$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer File: 78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer (raw, json) Hash identifier: bGzss7lsPCRY2U57CZyLREk4fW+z+42cuhH5AAGkYao= Subject key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 43A2CD23AFFDFC8C39D555CD2CB820437B125D87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft caRepository: rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 May 2024 12:56:45 +0000 Certificate not after: Mon 19 May 2025 13:01:45 +0000 Subordinate resources: AS: 266986 IP: 45.226.40.0/22 IP: 200.229.92.0/22 IP: 2804:4660::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 21:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a2:cd:23:af:fd:fc:8c:39:d5:55:cd:2c:b8:20:43:7b:12:5d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 20 12:56:45 2024 GMT Not After : May 19 13:01:45 2025 GMT Subject: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:f2:1c:f3:43:b9:39:d2:e0:31:ce:d5:b1: 19:d6:fb:62:f5:a1:8b:50:89:9c:c0:69:5d:59:16: 1b:96:c2:26:91:68:08:d2:c8:b5:b1:5e:5e:af:9b: 9c:9e:8a:99:82:6b:30:7a:04:d7:6e:f8:38:2e:5d: e6:66:1e:7d:8b:a8:c6:b1:cc:94:48:e3:9a:04:87: 49:fe:94:6a:f3:8e:8f:7e:65:af:6b:a4:0d:52:01: ef:da:75:ea:ad:ce:87:d8:0f:5e:8b:37:75:bb:41: a3:50:f3:d2:ed:8f:74:bd:21:0c:1c:11:fc:09:01: 78:71:15:c3:ac:0a:5b:dd:75:34:21:40:d8:c0:5e: d9:79:2d:85:31:25:f2:af:e0:c5:48:e5:4b:93:26: f0:3f:0f:8f:70:7b:b8:dd:c9:63:86:fb:97:91:67: d3:d1:47:6e:a2:47:a8:7b:06:9c:16:08:89:35:5b: f0:af:37:2d:dd:8e:1e:c7:bc:4b:56:9c:8f:4a:3f: b5:7d:0d:93:1f:f2:a6:a9:a4:dc:30:1d:f9:dc:69: d0:70:b5:e8:6b:0b:5a:8a:8e:9d:1a:c5:e8:5c:56: 59:d4:a1:2b:61:26:3c:19:d8:53:1a:b4:53:06:c8: aa:32:3c:99:0e:e2:d4:ec:af:c2:42:13:b9:03:dc: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.226.40.0/22 200.229.92.0/22 IPv6: 2804:4660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266986 Signature Algorithm: sha256WithRSAEncryption 27:6b:a9:c0:2c:cd:74:bc:87:4a:d8:d9:fc:66:52:c4:cc:e9: b5:b8:73:7d:7d:28:61:7c:bb:6c:b6:a1:97:5c:2d:bc:74:1c: 50:ee:5d:5f:d4:9a:2e:b0:bc:83:fa:bd:e3:5e:97:6c:b2:2b: 21:01:b8:e2:aa:d4:ee:96:8b:b4:64:96:6c:23:f1:a0:64:0e: fe:b2:1f:a5:7f:44:fd:ab:cd:dc:db:2f:87:3d:87:f8:c4:15: aa:67:45:47:ef:50:b4:cb:77:57:c5:d0:7f:8e:03:40:33:0d: 82:f1:65:4c:14:65:1d:c8:1c:f7:60:fd:16:9e:5f:f8:0f:ba: a3:8a:89:bb:31:9e:b2:86:bf:0e:af:15:5e:ea:c0:c5:b1:f4: 23:f4:56:d5:14:5c:f7:10:55:de:91:cd:68:c5:f5:9f:80:ec: 88:e2:29:1a:6a:aa:57:da:63:34:a3:ca:98:00:3a:45:85:1d: ae:1f:51:a5:64:b6:87:80:45:84:55:92:bb:63:e7:4d:c2:08: b6:56:ba:bd:d2:f7:15:da:f4:74:e5:ef:d6:92:74:57:59:ed: a6:48:62:05:3e:70:79:72:3f:f4:a1:96:61:84:41:ae:d0:92: f4:c4:e7:86:70:21:0a:87:47:8f:59:08:8c:ef:ff:bb:1c:a0: 4c:68:b7:28 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUQ6LNI6/9/Iw51VXNLLggQ3sSXYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjAxMjU2NDVaFw0yNTA1MTkxMzAxNDVaMDMxMTAvBgNV BAMTKDc4QzMxRjg1Q0Y4QjZBODQxOEZBRDI1QTU1RjU5NDJGM0JBQ0RFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXfIc80O5OdLgMc7VsRnW+2L1 oYtQiZzAaV1ZFhuWwiaRaAjSyLWxXl6vm5yeipmCazB6BNdu+DguXeZmHn2LqMax zJRI45oEh0n+lGrzjo9+Za9rpA1SAe/adeqtzofYD16LN3W7QaNQ89Ltj3S9IQwc EfwJAXhxFcOsClvddTQhQNjAXtl5LYUxJfKv4MVI5UuTJvA/D49we7jdyWOG+5eR Z9PRR26iR6h7BpwWCIk1W/CvNy3djh7HvEtWnI9KP7V9DZMf8qappNwwHfncadBw tehrC1qKjp0axehcVlnUoSthJjwZ2FMatFMGyKoyPJkO4tTsr8JCE7kD3Ed1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR4wx+Fz4tqhBj6 0lpV9ZQvO6zeDTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzhl Vlh2bUdvaG9iMWtBR1RpYUpEVUQxVVpuU1BFbTFtM1VkUTJ2cERBb1UvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M4 ZVZYdm1Hb2hvYjFrQUdUaWFKRFVEMVVablNQRW0xbTNVZFEydnBEQW9VLzEvNzhD MzFGODVDRjhCNkE4NDE4RkFEMjVBNTVGNTk0MkYzQkFDREUwRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLeIoAwQCyOVcMA0EAgACMAcDBQAoBEZgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQS6jANBgkqhkiG9w0BAQsFAAOCAQEAJ2upwCzN dLyHStjZ/GZSxMzptbhzfX0oYXy7bLahl1wtvHQcUO5dX9SaLrC8g/q9416XbLIr IQG44qrU7paLtGSWbCPxoGQO/rIfpX9E/avN3Nsvhz2H+MQVqmdFR+9QtMt3V8XQ f44DQDMNgvFlTBRlHcgc92D9Fp5f+A+6o4qJuzGesoa/Dq8VXurAxbH0I/RW1RRc 9xBV3pHNaMX1n4DsiOIpGmqqV9pjNKPKmAA6RYUdrh9RpWS2h4BFhFWSu2PnTcII tla6vdL3Fdr0dOXv1pJ0V1ntpkhiBT5weXI/9KGWYYRBrtCS9MTnhnAhCodHj1kI jO//uxygTGi3KA== -----END CERTIFICATE-----Generated at Sat Sep 28 20:53:41 2024 by rpki-client on console-ams.rpki-client.org