$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer File: 811DA02DC51058EDFF82D04A170B29D01B686AC4.cer (raw, json) Hash identifier: uUZC4NbHlgXFsAiJxeuIRY3bmbotYInBzCmAegWxQBg= Subject key identifier: 81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2C5C471A1BE777802D307720C6436B32D0F9A320 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.mft caRepository: rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 06 Jul 2024 15:04:33 +0000 Certificate not after: Sat 05 Jul 2025 15:09:33 +0000 Subordinate resources: AS: 268168 IP: 45.162.136.0/22 IP: 45.170.160.0/22 IP: 2804:5914::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5c:47:1a:1b:e7:77:80:2d:30:77:20:c6:43:6b:32:d0:f9:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 6 15:04:33 2024 GMT Not After : Jul 5 15:09:33 2025 GMT Subject: CN=811DA02DC51058EDFF82D04A170B29D01B686AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:2b:f6:f5:ba:e9:9d:ff:e4:8d:31:c1:9d: e5:b3:78:0f:90:50:f4:f2:b8:97:22:02:8b:a8:cb: 17:b0:bd:f5:53:3a:af:ac:15:c0:5f:5f:45:d5:77: 9a:36:ee:eb:40:60:dc:d1:ac:de:e1:d8:54:7b:58: a2:e1:b6:92:4d:a6:79:f8:9e:ee:72:f8:88:ff:75: 01:ec:f4:80:90:0d:c1:b8:60:fc:7d:60:14:e5:75: 13:19:9f:13:03:db:1c:da:30:b8:1c:00:01:09:26: 05:e0:24:3e:e5:94:5b:68:cb:87:b2:01:a2:ec:3b: f5:2a:12:e7:3e:1f:c5:4f:92:44:9b:5d:74:ca:35: af:db:9c:59:80:aa:fd:9d:f0:a0:f6:62:8a:b5:fd: 4f:60:c0:55:a3:9d:5a:aa:7c:f5:1b:41:43:d6:fa: 21:df:cf:9e:6f:28:c9:b0:f3:0a:3c:0d:92:ef:21: b0:0e:7f:d7:dc:80:00:e6:48:ad:31:40:3d:71:bd: a0:e6:2b:51:24:66:4e:76:76:9c:dc:68:9d:2c:b0: bf:96:85:9d:16:03:98:07:6e:8d:cd:34:8b:85:68: 0a:e0:cc:8c:69:b8:a4:fa:81:87:03:f7:ab:7d:8c: 86:28:0f:24:7c:08:19:9e:73:de:41:ba:b2:ee:f6: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.136.0/22 45.170.160.0/22 IPv6: 2804:5914::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268168 Signature Algorithm: sha256WithRSAEncryption 18:17:68:de:9d:90:ac:32:6c:10:7d:8a:76:09:c2:45:a1:05: 28:61:74:29:0d:8f:de:71:6d:f3:ac:9d:9b:d0:ab:ef:c6:ec: 15:43:65:e3:70:87:8e:ee:c6:1e:d1:20:b0:ae:84:75:83:31: 55:9d:76:1d:1f:6a:5b:67:b5:e3:54:fe:f0:98:7d:21:75:92: cc:35:2b:ef:89:a4:b9:3b:48:ab:f6:81:64:c1:cd:00:02:7a: 2b:bc:dc:ae:f2:6a:6c:7c:fa:98:0f:ba:59:9e:13:c3:28:7d: 45:cd:fe:67:0a:9c:7c:54:de:37:7e:fa:e0:bc:45:1a:7c:ee: 48:67:b9:7d:a7:2a:40:3b:ae:87:90:b6:d2:e1:75:d9:08:d0: 99:75:ae:47:97:f1:77:40:cd:6f:81:82:d9:9c:65:63:7c:e8: fc:a1:d6:07:f5:5c:b7:30:49:49:de:6b:f4:0f:c3:7e:13:1d: f2:98:f8:f0:14:54:a2:93:e6:19:18:06:52:87:ce:f1:8d:d7: 43:92:2c:7d:06:fc:1e:c0:2f:76:fa:f9:f1:ea:96:b0:81:6a: da:86:fe:72:6f:51:72:99:ab:56:d5:8b:ad:f2:f3:3b:da:10: 1b:a5:2e:23:5c:d8:1c:d0:42:48:ee:a3:9e:b9:26:18:cc:fb: c3:6c:fc:d7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIULFxHGhvnd4AtMHcgxkNrMtD5oyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MDYxNTA0MzNaFw0yNTA3MDUxNTA5MzNaMDMxMTAvBgNV BAMTKDgxMURBMDJEQzUxMDU4RURGRjgyRDA0QTE3MEIyOUQwMUI2ODZBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZCv29brpnf/kjTHBneWzeA+Q UPTyuJciAouoyxewvfVTOq+sFcBfX0XVd5o27utAYNzRrN7h2FR7WKLhtpJNpnn4 nu5y+Ij/dQHs9ICQDcG4YPx9YBTldRMZnxMD2xzaMLgcAAEJJgXgJD7llFtoy4ey AaLsO/UqEuc+H8VPkkSbXXTKNa/bnFmAqv2d8KD2Yoq1/U9gwFWjnVqqfPUbQUPW +iHfz55vKMmw8wo8DZLvIbAOf9fcgADmSK0xQD1xvaDmK1EkZk52dpzcaJ0ssL+W hZ0WA5gHbo3NNIuFaArgzIxpuKT6gYcD96t9jIYoDyR8CBmec95BurLu9hrZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSBHaAtxRBY7f+C 0EoXCynQG2hqxDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHcz VWZCRlZQNmhLbm93SlZpRHY4aVpYV1liY0ZrTFhXYjNOcWpLdXkzSEovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR3 M1VmQkZWUDZoS25vd0pWaUR2OGlaWFdZYmNGa0xYV2IzTnFqS3V5M0hKLzEvODEx REEwMkRDNTEwNThFREZGODJEMDRBMTcwQjI5RDAxQjY4NkFDNC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLaKIAwQCLaqgMA0EAgACMAcDBQAoBFkUMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQXiDANBgkqhkiG9w0BAQsFAAOCAQEAGBdo3p2Q rDJsEH2KdgnCRaEFKGF0KQ2P3nFt86ydm9Cr78bsFUNl43CHju7GHtEgsK6EdYMx VZ12HR9qW2e141T+8Jh9IXWSzDUr74mkuTtIq/aBZMHNAAJ6K7zcrvJqbHz6mA+6 WZ4Twyh9Rc3+ZwqcfFTeN3764LxFGnzuSGe5facqQDuuh5C20uF12QjQmXWuR5fx d0DNb4GC2ZxlY3zo/KHWB/VctzBJSd5r9A/DfhMd8pj48BRUopPmGRgGUofO8Y3X Q5IsfQb8HsAvdvr58eqWsIFq2ob+cm9RcpmrVtWLrfLzO9oQG6UuI1zYHNBCSO6j nrkmGMz7w2z81w== -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:17 2024 by rpki-client on console-ams.rpki-client.org