$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer File: 27E1FC1146B53B145E431E07B4ED589B8C84542B.cer (raw, json) Hash identifier: 6FR1wXPe/A9ON44/UFiELa2swOkMo04HeiyFcSuW1EI= Subject key identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 07E770B60C916A51431773C1047F8B8E9FE2A5B0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft caRepository: rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 20 Dec 2024 12:52:01 +0000 Certificate not after: Fri 19 Dec 2025 12:57:01 +0000 Subordinate resources: AS: 28223 IP: 189.126.32.0 -- 189.126.38.255 IP: 2804:84ac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e7:70:b6:0c:91:6a:51:43:17:73:c1:04:7f:8b:8e:9f:e2:a5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 20 12:52:01 2024 GMT Not After : Dec 19 12:57:01 2025 GMT Subject: CN=27E1FC1146B53B145E431E07B4ED589B8C84542B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:e3:ba:c2:91:1d:33:19:8d:e5:1b:15:86: a6:03:c6:6b:7c:e8:66:11:ce:3f:50:13:da:d7:f3: 63:76:d8:8a:05:fa:e8:84:4b:c0:c8:87:7c:9f:35: 69:e1:96:f7:00:ab:64:af:38:56:3f:74:6d:b1:fc: b1:35:7e:cb:2c:37:99:0c:22:9c:b1:c4:af:9c:dc: 0d:5d:2d:c3:8c:3a:81:08:46:b5:90:15:02:e9:a1: 47:79:59:8e:97:af:d9:b0:cf:15:1d:6f:ee:8f:39: 57:58:87:ca:77:fc:d9:ee:4c:15:e3:3f:8c:8c:3c: 64:bb:81:46:4f:20:25:9e:1f:6c:b2:43:c9:60:02: e2:f3:96:56:a9:24:03:a3:41:50:39:2b:02:dc:d9: a8:db:74:e7:34:96:61:3f:df:43:38:3b:4a:96:18: 46:36:b6:74:23:10:24:03:9f:12:31:0d:c1:b9:03: 78:c3:58:ba:98:66:4d:3d:20:88:bf:f0:e8:ff:2d: 40:8f:62:a4:e1:89:3c:17:4b:fc:2a:19:00:69:38: af:c9:1b:ad:19:d3:d9:88:fd:8e:c6:fa:74:91:b5: 95:42:c6:4c:45:de:ef:2b:32:a1:93:06:90:fe:95: 39:f0:5d:c2:d0:5e:75:cd:4f:6a:3b:8c:ef:58:a0: 81:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.32.0-189.126.38.255 IPv6: 2804:84ac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28223 Signature Algorithm: sha256WithRSAEncryption 20:69:99:26:da:15:1b:c2:39:a6:33:49:79:bc:51:51:57:f0: 0c:b2:85:d3:ec:38:27:21:64:37:d3:06:85:8a:c7:2c:94:4f: 53:b3:52:0c:6c:a1:0d:4f:49:2c:e6:c9:0b:4b:f4:66:62:86: 36:3a:cd:51:08:f6:f0:59:74:a0:e8:7e:63:fd:e7:d7:95:63: 0e:d3:79:6c:3c:ea:63:b7:0a:75:bf:a7:fc:2b:06:e4:7e:bb: 65:8f:ee:e1:39:d6:a9:9e:e5:eb:35:f7:f7:9c:ff:14:01:41: 22:77:47:70:e7:26:0e:e7:ac:80:89:fd:9a:1b:25:cd:17:66: b5:1d:46:a8:0a:b3:ad:00:cc:59:6f:30:a2:28:a9:26:52:6e: 6f:53:31:84:82:c4:82:56:ea:13:f6:b3:65:0d:61:9f:b6:37: ed:fc:67:5b:13:23:a3:96:24:a1:3b:ef:58:bd:af:92:1e:b4: d2:37:40:fa:b1:47:0c:e7:4e:a6:e3:3b:6b:00:6a:b9:02:7b: c8:e0:10:f0:df:07:9f:9a:ca:1c:49:4e:34:9d:fb:61:67:fa: 33:12:ec:b2:2f:2f:2c:78:d5:f1:4a:6d:03:89:4c:30:cb:f7: ce:9d:48:df:fe:62:a2:de:c9:af:82:d6:5f:03:c8:49:a6:06: 84:5b:66:bc -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgIUB+dwtgyRalFDF3PBBH+Ljp/ipbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMjAxMjUyMDFaFw0yNTEyMTkxMjU3MDFaMDMxMTAvBgNV BAMTKDI3RTFGQzExNDZCNTNCMTQ1RTQzMUUwN0I0RUQ1ODlCOEM4NDU0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc1uO6wpEdMxmN5RsVhqYDxmt8 6GYRzj9QE9rX82N22IoF+uiES8DIh3yfNWnhlvcAq2SvOFY/dG2x/LE1fsssN5kM IpyxxK+c3A1dLcOMOoEIRrWQFQLpoUd5WY6Xr9mwzxUdb+6POVdYh8p3/NnuTBXj P4yMPGS7gUZPICWeH2yyQ8lgAuLzllapJAOjQVA5KwLc2ajbdOc0lmE/30M4O0qW GEY2tnQjECQDnxIxDcG5A3jDWLqYZk09IIi/8Oj/LUCPYqThiTwXS/wqGQBpOK/J G60Z09mI/Y7G+nSRtZVCxkxF3u8rMqGTBpD+lTnwXcLQXnXNT2o7jO9YoIGtAgMB AAGjggNBMIIDPTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQn4fwRRrU7FF5D Hge07VibjIRUKzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkhS aXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4c0ovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZI UmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzAvMjdF MUZDMTE0NkI1M0IxNDVFNDMxRTA3QjRFRDU4OUI4Qzg0NTQyQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAW9fiADBAC9fiYwDQQCAAIwBwMFACgEhKwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICbj8wDQYJKoZIhvcNAQELBQADggEBACBpmSba FRvCOaYzSXm8UVFX8AyyhdPsOCchZDfTBoWKxyyUT1OzUgxsoQ1PSSzmyQtL9GZi hjY6zVEI9vBZdKDofmP959eVYw7TeWw86mO3CnW/p/wrBuR+u2WP7uE51qme5es1 9/ec/xQBQSJ3R3DnJg7nrICJ/ZobJc0XZrUdRqgKs60AzFlvMKIoqSZSbm9TMYSC xIJW6hP2s2UNYZ+2N+38Z1sTI6OWJKE771i9r5IetNI3QPqxRwznTqbjO2sAarkC e8jgEPDfB5+ayhxJTjSd+2Fn+jMS7LIvLyx41fFKbQOJTDDL986dSN/+YqLeya+C 1l8DyEmmBoRbZrw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:03 2025 by rpki-client