$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer File: 7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer (raw, json) Hash identifier: 9Iu7lxuoHX6cWltojy/cXv25V8EWEhAPonka9Mr04e8= Subject key identifier: 7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E31A5AC37BE1B3AB06E0DAE0D1823DFE7326FF7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.mft caRepository: rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 27 Sep 2024 12:27:38 +0000 Certificate not after: Fri 26 Sep 2025 12:32:38 +0000 Subordinate resources: AS: 52741 IP: 143.255.208.0/22 IP: 177.85.104.0/21 IP: 2804:f20::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:31:a5:ac:37:be:1b:3a:b0:6e:0d:ae:0d:18:23:df:e7:32:6f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 27 12:27:38 2024 GMT Not After : Sep 26 12:32:38 2025 GMT Subject: CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:2e:8c:8a:3a:84:e7:bf:e5:22:05:68:ac: 79:36:5e:13:97:71:3e:7c:b8:25:3c:47:47:7d:c5: 47:4f:0c:c3:7b:4c:36:59:60:3e:5e:42:0a:eb:53: a4:dc:46:32:3c:0f:ae:07:a6:02:3d:b7:26:5e:c3: 01:fa:6e:c2:53:d2:84:08:7b:95:43:18:5b:e5:20: 79:51:66:d7:7c:dd:0c:98:e3:1b:c6:25:07:80:38: 94:d2:45:f3:5c:14:eb:1f:32:81:9f:03:31:bd:7d: e9:fb:1a:17:ec:1f:6f:b6:7e:a9:bd:e2:4a:03:6b: 27:21:8a:00:a2:68:21:9e:20:4a:f0:50:3b:e8:25: 16:e1:72:69:71:43:5c:2b:7b:c2:ca:a5:3f:36:ac: 87:87:b8:d2:ca:1f:33:ce:b6:06:a5:1f:98:12:35: 73:0b:fd:9b:f5:3a:f3:57:85:48:8f:cc:94:f6:76: 31:6c:92:f1:d4:12:7f:51:de:e8:1b:c1:df:35:8b: c7:80:26:20:66:dd:b0:8f:0d:9e:53:6d:24:b7:92: cc:72:35:60:64:3d:1a:bb:6a:30:c6:0e:80:e7:f1: 18:72:9f:81:03:31:a6:9b:e7:30:44:04:6f:d2:d4: 25:f4:6f:7b:2b:94:35:69:5e:b3:8f:42:5f:0a:b3: 75:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.208.0/22 177.85.104.0/21 IPv6: 2804:f20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52741 Signature Algorithm: sha256WithRSAEncryption a9:6c:2e:a9:44:45:2e:54:4e:96:18:8e:3c:87:3a:94:2e:7b: 00:cb:31:cc:45:46:9c:9e:69:cf:7b:18:0d:b8:e7:df:b2:dd: cc:75:9f:01:c7:84:9d:02:9f:aa:d4:e6:c1:42:49:57:c2:ce: 71:6f:ab:b0:cc:12:22:96:36:b3:14:11:9a:f9:85:00:49:e3: 3a:2e:6e:83:39:4b:94:7d:9d:ab:5f:d1:88:0e:95:64:26:46: 1a:a2:7b:52:46:b3:ee:99:6f:b6:a7:d0:ff:c8:c5:c4:b1:89: c9:ef:08:56:6c:45:19:d1:e4:3c:81:25:ec:95:ea:ba:09:63: 94:1d:3d:87:b7:cc:ff:f0:82:6a:a8:b7:52:4d:44:a3:11:38: d6:ca:61:9c:d1:a9:cc:56:64:2c:71:00:e5:dd:4f:a2:3f:34: 1e:12:0a:01:2c:ec:b8:bc:c5:1e:67:74:8b:d2:8f:51:5a:9b: 87:f9:b6:47:fa:fd:34:aa:ad:e4:1c:dc:77:21:23:98:e7:32: fa:08:86:cb:e4:9b:b3:46:f4:34:c0:6e:81:90:e7:15:86:d1: 82:6d:d9:3a:fc:cc:d9:9f:57:16:bc:10:ba:20:e5:a2:aa:05: 85:e7:33:0f:6c:69:38:f3:ca:6d:30:60:fc:ba:08:e5:ac:f1: cc:9d:b0:c2 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUDjGlrDe+Gzqwbg2uDRgj3+cyb/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjcxMjI3MzhaFw0yNTA5MjYxMjMyMzhaMDMxMTAvBgNV BAMTKDdGRDVDNzk1N0U2ODg3N0FFNzJBRUY2NkVEMkZFQTMxNTIwMUJGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wC6MijqE57/lIgVorHk2XhOX cT58uCU8R0d9xUdPDMN7TDZZYD5eQgrrU6TcRjI8D64HpgI9tyZewwH6bsJT0oQI e5VDGFvlIHlRZtd83QyY4xvGJQeAOJTSRfNcFOsfMoGfAzG9fen7GhfsH2+2fqm9 4koDaychigCiaCGeIErwUDvoJRbhcmlxQ1wre8LKpT82rIeHuNLKHzPOtgalH5gS NXML/Zv1OvNXhUiPzJT2djFskvHUEn9R3ugbwd81i8eAJiBm3bCPDZ5TbSS3ksxy NWBkPRq7ajDGDoDn8Rhyn4EDMaab5zBEBG/S1CX0b3srlDVpXrOPQl8Ks3UzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR/1ceVfmiHeucq 72btL+oxUgG/PjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHl5 anRyQ2tRYVBteXBGeWpkeEhBd0NCczFaRlVNOTdZZU5DYzVwZTU0VW4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h5 eWp0ckNrUWFQbXlwRnlqZHhIQXdDQnMxWkZVTTk3WWVOQ2M1cGU1NFVuLzAvN0ZE NUM3OTU3RTY4ODc3QUU3MkFFRjY2RUQyRkVBMzE1MjAxQkYzRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj//QAwQDsVVoMA0EAgACMAcDBQAoBA8gMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOBTANBgkqhkiG9w0BAQsFAAOCAQEAqWwuqURF LlROlhiOPIc6lC57AMsxzEVGnJ5pz3sYDbjn37LdzHWfAceEnQKfqtTmwUJJV8LO cW+rsMwSIpY2sxQRmvmFAEnjOi5ugzlLlH2dq1/RiA6VZCZGGqJ7Ukaz7plvtqfQ /8jFxLGJye8IVmxFGdHkPIEl7JXqugljlB09h7fM//CCaqi3Uk1EoxE41sphnNGp zFZkLHEA5d1Poj80HhIKASzsuLzFHmd0i9KPUVqbh/m2R/r9NKqt5BzcdyEjmOcy +giGy+Sbs0b0NMBugZDnFYbRgm3ZOvzM2Z9XFrwQuiDloqoFheczD2xpOPPKbTBg /LoI5azxzJ2wwg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:38 2024 by rpki-client on console-fra.rpki-client.org