$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/610FA580591423BC36D2EE3D16B968E308782571.cer File: 610FA580591423BC36D2EE3D16B968E308782571.cer (raw, json) Hash identifier: lUIriu0f7xfbNarLsoCryMilUkHZXwyq5IOzSluvZuU= Subject key identifier: 61:0F:A5:80:59:14:23:BC:36:D2:EE:3D:16:B9:68:E3:08:78:25:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BCC5D48077DA61951EF3D0376264BEF24236E7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/610FA580591423BC36D2EE3D16B968E308782571.mft caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 14:49:40 +0000 Certificate not after: Mon 08 Sep 2025 14:54:40 +0000 Subordinate resources: AS: 28220 IP: 45.4.64.0/22 IP: 138.0.100.0/22 IP: 168.227.108.0/22 IP: 168.228.68.0/22 IP: 170.82.92.0/22 IP: 177.89.0.0/16 IP: 177.137.192.0/20 IP: 179.96.192.0/21 IP: 179.96.240.0/20 IP: 179.190.128.0/17 IP: 186.192.16.0/20 IP: 186.193.96.0/20 IP: 186.208.208.0/21 IP: 186.235.0.0/20 IP: 186.236.192.0/19 IP: 186.251.112.0/21 IP: 187.49.192.0/20 IP: 187.60.64.0/19 IP: 187.61.128.0/17 IP: 187.86.96.0/20 IP: 187.87.112.0/20 IP: 187.108.64.0/20 IP: 187.109.176.0/20 IP: 187.111.224.0/19 IP: 189.45.16.0/20 IP: 189.124.128.0/17 IP: 191.241.40.0/21 IP: 200.233.80.0/20 IP: 201.148.188.0/22 IP: 2804:54::/32 IP: 2804:2140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 23:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cc:5d:48:07:7d:a6:19:51:ef:3d:03:76:26:4b:ef:24:23:6e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 9 14:49:40 2024 GMT Not After : Sep 8 14:54:40 2025 GMT Subject: CN=610FA580591423BC36D2EE3D16B968E308782571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:8e:89:b2:76:3a:e2:0f:09:73:b0:02:57: 57:ab:8b:08:92:ce:97:2c:12:5a:76:20:29:4a:09: 2f:45:67:e6:b7:a8:61:0b:5e:43:41:cc:08:4c:c6: 60:4b:08:49:34:d6:cb:d8:d7:58:1e:ac:4e:09:61: 27:dd:dc:0d:eb:26:01:e0:02:53:0f:d6:d9:6f:c1: e8:d8:3f:88:f8:9d:a2:5c:58:a8:3c:e4:ce:0e:6c: 90:0e:5f:95:91:ff:b3:6c:92:d5:97:58:97:ed:cb: 2f:66:d7:a5:84:4b:a1:5b:af:49:a1:32:0c:a4:ad: 3e:14:a7:40:bb:c9:aa:a2:18:6e:40:1e:64:f3:3b: 2b:bd:6e:37:05:e1:5a:52:30:c9:dd:93:cb:f4:bc: c8:1c:d3:ff:d2:27:5c:fe:19:b2:64:9f:11:24:09: 1c:0d:58:e6:95:84:f9:b0:9d:a7:ff:94:77:ef:78: 4f:48:5a:3e:08:e7:e2:06:dc:1f:80:a7:6a:f4:ec: c3:46:bc:25:5c:5e:fe:17:c6:7f:8c:f4:f6:39:2e: 35:75:d6:e6:91:27:a9:96:f1:8c:a1:84:d8:d4:28: bc:5d:b1:18:4f:ed:26:e0:cc:cc:96:93:64:e3:e7: 40:02:0d:d6:00:2f:9a:0e:6a:12:f3:e4:a9:22:3f: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:0F:A5:80:59:14:23:BC:36:D2:EE:3D:16:B9:68:E3:08:78:25:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/610FA580591423BC36D2EE3D16B968E308782571.