$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.cer File: 4F3C63A4C583A15ECA112E14A2ACE28AFE972053.cer (raw, json) Hash identifier: GAlk/+Wflfg9kvx//GhxKR2/NPU/YvP7GO8H3gLwEU4= Subject key identifier: 4F:3C:63:A4:C5:83:A1:5E:CA:11:2E:14:A2:AC:E2:8A:FE:97:20:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 46166B6222C4D1789519142E5422C82F1036BBDA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.mft caRepository: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 09 Aug 2024 19:17:59 +0000 Certificate not after: Fri 08 Aug 2025 19:22:59 +0000 Subordinate resources: AS: 264216 IP: 138.99.196.0/22 IP: 177.86.48.0/21 IP: 2804:2458::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:16:6b:62:22:c4:d1:78:95:19:14:2e:54:22:c8:2f:10:36:bb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 9 19:17:59 2024 GMT Not After : Aug 8 19:22:59 2025 GMT Subject: CN=4F3C63A4C583A15ECA112E14A2ACE28AFE972053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:9a:1f:f0:6a:9b:fe:f3:7b:b2:18:75:b6: d6:29:35:9e:c6:e4:8f:a6:22:ec:ef:08:55:fa:d4: 94:d7:21:37:49:69:f3:55:44:0a:81:17:67:ab:5a: d1:81:8e:20:81:0c:e9:cc:f5:d8:3a:9e:cf:20:4a: 58:11:76:02:36:d8:ff:a3:96:15:85:8d:90:1f:ce: 34:bf:b3:a2:f9:d9:0e:92:07:d5:d3:6a:9f:ee:73: 38:3d:67:a6:cb:f9:27:1e:72:f2:e8:72:00:98:5d: 84:bb:8f:7a:dd:05:f9:90:59:78:02:9f:51:73:99: 40:f6:99:d3:85:e1:98:12:fb:f2:4e:a7:87:17:bc: 22:f9:b3:4a:7e:73:c9:3c:8a:2a:aa:4c:fc:37:91: 3a:77:b4:c3:49:fe:99:6a:57:e3:e6:72:6e:b9:7d: aa:23:41:ae:6b:89:f6:3d:3b:86:f0:32:e6:ae:c7: 0f:cf:1d:9c:0d:d1:ef:8a:a7:03:41:ac:0c:5b:1c: 95:60:7a:21:9d:26:69:b5:11:a7:ba:05:75:1e:c4: b8:e6:d5:ed:d2:27:5c:a6:23:52:f5:86:bd:82:6d: 60:e7:3a:94:77:15:ed:2c:56:42:fe:52:3e:06:e6: af:98:5b:1d:26:ec:bf:57:d7:e2:db:26:1f:47:ba: 20:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:3C:63:A4:C5:83:A1:5E:CA:11:2E:14:A2:AC:E2:8A:FE:97:20:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/4F3C63A4C583A15ECA112E14A2ACE28AFE972053.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.196.0/22 177.86.48.0/21 IPv6: 2804:2458::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264216 Signature Algorithm: sha256WithRSAEncryption c5:81:d6:df:0e:9f:99:50:82:e8:35:c6:87:c1:6c:6c:93:96: 71:53:a2:76:a7:ab:43:ee:80:4e:ab:5a:52:4d:9c:bd:25:2e: 8e:1f:39:6c:2b:25:49:4d:15:34:ea:a8:85:1a:b3:23:06:c8: 07:49:5d:38:52:21:3c:1b:28:66:20:02:31:6a:e0:e4:79:9e: 48:cd:7a:6e:90:cf:ed:a2:ca:ca:c4:9b:2a:be:1c:c8:fe:68: bd:5f:a2:24:5e:39:d7:d7:45:7a:1e:a6:00:12:4e:52:e2:f4: 9f:88:99:2b:f2:d5:e9:a2:cd:8f:9d:8d:ce:46:ab:38:38:2e: 12:87:3e:a4:2a:e8:f1:36:88:9a:5a:77:f7:c1:11:e8:a1:59: 6a:32:c8:73:59:a9:d1:9a:20:8d:9e:f6:1b:f1:3d:5e:31:54: aa:17:8d:09:db:97:53:f2:d8:4d:e0:a6:f3:95:49:f3:b5:21: 7c:ed:93:be:99:62:3a:ed:5e:db:87:65:1d:7b:36:4d:34:e7: e5:c1:cb:cc:9b:48:dd:29:b7:ea:33:a2:a6:c6:b3:3c:7b:f8: 90:24:a8:2f:45:93:a2:25:a0:f6:e8:03:37:70:c6:ee:81:5f: 1d:db:e0:e5:3d:e9:a2:e4:3a:d6:b5:a1:cc:9f:eb:52:ff:a8: 27:48:05:5d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIURhZrYiLE0XiVGRQuVCLILxA2u9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDkxOTE3NTlaFw0yNTA4MDgxOTIyNTlaMDMxMTAvBgNV BAMTKDRGM0M2M0E0QzU4M0ExNUVDQTExMkUxNEEyQUNFMjhBRkU5NzIwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDZof8Gqb/vN7shh1ttYpNZ7G 5I+mIuzvCFX61JTXITdJafNVRAqBF2erWtGBjiCBDOnM9dg6ns8gSlgRdgI22P+j lhWFjZAfzjS/s6L52Q6SB9XTap/uczg9Z6bL+ScecvLocgCYXYS7j3rdBfmQWXgC n1FzmUD2mdOF4ZgS+/JOp4cXvCL5s0p+c8k8iiqqTPw3kTp3tMNJ/plqV+Pmcm65 faojQa5rifY9O4bwMuauxw/PHZwN0e+KpwNBrAxbHJVgeiGdJmm1Eae6BXUexLjm 1e3SJ1ymI1L1hr2CbWDnOpR3Fe0sVkL+Uj4G5q+YWx0m7L9X1+LbJh9HuiDFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRPPGOkxYOhXsoR LhSirOKK/pcgUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3dF ZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJqU1MvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d3 RWZ1dVRIZ1FjVXhpTVhFTldLd2pmWWpMcnpzeTVTWVBRYVdibnZyalNTLzAvNEYz QzYzQTRDNTgzQTE1RUNBMTEyRTE0QTJBQ0UyOEFGRTk3MjA1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimPEAwQDsVYwMA0EAgACMAcDBQAoBCRYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIGDANBgkqhkiG9w0BAQsFAAOCAQEAxYHW3w6f mVCC6DXGh8FsbJOWcVOidqerQ+6ATqtaUk2cvSUujh85bCslSU0VNOqohRqzIwbI B0ldOFIhPBsoZiACMWrg5HmeSM16bpDP7aLKysSbKr4cyP5ovV+iJF4519dFeh6m ABJOUuL0n4iZK/LV6aLNj52NzkarODguEoc+pCro8TaImlp398ER6KFZajLIc1mp 0ZogjZ72G/E9XjFUqheNCduXU/LYTeCm85VJ87UhfO2TvpliOu1e24dlHXs2TTTn 5cHLzJtI3Sm36jOipsazPHv4kCSoL0WToiWg9ugDN3DG7oFfHdvg5T3pouQ61rWh zJ/rUv+oJ0gFXQ== -----END CERTIFICATE-----Generated at Mon Feb 17 08:07:42 2025 by rpki-client