$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer File: 28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer (raw, json) Hash identifier: UpvNPjfjMH1zaqo8dGVgCAYlQxifOkPsMg/dwaywwdQ= Subject key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 200ADF7EE048E48D7F052097C714513E063269C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft caRepository: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 05 Sep 2024 15:40:56 +0000 Certificate not after: Thu 04 Sep 2025 15:45:56 +0000 Subordinate resources: AS: 267073 IP: 45.228.160.0/22 IP: 2804:47b8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0a:df:7e:e0:48:e4:8d:7f:05:20:97:c7:14:51:3e:06:32:69:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 5 15:40:56 2024 GMT Not After : Sep 4 15:45:56 2025 GMT Subject: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:43:96:d8:8c:bc:06:fc:19:3e:df:ec:76: 97:4c:ab:07:d6:e5:aa:a2:e6:fd:64:d8:85:14:30: dc:de:d2:7a:f6:66:4b:54:a3:e1:b4:35:51:27:1c: e2:bd:8d:f4:8e:d8:b3:44:f5:2c:a4:ec:75:06:0e: 9f:de:67:c2:21:05:f0:63:bf:64:27:d5:4b:23:ea: 24:ac:23:05:5d:4f:cf:f6:ab:31:69:cf:ca:51:82: a9:11:02:93:d9:a1:6c:10:19:d5:aa:22:2a:e0:af: 95:46:12:04:0b:11:49:12:7e:c3:cb:da:37:3b:b3: 4f:0a:7b:97:c8:19:08:80:82:c5:34:2c:0d:d9:28: f5:db:9d:68:8a:28:9c:92:ac:78:aa:a2:ba:9b:9a: 6f:5f:2f:7e:52:91:5e:82:e5:14:02:a7:fd:60:72: f7:0b:b2:f8:4b:a9:55:f3:61:88:a9:e7:26:c9:4e: ab:08:ba:e0:b0:77:23:c6:24:d8:e9:ea:16:c3:b0: 06:53:27:eb:78:78:6d:96:67:e0:21:65:a7:5c:c1: 28:18:01:38:5e:09:57:a1:ca:3c:ac:20:92:43:2f: 83:f9:31:4a:c5:67:d2:06:e6:39:e6:b2:dc:8b:12: dc:ca:f2:5b:10:42:df:66:c0:9d:1c:eb:5c:14:16: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.160.0/22 IPv6: 2804:47b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267073 Signature Algorithm: sha256WithRSAEncryption c2:41:05:c0:ae:d0:d5:3c:14:cc:2e:8a:81:ec:40:8d:99:af: fb:97:5d:20:de:7e:9a:bf:00:31:82:1f:81:e7:e5:59:5f:3c: 16:50:f6:55:5b:03:ea:a2:4b:54:80:ce:ea:68:65:e6:d6:b7: 0e:0b:00:cb:52:83:2a:b9:50:dd:56:f7:39:4f:44:12:a6:c0: 89:da:15:12:7c:c4:b4:f9:a5:fa:85:c6:d5:18:be:30:79:f3: d6:8b:c0:87:48:4a:df:4d:d0:43:d5:19:af:44:90:2a:c4:db: a5:e4:86:e3:40:3f:84:66:d5:1e:49:ac:cd:48:b2:d3:16:7d: 7c:bb:f2:48:60:16:2e:cb:96:00:d3:43:e1:9c:a6:ad:7d:42: b2:4d:5f:9d:8c:c8:87:b1:55:23:c3:2f:c0:74:4d:44:c5:13: 5b:93:72:d1:04:41:6e:c4:8e:34:28:6e:cb:84:a3:01:11:36: 82:21:c5:d1:b1:65:39:4e:bb:9c:68:ae:ea:8c:2e:25:db:23: 16:64:e7:a5:da:ac:f5:ba:90:d4:2c:42:4b:ad:1f:7f:77:ae: e1:57:0d:fc:19:26:7e:40:94:e1:e3:21:f2:61:f4:1c:68:ef: ed:bb:b9:ed:24:b7:9f:d2:0c:e2:10:63:df:b3:1f:a7:1c:08: 9a:69:75:2b -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIUIArffuBI5I1/BSCXxxRRPgYyacgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDUxNTQwNTZaFw0yNTA5MDQxNTQ1NTZaMDMxMTAvBgNV BAMTKDI4RDc2RTA5MzlGMDk5QjQ3QjRCODBFQTJCOUIwN0JBMUEyMjg2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HkOW2Iy8BvwZPt/sdpdMqwfW 5aqi5v1k2IUUMNze0nr2ZktUo+G0NVEnHOK9jfSO2LNE9Syk7HUGDp/eZ8IhBfBj v2Qn1Usj6iSsIwVdT8/2qzFpz8pRgqkRApPZoWwQGdWqIirgr5VGEgQLEUkSfsPL 2jc7s08Ke5fIGQiAgsU0LA3ZKPXbnWiKKJySrHiqorqbmm9fL35SkV6C5RQCp/1g cvcLsvhLqVXzYYip5ybJTqsIuuCwdyPGJNjp6hbDsAZTJ+t4eG2WZ+AhZadcwSgY ATheCVehyjysIJJDL4P5MUrFZ9IG5jnmstyLEtzK8lsQQt9mwJ0c61wUFg7LAgMB AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQo124JOfCZtHtL gOormwe6GiKG8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vckRZ bmUzaUdveTdxR25hNnZQZ295MnVpOEFGVmNjd0pMZkRSYXNEWm42ZS8wMIGJBggr BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9yRFlu ZTNpR295N3FHbmE2dlBnb3kydWk4QUZWY2N3SkxmRFJhc0RabjZlLzAvMjhENzZF MDkzOUYwOTlCNDdCNEI4MEVBMkI5QjA3QkExQTIyODZGMC5tZnQwPwYIKwYBBQUH MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCLeSgMA0EAgACMAcDBQAoBEe4MBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQTQTANBgkqhkiG9w0BAQsFAAOCAQEAwkEFwK7Q1TwUzC6KgexA jZmv+5ddIN5+mr8AMYIfgeflWV88FlD2VVsD6qJLVIDO6mhl5ta3DgsAy1KDKrlQ 3Vb3OU9EEqbAidoVEnzEtPml+oXG1Ri+MHnz1ovAh0hK303QQ9UZr0SQKsTbpeSG 40A/hGbVHkmszUiy0xZ9fLvySGAWLsuWANND4ZymrX1Csk1fnYzIh7FVI8MvwHRN RMUTW5Ny0QRBbsSONChuy4SjARE2giHF0bFlOU67nGiu6owuJdsjFmTnpdqs9bqQ 1CxCS60ff3eu4VcN/BkmfkCU4eMh8mH0HGjv7bu57SS3n9IM4hBj37MfpxwImml1 Kw== -----END CERTIFICATE-----Generated at Mon Feb 17 08:25:06 2025 by rpki-client