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.64.0/22 138.0.100.0/22 168.227.108.0/22 168.228.68.0/22 170.82.92.0/22 177.89.0.0/16 177.137.192.0/20 179.96.192.0/21 179.96.240.0/20 179.190.128.0/17 186.192.16.0/20 186.193.96.0/20 186.208.208.0/21 186.235.0.0/20 186.236.192.0/19 186.251.112.0/21 187.49.192.0/20 187.60.64.0/19 187.61.128.0/17 187.86.96.0/20 187.87.112.0/20 187.108.64.0/20 187.109.176.0/20 187.111.224.0/19 189.45.16.0/20 189.124.128.0/17 191.241.40.0/21 200.233.80.0/20 201.148.188.0/22 IPv6: 2804:54::/32 2804:2140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28220 Signature Algorithm: sha256WithRSAEncryption 18:87:90:bf:e8:5c:85:3a:0b:ba:0f:e0:8c:89:e2:fa:34:bd: 68:e9:e9:a4:97:d0:07:cf:53:46:84:e7:d1:8f:42:a6:fc:67: ca:3d:f3:eb:dd:88:eb:b2:3e:52:27:72:46:55:5e:e6:89:2d: 69:75:fb:d3:f5:0d:a3:64:2e:80:5c:af:0d:d9:20:fd:06:ed: 7f:e7:c7:13:b3:9e:fe:fc:85:1d:9d:d5:04:bd:76:9c:3d:1a: 7f:59:ba:99:f0:48:91:73:c2:46:1d:a6:83:c0:2a:ae:50:8f: 55:44:60:0b:33:23:2b:71:df:02:3c:7f:83:8a:5f:6d:d2:0c: 60:81:93:50:b4:bb:59:98:c5:5f:de:00:8b:e7:32:a4:ed:96: 91:9b:4f:c9:a4:ee:78:c3:89:09:b3:4b:34:56:43:fc:85:44: 9d:79:b2:17:15:d8:46:4e:08:31:1a:45:11:4e:6f:60:cc:0f: 13:d1:4b:16:30:b2:e7:d4:4e:56:a9:d2:ac:b8:d0:42:48:9a: a4:5a:75:f3:12:e6:f2:a5:f8:0b:4e:53:ad:1a:8f:3f:c0:a1: ac:e5:be:d8:ce:36:d8:df:ea:4e:64:a9:55:85:84:81:11:60: d1:d2:d1:04:c5:8d:da:e2:e1:f3:51:66:15:79:c1:ba:78:7d: a2:d9:4d:8f -----BEGIN CERTIFICATE----- MIIG4jCCBcqgAwIBAgIUG8xdSAd9phlR7z0DdiZL7yQjbn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDkxNDQ5NDBaFw0yNTA5MDgxNDU0NDBaMDMxMTAvBgNV BAMTKDYxMEZBNTgwNTkxNDIzQkMzNkQyRUUzRDE2Qjk2OEUzMDg3ODI1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjo6JsnY64g8Jc7ACV1eriwiS zpcsElp2IClKCS9FZ+a3qGELXkNBzAhMxmBLCEk01svY11gerE4JYSfd3A3rJgHg AlMP1tlvwejYP4j4naJcWKg85M4ObJAOX5WR/7NsktWXWJftyy9m16WES6Fbr0mh MgykrT4Up0C7yaqiGG5AHmTzOyu9bjcF4VpSMMndk8v0vMgc0//SJ1z+GbJknxEk CRwNWOaVhPmwnaf/lHfveE9IWj4I5+IG3B+Ap2r07MNGvCVcXv4Xxn+M9PY5LjV1 1uaRJ6mW8YyhhNjUKLxdsRhP7SbgzMyWk2Tj50ACDdYAL5oOahLz5KkiP+qVAgMB AAGjggPsMIID6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhD6WAWRQjvDbS 7j0WuWjjCHglcTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRH QVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk R0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAvNjEw RkE1ODA1OTE0MjNCQzM2RDJFRTNEMTZCOTY4RTMwODc4MjU3MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHgBggrBgEFBQcB BwEB/wSB0DCBzTCBtAQCAAEwga0DBAItBEADBAKKAGQDBAKo42wDBAKo5EQDBAKq UlwDAwCxWQMEBLGJwAMEA7NgwAMEBLNg8AMEB7O+gAMEBLrAEAMEBLrBYAMEA7rQ 0AMEBLrrAAMEBbrswAMEA7r7cAMEBLsxwAMEBbs8QAMEB7s9gAMEBLtWYAMEBLtX cAMEBLtsQAMEBLttsAMEBbtv4AMEBL0tEAMEB718gAMEA7/xKAMEBMjpUAMEAsmU vDAUBAIAAjAOAwUAKAQAVAMFACgEIUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC bjwwDQYJKoZIhvcNAQELBQADggEBABiHkL/oXIU6C7oP4IyJ4vo0vWjp6aSX0AfP U0aE59GPQqb8Z8o98+vdiOuyPlInckZVXuaJLWl1+9P1DaNkLoBcrw3ZIP0G7X/n xxOznv78hR2d1QS9dpw9Gn9ZupnwSJFzwkYdpoPAKq5Qj1VEYAszIytx3wI8f4OK X23SDGCBk1C0u1mYxV/eAIvnMqTtlpGbT8mk7njDiQmzSzRWQ/yFRJ15shcV2EZO CDEaRRFOb2DMDxPRSxYwsufUTlap0qy40EJImqRadfMS5vKl+AtOU60ajz/Aoazl vtjONtjf6k5kqVWFhIERYNHS0QTFjdri4fNRZhV5wbp4faLZTY8= -----END CERTIFICATE-----Generated at Sat Sep 28 23:02:35 2024 by rpki-client on console-fra.rpki-client.org