$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E9AB55D083C843FBB860BD053794BD0E819E359.cer File: 7E9AB55D083C843FBB860BD053794BD0E819E359.cer (raw, json) Hash identifier: akKwypGIa1cYWz9HsNRXi9e6suuO5mhFTNUg9QDPcn0= Subject key identifier: 7E:9A:B5:5D:08:3C:84:3F:BB:86:0B:D0:53:79:4B:D0:E8:19:E3:59 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5A42B74B41B81013E93A36C33927EE056F24D7B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/7E9AB55D083C843FBB860BD053794BD0E819E359.mft caRepository: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 06 Nov 2024 13:55:53 +0000 Certificate not after: Wed 05 Nov 2025 14:00:53 +0000 Subordinate resources: AS: 28238 IP: 186.216.224.0/20 IP: 187.0.128.0/20 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:42:b7:4b:41:b8:10:13:e9:3a:36:c3:39:27:ee:05:6f:24:d7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 6 13:55:53 2024 GMT Not After : Nov 5 14:00:53 2025 GMT Subject: CN=7E9AB55D083C843FBB860BD053794BD0E819E359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:85:da:51:14:0e:8f:34:a0:ce:81:fa:c9: 31:4b:f0:03:c2:0e:ae:e4:4b:92:4d:f4:ec:3d:95: c6:39:48:23:42:61:ed:5d:43:2d:6e:f4:c9:42:83: 86:00:15:31:00:d7:7a:87:14:94:63:ad:5b:01:68: e6:6b:63:c7:19:a2:5f:5c:5e:d3:52:33:95:46:84: e5:a8:80:6e:83:14:8f:9b:84:59:e0:a7:12:ad:d3: a9:bc:2e:23:df:0d:e6:33:2e:f6:00:5b:3a:d6:90: 94:f0:ed:57:43:14:a5:81:4b:31:6b:cb:c9:94:1d: 5f:fe:93:dc:8b:2f:ca:61:a5:08:d3:3b:99:8a:9e: 0d:bb:12:2d:d2:02:d3:70:03:8b:99:f4:b2:59:8d: b7:5e:a3:fb:90:09:92:62:01:07:4e:21:4d:9f:98: f8:aa:29:c6:2b:e2:8c:2c:45:31:74:5d:ad:59:9e: 33:db:f1:45:2b:bc:eb:43:34:9d:e6:ef:86:f3:1e: d9:e6:55:1f:a6:21:2c:13:29:dd:00:f4:14:04:95: 36:3a:ff:5e:9b:2c:7b:2e:2d:51:bb:bf:37:3a:06: fb:6f:4a:14:41:95:05:56:bc:21:e3:00:d5:87:cf: 7f:62:06:36:64:57:12:9f:cd:b4:58:fc:37:cc:82: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:9A:B5:5D:08:3C:84:3F:BB:86:0B:D0:53:79:4B:D0:E8:19:E3:59 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/7E9AB55D083C843FBB860BD053794BD0E819E359.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.216.224.0/20 187.0.128.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28238 Signature Algorithm: sha256WithRSAEncryption aa:a2:fa:a2:ad:85:8e:63:27:db:b6:a5:bb:f1:6c:ec:f1:14: a5:66:32:c4:2f:1a:92:77:c8:45:ee:41:77:c0:72:07:36:68: 00:46:ed:0b:9a:7d:ad:1e:05:e2:7b:67:d7:ca:d2:b9:8c:fe: 59:70:a8:b5:a2:95:29:a9:f8:4c:67:0c:31:b9:60:73:70:84: ef:d0:f1:63:0e:b4:79:dc:55:95:8b:85:85:05:d9:ae:e1:0d: 46:17:e7:5d:80:b5:ed:b8:1b:3b:3c:9a:b5:30:0f:29:76:99: 52:2c:3a:d0:48:77:31:75:ba:c1:07:02:93:6a:bf:13:55:9a: 46:2d:d2:01:44:c7:43:89:c6:84:14:72:c7:e7:48:cf:40:4e: 34:4a:70:e9:4b:24:9d:45:6a:13:06:56:2a:bb:52:cc:04:21: 9d:c3:e7:dd:ae:0b:a7:25:22:c5:a7:d6:29:33:4b:0d:c9:c1: 39:66:b1:25:23:90:6d:94:93:f3:37:c3:86:c3:6a:c8:3a:54: e8:e3:61:85:28:74:6a:35:d7:83:14:b5:73:da:60:00:5e:53: 15:95:c8:ec:d3:68:72:37:78:c3:88:0b:52:e9:e0:d0:bc:a4: 95:7c:63:e8:9c:78:04:27:52:c5:da:7b:f3:91:53:bf:36:ea: 67:dc:3b:e1 -----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIUWkK3S0G4EBPpOjbDOSfuBW8k17YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDYxMzU1NTNaFw0yNTExMDUxNDAwNTNaMDMxMTAvBgNV BAMTKDdFOUFCNTVEMDgzQzg0M0ZCQjg2MEJEMDUzNzk0QkQwRTgxOUUzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNNoXaURQOjzSgzoH6yTFL8APC Dq7kS5JN9Ow9lcY5SCNCYe1dQy1u9MlCg4YAFTEA13qHFJRjrVsBaOZrY8cZol9c XtNSM5VGhOWogG6DFI+bhFngpxKt06m8LiPfDeYzLvYAWzrWkJTw7VdDFKWBSzFr y8mUHV/+k9yLL8phpQjTO5mKng27Ei3SAtNwA4uZ9LJZjbdeo/uQCZJiAQdOIU2f mPiqKcYr4owsRTF0Xa1ZnjPb8UUrvOtDNJ3m74bzHtnmVR+mISwTKd0A9BQElTY6 /16bLHsuLVG7vzc6BvtvShRBlQVWvCHjANWHz39iBjZkVxKfzbRY/DfMgqqTAgMB AAGjggMwMIIDLDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR+mrVdCDyEP7uG C9BTeUvQ6BnjWTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVZM ZXRncG5SSmFUdzdpYlEzeVpmbUVVNnhzczkzUk45RExCUmVFNG9ONVkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlW TGV0Z3BuUkphVHc3aWJRM3laZm1FVTZ4c3M5M1JOOURMQlJlRTRvTjVZLzAvN0U5 QUI1NUQwODNDODQzRkJCODYwQkQwNTM3OTRCRDBFODE5RTM1OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQEutjgAwQEuwCAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAm5OMA0GCSqGSIb3DQEBCwUAA4IBAQCqovqirYWOYyfbtqW78Wzs8RSlZjLE LxqSd8hF7kF3wHIHNmgARu0Lmn2tHgXie2fXytK5jP5ZcKi1opUpqfhMZwwxuWBz cITv0PFjDrR53FWVi4WFBdmu4Q1GF+ddgLXtuBs7PJq1MA8pdplSLDrQSHcxdbrB BwKTar8TVZpGLdIBRMdDicaEFHLH50jPQE40SnDpSySdRWoTBlYqu1LMBCGdw+fd rgunJSLFp9YpM0sNycE5ZrElI5BtlJPzN8OGw2rIOlTo42GFKHRqNdeDFLVz2mAA XlMVlcjs02hyN3jDiAtS6eDQvKSVfGPonHgEJ1LF2nvzkVO/Nupn3Dvh -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:37 2024 by rpki-client on console-fra.rpki-client.org