$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer File: 5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer (raw, json) Hash identifier: 2EnwER+IrM/jhYcxg5+8TLnjfF+66CixmsD43bZxr4I= Subject key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 75BDBD58806201B2917B889EE3A83AB2D07E48F9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft caRepository: rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 17 Jun 2024 18:16:50 +0000 Certificate not after: Mon 16 Jun 2025 18:21:50 +0000 Subordinate resources: AS: 264169 IP: 45.189.168.0/22 IP: 138.94.200.0/22 IP: 2804:238c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bd:bd:58:80:62:01:b2:91:7b:88:9e:e3:a8:3a:b2:d0:7e:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 17 18:16:50 2024 GMT Not After : Jun 16 18:21:50 2025 GMT Subject: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:bd:4c:53:9d:96:cb:9d:66:0a:ac:db:0a: 3b:d8:67:93:b1:2a:6f:9c:cf:72:1f:d4:76:dd:92: 6a:91:a2:4f:9a:14:fa:0f:c4:45:7a:59:f1:87:0c: 80:2b:1f:75:02:93:8e:47:5c:a6:af:54:08:33:85: cf:29:fc:4c:e5:a8:84:f2:6f:32:ce:f7:97:0a:8e: 82:27:39:d8:73:bb:76:d1:81:2d:55:41:05:0c:b7: 5f:fe:86:69:10:d9:0b:d5:9d:ca:29:fb:5a:82:d4: 8f:ff:96:2c:a8:53:aa:6f:9d:5f:a5:c0:31:b5:18: e8:9c:bd:12:dd:bc:63:13:41:d9:36:60:07:e6:3c: 11:db:48:89:58:13:32:19:a2:f0:da:b7:0a:d6:d7: 4a:76:e0:64:9a:f6:81:4f:6b:f6:b1:69:d9:49:17: 3e:23:23:28:1f:bf:69:10:15:d4:0f:cd:10:c1:72: 5b:c8:63:9e:52:3b:e7:d2:57:63:a9:e4:31:20:d8: 35:47:31:2a:c4:b8:26:32:cc:a3:0c:79:61:00:ef: 4c:81:57:49:4d:40:4e:48:c2:f8:9a:e9:ec:39:a1: 5e:07:e0:ef:4f:a5:92:8d:2a:49:55:14:78:70:6a: 22:ca:98:f5:ac:16:5f:a4:66:0b:47:01:e4:c2:fb: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.168.0/22 138.94.200.0/22 IPv6: 2804:238c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264169 Signature Algorithm: sha256WithRSAEncryption 39:7c:b6:b4:4a:b2:5b:52:9d:39:72:d1:5e:ec:2d:d6:7c:3a: 6f:b8:97:99:5f:12:75:27:b3:b1:e9:83:3c:50:c4:8d:0a:0d: 6a:0f:c7:a6:a4:8b:f3:22:0a:0c:63:94:d1:79:70:e5:77:8a: 03:3a:25:81:8b:58:9e:10:0d:47:fe:23:86:59:28:a4:a3:0a: c8:13:17:63:1d:e8:0c:3c:44:33:98:98:9a:d3:b5:2a:1f:17: 92:12:71:b3:d5:8b:b8:ae:5f:d9:bc:fd:69:78:49:01:0a:7a: 6d:02:68:a7:cf:a5:e0:3e:02:1c:24:ff:55:b5:2c:e2:bc:f3: 57:f5:0a:9f:bd:17:22:3b:5f:4a:17:2a:de:85:7c:80:5b:59: e0:16:bd:44:10:68:44:9d:a0:90:ea:e9:33:3d:38:c8:35:dc: b7:9b:fc:ee:05:ee:94:ad:70:ff:d8:94:bc:da:67:48:9d:a0: e2:49:88:39:db:b7:f2:c7:f5:5e:6d:2a:32:3a:c4:b1:e0:e1: 57:32:1b:00:13:9a:e9:43:d9:81:cd:64:78:c8:20:a1:f0:9b: de:e4:99:42:2e:cc:0e:98:dd:1c:ac:7f:a9:be:11:38:9c:22: c2:12:97:1e:0d:8b:99:c2:fc:10:bb:be:7c:fd:01:a0:d5:98: 27:ec:a4:23 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUdb29WIBiAbKRe4ie46g6stB+SPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MTcxODE2NTBaFw0yNTA2MTYxODIxNTBaMDMxMTAvBgNV BAMTKDVBRjQ0NkE0NUE4QUVFNjZBMjFENzRFOTgyQzcyQ0Q0QjdCMjJDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+L1MU52Wy51mCqzbCjvYZ5Ox Km+cz3If1HbdkmqRok+aFPoPxEV6WfGHDIArH3UCk45HXKavVAgzhc8p/EzlqITy bzLO95cKjoInOdhzu3bRgS1VQQUMt1/+hmkQ2QvVncop+1qC1I//liyoU6pvnV+l wDG1GOicvRLdvGMTQdk2YAfmPBHbSIlYEzIZovDatwrW10p24GSa9oFPa/axadlJ Fz4jIygfv2kQFdQPzRDBclvIY55SO+fSV2Op5DEg2DVHMSrEuCYyzKMMeWEA70yB V0lNQE5Iwvia6ew5oV4H4O9PpZKNKklVFHhwaiLKmPWsFl+kZgtHAeTC+4oxAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRa9EakWoruZqId dOmCxyzUt7Is4DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEpz blBtVnFnZHpjODJYb1ZjWHY0ZlRLZjlSUWl6ZER6U1BlcmNITVhuWWgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhK c25QbVZxZ2R6YzgyWG9WY1h2NGZUS2Y5UlFpemREelNQZXJjSE1YblloLzAvNUFG NDQ2QTQ1QThBRUU2NkEyMUQ3NEU5ODJDNzJDRDRCN0IyMkNFMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLb2oAwQCil7IMA0EAgACMAcDBQAoBCOMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQH6TANBgkqhkiG9w0BAQsFAAOCAQEAOXy2tEqy W1KdOXLRXuwt1nw6b7iXmV8SdSezsemDPFDEjQoNag/HpqSL8yIKDGOU0Xlw5XeK AzolgYtYnhANR/4jhlkopKMKyBMXYx3oDDxEM5iYmtO1Kh8XkhJxs9WLuK5f2bz9 aXhJAQp6bQJop8+l4D4CHCT/VbUs4rzzV/UKn70XIjtfShcq3oV8gFtZ4Ba9RBBo RJ2gkOrpMz04yDXct5v87gXulK1w/9iUvNpnSJ2g4kmIOdu38sf1Xm0qMjrEseDh VzIbABOa6UPZgc1keMggofCb3uSZQi7MDpjdHKx/qb4ROJwiwhKXHg2LmcL8ELu+ fP0BoNWYJ+ykIw== -----END CERTIFICATE-----Generated at Wed Nov 27 02:00:03 2024 by rpki-client on console-ams.rpki-client.org