$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer File: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer (raw, json) Hash identifier: tuAH5qf+x57iXQ7ukxB8ygQTYoHB1JuCZKKyRRhV9pg= Subject key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 41A64A5323E2593EB09A874FE359830230A27FA7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft caRepository: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Oct 2024 20:34:19 +0000 Certificate not after: Tue 21 Oct 2025 20:39:19 +0000 Subordinate resources: AS: 52639 IP: 168.195.112.0/22 IP: 179.96.176.0/21 IP: 2804:d90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 12:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a6:4a:53:23:e2:59:3e:b0:9a:87:4f:e3:59:83:02:30:a2:7f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 20:34:19 2024 GMT Not After : Oct 21 20:39:19 2025 GMT Subject: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:3a:13:d2:8c:4d:d3:a6:88:4e:a4:4a:8d: 83:f1:9f:56:3e:60:1d:bd:e8:af:43:99:97:92:a2: 3d:43:65:4b:5e:77:b5:e5:e0:82:da:77:74:eb:69: 15:e8:66:8f:94:07:7b:7f:9e:66:1d:64:37:98:1f: bd:cb:86:9e:86:90:70:e5:7a:4d:df:78:0d:99:d2: bd:80:15:67:c7:42:c9:3e:18:f1:46:da:7d:16:aa: b9:de:d8:f8:7d:27:f4:fb:6b:0f:52:5d:eb:f0:54: b3:12:19:0e:7e:60:49:1c:97:4b:8a:0e:c4:92:73: 75:ce:6e:00:56:64:41:fb:54:23:8b:9f:7e:28:34: 2d:a8:1b:51:08:77:79:5f:fd:e9:91:32:9d:e2:49: ab:98:93:3a:50:3a:b6:a9:8f:53:56:85:f3:c2:ed: 1a:b9:b2:12:7a:48:d3:4f:68:26:f6:4a:d3:6a:39: 68:66:d9:63:90:e1:0e:2b:5e:d1:b3:6b:43:f7:4a: e0:1e:aa:7f:77:41:0e:a1:15:bc:75:43:52:54:4e: e1:88:27:e8:b9:4b:8a:ed:5d:32:4b:b6:5a:24:23: 32:16:f5:ab:63:8b:37:8c:9c:12:f1:55:4e:69:1f: 51:78:ec:f4:d2:29:aa:b3:04:bf:5f:ed:3b:8c:93: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.112.0/22 179.96.176.0/21 IPv6: 2804:d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52639 Signature Algorithm: sha256WithRSAEncryption c6:8b:da:b7:b8:e2:ab:2d:0c:83:81:75:df:c4:e2:3e:91:d3: d2:b7:1d:04:46:5b:57:fe:cb:0d:4d:f3:f8:be:d9:21:8c:d0: da:0c:db:c9:1d:b4:22:7e:b5:ab:9e:51:15:9c:62:06:6f:25: 89:0e:d0:d8:18:f9:32:f2:a6:d1:a9:df:f2:cc:33:7f:6e:40: fa:53:37:bf:c1:ef:f0:ea:33:20:72:0b:e1:b5:5e:13:b9:fe: 71:78:a7:00:19:80:ec:02:fe:87:a0:72:84:9e:94:a7:f9:54: 23:c6:bf:7f:b1:9b:8c:36:3e:81:76:53:d3:75:ac:e9:56:35: 5a:69:d3:25:cc:bd:32:98:49:2f:48:eb:09:19:59:3c:c6:c3: 4f:ff:bc:9e:1c:29:20:50:bb:eb:bd:f9:39:6f:be:e2:c6:90: 96:ea:46:7b:77:14:f4:e6:75:83:45:47:58:94:97:5b:0d:da: 12:16:0e:40:a5:7a:31:ba:a7:0e:74:fb:76:df:d4:5a:39:a4: 08:29:e7:90:54:d2:6f:a8:c8:ce:87:df:5f:33:e0:00:60:a1: c9:24:fd:05:90:73:0d:22:e6:a3:1b:f8:b1:57:7f:3a:13:8d: 6f:ad:49:fd:27:08:a7:80:b2:6f:d6:42:93:37:a3:cb:60:c1: 22:b6:15:fc -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUQaZKUyPiWT6wmodP41mDAjCif6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjIyMDM0MTlaFw0yNTEwMjEyMDM5MTlaMDMxMTAvBgNV BAMTKDRDMzMxMDk4Qjg0REM5Mjk2QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIDoT0oxN06aITqRKjYPxn1Y+ YB296K9DmZeSoj1DZUted7Xl4ILad3TraRXoZo+UB3t/nmYdZDeYH73Lhp6GkHDl ek3feA2Z0r2AFWfHQsk+GPFG2n0Wqrne2Ph9J/T7aw9SXevwVLMSGQ5+YEkcl0uK DsSSc3XObgBWZEH7VCOLn34oNC2oG1EId3lf/emRMp3iSauYkzpQOrapj1NWhfPC 7Rq5shJ6SNNPaCb2StNqOWhm2WOQ4Q4rXtGza0P3SuAeqn93QQ6hFbx1Q1JUTuGI J+i5S4rtXTJLtlokIzIW9atjizeMnBLxVU5pH1F47PTSKaqzBL9f7TuMk/MNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMMxCYuE3JKWu9 runSwFvirDzFojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMi80QzMz MTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKow3ADBAOzYLAwDQQCAAIwBwMFACgEDZAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM2fMA0GCSqGSIb3DQEBCwUAA4IBAQDGi9q3uOKr LQyDgXXfxOI+kdPStx0ERltX/ssNTfP4vtkhjNDaDNvJHbQifrWrnlEVnGIGbyWJ DtDYGPky8qbRqd/yzDN/bkD6Uze/we/w6jMgcgvhtV4Tuf5xeKcAGYDsAv6HoHKE npSn+VQjxr9/sZuMNj6BdlPTdazpVjVaadMlzL0ymEkvSOsJGVk8xsNP/7yeHCkg ULvrvfk5b77ixpCW6kZ7dxT05nWDRUdYlJdbDdoSFg5ApXoxuqcOdPt239RaOaQI KeeQVNJvqMjOh99fM+AAYKHJJP0FkHMNIuajG/ixV386E41vrUn9JwingLJv1kKT N6PLYMEithX8 -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:34 2024 by rpki-client on console-fra.rpki-client.org