$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer (raw, json) Hash identifier: D8tqLJ+Og4uB+QIWjyvQb8RSoURQr2yGeMQlny8f9RA= Subject key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C52EED448A23FDF895A2311BBE9D2B563280570 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft caRepository: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 15 May 2024 19:04:33 +0000 Certificate not after: Wed 14 May 2025 19:09:33 +0000 Subordinate resources: AS: 265264 IP: 168.90.48.0/22 IP: 187.95.128.0/22 IP: 2804:2d28::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:52:ee:d4:48:a2:3f:df:89:5a:23:11:bb:e9:d2:b5:63:28:05:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 15 19:04:33 2024 GMT Not After : May 14 19:09:33 2025 GMT Subject: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:7e:23:96:44:9f:04:38:6b:77:94:b0:11: 58:0a:0b:77:75:3b:52:50:3f:04:c9:da:07:7c:4e: 94:f8:60:fa:c8:81:9e:e4:eb:7e:fe:40:01:05:35: 5a:76:5f:9b:1f:22:83:fb:81:14:ac:6d:e6:66:c5: 73:f9:31:d6:9e:b6:de:29:f1:9c:37:35:cf:ec:20: a8:ce:d9:fd:bd:4b:c5:df:f8:ae:05:ba:55:ef:c1: 3e:4b:35:3b:8b:c4:b8:54:74:78:3a:8d:e9:65:3f: 35:7e:90:f9:55:f4:8c:c2:0b:dc:33:4d:63:5f:2c: 56:0c:e8:77:15:27:98:ad:44:6a:cc:6b:50:17:02: 3c:c5:a7:b0:56:ae:40:70:2c:08:cd:2d:26:87:ea: ca:8e:80:5c:2f:63:62:6a:3c:6a:23:2d:ef:ad:99: 29:94:0a:ed:c8:76:d3:9e:b7:5e:39:71:a3:5f:6f: 62:9a:3c:fa:a5:f9:d6:50:62:0c:12:f1:1a:c2:4d: f9:41:b3:a9:a6:91:bd:b4:d1:f2:8c:3f:44:2c:1d: 69:c6:d1:b9:24:29:7a:78:10:73:9b:c9:a7:82:d4: 51:03:6f:5c:8b:59:8c:58:aa:b2:62:50:1a:17:12: d0:3d:9b:e4:0a:03:97:8c:c8:8a:8f:c9:94:b7:b2: 51:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.48.0/22 187.95.128.0/22 IPv6: 2804:2d28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265264 Signature Algorithm: sha256WithRSAEncryption d9:ae:57:c5:c2:c3:0c:dc:23:7f:46:c6:a6:c7:c0:7a:5c:54: 26:34:1b:9f:4f:27:b7:64:eb:bc:7a:1a:3b:e0:5e:9b:b8:c2: 74:35:fa:89:91:f8:09:52:90:9a:91:a4:89:2e:1d:21:76:eb: a8:27:19:98:cd:3b:5b:07:5a:50:fa:bf:bc:c6:ad:71:c0:c1: 9c:fa:85:84:f9:c9:87:84:ae:25:f3:86:92:7a:0b:ee:c3:29: fe:31:c9:2f:62:e9:64:00:fc:80:0d:7d:09:84:5c:4c:99:34: 47:4d:bc:1a:3c:cf:d0:9b:31:63:30:a8:09:79:73:6c:96:bf: db:c8:58:0c:24:df:89:ea:64:ab:ec:eb:fc:ca:e7:65:47:26: 1f:d7:45:08:bc:e9:92:e3:c3:88:9d:fe:fc:1a:e6:6f:dc:00: 6f:a2:58:cb:b2:10:a3:14:13:4e:04:56:2b:7b:6c:fb:03:b3: f1:84:ff:25:c6:dc:b7:6a:5b:20:92:f2:eb:6e:77:9e:09:ad: fd:47:85:e8:85:37:0a:c2:8a:0f:c5:6d:a9:cb:3f:55:68:71: 5b:1a:9b:9c:91:fd:1e:0b:71:0e:c4:28:ad:9c:0e:7b:ec:59: 0d:3b:54:4e:52:41:11:0d:0a:e4:5f:88:56:bf:94:54:73:7d: d5:25:39:cf -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPFLu1EiiP9+JWiMRu+nStWMoBXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MTUxOTA0MzNaFw0yNTA1MTQxOTA5MzNaMDMxMTAvBgNV BAMTKDY1MzgzN0Q3RUNBMUZFMTE0NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu734jlkSfBDhrd5SwEVgKC3d1 O1JQPwTJ2gd8TpT4YPrIgZ7k637+QAEFNVp2X5sfIoP7gRSsbeZmxXP5Mdaett4p 8Zw3Nc/sIKjO2f29S8Xf+K4FulXvwT5LNTuLxLhUdHg6jellPzV+kPlV9IzCC9wz TWNfLFYM6HcVJ5itRGrMa1AXAjzFp7BWrkBwLAjNLSaH6sqOgFwvY2JqPGojLe+t mSmUCu3IdtOet145caNfb2KaPPql+dZQYgwS8RrCTflBs6mmkb200fKMP0QsHWnG 0bkkKXp4EHObyaeC1FEDb1yLWYxYqrJiUBoXEtA9m+QKA5eMyIqPyZS3slHpAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlODfX7KH+EUXQ zhXgv4le4Gon4jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUxw ZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVM cGVKRzlmZlQ1Q25oRGJobjdBZHV5dUxiRUE5QWhXVzV3aVBvSGFGZVBTLzAvNjUz ODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVFMDZBMjdFMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqFowAwQCu1+AMA0EAgACMAcDBQAoBC0oMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQMMDANBgkqhkiG9w0BAQsFAAOCAQEA2a5XxcLD DNwjf0bGpsfAelxUJjQbn08nt2TrvHoaO+Bem7jCdDX6iZH4CVKQmpGkiS4dIXbr qCcZmM07WwdaUPq/vMatccDBnPqFhPnJh4SuJfOGknoL7sMp/jHJL2LpZAD8gA19 CYRcTJk0R028GjzP0JsxYzCoCXlzbJa/28hYDCTfiepkq+zr/MrnZUcmH9dFCLzp kuPDiJ3+/Brmb9wAb6JYy7IQoxQTTgRWK3ts+wOz8YT/Jcbct2pbIJLy6253ngmt /UeF6IU3CsKKD8Vtqcs/VWhxWxqbnJH9HgtxDsQorZwOe+xZDTtUTlJBEQ0K5F+I Vr+UVHN91SU5zw== -----END CERTIFICATE-----Generated at Sat Nov 23 07:44:02 2024 by rpki-client on console-ams.rpki-client.org