$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer (raw, json) Hash identifier: Rh4vlc2leMBQS4hpFBmTXOPuwSm1BUmsheuI/glc9fc= Subject key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 29F4609544A4DE3168551D713C124E210BC2EADC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft caRepository: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 Nov 2024 18:24:20 +0000 Certificate not after: Tue 11 Nov 2025 18:29:20 +0000 Subordinate resources: AS: 265958 IP: 164.163.32.0/22 IP: 2804:406c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f4:60:95:44:a4:de:31:68:55:1d:71:3c:12:4e:21:0b:c2:ea:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 12 18:24:20 2024 GMT Not After : Nov 11 18:29:20 2025 GMT Subject: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:69:cf:7c:7d:cf:24:74:9c:b5:83:9c:0d: 89:7a:dc:e2:89:47:83:02:5f:dd:48:10:e8:8f:01: da:d7:d7:54:fe:ad:0b:57:3a:b0:fa:4d:b5:a2:64: b1:3d:fe:0c:e3:27:e5:d1:9e:f9:44:78:36:2c:2e: e4:dc:83:62:6d:52:6a:df:8b:2d:fc:7a:67:ba:21: 94:c4:1f:9d:e6:65:94:80:81:c6:23:0d:50:3f:08: 9d:54:c4:c3:1a:af:c9:c1:4e:06:07:30:b1:48:43: 9f:ce:65:13:5a:eb:58:f6:2b:3b:42:f3:70:9d:92: 50:4c:c5:26:0b:0a:fa:ae:5e:92:b5:db:58:7f:9a: 27:bf:7f:b4:61:d3:61:91:cf:57:66:8b:35:d0:f7: a3:93:c2:d5:f7:13:e9:06:fa:62:07:a6:5a:5b:15: 61:04:05:c9:76:57:37:32:19:e3:10:e1:89:89:55: 71:a5:f4:ea:1c:aa:7c:21:a5:21:ca:00:d9:83:83: 94:84:44:d2:da:34:5e:74:d4:5e:c3:01:0b:3b:27: bf:8e:eb:99:e2:bf:ae:06:82:64:fe:6c:8a:4e:6c: fe:9f:e2:e8:f9:54:57:a5:87:8a:4c:1b:8b:87:e6: 97:65:1f:86:a0:50:fb:06:4f:9c:ac:8f:57:89:c1: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.32.0/22 IPv6: 2804:406c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265958 Signature Algorithm: sha256WithRSAEncryption 84:c4:d1:6d:7b:11:48:ff:dc:de:e8:1c:08:84:57:05:20:46: 8b:13:a4:95:3f:74:6a:21:7e:cb:14:ad:02:92:12:a6:01:36: 29:c1:f1:e5:02:59:b7:89:8d:2e:7e:46:56:96:98:04:f3:c4: e4:b2:a6:f6:72:63:2c:55:62:91:e5:a1:67:61:d6:1a:a9:81: d3:29:83:26:90:7c:50:43:0c:d7:11:fe:6e:61:64:4e:e9:f4: 32:6b:8d:65:86:72:40:33:d3:dd:d0:17:4a:d0:4f:77:5e:3c: c8:c6:7b:ec:bd:2c:2d:18:32:a0:87:a1:cc:97:32:c4:f9:dc: 44:ad:29:95:67:ec:fd:e2:92:01:d2:04:58:8d:39:c6:11:e6: 53:c5:ec:87:ee:50:52:0d:6a:4d:2d:f9:8c:65:7a:c0:44:a8: d8:7d:5c:02:3d:ff:55:02:31:83:4d:01:55:a9:5b:96:0d:f7: 9e:69:89:2c:2d:4f:6a:70:ea:18:fe:b0:8b:77:70:f4:dd:97: fb:c3:e5:73:12:92:0f:e3:2c:7d:37:71:14:70:d0:00:75:fd: 29:52:51:88:d6:62:56:ae:5d:c2:01:79:b1:af:9a:ad:8e:46: 7d:1d:b4:f4:d2:80:49:16:31:46:6c:d0:4d:3a:6f:ed:ff:0b: 6c:3a:80:06 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUKfRglUSk3jFoVR1xPBJOIQvC6twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTIxODI0MjBaFw0yNTExMTExODI5MjBaMDMxMTAvBgNV BAMTKDY0M0ZCNEU4RUZCMjlGNzNCMDE3N0EwRDFBRDVDNjM2NEY0NEIyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLGnPfH3PJHSctYOcDYl63OKJ R4MCX91IEOiPAdrX11T+rQtXOrD6TbWiZLE9/gzjJ+XRnvlEeDYsLuTcg2JtUmrf iy38eme6IZTEH53mZZSAgcYjDVA/CJ1UxMMar8nBTgYHMLFIQ5/OZRNa61j2KztC 83CdklBMxSYLCvquXpK121h/mie/f7Rh02GRz1dmizXQ96OTwtX3E+kG+mIHplpb FWEEBcl2VzcyGeMQ4YmJVXGl9OocqnwhpSHKANmDg5SERNLaNF501F7DAQs7J7+O 65niv64GgmT+bIpObP6f4uj5VFelh4pMG4uH5pdlH4agUPsGT5ysj1eJwXU7AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkP7To77Kfc7AX eg0a1cY2T0SyrDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR21v VG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0NjdDcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dt b1RuVVFVekhyQU14eDNLbUNRQWhGWnFvVkpLZThZRktURVJ5MVNDY3Q3LzAvNjQz RkI0RThFRkIyOUY3M0IwMTc3QTBEMUFENUM2MzY0RjQ0QjJBQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCpKMgMA0EAgACMAcDBQAoBEBsMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO5jANBgkqhkiG9w0BAQsFAAOCAQEAhMTRbXsRSP/c3ugc CIRXBSBGixOklT90aiF+yxStApISpgE2KcHx5QJZt4mNLn5GVpaYBPPE5LKm9nJj LFVikeWhZ2HWGqmB0ymDJpB8UEMM1xH+bmFkTun0MmuNZYZyQDPT3dAXStBPd148 yMZ77L0sLRgyoIehzJcyxPncRK0plWfs/eKSAdIEWI05xhHmU8Xsh+5QUg1qTS35 jGV6wESo2H1cAj3/VQIxg00BValblg33nmmJLC1PanDqGP6wi3dw9N2X+8PlcxKS D+MsfTdxFHDQAHX9KVJRiNZiVq5dwgF5sa+arY5GfR209NKASRYxRmzQTTpv7f8L bDqABg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:31 2024 by rpki-client on console-fra.rpki-client.org