$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer File: 3C7BA9294464BE01B4C2A500708DD55CA879584D.cer (raw, json) Hash identifier: 8x9OIG860l4aFPeyKw2dT1u2duqmeG/vdT8AusVyN+Y= Subject key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F2A919FB8EFE98F422EBF25ECF97F53CF4FE377 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft caRepository: rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 19 Nov 2024 21:16:05 +0000 Certificate not after: Tue 18 Nov 2025 21:21:05 +0000 Subordinate resources: AS: 61621 AS: 267420 IP: 45.235.160.0/22 IP: 170.231.208.0/22 IP: 177.23.252.0/22 IP: 186.209.123.0/24 IP: 186.209.222.0/23 IP: 2804:4d3c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 07:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2a:91:9f:b8:ef:e9:8f:42:2e:bf:25:ec:f9:7f:53:cf:4f:e3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 19 21:16:05 2024 GMT Not After : Nov 18 21:21:05 2025 GMT Subject: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:36:bc:52:08:ca:e3:0d:a2:95:7c:1a:f7: 58:47:d2:04:39:cb:1f:74:7d:84:1a:eb:7a:e6:31: e1:f5:51:72:09:0e:a8:1d:28:e0:13:cd:15:6e:23: 46:51:12:01:3a:a3:37:9f:e9:9a:89:72:4f:c7:73: 2d:5f:c2:05:f0:8c:4b:5e:fa:08:9a:85:e7:b2:f5: 9d:e0:89:43:6d:be:00:82:36:23:50:2a:2b:2b:b4: 33:aa:2d:68:f7:6a:c3:43:8d:c2:40:58:ce:b1:ca: 7f:c6:29:a3:0d:66:aa:4d:61:1a:df:52:03:5c:89: ec:f0:0b:68:65:df:c3:fd:18:4f:5f:d0:0b:4f:e9: 41:28:3c:9d:11:58:d8:b0:73:fa:3e:9e:4f:0f:d4: be:97:64:f9:14:df:f4:c6:89:07:cb:76:fe:d8:52: 67:01:64:7a:0c:00:af:5c:42:32:da:7a:e5:d4:8c: 8b:d5:bb:42:2d:11:d9:ff:a9:cc:c3:a7:7a:63:86: 39:59:6a:f7:c5:1a:af:ed:3e:49:8b:99:63:f8:88: c0:f2:cb:9b:47:56:3c:5a:b6:cb:3a:38:f7:de:c2: c5:d5:90:8b:f4:c5:6f:c4:21:69:8b:82:7f:9b:30: 3d:1e:fc:4b:8d:f1:db:3a:0f:19:bd:3a:f7:3b:9d: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.160.0/22 170.231.208.0/22 177.23.252.0/22 186.209.123.0/24 186.209.222.0/23 IPv6: 2804:4d3c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61621 267420 Signature Algorithm: sha256WithRSAEncryption 57:8f:87:f2:c8:7c:f5:35:cb:f6:c3:ec:49:4d:b4:43:0d:aa: 1c:eb:ab:76:c0:18:ed:ad:c9:5f:40:d0:1f:70:bb:41:4c:47: 2c:a9:4f:fb:58:c4:0a:7e:53:7a:01:19:32:85:6c:b3:0a:e1: e7:02:c2:e1:7f:d7:45:ca:ff:0c:dd:3d:5c:10:c8:a8:5d:6d: 3a:cf:0c:22:2f:0d:1d:73:95:5e:a2:f5:80:a5:d4:f0:3b:42: 8f:04:0b:e0:c8:02:11:a4:00:8a:5a:b7:41:7b:6e:fc:37:8f: 6a:24:ae:4f:fc:fb:df:94:a7:48:e9:dc:cd:16:69:a6:41:a6: 86:1d:b7:b3:62:9f:e3:4f:2a:0b:f2:ee:86:7d:2a:12:39:b7: c6:29:ac:ed:39:2e:68:8e:5c:e7:bb:04:54:3d:f3:9d:ad:44: d8:7a:02:22:6e:f6:eb:31:05:f1:a1:55:be:95:71:bd:ec:a6: 1f:38:bd:be:bf:85:1c:5a:9d:0b:67:0b:c9:9e:8e:1d:89:f8: f2:bf:32:a8:cd:59:df:3f:13:31:33:dc:fc:bc:12:62:8c:49: fb:55:36:f2:f0:0a:d4:df:70:dc:e4:18:fb:89:5f:a1:af:c0: 5b:7e:6a:99:e4:02:89:dd:3f:9a:74:10:68:c0:53:ef:2e:41: 3d:54:66:78 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIUDyqRn7jv6Y9CLr8l7Pl/U89P43cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTkyMTE2MDVaFw0yNTExMTgyMTIxMDVaMDMxMTAvBgNV BAMTKDNDN0JBOTI5NDQ2NEJFMDFCNEMyQTUwMDcwOERENTVDQTg3OTU4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8za8UgjK4w2ilXwa91hH0gQ5 yx90fYQa63rmMeH1UXIJDqgdKOATzRVuI0ZREgE6ozef6ZqJck/Hcy1fwgXwjEte +giaheey9Z3giUNtvgCCNiNQKisrtDOqLWj3asNDjcJAWM6xyn/GKaMNZqpNYRrf UgNciezwC2hl38P9GE9f0AtP6UEoPJ0RWNiwc/o+nk8P1L6XZPkU3/TGiQfLdv7Y UmcBZHoMAK9cQjLaeuXUjIvVu0ItEdn/qczDp3pjhjlZavfFGq/tPkmLmWP4iMDy y5tHVjxatss6OPfewsXVkIv0xW/EIWmLgn+bMD0e/EuN8ds6Dxm9Ovc7nRJTAgMB AAGjggNXMIIDUzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8e6kpRGS+AbTC pQBwjdVcqHlYTTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHNC OVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5UGcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hz QjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAvM0M3 QkE5Mjk0NDY0QkUwMUI0QzJBNTAwNzA4REQ1NUNBODc5NTg0RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH AQH/BDcwNTAkBAIAATAeAwQCLeugAwQCqufQAwQCsRf8AwQAutF7AwQButHeMA0E AgACMAcDBQAoBE08MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDwtQIDBBScMA0G CSqGSIb3DQEBCwUAA4IBAQBXj4fyyHz1Ncv2w+xJTbRDDaoc66t2wBjtrclfQNAf cLtBTEcsqU/7WMQKflN6ARkyhWyzCuHnAsLhf9dFyv8M3T1cEMioXW06zwwiLw0d c5VeovWApdTwO0KPBAvgyAIRpACKWrdBe278N49qJK5P/PvflKdI6dzNFmmmQaaG HbezYp/jTyoL8u6GfSoSObfGKaztOS5ojlznuwRUPfOdrUTYegIibvbrMQXxoVW+ lXG97KYfOL2+v4UcWp0LZwvJno4difjyvzKozVnfPxMxM9z8vBJijEn7VTby8ArU 33Dc5Bj7iV+hr8BbfmqZ5AKJ3T+adBBowFPvLkE9VGZ4 -----END CERTIFICATE-----Generated at Tue Nov 26 06:32:31 2024 by rpki-client on console-fra.rpki-client.org