$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer File: 37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer (raw, json) Hash identifier: VYiF8J6npvlvCte6iSkDXgT0cM+51kOycxcqy/5gzuM= Subject key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3DE61FBE18A56F0BA70B18B86AD1A4C6C0E7C7C1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft caRepository: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 20 Apr 2024 05:39:36 +0000 Certificate not after: Sat 19 Apr 2025 05:44:36 +0000 Subordinate resources: AS: 264010 IP: 143.0.196.0/22 IP: 177.54.80.0/20 IP: 2804:2958::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e6:1f:be:18:a5:6f:0b:a7:0b:18:b8:6a:d1:a4:c6:c0:e7:c7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 20 05:39:36 2024 GMT Not After : Apr 19 05:44:36 2025 GMT Subject: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:21:ea:d0:17:94:fa:44:81:8f:db:62:be: 61:2f:05:71:e4:c5:b3:d6:b0:cb:9a:ed:26:a1:ff: 83:8f:3f:41:67:5e:d8:42:50:38:67:f5:be:ea:69: d4:ce:73:69:4f:32:0c:49:65:af:66:cd:b3:8b:89: 68:15:29:d1:83:03:fc:89:75:a5:9a:b9:f4:33:9b: 1b:a8:c5:7a:21:d2:68:28:2c:20:24:4f:6b:f4:fc: 7b:e9:28:75:d7:bb:83:41:15:ad:37:04:d4:18:50: 36:5d:c4:a2:42:ce:fd:a6:7b:2c:c2:40:2f:ec:3d: b8:d2:d3:af:0c:37:2f:4b:1f:b6:30:85:f7:14:5a: 79:bf:84:c2:ae:fb:ff:f8:4a:29:c8:06:eb:b9:41: e0:2c:8b:2f:28:11:99:34:27:4a:7b:32:fa:50:e9: be:d0:d5:ef:83:2d:9f:bf:de:02:74:7e:3f:b5:cc: a4:b4:cf:2c:7a:68:d3:48:6b:0a:2b:ce:18:2f:af: e7:eb:5b:37:a2:9b:56:22:1f:b7:0b:8f:2c:fc:98: 3f:36:4d:3a:5c:05:ef:a1:06:9f:5d:fb:9a:ca:e0: af:26:2d:75:92:09:66:85:d1:ca:16:6e:82:97:d2: 6d:fc:6d:67:21:14:3d:89:38:55:b7:f9:42:eb:d6: 90:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.0.196.0/22 177.54.80.0/20 IPv6: 2804:2958::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264010 Signature Algorithm: sha256WithRSAEncryption 79:f7:b5:af:16:ff:f8:a5:4f:78:a9:ea:85:7e:88:db:b9:fb: 0f:52:5c:73:49:8d:c8:ab:49:b0:6f:cd:31:86:15:60:d8:cd: 53:88:25:75:aa:30:5e:0a:87:89:29:a8:16:79:05:f1:55:29: fb:83:7f:38:5b:6c:34:49:a8:23:2f:1b:16:03:76:dd:2e:85: 7b:a2:c3:c8:9b:04:9a:42:08:cd:41:a5:7f:c3:ba:dc:b6:e7: 80:ea:30:ec:b5:60:54:47:a3:f8:ba:cc:2f:3a:cb:e3:1c:3b: cf:e5:e6:9d:e4:0e:58:8a:aa:86:df:4a:67:61:25:91:0e:95: 31:66:2e:c8:9e:1f:47:6a:8a:13:13:e1:f1:5e:a2:48:3a:12: c7:8d:8f:d3:6e:58:ae:88:36:3c:e9:87:b2:6b:0d:2c:4f:87: a9:84:d1:ae:3c:7a:7e:2f:65:2a:92:4e:26:e0:e0:ee:2d:69: e4:fe:76:2b:54:76:d8:0b:ed:ad:16:43:84:f1:c7:43:1b:f6: d0:e8:7d:98:fc:99:2a:b4:58:78:07:dc:e1:a2:95:66:c9:14: 97:9f:23:e1:33:32:12:6f:b1:19:32:12:13:b3:ef:3e:5d:20: 74:f8:8e:68:49:e6:99:5e:d1:ca:ba:0d:b7:8d:93:51:c1:24: 60:5b:73:e9 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPeYfvhilbwunCxi4atGkxsDnx8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjAwNTM5MzZaFw0yNTA0MTkwNTQ0MzZaMDMxMTAvBgNV BAMTKDM3RUM2NkU2RDUxNTNFMzM1QzRBMTFCNTFDN0RGQjQ4MUU5MUNCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXiSHq0BeU+kSBj9tivmEvBXHk xbPWsMua7Sah/4OPP0FnXthCUDhn9b7qadTOc2lPMgxJZa9mzbOLiWgVKdGDA/yJ daWaufQzmxuoxXoh0mgoLCAkT2v0/HvpKHXXu4NBFa03BNQYUDZdxKJCzv2meyzC QC/sPbjS068MNy9LH7YwhfcUWnm/hMKu+//4SinIBuu5QeAsiy8oEZk0J0p7MvpQ 6b7Q1e+DLZ+/3gJ0fj+1zKS0zyx6aNNIaworzhgvr+frWzeim1YiH7cLjyz8mD82 TTpcBe+hBp9d+5rK4K8mLXWSCWaF0coWboKX0m38bWchFD2JOFW3+ULr1pABAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ37Gbm1RU+M1xK EbUcfftIHpHLhzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHd3 MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBjMk0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R3 dzFDZkZhRnlkWHYzZTM3QWhFVkhGMUV6Y0w5VzYyZ01iMVJqdGVwYzJNLzEvMzdF QzY2RTZENTE1M0UzMzVDNEExMUI1MUM3REZCNDgxRTkxQ0I4Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCjwDEAwQEsTZQMA0EAgACMAcDBQAoBClYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHSjANBgkqhkiG9w0BAQsFAAOCAQEAefe1rxb/ +KVPeKnqhX6I27n7D1Jcc0mNyKtJsG/NMYYVYNjNU4gldaowXgqHiSmoFnkF8VUp +4N/OFtsNEmoIy8bFgN23S6Fe6LDyJsEmkIIzUGlf8O63LbngOow7LVgVEej+LrM LzrL4xw7z+XmneQOWIqqht9KZ2ElkQ6VMWYuyJ4fR2qKExPh8V6iSDoSx42P025Y rog2POmHsmsNLE+HqYTRrjx6fi9lKpJOJuDg7i1p5P52K1R22AvtrRZDhPHHQxv2 0Oh9mPyZKrRYeAfc4aKVZskUl58j4TMyEm+xGTISE7PvPl0gdPiOaEnmmV7RyroN t42TUcEkYFtz6Q== -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:01 2024 by rpki-client on console-ams.rpki-client.org