$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer File: 32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer (raw, json) Hash identifier: dsux3jckIYBCL/x5Yx/Bz6kaLJomzPSIytNUOh+v+D4= Subject key identifier: 32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 51AEE9C32F7FD2BF81C23E0EE6FBFC5BECC6CAFA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft caRepository: rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 00:48:22 +0000 Certificate not after: Fri 04 Apr 2025 00:53:22 +0000 Subordinate resources: AS: 263914 IP: 138.185.128.0/22 IP: 2804:27a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ae:e9:c3:2f:7f:d2:bf:81:c2:3e:0e:e6:fb:fc:5b:ec:c6:ca:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 00:48:22 2024 GMT Not After : Apr 4 00:53:22 2025 GMT Subject: CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:60:27:b1:88:bb:84:b7:a8:a0:ce:ec:7e:6e: a8:8e:1c:b6:bb:58:bc:38:b3:0b:03:1f:34:14:e1: 90:ca:1d:fa:6f:12:2a:a9:62:7f:59:0c:6b:fe:d0: 22:52:81:d8:75:b0:2b:92:1b:09:c3:1e:20:c5:40: 56:25:0c:5a:6f:1f:ec:aa:7d:b9:66:56:e3:97:3f: c7:a9:ac:14:b8:b3:7f:52:60:ba:90:3c:e8:9c:bd: 5d:cc:48:83:53:eb:4f:ba:46:8c:ae:4e:de:ef:2d: 5b:56:e6:7d:61:7e:54:0b:dc:ac:de:31:a0:ef:b3: e8:6e:66:96:55:42:dd:51:d5:dc:57:14:d0:df:cc: 17:78:94:f7:47:9b:f3:54:28:63:44:99:dc:61:e0: 1a:c7:51:5f:42:5c:52:5a:3c:ab:fc:16:16:ff:f6: 7f:d6:1f:c0:02:b7:3a:9b:50:30:05:b1:ef:0c:0e: 73:d7:99:38:c8:91:26:f1:8e:60:71:fa:5f:51:86: b0:20:5f:be:55:69:1e:9d:ab:e9:71:9c:8c:3d:57: cd:ee:15:9e:16:46:79:17:84:14:cd:6a:36:73:00: 94:3d:3b:c6:3b:1f:ce:af:30:01:da:4c:a3:91:27: 6d:20:66:fb:52:13:cd:9e:91:2e:57:7a:ff:b7:03: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.128.0/22 IPv6: 2804:27a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263914 Signature Algorithm: sha256WithRSAEncryption 25:14:91:7e:87:7f:05:8e:0c:2a:2b:f3:0c:32:f8:c0:08:4b: 5a:a7:2c:13:cc:de:fc:52:dd:c6:1f:4a:cc:4b:b4:9d:80:96: 3e:cd:87:9e:05:7f:36:25:04:00:9c:c6:e3:1f:a5:1c:20:4d: 11:76:5e:a2:f6:86:a8:83:93:a5:9c:0a:e7:08:5e:89:25:e3: ec:64:17:7f:71:46:d5:a9:bd:a9:ba:fe:b5:75:37:a7:36:55: e8:61:9a:f7:4f:45:24:30:f5:1b:5e:fb:c5:a3:ae:af:35:ef: db:6b:00:69:cc:55:06:44:f7:62:61:2d:74:25:87:77:6a:4a: 77:d8:41:a0:08:32:85:6e:03:61:90:c0:b5:84:41:16:b5:67: e5:00:ff:dd:9d:8b:b8:c5:b4:02:83:44:b7:21:a2:54:43:2c: 87:ee:b3:e2:5a:4a:9b:30:71:6a:84:46:05:5d:26:10:a2:66: 97:10:c3:52:be:39:2d:ee:c8:3a:81:85:04:87:90:41:08:92: 10:22:5e:1b:9d:17:a9:a6:f7:38:1b:36:f0:57:ff:55:66:0a: 4d:3a:86:9a:29:ed:95:3d:2c:4f:8d:11:64:18:54:13:2e:5d: de:57:a6:4a:7b:66:60:27:53:a8:ae:ce:03:3f:ca:ea:c2:93: e6:cb:2a:47 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUa7pwy9/0r+Bwj4O5vv8W+zGyvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMDQ4MjJaFw0yNTA0MDQwMDUzMjJaMDMxMTAvBgNV BAMTKDMyRjU5QTA5OEJCRTNCQUZCNDU3MzZCNURBNEI2MjExQjRFNTU1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoYCexiLuEt6igzux+bqiOHLa7 WLw4swsDHzQU4ZDKHfpvEiqpYn9ZDGv+0CJSgdh1sCuSGwnDHiDFQFYlDFpvH+yq fblmVuOXP8eprBS4s39SYLqQPOicvV3MSINT60+6RoyuTt7vLVtW5n1hflQL3Kze MaDvs+huZpZVQt1R1dxXFNDfzBd4lPdHm/NUKGNEmdxh4BrHUV9CXFJaPKv8Fhb/ 9n/WH8ACtzqbUDAFse8MDnPXmTjIkSbxjmBx+l9RhrAgX75VaR6dq+lxnIw9V83u FZ4WRnkXhBTNajZzAJQ9O8Y7H86vMAHaTKORJ20gZvtSE82ekS5Xev+3A7KLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQy9ZoJi747r7RX NrXaS2IRtOVVYTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkNu aHU1Rnc3QTc0dGNwbmZ0UXhidzVTS2Q2WktpZWpTckN6WWpiS21heE0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JD bmh1NUZ3N0E3NHRjcG5mdFF4Ync1U0tkNlpLaWVqU3JDellqYkttYXhNLzEvMzJG NTlBMDk4QkJFM0JBRkI0NTczNkI1REE0QjYyMTFCNEU1NTU2MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCirmAMA0EAgACMAcDBQAoBCekMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQG6jANBgkqhkiG9w0BAQsFAAOCAQEAJRSRfod/BY4MKivz DDL4wAhLWqcsE8ze/FLdxh9KzEu0nYCWPs2HngV/NiUEAJzG4x+lHCBNEXZeovaG qIOTpZwK5wheiSXj7GQXf3FG1am9qbr+tXU3pzZV6GGa909FJDD1G177xaOurzXv 22sAacxVBkT3YmEtdCWHd2pKd9hBoAgyhW4DYZDAtYRBFrVn5QD/3Z2LuMW0AoNE tyGiVEMsh+6z4lpKmzBxaoRGBV0mEKJmlxDDUr45Le7IOoGFBIeQQQiSECJeG50X qab3OBs28Ff/VWYKTTqGmintlT0sT40RZBhUEy5d3lemSntmYCdTqK7OAz/K6sKT 5ssqRw== -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:00 2024 by rpki-client on console-ams.rpki-client.org