$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer File: 793862D171C875C3F184432DDADCC8219F51CADF.cer (raw, json) Hash identifier: fLx04xzel3c4FoyOZQjkwXuZbWEZspddMGWJ9M48PoY= Subject key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7AC3CA5A75C326515428E5E1D6ADDF63F7DE0B42 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.mft caRepository: rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 19:54:27 +0000 Certificate not after: Thu 03 Apr 2025 19:59:27 +0000 Subordinate resources: AS: 28349 AS: 28647 AS: 53008 AS: 53067 AS: 53143 AS: 262420 AS: 265021 AS: 266206 AS: 267203 AS: 267452 AS: 267484 AS: 268555 AS: 268603 AS: 269112 AS: 269489 IP: 45.161.148.0/22 IP: 45.163.96.0/22 IP: 45.179.0.0/22 IP: 45.187.236.0/22 IP: 45.231.136.0/22 IP: 131.0.84.0/22 IP: 131.100.68.0/22 IP: 168.195.236.0/22 IP: 170.0.160.0/22 IP: 177.84.176.0/21 IP: 177.154.64.0/20 IP: 177.185.160.0/19 IP: 179.107.0.0/21 IP: 181.191.76.0/22 IP: 186.193.112.0/20 IP: 186.194.224.0/20 IP: 186.219.96.0/20 IP: 187.85.192.0/19 IP: 187.86.112.0/20 IP: 187.87.64.0/20 IP: 189.51.128.0/19 IP: 189.113.192.0/20 IP: 189.113.216.0/21 IP: 189.126.160.0/19 IP: 200.71.68.0/22 IP: 201.76.224.0/19 IP: 2804:554::/32 IP: 2804:a50::/32 IP: 2804:b1c::/32 IP: 2804:e50::/32 IP: 2804:1a68::/32 IP: 2804:3184::/32 IP: 2804:3c5c::/32 IP: 2804:41b8::/32 IP: 2804:4230::/32 IP: 2804:49c8::/32 IP: 2804:52fc::/32 IP: 2804:53bc::/32 IP: 2804:5f9c::/32 IP: 2804:656c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c3:ca:5a:75:c3:26:51:54:28:e5:e1:d6:ad:df:63:f7:de:0b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 19:54:27 2024 GMT Not After : Apr 3 19:59:27 2025 GMT Subject: CN=793862D171C875C3F184432DDADCC8219F51CADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:d6:41:ba:17:ad:e0:14:92:be:30:c5:0f: bf:7d:44:49:fd:26:2a:82:d1:28:bd:12:6a:13:9d: 64:83:c7:da:b9:ee:1a:d5:19:0c:7b:54:d7:da:18: b7:66:bf:b0:c0:a0:08:81:c2:59:36:89:e4:f4:39: 02:b9:bf:28:bc:f7:cf:8f:2c:f2:b4:dd:12:da:74: b2:5e:82:fe:00:6d:28:de:64:10:21:0d:e6:f1:a9: fa:ba:6f:74:41:43:fe:db:f3:23:4c:e1:64:a1:de: 57:eb:39:57:95:9f:0a:fc:f1:c9:ad:bf:62:05:bc: 2b:e4:2f:14:bf:ad:21:90:91:b9:5e:f0:e9:24:05: c4:fa:04:8d:ef:ed:4c:8f:96:7d:7b:eb:ee:f7:4c: 2e:4b:08:c6:d2:a5:23:bf:94:d2:ee:93:3e:68:c9: 64:38:9e:7d:87:41:7d:b9:ac:39:6e:b5:50:45:28: 6a:21:8b:45:0d:e6:09:38:09:ee:c5:aa:53:1b:5d: 91:ff:9c:c5:8b:19:ae:e2:3a:6f:36:7b:0f:e3:49: 17:7f:23:ec:43:d6:e4:a0:36:a1:e1:ea:c8:ed:02: 84:89:5e:81:11:78:54:fa:44:3c:1a:82:b1:4f:1a: b5:ce:88:f8:f1:13:c9:20:0f:6f:ff:bb:67:bd:04: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.161.148.0/22 45.163.96.0/22 45.179.0.0/22 45.187.236.0/22 45.231.136.0/22 131.0.84.0/22 131.100.68.0/22 168.195.236.0/22 170.0.160.0/22 177.84.176.0/21 177.154.64.0/20 177.185.160.0/19 179.107.0.0/21 181.191.76.0/22 186.193.112.0/20 186.194.224.0/20 186.219.96.0/20 187.85.192.0/19 187.86.112.0/20 187.87.64.0/20 189.51.128.0/19 189.113.192.0/20 189.113.216.0/21 189.126.160.0/19 200.71.68.0/22 201.76.224.0/19 IPv6: 2804:554::/32 2804:a50::/32 2804:b1c::/32 2804:e50::/32 2804:1a68::/32 2804:3184::/32 2804:3c5c::/32 2804:41b8::/32 2804:4230::/32 