$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer File: 69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer (raw, json) Hash identifier: WtOyBFg7NJsV62hF4TzHFQiBXSsGm2+8aWCFR6tirNI= Subject key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55D534FE4B4430DF54E55E8B935B6FD837A4AF76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft caRepository: rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 24 Sep 2024 19:41:42 +0000 Certificate not after: Tue 23 Sep 2025 19:46:42 +0000 Subordinate resources: AS: 264485 IP: 131.255.144.0/22 IP: 189.91.144.0/20 IP: 2804:2050::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d5:34:fe:4b:44:30:df:54:e5:5e:8b:93:5b:6f:d8:37:a4:af:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 24 19:41:42 2024 GMT Not After : Sep 23 19:46:42 2025 GMT Subject: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:2f:1b:e5:f5:ce:fd:7c:db:90:6e:81:22: b7:70:f9:e3:04:5e:0e:38:8d:e0:d7:dd:2d:fc:d6: d3:f6:03:f6:40:e6:b1:43:96:86:49:0f:5d:01:18: 1a:9f:8c:04:cd:fb:21:de:66:0c:7f:ac:27:02:6d: ed:90:2b:6c:71:bc:c4:e0:b3:e8:c0:2a:d5:74:28: 27:71:3f:3f:b6:2f:be:1d:17:73:88:cd:21:4a:e0: 06:22:0e:01:c1:4c:e4:07:75:f3:3f:1f:b0:8e:59: ef:d6:2b:77:db:05:00:8a:f1:a8:15:ed:18:c2:96: 80:d5:ae:41:9f:eb:e3:8d:2a:c2:5d:27:a4:50:53: 74:c1:c7:a0:12:29:b1:a9:2d:5a:f1:22:f8:90:69: 01:cd:04:90:24:e7:5a:0d:62:1f:60:aa:4c:ec:3f: 77:c5:c6:77:40:18:b6:e3:79:86:6d:79:ec:4d:b9: 36:e3:1c:1b:23:cf:6b:09:92:aa:c3:c6:f6:41:d0: 1b:1c:3a:72:1d:95:c6:0a:e8:80:65:75:17:52:a2: cf:aa:39:0b:b6:f6:75:a5:40:0a:7e:db:e9:37:94: 96:d7:6b:8b:42:1e:7e:eb:ed:d2:95:e3:6f:0a:80: 88:9c:62:04:80:39:90:4d:9d:47:fc:03:e3:bc:65: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.144.0/22 189.91.144.0/20 IPv6: 2804:2050::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264485 Signature Algorithm: sha256WithRSAEncryption 18:2a:36:b6:34:d0:4b:34:7d:3d:16:58:86:f5:77:da:96:cd: 5e:03:6d:ef:7f:ad:b4:fa:69:fc:ee:35:fd:2b:8a:cf:cf:1a: 26:34:0d:17:e0:7f:62:a6:9c:4f:c0:4d:12:e4:98:c4:e1:14: f0:46:f2:f9:34:f8:a9:7e:6e:ff:bc:be:b2:52:8f:72:63:24: 8c:68:71:32:82:d5:c5:63:68:4b:e3:c3:8a:bb:c2:a4:53:44: 61:39:45:68:be:e9:f4:73:f2:a1:78:e4:15:c2:10:71:cb:4c: 7f:e0:4a:af:44:5e:88:ec:58:f6:5d:0b:ca:1e:53:63:a8:a9: b6:89:80:28:cf:0f:0c:c8:83:f1:b1:66:17:3f:f6:7d:41:44: 83:97:58:db:88:2f:a8:21:8c:97:58:24:36:b2:48:ed:13:38: 3f:0d:83:76:c1:7e:49:fa:93:65:55:5f:95:4c:1a:f5:34:d5: 30:3a:09:ca:23:8d:08:2b:ee:1a:37:7a:e0:0c:0d:dd:a5:76: 3b:ec:f1:c6:0c:5f:b7:e9:63:06:bc:a0:4a:5f:1d:a9:e5:3d: 09:ea:bc:bf:6f:23:40:46:85:9c:21:ce:e1:71:1f:f5:39:a8: f1:17:7a:b4:43:a8:aa:8d:07:d7:bb:d8:27:23:f8:87:03:93: fc:f7:5c:a5 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUVdU0/ktEMN9U5V6Lk1tv2Dekr3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjQxOTQxNDJaFw0yNTA5MjMxOTQ2NDJaMDMxMTAvBgNV BAMTKDY5RkVBMUY4RUY0N0NCQzk3RjZEQjc4OTBBOEU5NERGMkU3OTc2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEi8b5fXO/XzbkG6BIrdw+eME Xg44jeDX3S381tP2A/ZA5rFDloZJD10BGBqfjATN+yHeZgx/rCcCbe2QK2xxvMTg s+jAKtV0KCdxPz+2L74dF3OIzSFK4AYiDgHBTOQHdfM/H7COWe/WK3fbBQCK8agV 7RjCloDVrkGf6+ONKsJdJ6RQU3TBx6ASKbGpLVrxIviQaQHNBJAk51oNYh9gqkzs P3fFxndAGLbjeYZteexNuTbjHBsjz2sJkqrDxvZB0BscOnIdlcYK6IBldRdSos+q OQu29nWlQAp+2+k3lJbXa4tCHn7r7dKV428KgIicYgSAOZBNnUf8A+O8ZbvRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRp/qH470fLyX9t t4kKjpTfLnl2kzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG5q QmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZFSjYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Ru akJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAvNjlG RUExRjhFRjQ3Q0JDOTdGNkRCNzg5MEE4RTk0REYyRTc5NzY5My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg/+QAwQEvVuQMA0EAgACMAcDBQAoBCBQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQJJTANBgkqhkiG9w0BAQsFAAOCAQEAGCo2tjTQ SzR9PRZYhvV32pbNXgNt73+ttPpp/O41/SuKz88aJjQNF+B/YqacT8BNEuSYxOEU 8Eby+TT4qX5u/7y+slKPcmMkjGhxMoLVxWNoS+PDirvCpFNEYTlFaL7p9HPyoXjk FcIQcctMf+BKr0ReiOxY9l0Lyh5TY6iptomAKM8PDMiD8bFmFz/2fUFEg5dY24gv qCGMl1gkNrJI7RM4Pw2DdsF+SfqTZVVflUwa9TTVMDoJyiONCCvuGjd64AwN3aV2 O+zxxgxft+ljBrygSl8dqeU9Ceq8v28jQEaFnCHO4XEf9Tmo8Rd6tEOoqo0H17vY JyP4hwOT/PdcpQ== -----END CERTIFICATE-----Generated at Fri Nov 22 21:03:06 2024 by rpki-client on console-fra.rpki-client.org