$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer File: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer (raw, json) Hash identifier: Y4gf+QCnd7IPDI0N/wqfDranh8J2Dxtwzl3UGcnIPgY= Subject key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 457F09F495E4CA13C4C6D3C985A63448EA5F258D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft caRepository: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:56:11 +0000 Certificate not after: Thu 03 Apr 2025 03:01:11 +0000 Subordinate resources: AS: 272559 IP: 2804:8520::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7f:09:f4:95:e4:ca:13:c4:c6:d3:c9:85:a6:34:48:ea:5f:25:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:56:11 2024 GMT Not After : Apr 3 03:01:11 2025 GMT Subject: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:b5:76:66:2f:4c:7d:f8:d3:ea:15:3a:2f: e0:e5:0f:14:80:5f:12:3d:a3:aa:c5:04:1b:2b:0c: 73:1b:85:dc:a8:3c:8b:a2:b6:c3:61:09:21:a7:4a: f9:eb:bd:13:01:15:e9:58:02:eb:84:00:df:31:13: 0f:bd:a2:5e:86:40:c4:2c:c9:27:c5:a3:b6:12:30: a7:40:86:a9:a4:15:c5:29:24:2b:31:c6:b4:c8:0d: 71:29:87:2a:2b:3d:da:1a:b9:92:c6:23:41:2e:bb: 4d:67:a6:09:1f:43:b3:e4:51:6d:08:f4:f0:f9:13: 0e:99:0b:e4:55:b3:0b:bc:f6:19:3e:c0:50:5b:3e: 3c:f5:8a:d8:d5:24:0b:fc:ed:77:8a:06:5f:47:9b: 88:36:bb:8a:0d:3b:cb:3f:74:7b:00:67:64:29:04: 60:e3:0f:be:7b:14:bd:cd:e8:77:75:e5:5b:da:39: be:fd:87:37:f9:79:b5:ad:76:68:dc:0c:ba:f8:fd: 53:76:08:02:0c:23:06:24:d0:dc:9a:81:eb:9e:67: bd:b2:b5:c1:21:45:16:31:ec:57:c2:01:70:b4:ff: 13:a2:59:14:b2:2c:0b:1c:f1:c4:88:5d:ce:1e:7f: 16:89:54:34:fe:0f:80:a6:ea:ec:68:64:20:71:94: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272559 Signature Algorithm: sha256WithRSAEncryption 3f:65:d2:7b:59:ff:13:48:73:3d:c8:14:cd:16:d3:11:fa:a4: 88:41:9e:3b:2f:a7:69:5b:dc:ce:de:8f:aa:dc:91:04:af:28: bb:54:e0:04:c6:22:dc:c7:db:42:f6:38:c5:7b:de:59:d1:6c: 06:63:3f:f9:88:06:24:15:33:6c:70:1e:bc:b2:cb:cf:3c:fd: 2b:4a:f3:51:68:61:7e:9a:2c:2d:20:b8:ec:ef:94:c2:1d:73: f7:f1:55:2c:b9:e8:9f:05:7c:ca:7f:0d:a7:2e:41:97:3e:e6: ab:65:25:b2:79:9b:c5:7d:6c:30:1e:a3:69:1c:51:ae:0e:90: e1:87:91:52:a8:e6:ed:ba:91:fc:61:ab:c3:a4:b8:d6:86:42: e2:28:cb:ba:7e:ae:a2:a0:7f:d9:54:bf:cc:fc:5a:90:f2:5b: 5d:a3:2e:5b:0c:c5:62:7f:00:ac:2d:5b:80:73:9c:b8:59:8e: 92:2e:f8:d2:f7:1b:32:6b:d9:18:7d:cf:5d:3f:3a:56:c1:d8: c9:76:8f:f0:98:14:c1:4b:7d:a8:4c:b2:b1:89:c9:c3:bb:89: 67:f1:35:a3:cb:40:7a:9f:e0:7a:48:42:b3:cf:19:de:38:0b: 05:8c:37:71:69:9e:f7:19:fb:10:a5:39:b6:09:80:f3:97:95: 3b:bf:4f:b0 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIURX8J9JXkyhPExtPJhaY0SOpfJY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjU2MTFaFw0yNTA0MDMwMzAxMTFaMDMxMTAvBgNV BAMTKDg1RUUwQ0Q2NjE4ODdDQzg4RjY0RjZCNEJFOUQ0MjA0MjZFMjAwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WbV2Zi9MffjT6hU6L+DlDxSA XxI9o6rFBBsrDHMbhdyoPIuitsNhCSGnSvnrvRMBFelYAuuEAN8xEw+9ol6GQMQs ySfFo7YSMKdAhqmkFcUpJCsxxrTIDXEphyorPdoauZLGI0Euu01npgkfQ7PkUW0I 9PD5Ew6ZC+RVswu89hk+wFBbPjz1itjVJAv87XeKBl9Hm4g2u4oNO8s/dHsAZ2Qp BGDjD757FL3N6Hd15VvaOb79hzf5ebWtdmjcDLr4/VN2CAIMIwYk0NyageueZ72y tcEhRRYx7FfCAXC0/xOiWRSyLAsc8cSIXc4efxaJVDT+D4Cm6uxoZCBxlEFzAgMB AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSF7gzWYYh8yI9k 9rS+nUIEJuIA2zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTdz d2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTdz d2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMS84NUVF MENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBIUgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQo rzANBgkqhkiG9w0BAQsFAAOCAQEAP2XSe1n/E0hzPcgUzRbTEfqkiEGeOy+naVvc zt6PqtyRBK8ou1TgBMYi3MfbQvY4xXveWdFsBmM/+YgGJBUzbHAevLLLzzz9K0rz UWhhfposLSC47O+Uwh1z9/FVLLnonwV8yn8Npy5Blz7mq2UlsnmbxX1sMB6jaRxR rg6Q4YeRUqjm7bqR/GGrw6S41oZC4ijLun6uoqB/2VS/zPxakPJbXaMuWwzFYn8A rC1bgHOcuFmOki740vcbMmvZGH3PXT86VsHYyXaP8JgUwUt9qEyysYnJw7uJZ/E1 o8tAep/gekhCs88Z3jgLBYw3cWme9xn7EKU5tgmA85eVO79PsA== -----END CERTIFICATE-----Generated at Sat Nov 23 05:01:43 2024 by rpki-client on console-fra.rpki-client.org