$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33EF19A26113A53B8381E9F7233B4D521C8AE98A.cer File: 33EF19A26113A53B8381E9F7233B4D521C8AE98A.cer (raw, json) Hash identifier: NNWCn8HOumFTb0Dt/okxuc9ljapQAfC7Rhny/gnYC1o= Subject key identifier: 33:EF:19:A2:61:13:A5:3B:83:81:E9:F7:23:3B:4D:52:1C:8A:E9:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2A119F1B7D3F8FE96FCC015512D31540F9212057 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0/33EF19A26113A53B8381E9F7233B4D521C8AE98A.mft caRepository: rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 11 Nov 2024 16:40:36 +0000 Certificate not after: Mon 10 Nov 2025 16:45:36 +0000 Subordinate resources: AS: 271426 IP: 201.218.160.0/22 IP: 2804:7b58::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:11:9f:1b:7d:3f:8f:e9:6f:cc:01:55:12:d3:15:40:f9:21:20:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 11 16:40:36 2024 GMT Not After : Nov 10 16:45:36 2025 GMT Subject: CN=33EF19A26113A53B8381E9F7233B4D521C8AE98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:8f:78:4b:58:9d:92:00:9f:96:0a:ad:75: e0:53:9d:cf:03:fa:41:08:91:44:77:a3:61:f6:f7: d8:7c:7a:22:62:59:fe:46:c0:a0:e3:c0:46:eb:f9: 50:f1:9c:2e:a0:65:54:f4:aa:37:2d:83:16:41:b3: 27:87:fc:98:1d:a3:61:c4:b6:42:b1:cc:cf:50:f5: 42:a5:a4:64:95:ba:9b:90:b3:a9:cc:1b:a2:ed:b5: fc:ea:04:46:32:61:38:db:f8:d0:dc:9f:dd:5f:14: fe:cf:27:3a:2d:26:14:a5:75:d8:20:07:06:43:77: 9c:32:cf:2f:ce:8d:24:d3:89:f0:4a:93:f3:9c:1e: e3:bd:d6:ff:65:9c:1d:5e:7e:8d:cf:cf:f9:23:68: ff:42:4c:a0:5d:20:3f:24:49:1c:dd:d1:06:f7:55: 17:8e:66:3f:4a:34:92:83:70:d6:55:79:c3:cc:cd: dc:0c:b6:cb:2a:cd:24:46:ee:1a:e9:b3:6f:ac:9e: ea:b6:f9:02:b5:11:5d:ad:7c:45:c0:7b:24:df:e5: 88:59:1e:90:c6:b9:8e:40:7c:e1:f7:76:a5:83:53: b6:77:10:bf:67:64:cf:e0:8b:cb:95:22:31:c2:7e: 55:6d:a3:2c:8d:26:0f:c7:72:b5:6d:99:1d:5d:23: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:EF:19:A2:61:13:A5:3B:83:81:E9:F7:23:3B:4D:52:1C:8A:E9:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HRRxvrHVVcN9dBisox49n5uuRRTFxhy1oDKjvfLYNJJw/0/33EF19A26113A53B8381E9F7233B4D521C8AE98A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.218.160.0/22 IPv6: 2804:7b58::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271426 Signature Algorithm: sha256WithRSAEncryption 17:49:e7:89:25:c6:2d:20:08:c9:fc:94:d8:96:3c:77:43:00: 2e:94:8b:b7:9e:af:07:53:36:2b:c1:7b:90:c6:af:09:38:aa: 84:ff:53:12:c1:ae:4c:38:9c:ea:77:c1:e8:67:e0:e5:f5:31: b6:e2:dd:89:a2:84:ad:26:d0:65:6b:32:41:a8:ea:4b:9e:47: e0:08:46:4e:77:30:0c:91:d7:69:8b:48:24:33:cc:4e:de:0d: 06:98:ac:a9:70:16:cc:77:02:dd:fd:ba:2c:cb:b2:53:72:7d: c9:13:65:da:1b:15:40:b6:6d:b1:ca:a9:c5:42:bc:55:84:7a: d1:87:55:90:45:a2:50:a8:a0:13:55:dc:ea:1f:12:35:73:87: 90:b9:79:5a:fa:b6:66:31:0b:7e:f9:50:ca:29:a5:b0:ce:6d: 67:0e:a9:a7:62:5b:12:60:97:eb:9b:f4:8d:c2:4c:7a:eb:ec: 3c:35:00:68:6d:b8:3f:66:4c:52:fa:d9:92:fe:96:71:3d:cf: f8:17:e6:36:c7:b2:ea:a5:c8:9d:57:c6:2c:70:dc:0f:cb:95: eb:4b:d8:ea:a6:8c:4b:88:01:75:3b:a3:2b:19:9e:07:a5:5b: 0d:97:85:50:f8:fe:6c:cb:e7:4a:d3:b5:ab:99:58:83:e8:d2: 2f:5b:b8:9b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUKhGfG30/j+lvzAFVEtMVQPkhIFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTExNjQwMzZaFw0yNTExMTAxNjQ1MzZaMDMxMTAvBgNV BAMTKDMzRUYxOUEyNjExM0E1M0I4MzgxRTlGNzIzM0I0RDUyMUM4QUU5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfI94S1idkgCflgqtdeBTnc8D +kEIkUR3o2H299h8eiJiWf5GwKDjwEbr+VDxnC6gZVT0qjctgxZBsyeH/Jgdo2HE tkKxzM9Q9UKlpGSVupuQs6nMG6LttfzqBEYyYTjb+NDcn91fFP7PJzotJhSlddgg BwZDd5wyzy/OjSTTifBKk/OcHuO91v9lnB1efo3Pz/kjaP9CTKBdID8kSRzd0Qb3 VReOZj9KNJKDcNZVecPMzdwMtssqzSRG7hrps2+snuq2+QK1EV2tfEXAeyTf5YhZ HpDGuY5AfOH3dqWDU7Z3EL9nZM/gi8uVIjHCflVtoyyNJg/HcrVtmR1dI7SDAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQz7xmiYROlO4OB 6fcjO01SHIrpijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFJS eHZySFZWY045ZEJpc294NDluNXV1UlJURnhoeTFvREtqdmZMWU5KSncvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFJS eHZySFZWY045ZEJpc294NDluNXV1UlJURnhoeTFvREtqdmZMWU5KSncvMC8zM0VG MTlBMjYxMTNBNTNCODM4MUU5RjcyMzNCNEQ1MjFDOEFFOThBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALJ2qAwDQQCAAIwBwMFACgEe1gwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCRCMA0GCSqGSIb3DQEBCwUAA4IBAQAXSeeJJcYtIAjJ/JTY ljx3QwAulIu3nq8HUzYrwXuQxq8JOKqE/1MSwa5MOJzqd8HoZ+Dl9TG24t2JooSt JtBlazJBqOpLnkfgCEZOdzAMkddpi0gkM8xO3g0GmKypcBbMdwLd/bosy7JTcn3J E2XaGxVAtm2xyqnFQrxVhHrRh1WQRaJQqKATVdzqHxI1c4eQuXla+rZmMQt++VDK KaWwzm1nDqmnYlsSYJfrm/SNwkx66+w8NQBobbg/ZkxS+tmS/pZxPc/4F+Y2x7Lq pcidV8YscNwPy5XrS9jqpoxLiAF1O6MrGZ4HpVsNl4VQ+P5sy+dK07WrmViD6NIv W7ib -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:20 2024 by rpki-client on console-fra.rpki-client.org