$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer File: 4FEA6B051D4F926251D5889C412D6D94DD2520FC.cer (raw, json) Hash identifier: 1jwhv/Cwii9tckgEfWdxkqhM4nEsbtML9nRKNFsM9qk= Subject key identifier: 4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4DB57CF887DE1856F242114046ABC0789F661FB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.mft caRepository: rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 11 Nov 2024 20:25:17 +0000 Certificate not after: Mon 10 Nov 2025 20:30:17 +0000 Subordinate resources: AS: 28182 IP: 170.231.128.0/21 IP: 189.89.0.0/20 IP: 2001:1294::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b5:7c:f8:87:de:18:56:f2:42:11:40:46:ab:c0:78:9f:66:1f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 11 20:25:17 2024 GMT Not After : Nov 10 20:30:17 2025 GMT Subject: CN=4FEA6B051D4F926251D5889C412D6D94DD2520FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:c0:53:15:de:d9:26:1e:ef:b1:39:6c:13: c9:57:c9:4b:a1:04:2a:8d:bd:62:90:6e:0d:07:a3: f4:05:55:5c:e1:87:25:db:43:b2:d7:14:3a:44:32: c1:7c:4c:13:1a:09:e7:36:1c:b2:b4:5f:51:35:7d: 64:6e:fe:4f:00:19:70:68:c6:88:b5:2c:d4:18:ec: c1:1f:dc:9d:06:63:12:1f:53:45:f1:76:2f:c5:ad: 6f:0b:02:54:2e:84:55:cb:1c:d8:3f:77:40:7c:54: 46:4f:66:4b:57:c3:ec:67:2c:0f:9c:64:45:5b:98: 30:67:1b:7a:56:b9:c0:e6:79:94:ab:84:98:c3:fc: 0b:1e:38:c1:ac:0a:5d:0c:2c:97:61:60:ac:3e:76: 93:b7:af:3b:db:75:26:69:8a:51:e8:de:59:e2:aa: 3a:d0:54:e3:fe:c6:37:77:0e:f4:8d:6e:4e:f0:e9: af:a3:5f:80:d9:2a:43:57:32:cb:2e:7d:42:42:94: 20:9a:51:14:85:1d:a9:ca:d1:e6:a5:dd:81:3b:7f: c0:50:9e:2e:11:f5:55:bd:5b:59:89:08:65:da:32: 1b:74:76:b4:63:df:1c:b2:d9:fe:a7:95:3c:6f:85: cd:fd:86:05:e3:5c:a1:33:03:9f:2f:98:e4:66:49: 8a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:EA:6B:05:1D:4F:92:62:51:D5:88:9C:41:2D:6D:94:DD:25:20:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/4FEA6B051D4F926251D5889C412D6D94DD2520FC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.128.0/21 189.89.0.0/20 IPv6: 2001:1294::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28182 Signature Algorithm: sha256WithRSAEncryption 6a:7e:76:bf:6d:5a:0d:1f:89:10:d5:3d:09:ff:2d:e7:56:2e: c4:db:96:92:7f:53:cf:91:1e:a6:51:5a:02:0c:62:2d:71:6b: d1:a7:9a:3f:44:56:ec:dd:8e:84:b7:02:b6:85:3b:83:72:89: dc:b1:09:a9:a7:57:9d:76:1e:48:e1:a0:f5:2a:00:48:b7:6e: 66:12:5d:1c:68:02:59:e1:f2:b7:ca:f0:12:be:04:66:cc:c5: 70:ad:a3:f2:0c:00:f3:03:5d:f4:4c:d1:c5:3f:5d:1a:9e:54: d2:7d:d3:80:41:40:67:7b:e3:12:fb:07:2d:6c:f3:7e:91:fd: 29:fd:5e:a6:99:54:0e:b0:7e:62:22:7e:b7:55:45:31:d7:49: 71:a9:eb:55:5f:1b:c7:4c:91:57:13:0c:b9:bf:64:34:4e:91: 91:57:c6:4d:6c:e9:ed:c9:e8:18:e3:b1:92:b0:97:cd:01:28: 23:e4:de:48:80:fa:b3:d1:68:52:ed:94:20:23:69:ac:7d:ca: 37:c0:35:d8:fc:14:4b:d1:05:09:67:18:39:8a:ee:be:69:5f: 99:44:7b:03:2e:ad:08:9d:44:2d:77:63:ed:a8:1b:71:b8:fc: 26:1e:91:f8:e7:9a:8a:1f:99:43:19:29:97:1d:8f:6d:31:41: 78:e2:80:0b -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUTbV8+IfeGFbyQhFARqvAeJ9mH7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTEyMDI1MTdaFw0yNTExMTAyMDMwMTdaMDMxMTAvBgNV BAMTKDRGRUE2QjA1MUQ0RjkyNjI1MUQ1ODg5QzQxMkQ2RDk0REQyNTIwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+e8BTFd7ZJh7vsTlsE8lXyUuh BCqNvWKQbg0Ho/QFVVzhhyXbQ7LXFDpEMsF8TBMaCec2HLK0X1E1fWRu/k8AGXBo xoi1LNQY7MEf3J0GYxIfU0Xxdi/FrW8LAlQuhFXLHNg/d0B8VEZPZktXw+xnLA+c ZEVbmDBnG3pWucDmeZSrhJjD/AseOMGsCl0MLJdhYKw+dpO3rzvbdSZpilHo3lni qjrQVOP+xjd3DvSNbk7w6a+jX4DZKkNXMssufUJClCCaURSFHanK0eal3YE7f8BQ ni4R9VW9W1mJCGXaMht0drRj3xyy2f6nlTxvhc39hgXjXKEzA58vmORmSYrBAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRP6msFHU+SYlHV iJxBLW2U3SUg/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Vq ejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJwNnovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d1 ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAvNEZF QTZCMDUxRDRGOTI2MjUxRDU4ODlDNDEyRDZEOTRERDI1MjBGQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDqueAAwQEvVkAMA0EAgACMAcDBQAgARKUMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm4WMA0GCSqGSIb3DQEBCwUAA4IBAQBqfna/bVoN H4kQ1T0J/y3nVi7E25aSf1PPkR6mUVoCDGItcWvRp5o/RFbs3Y6EtwK2hTuDconc sQmpp1eddh5I4aD1KgBIt25mEl0caAJZ4fK3yvASvgRmzMVwraPyDADzA130TNHF P10anlTSfdOAQUBne+MS+wctbPN+kf0p/V6mmVQOsH5iIn63VUUx10lxqetVXxvH TJFXEwy5v2Q0TpGRV8ZNbOntyegY47GSsJfNASgj5N5IgPqz0WhS7ZQgI2msfco3 wDXY/BRL0QUJZxg5iu6+aV+ZRHsDLq0InUQtd2PtqBtxuPwmHpH455qKH5lDGSmX HY9tMUF44oAL -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:26 2024 by rpki-client on console-fra.rpki-client.org