$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer File: 42E0C742D5DC5A6C41753F73202F41323E27436C.cer (raw, json) Hash identifier: lBTQ8yLW7Vf4qTfhdPGlMxYc/P64zcOgbtEQgCCexyQ= Subject key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 016D9CE38CDBF124A2634F58AB2365F37E94EE43 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft caRepository: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 03:34:47 +0000 Certificate not after: Thu 03 Apr 2025 03:39:47 +0000 Subordinate resources: AS: 264552 IP: 45.172.80.0/22 IP: 138.0.172.0/22 IP: 170.79.52.0/22 IP: 201.148.112.0/22 IP: 2804:2164::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6d:9c:e3:8c:db:f1:24:a2:63:4f:58:ab:23:65:f3:7e:94:ee:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 03:34:47 2024 GMT Not After : Apr 3 03:39:47 2025 GMT Subject: CN=42E0C742D5DC5A6C41753F73202F41323E27436C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:fb:94:c8:03:d2:b8:f0:89:0b:55:a2:87: 73:7a:9b:0e:d8:24:08:a9:7e:91:92:97:94:9e:c8: 3b:09:da:f5:67:32:b9:80:e3:33:e8:86:d4:a8:c9: 15:56:b5:8b:ee:dc:77:16:2e:96:2a:97:cf:7f:c8: 64:8b:08:6f:33:62:89:9b:a4:57:c6:2b:b1:86:9c: b9:b7:8e:d9:91:1d:c9:61:13:bd:23:2f:04:ae:d7: ac:a0:f5:53:22:48:a3:21:3d:01:69:8e:81:02:e6: 19:8a:54:f5:03:8c:9e:38:7a:cd:b2:76:85:73:24: b2:08:1f:cd:08:ca:a3:70:dc:56:40:de:b0:46:50: db:d0:4a:34:ee:03:fc:a1:9a:7c:6b:82:0f:6e:36: 27:45:67:85:bf:31:36:14:71:d5:14:41:af:b7:d4: fa:8d:6b:4f:a6:a4:0e:3c:cd:39:3c:a7:50:f4:48: dc:c7:c2:39:2c:46:dc:d3:1b:d6:cf:74:2f:fe:32: d9:6a:ea:db:c4:00:cb:a3:db:55:31:b4:53:20:15: d2:f1:b2:dc:9b:38:9f:32:14:81:0a:c1:05:ae:c9: a3:18:1b:76:3b:8e:ef:42:a8:84:32:0e:9c:b4:e7: 00:3d:f4:29:e1:b0:3d:81:1f:f0:53:de:b6:4a:9c: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.80.0/22 138.0.172.0/22 170.79.52.0/22 201.148.112.0/22 IPv6: 2804:2164::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264552 Signature Algorithm: sha256WithRSAEncryption 44:e1:bc:5a:f8:56:7e:67:17:9b:83:ee:01:97:2e:57:17:7d: 35:f4:0d:c6:03:de:fd:a9:dc:2f:53:6d:b2:4f:b2:ca:d3:18: 9d:eb:d8:5f:87:29:76:3a:05:53:46:2e:04:55:2c:d4:d1:03: 9d:0a:3c:f7:4c:46:13:1b:6d:cc:39:39:8a:3a:4b:77:0a:b7: 29:99:5f:6d:fe:23:76:fe:dc:3d:70:c1:3b:7f:ac:b4:9c:c7: 9a:73:9c:35:4e:c0:ad:e3:2c:be:13:b1:22:d8:15:5e:ce:af: 8c:20:6f:be:9a:f5:d4:ca:a3:ac:ab:92:a7:2a:52:41:60:cd: 28:06:a1:96:0b:96:a3:06:f0:3e:2c:e2:34:fe:38:6f:c8:0d: 57:ac:2e:87:64:7c:5e:91:71:a5:c6:ef:64:3b:ea:50:ab:95: 5c:fe:ad:17:d8:db:ba:7e:15:29:f9:01:37:b8:61:dc:85:3e: 82:3d:82:62:b4:bc:74:22:0e:64:da:5b:df:0c:4d:2d:72:98: 50:7c:9b:0c:10:54:6d:42:8e:9f:16:d2:27:83:d7:4a:5a:2e: bf:2a:15:0b:6c:5e:8a:68:ac:83:19:64:ff:2e:84:2f:6d:bb: 2f:90:55:88:b7:91:f3:91:9f:ea:04:93:2a:b9:62:0e:1f:b4: 11:e5:c4:29 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUAW2c44zb8SSiY09YqyNl836U7kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMzM0NDdaFw0yNTA0MDMwMzM5NDdaMDMxMTAvBgNV BAMTKDQyRTBDNzQyRDVEQzVBNkM0MTc1M0Y3MzIwMkY0MTMyM0UyNzQzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqk/uUyAPSuPCJC1Wih3N6mw7Y JAipfpGSl5SeyDsJ2vVnMrmA4zPohtSoyRVWtYvu3HcWLpYql89/yGSLCG8zYomb pFfGK7GGnLm3jtmRHclhE70jLwSu16yg9VMiSKMhPQFpjoEC5hmKVPUDjJ44es2y doVzJLIIH80IyqNw3FZA3rBGUNvQSjTuA/yhmnxrgg9uNidFZ4W/MTYUcdUUQa+3 1PqNa0+mpA48zTk8p1D0SNzHwjksRtzTG9bPdC/+Mtlq6tvEAMuj21UxtFMgFdLx stybOJ8yFIEKwQWuyaMYG3Y7ju9CqIQyDpy05wA99CnhsD2BH/BT3rZKnOUzAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRC4MdC1dxabEF1 P3MgL0EyPidDbDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHZO RWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRKd1YvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHZO RWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRKd1YvMS80MkUw Qzc0MkQ1REM1QTZDNDE3NTNGNzMyMDJGNDEzMjNFMjc0MzZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB Af8EMTAvMB4EAgABMBgDBAItrFADBAKKAKwDBAKqTzQDBALJlHAwDQQCAAIwBwMF ACgEIWQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAloMA0GCSqGSIb3DQEBCwUA A4IBAQBE4bxa+FZ+Zxebg+4Bly5XF3019A3GA979qdwvU22yT7LK0xid69hfhyl2 OgVTRi4EVSzU0QOdCjz3TEYTG23MOTmKOkt3CrcpmV9t/iN2/tw9cME7f6y0nMea c5w1TsCt4yy+E7Ei2BVezq+MIG++mvXUyqOsq5KnKlJBYM0oBqGWC5ajBvA+LOI0 /jhvyA1XrC6HZHxekXGlxu9kO+pQq5Vc/q0X2Nu6fhUp+QE3uGHchT6CPYJitLx0 Ig5k2lvfDE0tcphQfJsMEFRtQo6fFtIng9dKWi6/KhULbF6KaKyDGWT/LoQvbbsv kFWIt5HzkZ/qBJMquWIOH7QR5cQp -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:23 2024 by rpki-client on console-fra.rpki-client.org