2804:49c8::/32 2804:52fc::/32 2804:53bc::/32 2804:5f9c::/32 2804:656c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28349 28647 53008 53067 53143 262420 265021 266206 267203 267452 267484 268555 268603 269112 269489 Signature Algorithm: sha256WithRSAEncryption 9f:ec:c9:ca:9d:bc:12:61:f0:e3:a0:50:40:59:08:16:5e:d9: b8:21:13:9f:bb:7f:d3:fa:1a:58:ef:31:bc:85:44:2d:bd:62: de:25:59:eb:aa:48:e8:61:0c:c3:c2:6f:0d:85:40:3b:a0:78: 00:c1:ee:9d:e1:61:d3:60:05:98:80:4f:71:c0:d1:64:46:4f: 87:08:47:4d:33:8a:0a:92:05:4d:76:76:fa:0a:46:a4:87:52: eb:f0:60:3f:d5:72:87:1a:b0:2d:53:4b:0d:81:90:f8:fc:43: f1:d2:8a:9f:fe:78:39:b8:cd:41:78:9c:3e:72:80:48:e2:81: af:e1:e1:57:51:c6:f4:c1:75:22:75:b8:e2:83:02:51:e6:ab: ee:9c:9d:68:9d:60:5e:9f:91:e3:e9:a3:a8:80:43:77:ae:39: e6:87:8f:8b:bb:85:8e:f9:4e:59:c4:11:5a:74:87:7d:8d:18: d9:14:86:65:95:66:86:71:35:ed:0c:33:0f:c7:44:12:6b:76: f5:46:e6:34:f1:9c:59:8e:bb:3f:68:56:63:d1:d4:fe:1f:d2: 7f:15:24:60:73:02:7c:4d:e2:10:4b:8d:8d:27:94:c1:d4:40: f6:4a:d8:08:7e:5b:05:fb:13:ec:d0:35:94:2b:c2:0a:39:c5: b0:b3:33:be -----BEGIN CERTIFICATE----- MIIHbTCCBlWgAwIBAgIUesPKWnXDJlFUKOXh1q3fY/feC0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxOTU0MjdaFw0yNTA0MDMxOTU5MjdaMDMxMTAvBgNV BAMTKDc5Mzg2MkQxNzFDODc1QzNGMTg0NDMyRERBRENDODIxOUY1MUNBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6V9ZBuhet4BSSvjDFD799REn9 JiqC0Si9EmoTnWSDx9q57hrVGQx7VNfaGLdmv7DAoAiBwlk2ieT0OQK5vyi898+P LPK03RLadLJegv4AbSjeZBAhDebxqfq6b3RBQ/7b8yNM4WSh3lfrOVeVnwr88cmt v2IFvCvkLxS/rSGQkble8OkkBcT6BI3v7UyPln176+73TC5LCMbSpSO/lNLukz5o yWQ4nn2HQX25rDlutVBFKGohi0UN5gk4Ce7FqlMbXZH/nMWLGa7iOm82ew/jSRd/ I+xD1uSgNqHh6sjtAoSJXoEReFT6RDwagrFPGrXOiPjxE8kgD2//u2e9BHzRAgMB AAGjggR3MIIEczAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5OGLRcch1w/GE Qy3a3Mghn1HK3zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWk1 dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpwNUovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fp NXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEvNzkz ODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5RjUxQ0FERi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBJQYIKwYBBQUH AQcBAf8EggEUMIIBEDCBowQCAAEwgZwDBAItoZQDBAIto2ADBAItswADBAItu+wD BAIt54gDBAKDAFQDBAKDZEQDBAKow+wDBAKqAKADBAOxVLADBASxmkADBAWxuaAD BAOzawADBAK1v0wDBAS6wXADBAS6wuADBAS622ADBAW7VcADBAS7VnADBAS7V0AD BAW9M4ADBAS9ccADBAO9cdgDBAW9fqADBALIR0QDBAXJTOAwaAQCAAIwYgMFACgE BVQDBQAoBApQAwUAKAQLHAMFACgEDlADBQAoBBpoAwUAKAQxhAMFACgEPFwDBQAo BEG4AwUAKARCMAMFACgEScgDBQAoBFL8AwUAKARTvAMFACgEX5wDBQAoBGVsMF4G CCsGAQUFBwEIAQH/BE8wTaBLMEkCAm69AgJv5wIDAM8QAgMAz0sCAwDPlwIDBAEU AgMECz0CAwQP3gIDBBPDAgMEFLwCAwQU3AIDBBkLAgMEGTsCAwQbOAIDBByxMA0G CSqGSIb3DQEBCwUAA4IBAQCf7MnKnbwSYfDjoFBAWQgWXtm4IROfu3/T+hpY7zG8 hUQtvWLeJVnrqkjoYQzDwm8NhUA7oHgAwe6d4WHTYAWYgE9xwNFkRk+HCEdNM4oK kgVNdnb6Ckakh1Lr8GA/1XKHGrAtU0sNgZD4/EPx0oqf/ng5uM1BeJw+coBI4oGv 4eFXUcb0wXUidbjigwJR5qvunJ1onWBen5Hj6aOogEN3rjnmh4+Lu4WO+U5ZxBFa dId9jRjZFIZllWaGcTXtDDMPx0QSa3b1RuY08ZxZjrs/aFZj0dT+H9J/FSRgcwJ8 TeIQS42NJ5TB1ED2StgIflsF+xPs0DWUK8IKOcWwszO+ -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:36 2024 by rpki-client on console-fra.rpki-client.org