$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.cer File: 7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.cer (raw, json) Hash identifier: obc2pUscu0ttWlW9oYTRX493jyC96kk3m0QG4wVsQZg= Subject key identifier: 7D:FA:A3:AB:FD:1E:0B:1C:08:34:3F:A3:A7:55:FE:24:54:A5:1A:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A6A64A692AF3C6A1747AC151E72B5800B943EFD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.mft caRepository: rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 19 Nov 2024 18:13:51 +0000 Certificate not after: Tue 18 Nov 2025 18:18:51 +0000 Subordinate resources: AS: 53216 IP: 186.250.176.0/21 IP: 2804:37c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6a:64:a6:92:af:3c:6a:17:47:ac:15:1e:72:b5:80:0b:94:3e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 19 18:13:51 2024 GMT Not After : Nov 18 18:18:51 2025 GMT Subject: CN=7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:d4:6f:9a:5b:85:b2:af:32:28:26:1e:10: 6e:ef:86:c7:e7:fa:c0:48:c8:f5:70:95:df:fe:87: 32:43:82:4b:1f:1b:8a:d6:05:32:eb:7d:7e:6b:14: 3d:ac:3e:b9:c3:f9:6e:ed:c4:60:e0:67:17:ce:d6: cd:4a:6b:11:cb:ff:b2:d1:d0:bc:24:dc:dd:f7:68: 3b:2c:5b:e3:22:d0:14:ac:71:38:84:32:b6:e6:35: e6:9c:c5:f0:d3:bb:52:8c:8e:1f:bf:c4:82:74:9a: 4c:57:d3:c2:82:ab:71:ed:fb:66:a8:13:57:63:57: 6c:2d:ed:50:91:62:f6:f8:8b:e1:ec:b1:72:02:4e: f0:3a:0f:b4:aa:76:a2:24:16:c9:9f:db:16:0d:d7: b2:4a:3b:bf:48:01:f2:76:da:20:b3:2e:81:48:fb: cd:c0:4a:e6:d8:71:ea:50:3a:e5:3a:0d:66:c8:df: 7f:93:27:22:ca:12:16:a3:77:44:4f:ef:ea:99:e8: 25:db:00:41:45:cf:4c:9d:b5:51:50:65:8a:49:71: 49:da:f0:3d:dd:1e:e2:73:bb:e9:9b:b1:a3:9a:47: 36:7f:b1:7f:29:21:a4:63:56:0c:a2:9f:de:ac:74: 1a:04:ee:d5:8c:a0:ad:3a:e4:d0:6a:0b:f8:70:74: e4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:FA:A3:AB:FD:1E:0B:1C:08:34:3F:A3:A7:55:FE:24:54:A5:1A:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcnTDFJP8y6M6AyjVpyDzS4PgQ8oJarxESexAUU1zoTN/0/7DFAA3ABFD1E0B1C08343FA3A755FE2454A51A48.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.250.176.0/21 IPv6: 2804:37c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53216 Signature Algorithm: sha256WithRSAEncryption 2a:e0:1a:6e:f5:43:a3:48:4a:c4:c0:6b:2c:b5:73:a2:88:82: 65:07:e0:03:70:62:a4:ff:26:48:ac:96:1d:cb:87:c3:7f:29: cb:92:54:49:24:9b:ed:7b:85:f8:35:c9:3b:14:25:50:d4:59: 0f:fc:68:35:9f:54:45:bc:b5:c6:99:91:1c:82:85:de:f6:6c: 79:df:76:ef:14:28:96:f9:9a:2a:58:02:ab:d0:6a:59:59:5b: d2:47:00:bc:b1:74:95:09:46:57:7d:2a:84:c5:17:bf:ff:f8: e9:60:e8:c7:f1:a1:79:a1:df:c3:d0:72:95:6b:2c:c8:03:8d: d5:1c:c8:c3:4f:66:65:5e:58:47:90:5a:8c:8b:62:ab:06:eb: 7e:5f:e3:73:c8:97:b2:4c:02:99:0d:ed:da:3e:01:4e:ae:dd: 8b:5a:92:58:da:a6:e2:df:61:ea:ce:6c:3f:84:07:db:8a:f0: be:98:bb:d0:0d:0c:ff:10:29:60:bb:fe:a9:28:47:4a:56:98: b7:1c:fd:9e:b6:77:d6:65:a3:27:87:8e:dd:ff:54:fd:29:8a: e4:05:a9:a6:a3:a2:33:1e:88:b0:23:28:11:bd:97:23:93:a3: d0:cf:0b:e6:9a:a8:2e:00:c8:b5:2a:22:e1:4c:e0:c1:49:52: 63:03:4a:55 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUempkppKvPGoXR6wVHnK1gAuUPv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTkxODEzNTFaFw0yNTExMTgxODE4NTFaMDMxMTAvBgNV BAMTKDdERkFBM0FCRkQxRTBCMUMwODM0M0ZBM0E3NTVGRTI0NTRBNTFBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/tRvmluFsq8yKCYeEG7vhsfn +sBIyPVwld/+hzJDgksfG4rWBTLrfX5rFD2sPrnD+W7txGDgZxfO1s1KaxHL/7LR 0Lwk3N33aDssW+Mi0BSscTiEMrbmNeacxfDTu1KMjh+/xIJ0mkxX08KCq3Ht+2ao E1djV2wt7VCRYvb4i+HssXICTvA6D7SqdqIkFsmf2xYN17JKO79IAfJ22iCzLoFI +83ASubYcepQOuU6DWbI33+TJyLKEhajd0RP7+qZ6CXbAEFFz0ydtVFQZYpJcUna 8D3dHuJzu+mbsaOaRzZ/sX8pIaRjVgyin96sdBoE7tWMoK065NBqC/hwdOTRAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9+qOr/R4LHAg0 P6OnVf4kVKUaSDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmNu VERGSlA4eTZNNkF5alZweUR6UzRQZ1E4b0phcnhFU2V4QVVVMXpvVE4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jj blRERkpQOHk2TTZBeWpWcHlEelM0UGdROG9KYXJ4RVNleEFVVTF6b1ROLzAvN0RG QUEzQUJGRDFFMEIxQzA4MzQzRkEzQTc1NUZFMjQ1NEE1MUE0OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDuvqwMA0EAgACMAcDBQAoBDfIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDP4DANBgkqhkiG9w0BAQsFAAOCAQEAKuAabvVDo0hKxMBr LLVzooiCZQfgA3BipP8mSKyWHcuHw38py5JUSSSb7XuF+DXJOxQlUNRZD/xoNZ9U Rby1xpmRHIKF3vZsed927xQolvmaKlgCq9BqWVlb0kcAvLF0lQlGV30qhMUXv//4 6WDox/GheaHfw9BylWssyAON1RzIw09mZV5YR5BajItiqwbrfl/jc8iXskwCmQ3t 2j4BTq7di1qSWNqm4t9h6s5sP4QH24rwvpi70A0M/xApYLv+qShHSlaYtxz9nrZ3 1mWjJ4eO3f9U/SmK5AWppqOiMx6IsCMoEb2XI5Oj0M8L5pqoLgDItSoi4UzgwUlS YwNKVQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:44:08 2024 by rpki-client on console-ams.rpki-client.org