$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer File: 3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer (raw, json) Hash identifier: cV3EWU98LnTtH6VRLpTUltsDUYLBwCEMAuivf/ovvmw= Subject key identifier: 3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1FC73E35E6AE9A8C138EE7F7AB6742509D4F9761 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft caRepository: rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Sep 2024 14:32:24 +0000 Certificate not after: Wed 03 Sep 2025 14:37:24 +0000 Subordinate resources: AS: 264278 IP: 138.121.48.0/22 IP: 2804:2564::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c7:3e:35:e6:ae:9a:8c:13:8e:e7:f7:ab:67:42:50:9d:4f:97:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 4 14:32:24 2024 GMT Not After : Sep 3 14:37:24 2025 GMT Subject: CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:7c:91:57:48:5a:a5:32:09:95:ab:40:7d: 28:26:31:8a:e9:82:a3:87:b2:1d:b5:33:4f:16:06: 5e:1e:b1:bd:cd:74:90:f6:ca:41:79:11:43:78:50: 39:c7:1f:0a:f9:15:f3:2b:90:14:da:38:b4:d9:6f: ad:87:ba:19:d1:ad:16:0f:26:ef:7d:9e:16:f8:16: 3a:82:99:ca:c4:b3:2f:9a:dc:08:2a:b8:e0:21:cc: 2e:11:5b:9f:ef:9b:20:84:a4:0f:f1:6d:fc:5d:01: da:89:c7:1d:5b:d2:e6:b7:7e:4a:f1:18:d4:26:74: 8a:c8:1c:08:e5:a0:81:1d:36:f6:e0:a9:d3:47:11: 59:0a:33:05:c5:80:4c:89:28:2c:76:48:2d:ce:29: 74:17:07:66:19:46:52:38:dd:8c:81:95:f5:d0:73: 84:42:95:11:7f:1c:cf:23:75:6e:ea:0d:4e:1d:fc: bd:0f:72:58:cd:65:f3:b0:7c:d1:c0:e7:08:ea:39: 03:2b:84:4c:f6:37:ac:45:77:37:fc:6f:f5:10:03: 6b:10:46:07:13:bb:2c:11:58:a4:10:b6:3b:ea:f9: e1:08:e9:5a:8c:c9:c9:c0:c7:e9:f1:b1:39:90:dc: 6c:21:cc:45:11:f1:0a:07:81:30:84:b3:b3:e4:82: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.48.0/22 IPv6: 2804:2564::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264278 Signature Algorithm: sha256WithRSAEncryption 15:0b:ef:91:e0:d4:b6:b8:11:23:35:2b:ba:33:ef:d8:c9:6a: 60:f1:b0:f9:a0:3f:17:4e:c6:8f:f4:50:5d:d5:be:b2:cb:0d: 62:d2:82:c3:10:92:ab:28:04:94:5c:3b:34:1d:b7:cb:73:b4: 28:e3:28:72:de:02:2d:16:c9:cd:9d:a3:d1:d9:a2:0a:8e:46: 4d:14:aa:9a:55:67:e4:f6:5f:ee:4f:22:99:9c:58:ca:97:73: 8a:e7:fe:db:7f:3a:18:e6:24:94:f3:40:7c:9c:04:b3:f8:ba: 1a:55:1f:9e:fa:56:e8:a3:13:f2:3a:62:98:aa:2f:cc:2c:a9: f3:20:33:71:4e:e3:43:bb:d4:49:27:45:83:e6:00:31:e4:f5: 76:5f:26:87:e5:57:8f:71:64:ef:9b:03:9a:af:fa:14:b0:8a: e9:80:02:fc:6d:46:62:66:c0:4e:94:f3:57:a5:92:e3:bb:95: e4:fb:48:a2:f1:1a:50:6b:5f:03:f7:cd:ab:23:35:eb:52:5c: 43:d8:3b:83:fd:68:ff:3f:2b:8a:73:40:de:b6:91:40:9b:3d: a3:0e:0f:26:1d:f5:4f:ff:4b:8b:e9:7f:af:0f:07:a1:c2:ac: c7:f4:4f:45:10:0a:5e:0c:26:2b:ba:68:ae:92:7c:b6:3f:4f: 05:7e:e1:90 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUH8c+NeaumowTjuf3q2dCUJ1Pl2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDQxNDMyMjRaFw0yNTA5MDMxNDM3MjRaMDMxMTAvBgNV BAMTKDNDREE3NURGOTY1M0VGOUJCMjcyMkIxMTAwRDBEMjc2NDNDQkREOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWHyRV0hapTIJlatAfSgmMYrp gqOHsh21M08WBl4esb3NdJD2ykF5EUN4UDnHHwr5FfMrkBTaOLTZb62HuhnRrRYP Ju99nhb4FjqCmcrEsy+a3AgquOAhzC4RW5/vmyCEpA/xbfxdAdqJxx1b0ua3fkrx GNQmdIrIHAjloIEdNvbgqdNHEVkKMwXFgEyJKCx2SC3OKXQXB2YZRlI43YyBlfXQ c4RClRF/HM8jdW7qDU4d/L0PcljNZfOwfNHA5wjqOQMrhEz2N6xFdzf8b/UQA2sQ RgcTuywRWKQQtjvq+eEI6VqMycnAx+nxsTmQ3GwhzEUR8QoHgTCEs7Pkgi77AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ82nXfllPvm7Jy KxEA0NJ2Q8vdmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFhC enp0cHNvdmtnMlFDWEViclV1OHppUGU3QVlZckcxQ292c1lCQmlzNFAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RY Qnp6dHBzb3ZrZzJRQ1hFYnJVdTh6aVBlN0FZWXJHMUNvdnNZQkJpczRQLzAvM0NE QTc1REY5NjUzRUY5QkIyNzIyQjExMDBEMEQyNzY0M0NCREQ5QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCinkwMA0EAgACMAcDBQAoBCVkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQIVjANBgkqhkiG9w0BAQsFAAOCAQEAFQvvkeDUtrgRIzUr ujPv2MlqYPGw+aA/F07Gj/RQXdW+sssNYtKCwxCSqygElFw7NB23y3O0KOMoct4C LRbJzZ2j0dmiCo5GTRSqmlVn5PZf7k8imZxYypdziuf+2386GOYklPNAfJwEs/i6 GlUfnvpW6KMT8jpimKovzCyp8yAzcU7jQ7vUSSdFg+YAMeT1dl8mh+VXj3Fk75sD mq/6FLCK6YAC/G1GYmbATpTzV6WS47uV5PtIovEaUGtfA/fNqyM161JcQ9g7g/1o /z8rinNA3raRQJs9ow4PJh31T/9Li+l/rw8HocKsx/RPRRAKXgwmK7porpJ8tj9P BX7hkA== -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:52 2024 by rpki-client on console-ams.rpki-client.org