$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer File: 520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer (raw, json) Hash identifier: sTdwBdefpuIqX453nSm0rMB2DJbLBiw3Z6zwSPrCpnA= Subject key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 36BFEB5D7EB4D4F85414CE889B4D74A397F2743F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.mft caRepository: rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sun 28 Jul 2024 18:48:29 +0000 Certificate not after: Sun 27 Jul 2025 18:53:29 +0000 Subordinate resources: AS: 53217 IP: 177.70.208.0/20 IP: 186.237.224.0/20 IP: 2804:274::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bf:eb:5d:7e:b4:d4:f8:54:14:ce:88:9b:4d:74:a3:97:f2:74:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 28 18:48:29 2024 GMT Not After : Jul 27 18:53:29 2025 GMT Subject: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:21:19:3b:aa:7b:20:b9:e7:91:77:48:21: 6c:d9:2a:4d:3d:b3:11:a1:5d:03:b1:ac:f1:12:ed: 5e:7d:9e:a5:a7:8a:d7:ce:22:e9:76:cd:e5:21:89: 0e:cd:4a:0f:78:45:13:ea:0b:68:4b:35:fe:00:95: 1d:63:4e:1d:a3:1a:5a:d0:11:29:1c:9d:dc:2b:dd: 91:9c:49:e1:23:bd:52:07:cc:f5:87:2d:fd:4e:bd: 50:2c:c5:8c:7e:1a:17:47:b4:77:bc:22:e5:3d:b4: 9b:65:2f:d6:04:d8:3b:03:10:a5:50:af:66:ef:7e: 52:59:30:52:76:4e:77:6e:51:7a:b9:9e:da:9d:6c: dd:91:63:7a:cb:d2:b2:86:e2:91:67:cc:e1:e7:83: 2f:7d:18:ee:63:45:91:ce:8c:50:b7:e3:61:80:d1: c7:fe:7d:be:88:b4:69:88:99:3c:bc:0a:c9:5f:a4: 61:85:11:0e:c8:40:50:5c:6a:c1:00:1b:39:69:29: d2:99:b2:c4:71:83:3f:af:ef:52:4a:ec:a0:29:e6: e7:72:b4:7b:0b:ba:4c:cb:ac:af:5a:46:59:b3:94: 27:a4:a6:17:c1:86:11:90:05:5a:da:d0:30:dc:fd: f4:99:75:8e:88:27:7b:f1:81:e6:56:5a:cf:c6:df: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.70.208.0/20 186.237.224.0/20 IPv6: 2804:274::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53217 Signature Algorithm: sha256WithRSAEncryption 0b:cd:a1:67:e1:14:88:e4:1e:2c:11:61:ab:6d:f7:49:e1:b0: 0d:2a:fe:60:05:83:fd:8c:02:3f:be:d8:49:90:d2:39:15:92: c4:f7:c5:b8:72:47:ae:a3:16:4e:9d:78:da:6b:dd:84:fd:24: 30:3e:63:0f:6d:52:10:8d:50:5d:1e:d3:18:86:d8:f4:c4:19: a8:88:7b:d5:4e:80:b5:20:71:d5:58:db:b1:97:a8:d2:bb:09: 4d:6d:c3:f3:d8:d8:c3:89:bb:1c:05:05:bb:94:31:db:3f:94: 4d:1a:de:44:1c:8e:77:dd:b1:3e:29:c2:5f:0e:1b:34:d5:6b: dd:3d:63:0a:47:86:a6:41:07:a5:0c:39:82:43:99:8f:32:0e: 82:23:88:e0:ba:c1:40:25:a3:94:99:6e:cb:44:21:56:8a:d8: bb:98:65:f2:ef:0c:37:bc:1d:03:55:33:c7:87:5f:6e:d0:35: 21:db:b0:28:23:98:23:44:35:20:97:d4:db:24:81:2a:f9:cf: 69:f7:da:c0:d1:b0:54:17:2f:1d:43:9e:73:de:df:68:2a:45: 31:6e:ef:95:d9:9a:ae:90:ca:cd:f7:6a:23:e1:e9:ab:63:21: 60:9f:83:6b:6d:e3:ee:69:19:c8:b1:9b:ed:49:15:c3:e0:d2: d6:31:44:89 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNr/rXX601PhUFM6Im010o5fydD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjgxODQ4MjlaFw0yNTA3MjcxODUzMjlaMDMxMTAvBgNV BAMTKDUyMEJEMDZGQjJEMDZGNzQ3QzVCMjZGRkZCOUQ3QkM4MkFCODc3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOCEZO6p7ILnnkXdIIWzZKk09 sxGhXQOxrPES7V59nqWnitfOIul2zeUhiQ7NSg94RRPqC2hLNf4AlR1jTh2jGlrQ ESkcndwr3ZGcSeEjvVIHzPWHLf1OvVAsxYx+GhdHtHe8IuU9tJtlL9YE2DsDEKVQ r2bvflJZMFJ2TnduUXq5ntqdbN2RY3rL0rKG4pFnzOHngy99GO5jRZHOjFC342GA 0cf+fb6ItGmImTy8CslfpGGFEQ7IQFBcasEAGzlpKdKZssRxgz+v71JK7KAp5udy tHsLukzLrK9aRlmzlCekphfBhhGQBVra0DDc/fSZdY6IJ3vxgeZWWs/G30mPAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSC9BvstBvdHxb Jv/7nXvIKrh3RDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEFH Y2ZyUXlvWm5iaHJKZ1h1TE1QeGJxQnJ3S3RSOWVNVjRYdWVidmFNNjUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hB R2NmclF5b1puYmhySmdYdUxNUHhicUJyd0t0UjllTVY0WHVlYnZhTTY1LzAvNTIw QkQwNkZCMkQwNkY3NDdDNUIyNkZGRkI5RDdCQzgyQUI4Nzc0NC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEsUbQAwQEuu3gMA0EAgACMAcDBQAoBAJ0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDP4TANBgkqhkiG9w0BAQsFAAOCAQEAC82hZ+EU iOQeLBFhq233SeGwDSr+YAWD/YwCP77YSZDSORWSxPfFuHJHrqMWTp142mvdhP0k MD5jD21SEI1QXR7TGIbY9MQZqIh71U6AtSBx1VjbsZeo0rsJTW3D89jYw4m7HAUF u5Qx2z+UTRreRByOd92xPinCXw4bNNVr3T1jCkeGpkEHpQw5gkOZjzIOgiOI4LrB QCWjlJluy0QhVorYu5hl8u8MN7wdA1Uzx4dfbtA1IduwKCOYI0Q1IJfU2ySBKvnP affawNGwVBcvHUOec97faCpFMW7vldmarpDKzfdqI+Hpq2MhYJ+Da23j7mkZyLGb 7UkVw+DS1jFEiQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:43:58 2024 by rpki-client on console-ams.rpki-client.org