$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer File: 4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.cer (raw, json) Hash identifier: s9HXgG+Eyafh1PfqL+eDI94o9w5VylwRoTQrE7qJ3jg= Subject key identifier: 4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5724EEB711E0537DA7F9A3FCAE6C0FD7D15490BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.mft caRepository: rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 20 Nov 2024 17:52:46 +0000 Certificate not after: Wed 19 Nov 2025 17:57:46 +0000 Subordinate resources: AS: 270718 IP: 189.90.224.0/22 IP: 2804:704c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:24:ee:b7:11:e0:53:7d:a7:f9:a3:fc:ae:6c:0f:d7:d1:54:90:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 20 17:52:46 2024 GMT Not After : Nov 19 17:57:46 2025 GMT Subject: CN=4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:13:97:89:c9:01:18:f2:ae:d1:16:00:3a: fc:aa:a7:4a:67:49:7c:ed:39:f5:da:67:54:dc:e0: 52:a9:2c:f0:59:85:c0:0b:a9:43:f9:62:09:8c:43: 42:20:25:00:8f:25:f8:5b:52:28:4f:f7:59:b4:c8: 7e:c7:07:e8:a4:60:d9:b8:54:00:22:d0:d8:5a:01: e5:bd:d8:ae:18:f9:0e:8f:8b:fa:34:21:49:36:66: 04:f0:13:5f:c7:b8:fc:b8:73:ff:9a:8d:fc:92:a8: d8:1d:be:96:20:40:a6:68:06:c9:9c:3e:0b:8c:b5: f7:cf:81:9a:95:49:0a:51:5f:f3:70:5a:73:18:62: cf:3a:19:9d:9a:6c:86:56:97:35:06:f2:ad:0e:db: 45:94:5c:06:48:31:18:e2:67:44:d2:74:c4:3a:d1: 3f:f7:b0:b2:4e:b2:9a:c3:ba:33:58:6e:0d:81:3a: cd:75:3e:34:28:6f:c7:ea:9b:e7:41:4d:8a:e5:62: 0f:31:a9:d3:de:3b:24:80:5d:6e:48:4f:d2:95:1e: c3:9f:a3:6e:cd:0f:6c:c5:f9:1e:38:99:7c:d5:f3: 6e:34:76:c6:a5:8c:22:2a:d4:03:9f:83:1e:9d:ea: de:64:f9:42:dd:41:ca:d7:5d:38:23:03:ab:b5:0c: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:19:17:AC:7D:F7:57:D9:DC:9E:7A:77:60:23:50:E7:BA:FE:3F:65 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ucZ9AL6RHLsP6mNLcUsF8NG7miCS4vDG7xr9TvQ41Cb/0/4A1917AC7DF757D9DC9E7A77602350E7BAFE3F65.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.90.224.0/22 IPv6: 2804:704c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270718 Signature Algorithm: sha256WithRSAEncryption d1:f4:9f:4a:3d:d7:32:44:47:99:63:54:d0:74:bf:8a:d3:c5: 15:68:da:2b:eb:72:a4:a4:c7:b4:19:07:ae:d7:fa:15:aa:f7: 54:c4:16:63:59:88:d6:f5:84:63:18:33:9b:b9:c9:1b:6a:b4: 7c:17:84:38:71:50:e5:86:e1:2d:4b:34:90:b1:27:54:b1:42: 27:d4:40:37:21:e4:04:32:fe:07:b4:98:6f:0d:3e:b0:dd:b8: 15:e9:f1:99:a6:6a:17:9e:38:32:52:fa:31:8e:ca:a6:02:24: 26:f6:ef:da:51:06:09:ce:80:d5:3f:26:83:78:9d:4e:37:5b: 7d:03:13:96:1d:c0:8b:92:5c:49:a3:27:b3:d0:45:b2:eb:a1: 69:61:e9:fc:6b:11:3e:ca:14:35:be:22:c3:23:a7:1b:aa:e2: 85:f8:47:9d:c6:fd:90:a3:cf:79:36:89:38:7d:9b:42:66:59: d8:7c:80:03:9b:a0:36:ac:d7:e7:12:3a:48:7a:f7:9c:19:70: ce:27:03:0d:e1:0e:e3:87:cf:e3:7b:8b:a4:7c:89:ad:e8:06: f9:58:0b:09:6f:02:65:f9:f8:2e:50:09:00:e5:34:96:6e:1b: a6:0b:31:b4:ed:08:21:b2:f7:6c:d8:c6:ac:f8:a4:49:db:c5: 14:f2:6a:e9 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIUVyTutxHgU32n+aP8rmwP19FUkL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjAxNzUyNDZaFw0yNTExMTkxNzU3NDZaMDMxMTAvBgNV BAMTKDRBMTkxN0FDN0RGNzU3RDlEQzlFN0E3NzYwMjM1MEU3QkFGRTNGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW9xOXickBGPKu0RYAOvyqp0pn SXztOfXaZ1Tc4FKpLPBZhcALqUP5YgmMQ0IgJQCPJfhbUihP91m0yH7HB+ikYNm4 VAAi0NhaAeW92K4Y+Q6Pi/o0IUk2ZgTwE1/HuPy4c/+ajfySqNgdvpYgQKZoBsmc PguMtffPgZqVSQpRX/NwWnMYYs86GZ2abIZWlzUG8q0O20WUXAZIMRjiZ0TSdMQ6 0T/3sLJOsprDujNYbg2BOs11PjQob8fqm+dBTYrlYg8xqdPeOySAXW5IT9KVHsOf o27ND2zF+R44mXzV8240dsaljCIq1AOfgx6d6t5k+ULdQcrXXTgjA6u1DL+DAgMB AAGjggM4MIIDNDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKGResffdX2dye endgI1Dnuv4/ZTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdWNa OUFMNlJITHNQNm1OTGNVc0Y4Tkc3bWlDUzR2REc3eHI5VHZRNDFDYi8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vdWNa OUFMNlJITHNQNm1OTGNVc0Y4Tkc3bWlDUzR2REc3eHI5VHZRNDFDYi8wLzRBMTkx N0FDN0RGNzU3RDlEQzlFN0E3NzYwMjM1MEU3QkFGRTNGNjUubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB /wQfMB0wDAQCAAEwBgMEAr1a4DANBAIAAjAHAwUAKARwTDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMEIX4wDQYJKoZIhvcNAQELBQADggEBANH0n0o91zJER5ljVNB0 v4rTxRVo2ivrcqSkx7QZB67X+hWq91TEFmNZiNb1hGMYM5u5yRtqtHwXhDhxUOWG 4S1LNJCxJ1SxQifUQDch5AQy/ge0mG8NPrDduBXp8ZmmaheeODJS+jGOyqYCJCb2 79pRBgnOgNU/JoN4nU43W30DE5YdwIuSXEmjJ7PQRbLroWlh6fxrET7KFDW+IsMj pxuq4oX4R53G/ZCjz3k2iTh9m0JmWdh8gAOboDas1+cSOkh695wZcM4nAw3hDuOH z+N7i6R8ia3oBvlYCwlvAmX5+C5QCQDlNJZuG6YLMbTtCCGy92zYxqz4pEnbxRTy auk= -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:57 2024 by rpki-client on console-ams.rpki-client.org