$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.cer File: 5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.cer (raw, json) Hash identifier: J9avJVFNjZSc9I4wjIWaQCnahusJW88z3lIkhf7HS0o= Subject key identifier: 5B:7E:15:31:CE:C2:54:26:5D:57:4B:E0:F0:DB:E2:82:5A:BB:D6:D0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 098C6B386E2EFB2C549528806409EF75CDD9FD95 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.mft caRepository: rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Sep 2024 16:52:14 +0000 Certificate not after: Mon 22 Sep 2025 16:57:14 +0000 Subordinate resources: AS: 270951 IP: 177.36.68.0/22 IP: 2804:7400::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8c:6b:38:6e:2e:fb:2c:54:95:28:80:64:09:ef:75:cd:d9:fd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 16:52:14 2024 GMT Not After : Sep 22 16:57:14 2025 GMT Subject: CN=5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:76:37:89:ce:b1:4a:24:84:9c:ff:3d:0b: 89:34:bf:40:34:50:36:2a:fc:d2:e9:f5:47:68:48: 38:f7:7a:13:0d:04:40:34:01:de:7f:b1:9a:a7:1a: fa:2f:70:fb:90:d4:9d:44:91:4a:2b:37:79:6e:f2: 6c:2b:63:39:fa:73:bc:3d:d3:83:88:cb:1b:e8:93: 23:43:f6:bd:b9:38:05:0a:f8:31:0a:29:e5:07:81: 24:0e:ec:a5:2d:3b:f4:db:37:b9:34:4e:75:9b:e8: 9b:a3:bc:e6:fa:c3:22:53:35:1b:7d:a6:fa:d7:b8: d6:73:2a:a8:33:da:f6:6d:3b:83:9b:34:c2:3b:d8: 75:44:62:15:e0:eb:8e:2e:aa:50:6f:4a:1b:c7:66: 83:60:91:bc:4a:b9:b3:b5:e9:f8:76:01:99:25:1a: 17:3a:a9:5e:c8:c8:f9:41:86:04:29:cd:34:56:1f: 25:25:8d:f8:0f:6b:00:b8:ff:44:98:cf:4b:54:47: e7:6c:44:05:60:57:e8:a4:86:a8:aa:c1:a6:9a:9e: 1e:24:5d:7c:2d:be:51:f1:e1:79:a2:65:9e:92:66: 29:8a:f5:7c:55:76:d4:cd:0c:2a:3a:e1:57:78:7f: d6:64:c9:b5:73:eb:44:a0:d2:00:e8:06:98:00:ea: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:7E:15:31:CE:C2:54:26:5D:57:4B:E0:F0:DB:E2:82:5A:BB:D6:D0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/5B7E1531CEC254265D574BE0F0DBE2825ABBD6D0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.36.68.0/22 IPv6: 2804:7400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270951 Signature Algorithm: sha256WithRSAEncryption 3b:0d:c1:b9:86:0d:1d:27:30:d9:60:0d:1e:ac:fe:7b:fb:dd: a5:2f:70:85:60:04:da:9a:d6:57:a4:05:93:8b:f0:82:2f:be: af:32:07:b5:72:f8:25:c8:1f:75:92:93:3e:1d:57:47:22:66: e6:20:2b:6e:cd:e8:0e:2f:58:19:8d:ea:2b:5e:83:79:c0:c5: 7f:14:78:4b:ec:cc:e1:7a:e3:53:bd:24:35:df:9d:ef:fa:89: a8:4e:4a:df:2c:01:eb:d5:1e:00:9e:05:93:19:f8:ee:4a:05: f6:7f:3b:81:71:20:05:a7:ba:bf:c0:31:5d:4d:3b:33:db:ec: fc:49:99:27:c6:a0:22:6b:1b:7c:61:5e:26:64:79:22:00:9e: 98:ab:1f:f3:ec:11:e6:ac:04:79:79:8c:e2:9b:86:2e:5f:08: 13:f5:c6:65:cf:db:13:9e:e4:3c:cf:96:43:e1:9d:54:54:ff: e9:50:3d:b0:8a:7c:be:d8:1b:be:01:ca:c4:35:02:1a:9f:c7: 4e:12:f7:8a:29:13:c0:44:b2:70:97:63:15:e6:cd:f8:0e:43: ec:fa:67:89:67:b1:28:ff:ba:cf:07:8e:19:f1:60:cf:fa:25: 3b:94:ac:c1:a0:cc:75:ef:e3:a6:13:dd:c9:e5:bf:64:52:2c: 70:53:85:6e -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCYxrOG4u+yxUlSiAZAnvdc3Z/ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjMxNjUyMTRaFw0yNTA5MjIxNjU3MTRaMDMxMTAvBgNV BAMTKDVCN0UxNTMxQ0VDMjU0MjY1RDU3NEJFMEYwREJFMjgyNUFCQkQ2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGnY3ic6xSiSEnP89C4k0v0A0 UDYq/NLp9UdoSDj3ehMNBEA0Ad5/sZqnGvovcPuQ1J1EkUorN3lu8mwrYzn6c7w9 04OIyxvokyND9r25OAUK+DEKKeUHgSQO7KUtO/TbN7k0TnWb6JujvOb6wyJTNRt9 pvrXuNZzKqgz2vZtO4ObNMI72HVEYhXg644uqlBvShvHZoNgkbxKubO16fh2AZkl Ghc6qV7IyPlBhgQpzTRWHyUljfgPawC4/0SYz0tUR+dsRAVgV+ikhqiqwaaanh4k XXwtvlHx4XmiZZ6SZimK9XxVdtTNDCo64Vd4f9ZkybVz60Sg0gDoBpgA6vy5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbfhUxzsJUJl1X S+Dw2+KCWrvW0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTF6 Ym5Yajk4NGtMNFdrWHU4UW5CeFA5Q21XaVpKZTZFaTRwanpZRndvcXEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzkx emJuWGo5ODRrTDRXa1h1OFFuQnhQOUNtV2laSmU2RWk0cGp6WUZ3b3FxLzAvNUI3 RTE1MzFDRUMyNTQyNjVENTc0QkUwRjBEQkUyODI1QUJCRDZEMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsSREMA0EAgACMAcDBQAoBHQAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiZzANBgkqhkiG9w0BAQsFAAOCAQEAOw3BuYYNHScw2WAN Hqz+e/vdpS9whWAE2prWV6QFk4vwgi++rzIHtXL4JcgfdZKTPh1XRyJm5iArbs3o Di9YGY3qK16DecDFfxR4S+zM4XrjU70kNd+d7/qJqE5K3ywB69UeAJ4Fkxn47koF 9n87gXEgBae6v8AxXU07M9vs/EmZJ8agImsbfGFeJmR5IgCemKsf8+wR5qwEeXmM 4puGLl8IE/XGZc/bE57kPM+WQ+GdVFT/6VA9sIp8vtgbvgHKxDUCGp/HThL3iikT wESycJdjFebN+A5D7PpniWexKP+6zweOGfFgz/olO5SswaDMde/jphPdyeW/ZFIs cFOFbg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:44:00 2024 by rpki-client on console-ams.rpki-client.org