$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer File: 57E35169EA4E86E7F7413AD6D74F24D1DA753320.cer (raw, json) Hash identifier: 8L80ZRbG4Y+6R/5QH6fzP6jhnF3YJXJupKwqDAn1dhk= Subject key identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59E1E850BDAC92FF1727EC49FF15F0AE82EE146E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft caRepository: rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 20 Aug 2024 18:01:25 +0000 Certificate not after: Tue 19 Aug 2025 18:06:25 +0000 Subordinate resources: AS: 28128 IP: 168.195.32.0/22 IP: 187.19.48.0/20 IP: 2804:3458::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e1:e8:50:bd:ac:92:ff:17:27:ec:49:ff:15:f0:ae:82:ee:14:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 20 18:01:25 2024 GMT Not After : Aug 19 18:06:25 2025 GMT Subject: CN=57E35169EA4E86E7F7413AD6D74F24D1DA753320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:b9:ab:09:df:39:f9:ac:0a:cc:e2:8a:0c: 96:ba:06:19:35:9a:c4:da:8d:e1:d8:9c:db:c5:59: be:91:ab:d0:b5:90:9d:ef:96:74:c7:31:ef:c0:0b: 52:21:cb:0f:d9:05:75:0f:50:46:0d:24:b8:0a:b6: 5c:9e:71:05:e1:46:44:3b:17:4d:12:a3:a6:b7:df: ec:e2:7b:2c:fc:60:47:0f:de:e4:4b:5a:26:ad:7e: 35:aa:45:d9:85:6e:92:bb:08:dd:c4:5d:37:21:61: 46:14:df:05:7b:b9:cb:fc:30:36:39:a9:33:d2:7b: ba:e3:7e:d2:be:6c:64:6c:0e:94:37:bc:46:37:07: c6:68:d2:49:d7:95:26:9f:d9:0f:be:94:ec:17:67: 66:ad:a3:ef:a1:ea:76:94:d2:93:9c:b8:63:35:1c: 2f:cc:09:d0:d5:49:92:52:69:1f:50:36:6d:db:bf: 79:d6:4d:5c:38:0f:4c:2f:4a:50:f7:49:ba:ad:73: 41:9a:b8:0c:8e:f4:bd:f6:6f:6f:5d:14:f0:19:e0: ab:45:64:bd:85:64:b2:a5:c3:39:fe:60:ce:e4:ba: a0:3e:2f:fc:67:83:cb:45:6e:6a:73:33:32:25:2e: 79:d8:aa:f8:03:eb:dd:a1:b6:56:ab:54:dd:d9:71: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:E3:51:69:EA:4E:86:E7:F7:41:3A:D6:D7:4F:24:D1:DA:75:33:20 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/57E35169EA4E86E7F7413AD6D74F24D1DA753320.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.32.0/22 187.19.48.0/20 IPv6: 2804:3458::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28128 Signature Algorithm: sha256WithRSAEncryption 80:b9:1a:da:e3:0f:f1:3f:70:5c:2e:d1:37:e2:0b:32:6a:14: b5:73:5b:6f:48:0b:f2:1c:38:f8:c7:74:f0:f8:cd:84:2f:12: f3:b4:94:c1:38:70:da:6d:0e:2f:a1:f3:68:6b:cf:24:ea:57: 2f:ec:93:24:66:27:16:a6:b3:e4:9b:1c:18:da:87:a5:89:16: a9:dd:c3:c2:35:bc:33:6e:7d:90:78:1f:5b:68:07:17:bb:90: d6:6c:6e:b8:b9:f4:e6:92:27:fe:5b:19:58:cc:2a:d4:02:f4: 5b:ec:91:fb:b7:c6:61:36:14:10:9d:dd:3c:a4:44:ce:0f:27: b0:71:06:3a:aa:27:8b:99:aa:8b:63:c6:64:b3:02:27:ea:74: f1:bd:c8:ee:13:8d:ce:2b:4a:8c:ba:27:be:07:4c:09:ab:4a: 06:01:38:58:6d:a2:3c:2e:70:fd:bf:6c:5c:3a:bb:25:ee:64: 03:85:6e:6a:e2:73:bb:40:44:40:65:2f:87:63:ac:c9:3e:73: d2:80:73:33:d1:d1:ca:cd:8a:5b:ef:88:51:10:73:21:a9:7a: 9d:e7:4c:41:33:18:37:67:a4:89:8e:2d:82:c3:17:a4:16:12: ae:be:8c:9e:7f:4b:a9:16:f5:9e:86:b1:2a:39:a5:5d:73:42: 76:9c:cf:9e -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUWeHoUL2skv8XJ+xJ/xXwroLuFG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MjAxODAxMjVaFw0yNTA4MTkxODA2MjVaMDMxMTAvBgNV BAMTKDU3RTM1MTY5RUE0RTg2RTdGNzQxM0FENkQ3NEYyNEQxREE3NTMzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMX7mrCd85+awKzOKKDJa6Bhk1 msTajeHYnNvFWb6Rq9C1kJ3vlnTHMe/AC1Ihyw/ZBXUPUEYNJLgKtlyecQXhRkQ7 F00So6a33+zieyz8YEcP3uRLWiatfjWqRdmFbpK7CN3EXTchYUYU3wV7ucv8MDY5 qTPSe7rjftK+bGRsDpQ3vEY3B8Zo0knXlSaf2Q++lOwXZ2ato++h6naU0pOcuGM1 HC/MCdDVSZJSaR9QNm3bv3nWTVw4D0wvSlD3Sbqtc0GauAyO9L32b29dFPAZ4KtF ZL2FZLKlwzn+YM7kuqA+L/xng8tFbmpzMzIlLnnYqvgD692htlarVN3ZcQCDAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRX41Fp6k6G5/dB OtbXTyTR2nUzIDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWpz dzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIxOUQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vq c3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAvNTdF MzUxNjlFQTRFODZFN0Y3NDEzQUQ2RDc0RjI0RDFEQTc1MzMyMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqMMgAwQEuxMwMA0EAgACMAcDBQAoBDRYMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm3gMA0GCSqGSIb3DQEBCwUAA4IBAQCAuRra4w/x P3BcLtE34gsyahS1c1tvSAvyHDj4x3Tw+M2ELxLztJTBOHDabQ4vofNoa88k6lcv 7JMkZicWprPkmxwY2oeliRap3cPCNbwzbn2QeB9baAcXu5DWbG64ufTmkif+WxlY zCrUAvRb7JH7t8ZhNhQQnd08pETODyewcQY6qieLmaqLY8ZkswIn6nTxvcjuE43O K0qMuie+B0wJq0oGAThYbaI8LnD9v2xcOrsl7mQDhW5q4nO7QERAZS+HY6zJPnPS gHMz0dHKzYpb74hREHMhqXqd50xBMxg3Z6SJji2CwxekFhKuvoyef0upFvWehrEq OaVdc0J2nM+e -----END CERTIFICATE-----Generated at Mon Feb 17 08:17:21 2025 by rpki-client