7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUBeQkqyRt/lNCAqqfqBVDKFakX9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDIxMjQ2NTJaFw0yNTA5MDExMjUxNTJaMDMxMTAvBgNV BAMTKDI3NTE1QzVFOUJDNjIyM0YyNzMzMkZCRTE2MTZDRTU3NzE1RTlDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaxHJM+IHIU31NoNhn6vx3e0Gn 8kGMLooKiQYMQV7cCTv5znjbtRR6Ca3gCVaq5S+sZ7G/CK8rXBAxo9l01zai8zmP 9wTh/PITnSvZF7e3UI3L1W8N9yiV/5CQrxIDc/qrpkDT2Xl4x+S03OpxmKD1PVWL 5hJHYycsKCCTVYks8D2G38HJ/sBMnMsdl8aF3XRwmqaIM60m25ROkyAexy+ZWkUZ Xz8fm+2FmwwwzUgoBTP7BXGHU+AYDGV5WfXT2aWeon81Cd/S2+0zBDxhXM6XberE qd2YARLoooiSapAPuYd0Frj2DOFfwEQg7T+u/Sjax/CsGaO9xtSj/wmRKNx1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQnUVxem8YiPycz L74WFs5XcV6crzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ2lh enB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6U1UvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Np YXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAvMjc1 MTVDNUU5QkM2MjIzRjI3MzMyRkJFMTYxNkNFNTc3MTVFOUNBRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCvwWkAwQCv/EUMA0EAgACMAcDBQAoBBOYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFdTANBgkqhkiG9w0BAQsFAAOCAQEAJf67tkoE WxdQQcDgSKaJ/WTzyC+pov8AUS4mmDKuS6IPGvvlfADdJzQtQyM3d8haFttGaeOQ eWzFQecjEL+kCUDYJ8nC+EON4xOPDlJmEjYQZEMq/avDx52+LuFRswNIb+cLJAOa U6exow5R0/kZYi2WuCpg3boF/8zWFqTygFO9WqiKqv8+Wq6DtRQTetPnlevfUxLa gmvwoX3QZbvBNFhkDum6ZHidhN41mD1fehc9dqoXhNhgkYih4uBzIRLchQW2rOgG AFQP5j5H3Hgp+DVB1oZTOgU+kaBnhgvxhhH5svJAShiOOhHoAMyronI0vFGYbmjr VokFLXSIkXnx1w== -----END CERTIFICATE-----Generated at Sun Sep 29 01:40:17 2024 by rpki-client on console-fra.rpki-client.org