$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/34DD33570D927291CC982869E0C396FAAE2C34A1.cer File: 34DD33570D927291CC982869E0C396FAAE2C34A1.cer (raw, json) Hash identifier: Ys/M16YfsndxGBCr9t92mbPIRfB7d/tVG+S4pepjjzM= Subject key identifier: 34:DD:33:57:0D:92:72:91:CC:98:28:69:E0:C3:96:FA:AE:2C:34:A1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 39A56653CEFF4FE961C196BFA1E6F2CFE2F3C31F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.mft caRepository: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 Nov 2024 21:39:14 +0000 Certificate not after: Tue 11 Nov 2025 21:44:14 +0000 Subordinate resources: AS: 61719 IP: 131.0.192.0/22 IP: 2804:1b50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a5:66:53:ce:ff:4f:e9:61:c1:96:bf:a1:e6:f2:cf:e2:f3:c3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 12 21:39:14 2024 GMT Not After : Nov 11 21:44:14 2025 GMT Subject: CN=34DD33570D927291CC982869E0C396FAAE2C34A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:f7:0f:b6:d9:6f:0a:85:2a:92:77:83:97: b9:3f:97:e5:20:62:96:92:9e:98:be:08:39:13:14: 63:1d:f6:c1:11:ab:ae:eb:19:25:dc:a7:3d:4a:86: f3:71:b2:f6:e0:2e:75:af:db:ee:c6:79:4f:0d:ea: 55:d1:a5:fc:bc:89:73:26:bb:43:92:5b:cf:6b:ac: 11:78:04:8f:4e:9f:eb:57:45:62:83:50:c1:16:78: 57:d6:fa:44:a8:c4:24:6f:52:ac:81:22:c0:e1:1a: af:3c:c3:30:c1:e5:2c:1d:88:2f:a0:b2:1d:b8:d8: 08:70:73:74:6d:b2:85:03:2a:30:0e:20:3f:49:bb: 89:29:16:24:13:e5:cc:b9:39:13:25:05:dd:eb:07: 52:74:01:bd:3e:72:62:b2:52:91:ac:dc:6a:24:36: 0a:d2:6f:28:5f:46:8c:c6:59:c8:5c:9b:d0:74:ac: f5:2c:f4:fd:1f:4b:69:6b:77:80:e2:45:99:2a:42: 2d:9b:95:76:27:4a:15:91:c1:07:49:89:eb:52:d1: 07:99:4d:b7:d1:16:fb:52:9f:fb:b1:18:bc:d2:78: 6e:83:84:38:6b:02:28:5f:77:cd:88:cb:98:18:2f: e2:65:37:84:14:97:ab:6c:d7:4e:c8:0f:ef:9e:cb: e8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:DD:33:57:0D:92:72:91:CC:98:28:69:E0:C3:96:FA:AE:2C:34:A1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.192.0/22 IPv6: 2804:1b50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61719 Signature Algorithm: sha256WithRSAEncryption b1:bf:ff:40:10:fd:7e:db:60:1c:8a:fa:be:55:b8:7c:c4:1b: 69:10:c0:86:b8:e1:9d:b9:53:96:e5:e1:b9:92:cf:83:92:2a: eb:66:89:30:69:56:7f:a9:e2:87:67:6c:5c:d1:44:71:f1:91: 88:f7:30:e6:26:43:06:f6:23:71:4f:f0:63:fe:ff:61:52:32: 3f:18:5d:80:c0:ba:6f:fa:ab:fe:49:13:5e:3a:fc:0a:46:6d: ac:78:fb:df:7b:7c:28:a4:a9:fe:0e:cb:f6:e0:eb:a2:ab:49: b0:71:5a:0c:46:36:7e:2c:a0:c1:7a:0d:fa:df:04:92:ce:fd: d4:7b:c7:df:5a:28:c9:3b:69:8d:aa:c4:95:b1:02:41:1c:1d: df:e6:32:43:db:02:94:c7:a4:cf:56:33:47:1a:15:e2:aa:a3: 61:c7:2a:42:40:a3:11:9f:fb:3d:5a:8a:e4:1e:d6:00:f7:f3: 88:c2:e7:b9:89:ac:ea:b4:1f:99:4c:fe:2b:43:6e:8d:c8:f6: d0:ab:72:c2:c6:90:0b:d6:b0:80:23:f4:06:84:4a:15:cc:62: 4e:aa:4c:24:3f:c6:d6:87:33:ae:8d:75:34:b3:02:d8:3e:ac: 4a:d0:c5:8e:03:1c:15:39:5f:47:e1:4d:29:51:75:61:6f:30: eb:67:1d:b3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUOaVmU87/T+lhwZa/oebyz+Lzwx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTIyMTM5MTRaFw0yNTExMTEyMTQ0MTRaMDMxMTAvBgNV BAMTKDM0REQzMzU3MEQ5MjcyOTFDQzk4Mjg2OUUwQzM5NkZBQUUyQzM0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zPcPttlvCoUqkneDl7k/l+Ug YpaSnpi+CDkTFGMd9sERq67rGSXcpz1KhvNxsvbgLnWv2+7GeU8N6lXRpfy8iXMm u0OSW89rrBF4BI9On+tXRWKDUMEWeFfW+kSoxCRvUqyBIsDhGq88wzDB5SwdiC+g sh242Ahwc3RtsoUDKjAOID9Ju4kpFiQT5cy5ORMlBd3rB1J0Ab0+cmKyUpGs3Gok NgrSbyhfRozGWchcm9B0rPUs9P0fS2lrd4DiRZkqQi2blXYnShWRwQdJietS0QeZ TbfRFvtSn/uxGLzSeG6DhDhrAihfd82Iy5gYL+JlN4QUl6ts107ID++ey+hvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ03TNXDZJykcyY KGngw5b6riw0oTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDNL RHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhKM1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gz S0RwclI5Q0RpWHUxM2o2bnpFemhXY1RuSk5kQ0ZRTjMyajRiVDZoSjNTLzAvMzRE RDMzNTcwRDkyNzI5MUNDOTgyODY5RTBDMzk2RkFBRTJDMzRBMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCgwDAMA0EAgACMAcDBQAoBBtQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDxFzANBgkqhkiG9w0BAQsFAAOCAQEAsb//QBD9fttgHIr6 vlW4fMQbaRDAhrjhnblTluXhuZLPg5Iq62aJMGlWf6nih2dsXNFEcfGRiPcw5iZD BvYjcU/wY/7/YVIyPxhdgMC6b/qr/kkTXjr8CkZtrHj733t8KKSp/g7L9uDroqtJ sHFaDEY2fiygwXoN+t8Eks791HvH31ooyTtpjarElbECQRwd3+YyQ9sClMekz1Yz RxoV4qqjYccqQkCjEZ/7PVqK5B7WAPfziMLnuYms6rQfmUz+K0Nujcj20KtywsaQ C9awgCP0BoRKFcxiTqpMJD/G1oczro11NLMC2D6sStDFjgMcFTlfR+FNKVF1YW8w 62cdsw== -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:51 2024 by rpki-client on console-ams.rpki-client.org