$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer File: 704F7944732F98AD0D651DC0C5B89C092F753A92.cer (raw, json) Hash identifier: ElWrQV3N+ONd1Q1GSMJyG+mF0RAt97JoB+V8NXoRdd0= Subject key identifier: 70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7F69809CE564156890397F292A75EB427D33E866 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft caRepository: rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:33:47 +0000 Certificate not after: Wed 02 Apr 2025 18:38:47 +0000 Subordinate resources: AS: 266985 IP: 45.226.52.0/22 IP: 2804:465c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:69:80:9c:e5:64:15:68:90:39:7f:29:2a:75:eb:42:7d:33:e8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:33:47 2024 GMT Not After : Apr 2 18:38:47 2025 GMT Subject: CN=704F7944732F98AD0D651DC0C5B89C092F753A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:da:0b:34:98:9c:13:bd:53:76:0f:e8:74: 1a:ca:8e:9a:07:81:f2:dc:5f:6c:84:50:d0:a6:de: 00:a0:28:00:8c:db:f4:1a:61:5d:48:00:e0:ef:ca: 40:4b:60:f3:72:fe:05:b9:e6:3e:8c:a8:fc:e4:80: d5:56:f2:23:e1:37:10:f2:6b:06:36:ba:37:82:a5: 26:a2:a3:9f:1a:5a:a5:d2:74:f4:1a:d7:eb:cf:b4: 5a:5c:af:10:f4:93:eb:ef:70:06:fc:d9:91:4a:04: 55:83:9a:a6:fb:c9:e7:8f:cf:cc:ca:b1:3f:1a:cb: 4d:dd:7e:4f:7e:07:f1:36:1f:51:4b:60:65:85:f4: da:58:64:ef:97:23:20:31:51:f2:50:e7:be:ac:52: a9:57:5a:12:fa:f4:03:39:38:fb:9f:67:57:c2:c5: 91:b7:45:ce:da:57:7b:c7:f6:63:72:14:b5:69:1a: 65:90:17:de:86:28:54:b9:f7:f8:77:e6:93:2e:89: 71:ac:3d:79:75:9d:20:e1:02:eb:5d:b1:1d:14:5c: 96:4e:0e:a5:3c:30:a6:ad:a3:ca:92:33:cb:96:7c: 8e:9a:76:10:b1:f7:50:44:f1:57:85:e5:18:73:a2: f1:f3:73:2f:63:fc:2d:75:6f:01:66:f6:ae:ee:9f: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.52.0/22 IPv6: 2804:465c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266985 Signature Algorithm: sha256WithRSAEncryption a7:5d:df:2b:1a:a7:c1:98:cb:33:d4:ef:8f:17:b2:b4:71:c7: 7c:3a:ba:68:25:04:3b:62:81:be:b1:bb:d0:aa:2a:cb:80:57: c6:61:ab:8c:ef:2b:38:26:f0:8e:f8:be:51:ce:4e:2a:f5:04: e7:ea:54:d0:9a:ea:a2:2d:74:60:a6:94:7f:26:df:b8:c4:cc: 18:bc:76:f9:22:a1:2b:dd:20:84:a9:a7:97:9b:9c:05:d3:e9: 78:5e:45:98:ac:d1:80:80:c5:14:1d:4f:43:a5:8f:f2:ea:2e: 48:34:55:87:31:11:d0:9e:2d:4f:fa:ae:27:95:58:18:e7:77: 07:d3:c0:68:cc:ef:46:be:c6:5a:64:73:75:50:4c:e1:14:e4: 36:c6:55:d2:32:0d:2e:fc:5c:94:0a:6b:f3:ff:c3:9c:e9:b2: db:77:23:72:b2:3b:9f:5a:dd:76:29:b5:10:d0:8f:ce:9d:82: 3e:b1:e2:0f:2a:21:92:f4:14:6d:45:db:9d:ce:55:98:c1:47: 64:fb:5d:dd:f4:44:c1:15:82:58:68:26:0e:6b:99:39:c0:eb: 61:e3:b4:20:b5:82:5a:cc:8f:e5:bc:9a:79:db:06:8d:95:29: 37:40:f5:3e:0a:96:15:97:8b:5a:2a:95:31:e6:c0:8b:44:c2: 9e:ae:9c:8c -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUf2mAnOVkFWiQOX8pKnXrQn0z6GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODMzNDdaFw0yNTA0MDIxODM4NDdaMDMxMTAvBgNV BAMTKDcwNEY3OTQ0NzMyRjk4QUQwRDY1MURDMEM1Qjg5QzA5MkY3NTNBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXdoLNJicE71Tdg/odBrKjpoH gfLcX2yEUNCm3gCgKACM2/QaYV1IAODvykBLYPNy/gW55j6MqPzkgNVW8iPhNxDy awY2ujeCpSaio58aWqXSdPQa1+vPtFpcrxD0k+vvcAb82ZFKBFWDmqb7yeePz8zK sT8ay03dfk9+B/E2H1FLYGWF9NpYZO+XIyAxUfJQ576sUqlXWhL69AM5OPufZ1fC xZG3Rc7aV3vH9mNyFLVpGmWQF96GKFS59/h35pMuiXGsPXl1nSDhAutdsR0UXJZO DqU8MKato8qSM8uWfI6adhCx91BE8VeF5RhzovHzcy9j/C11bwFm9q7un1nvAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwT3lEcy+YrQ1l HcDFuJwJL3U6kjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFlR ZU41a1hTSjZpcXNWUTRZUUNtc0plODE4MVV6WXdDSnNoVHRuZUNwc1IvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFlR ZU41a1hTSjZpcXNWUTRZUUNtc0plODE4MVV6WXdDSnNoVHRuZUNwc1IvMi83MDRG Nzk0NDczMkY5OEFEMEQ2NTFEQzBDNUI4OUMwOTJGNzUzQTkyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt4jQwDQQCAAIwBwMFACgERlwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBLpMA0GCSqGSIb3DQEBCwUAA4IBAQCnXd8rGqfBmMsz1O+P F7K0ccd8OrpoJQQ7YoG+sbvQqirLgFfGYauM7ys4JvCO+L5Rzk4q9QTn6lTQmuqi LXRgppR/Jt+4xMwYvHb5IqEr3SCEqaeXm5wF0+l4XkWYrNGAgMUUHU9DpY/y6i5I NFWHMRHQni1P+q4nlVgY53cH08BozO9GvsZaZHN1UEzhFOQ2xlXSMg0u/FyUCmvz /8Oc6bLbdyNysjufWt12KbUQ0I/OnYI+seIPKiGS9BRtRdudzlWYwUdk+13d9ETB FYJYaCYOa5k5wOth47QgtYJazI/lvJp52waNlSk3QPU+CpYVl4taKpUx5sCLRMKe rpyM -----END CERTIFICATE-----Generated at Sat Nov 23 05:01:38 2024 by rpki-client on console-fra.rpki-client.org