$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer File: 2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer (raw, json) Hash identifier: ma+I2tqhRBvfgGiLT0Z/m81bpe28jbowRq7DirhJn+E= Subject key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 10A9666CB75833EE0BF39DBE0AB7853F3C4002D8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft caRepository: rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 23 Aug 2024 19:56:08 +0000 Certificate not after: Fri 22 Aug 2025 20:01:08 +0000 Subordinate resources: AS: 262827 IP: 187.84.176.0/20 IP: 2804:ccc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 02:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a9:66:6c:b7:58:33:ee:0b:f3:9d:be:0a:b7:85:3f:3c:40:02:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 23 19:56:08 2024 GMT Not After : Aug 22 20:01:08 2025 GMT Subject: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:e5:8f:17:90:ef:2c:fc:58:d9:96:20:52: 9a:a6:85:c7:26:15:79:f4:e6:62:d5:60:e3:bf:48: ff:fc:c0:e2:45:57:9a:c3:2f:d1:52:1b:41:d4:12: c7:e3:2d:66:e0:de:f3:82:67:8e:74:17:6b:cb:b7: e8:68:b0:fa:1d:3e:5e:21:79:61:c7:59:9f:c0:8a: 10:09:f6:31:5b:77:0a:1b:33:4b:11:bf:6e:f7:33: af:a5:6a:30:3f:06:9e:43:29:79:40:3e:42:f5:e3: 44:03:7d:68:33:94:31:29:17:92:3e:c2:63:a8:1c: f2:d8:1b:e7:0b:bd:57:ac:b2:d2:87:2e:bb:c8:66: 11:09:67:49:f8:3d:60:27:c3:e6:d2:53:ba:d9:ba: f5:97:6b:b6:78:73:0f:ea:fb:fc:f1:d7:fe:b2:fb: 42:af:4d:20:a2:a7:bc:e8:42:c1:98:d5:0b:a2:f3: dc:61:29:ad:c6:37:7c:2d:b0:56:f6:c2:5d:aa:36: 6e:93:5b:f0:8c:cd:1b:5e:73:50:7e:8f:1c:79:89: 6f:ff:62:6e:c0:db:87:a3:da:00:66:77:4e:32:c3: ea:a8:f4:01:28:3c:d5:51:ae:23:d4:7a:48:e4:10: d1:a8:6c:63:5d:40:2d:2c:e9:a9:d9:4d:01:fe:4b: 0e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.84.176.0/20 IPv6: 2804:ccc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262827 Signature Algorithm: sha256WithRSAEncryption 82:2d:41:40:35:31:f0:6b:ed:2e:b1:82:c3:74:7e:5f:39:83: 9a:d6:ab:38:28:af:bf:92:83:fa:e9:7b:46:9a:1b:ad:b2:d9: 52:22:db:2b:f5:ff:5c:76:8f:4a:93:2d:b0:69:46:9b:b8:97: d3:5f:a7:a2:86:67:51:f5:1e:44:6b:15:f6:8b:f5:fd:ac:9e: 7b:86:f3:6b:8a:2f:73:2a:ba:d8:dc:78:a3:8d:c6:f3:08:44: 81:3d:08:20:c9:0b:ff:63:c7:e6:8f:ed:1e:79:38:39:da:cc: 20:4d:f7:bc:94:89:90:ed:de:7a:3f:0c:73:eb:28:23:38:b9: c8:c6:29:e2:89:bc:f6:9b:2e:4d:37:c2:94:86:73:7f:12:87: 71:d1:47:87:02:b9:39:02:ba:5e:43:e1:a8:91:5e:46:2d:3f: 07:68:b9:cd:ff:86:06:75:e3:ec:3c:fb:d3:bf:79:da:d5:88: d1:1f:ba:78:81:7d:50:5c:b9:4f:71:87:17:4f:4e:e0:a2:94: 57:d3:37:81:71:a7:fc:bd:7b:57:af:cd:14:c1:b4:fb:1c:6d: c5:07:90:ea:43:98:4f:36:f0:15:5c:c0:a2:2a:ae:9b:61:ce: 27:6e:45:45:32:19:c7:e3:6d:99:54:3f:22:e1:f0:9e:a5:b1: 34:74:c9:8a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEKlmbLdYM+4L852+CreFPzxAAtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjMxOTU2MDhaFw0yNTA4MjIyMDAxMDhaMDMxMTAvBgNV BAMTKDJCRDNGRTZFOTA4NDkwN0U4QUM1RTc0QUUzREQ1RDFERTdGRkU0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNLuWPF5DvLPxY2ZYgUpqmhccm FXn05mLVYOO/SP/8wOJFV5rDL9FSG0HUEsfjLWbg3vOCZ450F2vLt+hosPodPl4h eWHHWZ/AihAJ9jFbdwobM0sRv273M6+lajA/Bp5DKXlAPkL140QDfWgzlDEpF5I+ wmOoHPLYG+cLvVesstKHLrvIZhEJZ0n4PWAnw+bSU7rZuvWXa7Z4cw/q+/zx1/6y +0KvTSCip7zoQsGY1Qui89xhKa3GN3wtsFb2wl2qNm6TW/CMzRtec1B+jxx5iW// Ym7A24ej2gBmd04yw+qo9AEoPNVRriPUekjkENGobGNdQC0s6anZTQH+Sw5vAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQr0/5ukISQforF 50rj3V0d5//k6zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQUFV UVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1puM2MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FB VVFZc0NEWTVzUmZmZ2I5anRxTWRrQmNHdktSQVVScEtjQm9jZmdabjNjLzAvMkJE M0ZFNkU5MDg0OTA3RThBQzVFNzRBRTNERDVEMURFN0ZGRTRFQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEu1SwMA0EAgACMAcDBQAoBAzMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQCqzANBgkqhkiG9w0BAQsFAAOCAQEAgi1BQDUx8GvtLrGC w3R+XzmDmtarOCivv5KD+ul7RpobrbLZUiLbK/X/XHaPSpMtsGlGm7iX01+nooZn UfUeRGsV9ov1/ayee4bza4ovcyq62Nx4o43G8whEgT0IIMkL/2PH5o/tHnk4OdrM IE33vJSJkO3eej8Mc+soIzi5yMYp4om89psuTTfClIZzfxKHcdFHhwK5OQK6XkPh qJFeRi0/B2i5zf+GBnXj7Dz707952tWI0R+6eIF9UFy5T3GHF09O4KKUV9M3gXGn /L17V6/NFMG0+xxtxQeQ6kOYTzbwFVzAoiqum2HOJ25FRTIZx+NtmVQ/IuHwnqWx NHTJig== -----END CERTIFICATE-----Generated at Sat Sep 28 01:15:06 2024 by rpki-client on console-ams.rpki-client.org