$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/640539F45452C2299C340AFF511D40CB7EEAA212.cer File: 640539F45452C2299C340AFF511D40CB7EEAA212.cer (raw, json) Hash identifier: BUm0H8MsfXnxwCNslZCpuwf+HXKHmYClPE3X4WUi0I0= Subject key identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 778C72D4F7A7E39D74FFF2C05BD032839DCFB1DD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft caRepository: rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 16 Aug 2024 19:11:00 +0000 Certificate not after: Fri 15 Aug 2025 19:16:00 +0000 Subordinate resources: AS: 28187 IP: 138.185.168.0/22 IP: 187.60.128.0/20 IP: 189.89.208.0/20 IP: 2804:200::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 07:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8c:72:d4:f7:a7:e3:9d:74:ff:f2:c0:5b:d0:32:83:9d:cf:b1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 16 19:11:00 2024 GMT Not After : Aug 15 19:16:00 2025 GMT Subject: CN=640539F45452C2299C340AFF511D40CB7EEAA212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:6d:a6:e1:09:c9:92:e6:50:7e:04:05:e9: a4:c1:9f:37:4e:1d:67:e9:18:17:2b:dc:2d:82:93: 55:d0:d4:4c:81:45:93:1b:82:dd:7d:71:6e:91:17: 18:b3:b1:21:bd:5d:07:29:5e:63:8c:af:76:92:f0: 34:9a:02:83:37:48:34:9f:27:4d:d1:56:d4:09:7f: 9b:be:92:d1:a5:65:ad:61:f5:63:46:96:d5:8f:d7: 9e:be:87:45:d5:d0:08:2b:00:36:3f:4f:f8:39:7a: 69:a9:97:ca:c4:08:23:c1:85:bb:03:49:23:4f:ad: f0:50:73:75:54:9f:54:24:73:15:ef:dd:56:2c:77: fa:47:77:17:07:ad:ee:67:d3:8b:f8:04:50:7b:1c: f2:66:b0:14:31:9e:56:23:7b:f0:72:c6:9c:b1:ca: 15:95:e7:4f:fe:bf:6c:ba:b2:98:16:e1:a3:5d:eb: 14:0f:cb:26:7c:e7:7c:a2:f0:e7:ed:4a:fb:00:bd: a8:a2:00:67:bc:de:d9:bb:c9:44:49:28:07:a5:61: ae:31:c2:06:7a:6d:e6:d9:ad:17:b1:16:bc:47:d4: 19:8a:04:e7:f1:3c:b6:a0:05:2d:70:d6:af:a3:42: de:50:10:24:25:c7:87:66:23:4a:0d:69:8d:43:bc: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:05:39:F4:54:52:C2:29:9C:34:0A:FF:51:1D:40:CB:7E:EA:A2:12 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/0/640539F45452C2299C340AFF511D40CB7EEAA212.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.168.0/22 187.60.128.0/20 189.89.208.0/20 IPv6: 2804:200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28187 Signature Algorithm: sha256WithRSAEncryption 91:a0:6e:2f:a7:6b:91:a8:57:60:0b:58:de:79:eb:9b:39:44: 95:f9:3b:e5:fd:8e:46:bf:fb:20:cc:e4:70:a1:ef:07:25:af: 7d:01:ff:14:ee:cd:c9:22:42:04:64:31:2e:19:09:eb:dd:c4: 67:f5:79:57:c5:d5:49:56:e1:0d:1b:de:9c:24:6d:88:4c:b3: 53:58:a7:27:9c:09:50:04:3b:dd:d6:4f:b4:f7:f3:bf:0c:5b: 5e:31:45:66:85:3a:54:12:8e:c0:38:77:e9:39:38:0d:62:ee: be:15:ee:5e:e9:03:4f:a0:cd:2f:d9:7f:b1:41:43:aa:c4:38: 16:7e:c1:06:6b:2a:7b:37:94:84:29:f5:09:f3:3f:7d:2a:65: 08:cf:c8:2e:da:cf:6d:ef:3f:c5:4d:13:79:8a:df:af:52:4b: 16:49:fa:41:2d:8c:f8:34:cc:9d:e6:db:31:a5:23:15:de:65: d5:a5:24:4e:65:7b:b1:75:3d:75:ba:9e:e8:94:cf:75:74:7c: 74:bc:ac:7c:c9:07:c6:4e:3d:9c:0b:c4:24:17:dc:97:e5:9f: f9:ee:7d:8d:da:b2:28:b9:76:43:c2:14:66:33:3d:f6:ea:1e: 85:f1:8e:c2:71:ef:ea:31:04:7f:e7:b1:b4:fe:23:94:5f:49: 06:c9:a4:01 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUd4xy1Pen4510//LAW9Ayg53Psd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MTYxOTExMDBaFw0yNTA4MTUxOTE2MDBaMDMxMTAvBgNV BAMTKDY0MDUzOUY0NTQ1MkMyMjk5QzM0MEFGRjUxMUQ0MENCN0VFQUEyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJG2m4QnJkuZQfgQF6aTBnzdO HWfpGBcr3C2Ck1XQ1EyBRZMbgt19cW6RFxizsSG9XQcpXmOMr3aS8DSaAoM3SDSf J03RVtQJf5u+ktGlZa1h9WNGltWP156+h0XV0AgrADY/T/g5emmpl8rECCPBhbsD SSNPrfBQc3VUn1QkcxXv3VYsd/pHdxcHre5n04v4BFB7HPJmsBQxnlYje/Byxpyx yhWV50/+v2y6spgW4aNd6xQPyyZ853yi8OftSvsAvaiiAGe83tm7yURJKAelYa4x wgZ6bebZrRexFrxH1BmKBOfxPLagBS1w1q+jQt5QECQlx4dmI0oNaY1DvISbAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkBTn0VFLCKZw0 Cv9RHUDLfuqiEjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRENO dmVqMWE4cjJSUTNrWjVwV1dDc29iMlJuNE1xWXVCSEtkN0FQOThiRDYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RD TnZlajFhOHIyUlEza1o1cFdXQ3NvYjJSbjRNcVl1QkhLZDdBUDk4YkQ2LzAvNjQw NTM5RjQ1NDUyQzIyOTlDMzQwQUZGNTExRDQwQ0I3RUVBQTIxMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH AQH/BCswKTAYBAIAATASAwQCirmoAwQEuzyAAwQEvVnQMA0EAgACMAcDBQAoBAIA MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm4bMA0GCSqGSIb3DQEBCwUAA4IBAQCR oG4vp2uRqFdgC1jeeeubOUSV+Tvl/Y5Gv/sgzORwoe8HJa99Af8U7s3JIkIEZDEu GQnr3cRn9XlXxdVJVuENG96cJG2ITLNTWKcnnAlQBDvd1k+09/O/DFteMUVmhTpU Eo7AOHfpOTgNYu6+Fe5e6QNPoM0v2X+xQUOqxDgWfsEGayp7N5SEKfUJ8z99KmUI z8gu2s9t7z/FTRN5it+vUksWSfpBLYz4NMyd5tsxpSMV3mXVpSROZXuxdT11up7o lM91dHx0vKx8yQfGTj2cC8QkF9yX5Z/57n2N2rIouXZDwhRmMz326h6F8Y7Cce/q MQR/57G0/iOUX0kGyaQB -----END CERTIFICATE-----Generated at Tue Nov 26 07:02:09 2024 by rpki-client on console-ams.rpki-client.org