$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer File: 5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer (raw, json) Hash identifier: iT+HCdcwslW4zDliHZUEVS/ietJWbk3ZyNr85fckYWY= Subject key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 706A5143A1609151A7B41B9241A9F24C99AAD5E3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft caRepository: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 14 Nov 2024 15:03:09 +0000 Certificate not after: Thu 13 Nov 2025 15:08:09 +0000 Subordinate resources: AS: 262585 IP: 201.55.160.0/20 IP: 2804:8f70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6a:51:43:a1:60:91:51:a7:b4:1b:92:41:a9:f2:4c:99:aa:d5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 14 15:03:09 2024 GMT Not After : Nov 13 15:08:09 2025 GMT Subject: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:25:a3:37:d1:60:16:9e:b6:13:df:61:2a: 46:bb:34:ef:c4:14:78:ab:53:5a:b0:a0:a5:22:42: 54:fe:e4:32:62:54:2d:7f:bc:7f:65:b3:68:f9:e0: 84:5e:63:70:11:d2:5d:b2:c9:94:1c:e4:1c:91:b5: 95:24:da:14:d8:77:68:cb:80:f2:e0:73:76:9f:12: 37:e1:33:75:c9:79:e9:9d:da:2a:ee:d8:40:fc:0a: 36:07:88:d3:f6:3d:f3:48:10:fd:59:e9:a3:0d:c0: 28:1a:53:6f:6b:e9:ae:89:2f:85:52:74:48:9c:4f: ba:53:99:3d:41:30:b1:b5:2a:2f:7e:dc:38:8e:db: ea:4d:92:77:26:e6:ff:08:15:ee:9f:33:30:a5:f6: 23:36:cd:70:63:30:40:6c:8e:6e:01:bc:a0:ba:45: 4c:a3:95:f6:5a:7f:60:76:ca:db:c3:00:e5:2f:74: 39:bd:5d:4b:9a:75:bb:be:7d:e0:35:97:74:e7:b1: 53:7d:f8:c6:7f:bb:0a:ab:29:0d:de:32:4d:7a:cf: cb:3e:71:91:d5:51:ef:0e:50:e7:41:c8:f1:31:89: 99:de:f3:35:2f:d8:01:4f:61:3c:1c:61:1e:0e:ad: 16:c9:35:0b:5c:6d:16:00:5e:50:a6:18:d2:92:9a: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.55.160.0/20 IPv6: 2804:8f70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262585 Signature Algorithm: sha256WithRSAEncryption bf:c0:a1:bb:ad:f1:0e:07:b3:13:ca:55:a1:01:2d:15:41:78: 7c:cf:67:1b:22:c1:22:4d:0c:45:2f:30:bf:95:6e:b8:5c:be: 5b:95:bf:b2:80:de:b1:06:e1:a2:a5:97:80:94:f7:ca:2c:51: 4d:d8:22:96:f9:f2:1c:27:b4:b3:c9:93:99:bc:57:c5:e6:98: cd:73:84:96:d5:63:3e:2f:88:37:e2:e2:05:42:d1:40:52:56: c4:98:dd:09:b1:4e:e5:50:ed:1e:1b:dd:48:a0:a1:4e:ee:dd: 9e:2e:a0:79:86:e6:3c:cc:84:47:70:68:27:ee:02:a9:83:80: f8:b6:66:a2:5f:d4:dc:bb:81:9e:45:ed:80:8c:6b:1c:17:17: 86:30:c0:3b:3e:2b:33:cc:3d:5c:3b:02:e4:4e:1d:aa:29:55: d9:cf:1a:61:7d:22:23:8e:02:4e:6d:2f:e3:7c:33:60:02:35: d4:4a:f9:59:87:7d:6c:9c:ce:cb:ea:42:8f:f6:08:d7:77:80: c6:4a:4f:4f:01:40:7d:1f:f8:47:a9:a2:ed:17:e9:d4:37:17: 43:ec:4c:93:66:94:d3:28:e6:59:9d:3a:3d:c7:01:2d:07:3f: e1:d9:b3:f6:eb:cf:ed:e2:58:f5:50:26:c8:50:84:c1:de:ee: 81:41:01:03 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcGpRQ6FgkVGntBuSQanyTJmq1eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTQxNTAzMDlaFw0yNTExMTMxNTA4MDlaMDMxMTAvBgNV BAMTKDVBQzg1M0FFM0Y5Q0I2MkNDMDFCQUY0Mzc5QkY4MDcyOTI2QjA3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjSWjN9FgFp62E99hKka7NO/E FHirU1qwoKUiQlT+5DJiVC1/vH9ls2j54IReY3AR0l2yyZQc5ByRtZUk2hTYd2jL gPLgc3afEjfhM3XJeemd2iru2ED8CjYHiNP2PfNIEP1Z6aMNwCgaU29r6a6JL4VS dEicT7pTmT1BMLG1Ki9+3DiO2+pNkncm5v8IFe6fMzCl9iM2zXBjMEBsjm4BvKC6 RUyjlfZaf2B2ytvDAOUvdDm9XUuadbu+feA1l3TnsVN9+MZ/uwqrKQ3eMk16z8s+ cZHVUe8OUOdByPExiZne8zUv2AFPYTwcYR4OrRbJNQtcbRYAXlCmGNKSmvVfAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRayFOuP5y2LMAb r0N5v4BykmsHpzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR21u UmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWtaZnQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dt blJjNkNQcEpMQ3hHTkRlMXhBcm5lSHpab0QyWDJQODRNR1R2cEVrWmZ0LzAvNUFD ODUzQUUzRjlDQjYyQ0MwMUJBRjQzNzlCRjgwNzI5MjZCMDdBNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEyTegMA0EAgACMAcDBQAoBI9wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQBuTANBgkqhkiG9w0BAQsFAAOCAQEAv8Chu63xDgezE8pV oQEtFUF4fM9nGyLBIk0MRS8wv5VuuFy+W5W/soDesQbhoqWXgJT3yixRTdgilvny HCe0s8mTmbxXxeaYzXOEltVjPi+IN+LiBULRQFJWxJjdCbFO5VDtHhvdSKChTu7d ni6geYbmPMyER3BoJ+4CqYOA+LZmol/U3LuBnkXtgIxrHBcXhjDAOz4rM8w9XDsC 5E4dqilV2c8aYX0iI44CTm0v43wzYAI11Er5WYd9bJzOy+pCj/YI13eAxkpPTwFA fR/4R6mi7Rfp1DcXQ+xMk2aU0yjmWZ06PccBLQc/4dmz9uvP7eJY9VAmyFCEwd7u gUEBAw== -----END CERTIFICATE-----Generated at Wed Nov 27 02:16:32 2024 by rpki-client on console-fra.rpki-client.org