$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer File: 4D2990768E393F68FA14BF3F1F2B973208903FBC.cer (raw, json) Hash identifier: iMEmbQyNyXiXGf3nFexmPyJtow8T0pcHJo8dYOAXQH4= Subject key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 062DCE37E655868F873603F323F30F0E7A9AE98F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft caRepository: rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Nov 2024 10:10:24 +0000 Certificate not after: Tue 25 Nov 2025 10:15:24 +0000 Subordinate resources: AS: 61745 IP: 131.72.152.0/22 IP: 186.219.240.0 -- 186.219.254.255 IP: 2804:1bb8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 18:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2d:ce:37:e6:55:86:8f:87:36:03:f3:23:f3:0f:0e:7a:9a:e9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 26 10:10:24 2024 GMT Not After : Nov 25 10:15:24 2025 GMT Subject: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:f0:14:8e:de:25:ff:c2:05:67:69:ca:ec: 1e:6d:58:6d:ab:b2:09:74:7a:c4:31:02:4d:4a:18: a8:89:e7:42:4a:5c:ea:fb:f7:8c:08:74:1e:9f:01: fb:d0:4e:f1:f5:0c:b8:d5:f5:66:5e:1c:32:b8:11: 37:05:de:cf:42:91:ce:78:c1:30:42:36:c2:c7:71: f3:05:12:f3:1b:45:ad:8e:18:26:73:ad:f7:62:da: 75:53:dc:76:06:75:4a:58:aa:4e:89:94:da:c2:3d: a6:9f:af:de:35:77:ce:f7:9c:59:cc:2b:61:33:a1: 14:46:9b:11:1f:0d:d2:e7:b2:f4:c0:18:24:6b:75: 3f:3f:7b:98:14:f4:af:13:1d:73:46:a4:a1:05:ea: 17:de:09:ec:55:84:e3:99:9c:42:26:4b:c7:27:52: b3:cd:3a:1c:39:95:a3:e1:4f:d3:ea:63:9e:c3:d7: 86:59:fb:a1:06:5e:5a:45:9a:5e:12:eb:28:93:46: f3:10:4d:86:7a:e4:26:75:65:94:f4:fe:3d:ba:15: db:3a:b5:ee:11:fc:78:d1:ab:e2:2b:c0:ab:09:2d: 9d:41:fa:92:aa:db:16:3d:46:72:a8:f7:68:25:48: b4:2f:c3:ba:d0:21:de:83:b3:f5:9b:51:cf:c9:ed: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.152.0/22 186.219.240.0-186.219.254.255 IPv6: 2804:1bb8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61745 Signature Algorithm: sha256WithRSAEncryption 81:ec:e2:2c:0e:72:8b:53:d2:8c:74:e3:f7:3b:e3:26:fc:74: 42:67:c9:75:31:1c:29:ac:43:04:c0:bb:12:cb:fc:a0:fd:f7: 97:1c:b4:74:84:45:ce:c9:47:ba:41:6e:05:52:1e:eb:55:60: df:25:48:0a:e4:69:3b:46:ff:6e:6e:8b:a2:bd:c0:78:79:60: b3:58:68:4e:e8:3f:bd:a2:59:5b:b4:b1:c4:d4:ac:13:b7:d9: 1e:63:99:31:d7:a8:eb:f2:1f:13:59:0c:1d:19:ff:f1:f6:3d: b5:5a:7e:8c:78:ff:0b:1a:eb:92:fe:71:68:fd:3c:e7:8c:3a: aa:66:35:a6:64:44:58:6b:2e:14:48:36:ae:be:ee:6b:67:88: ff:fc:ce:95:9a:d8:94:5a:d0:24:d8:5a:63:f3:48:ab:e7:71: ca:c4:e9:2d:9e:f1:69:d3:0d:77:e8:83:ac:67:58:27:82:5f: 44:79:67:1f:e9:c3:ce:dc:e9:f1:ed:1a:1a:f5:69:bb:ba:33: cf:44:33:62:c8:50:aa:94:2a:8a:6a:c1:e7:31:db:7a:18:b0: 51:2d:52:ad:cb:eb:37:a8:e8:05:db:e8:55:99:13:e2:06:4e: a5:c1:71:d4:dc:26:d5:93:36:9e:c5:fb:71:de:9d:67:6e:0f: 1b:d5:4a:f5 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgIUBi3ON+ZVho+HNgPzI/MPDnqa6Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjYxMDEwMjRaFw0yNTExMjUxMDE1MjRaMDMxMTAvBgNV BAMTKDREMjk5MDc2OEUzOTNGNjhGQTE0QkYzRjFGMkI5NzMyMDg5MDNGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVH/AUjt4l/8IFZ2nK7B5tWG2r sgl0esQxAk1KGKiJ50JKXOr794wIdB6fAfvQTvH1DLjV9WZeHDK4ETcF3s9Ckc54 wTBCNsLHcfMFEvMbRa2OGCZzrfdi2nVT3HYGdUpYqk6JlNrCPaafr941d873nFnM K2EzoRRGmxEfDdLnsvTAGCRrdT8/e5gU9K8THXNGpKEF6hfeCexVhOOZnEImS8cn UrPNOhw5laPhT9PqY57D14ZZ+6EGXlpFml4S6yiTRvMQTYZ65CZ1ZZT0/j26Fds6 te4R/HjRq+IrwKsJLZ1B+pKq2xY9RnKo92glSLQvw7rQId6Ds/WbUc/J7SbbAgMB AAGjggNIMIIDRDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRNKZB2jjk/aPoU vz8fK5cyCJA/vDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzhD VDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgxNGcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c4 Q1Q4RWtRU25FcndVUjlhdjFoMXVjUFVRSmhxVG53VEY5YTg3NDRoMTRnLzAvNEQy OTkwNzY4RTM5M0Y2OEZBMTRCRjNGMUYyQjk3MzIwODkwM0ZCQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEH AQH/BC0wKzAaBAIAATAUAwQCg0iYMAwDBAS62/ADBAC62/4wDQQCAAIwBwMFACgE G7gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPExMA0GCSqGSIb3DQEBCwUAA4IB AQCB7OIsDnKLU9KMdOP3O+Mm/HRCZ8l1MRwprEMEwLsSy/yg/feXHLR0hEXOyUe6 QW4FUh7rVWDfJUgK5Gk7Rv9ubouivcB4eWCzWGhO6D+9ollbtLHE1KwTt9keY5kx 16jr8h8TWQwdGf/x9j21Wn6MeP8LGuuS/nFo/TznjDqqZjWmZERYay4USDauvu5r Z4j//M6VmtiUWtAk2Fpj80ir53HKxOktnvFp0w136IOsZ1gngl9EeWcf6cPO3Onx 7Roa9Wm7ujPPRDNiyFCqlCqKasHnMdt6GLBRLVKty+s3qOgF2+hVmRPiBk6lwXHU 3CbVkzaexftx3p1nbg8b1Ur1 -----END CERTIFICATE-----Generated at Tue Nov 26 19:36:24 2024 by rpki-client on console-ams.rpki-client.org