$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87145ADBF7EEEC8C1A0E42552DF7D13B51A569C5.cer File: 87145ADBF7EEEC8C1A0E42552DF7D13B51A569C5.cer (raw, json) Hash identifier: DJpoflLKKV/TYZSTfIL3vnqdWoRzTM0osk1/pYiXTj4= Subject key identifier: 87:14:5A:DB:F7:EE:EC:8C:1A:0E:42:55:2D:F7:D1:3B:51:A5:69:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 61667FDDF4413DD536CD6CB90B4B5EE8DE869801 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/87145ADBF7EEEC8C1A0E42552DF7D13B51A569C5.mft caRepository: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Nov 2024 18:14:16 +0000 Certificate not after: Tue 25 Nov 2025 18:19:16 +0000 Subordinate resources: AS: 263256 IP: 170.247.200.0/22 IP: 198.58.8.0/22 IP: 2804:17e0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:66:7f:dd:f4:41:3d:d5:36:cd:6c:b9:0b:4b:5e:e8:de:86:98:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 26 18:14:16 2024 GMT Not After : Nov 25 18:19:16 2025 GMT Subject: CN=87145ADBF7EEEC8C1A0E42552DF7D13B51A569C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:3a:d3:1e:1e:7b:52:4d:b6:16:6a:3b:87: f6:a8:3f:d7:df:ba:88:8a:79:c0:07:c0:ce:e9:3f: f9:52:66:a3:0e:62:3c:fa:4e:95:6e:8e:b6:3d:32: 84:ff:53:24:86:a7:54:d9:c8:b7:54:70:cf:81:da: 00:c6:32:a6:0a:43:b9:9c:af:5c:f9:3d:0f:fe:55: 58:82:e1:a9:26:42:19:ec:78:2e:19:46:17:36:dd: e1:5b:77:1f:b6:7a:9a:da:bc:a4:34:53:31:88:8a: 41:ba:e4:30:4a:13:60:65:53:81:dd:67:89:5b:ae: f6:a4:bf:1f:dc:6f:59:86:d2:97:57:d0:7c:87:85: 6b:a9:cb:db:e2:82:8e:a7:67:c7:c0:7c:15:95:c2: c4:36:5e:b9:a5:3c:78:85:6c:30:d5:dd:a5:43:b6: 82:ab:38:41:38:97:50:76:8b:4e:95:39:af:b5:e5: 96:fc:c3:e2:56:51:b9:7d:a2:a0:82:fa:fe:bf:65: 05:82:b1:56:40:13:b3:ff:92:9d:8c:b2:74:06:f9: 37:54:45:b4:50:d3:b9:5a:f1:89:25:e9:02:23:f3: da:4f:87:8c:f6:ed:ac:53:44:5b:a9:96:b1:9e:da: 1c:56:18:e8:39:b9:75:1b:b3:7c:11:8c:77:2e:6e: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:14:5A:DB:F7:EE:EC:8C:1A:0E:42:55:2D:F7:D1:3B:51:A5:69:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/87145ADBF7EEEC8C1A0E42552DF7D13B51A569C5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.247.200.0/22 198.58.8.0/22 IPv6: 2804:17e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263256 Signature Algorithm: sha256WithRSAEncryption d3:cf:97:43:09:0e:da:c5:29:b0:ec:3b:a0:e6:07:8f:96:d0: 17:98:0a:c8:eb:b6:78:3f:b3:7f:43:fb:e1:93:aa:c1:ca:a8: 7b:61:39:d3:4c:7f:24:56:9a:2b:6e:db:89:09:3a:fd:97:6d: 30:d9:fd:b8:86:45:d2:bd:9f:a1:01:01:b3:4f:fd:ac:ee:01: 43:d2:e5:b8:30:7d:80:09:36:8b:c9:51:43:5a:60:51:ca:c8: 18:89:6c:04:9b:4d:9a:47:19:24:c2:1d:97:9e:0c:80:1b:bc: c5:d3:aa:ba:99:fd:61:b4:a0:cd:ee:41:30:49:56:03:df:6a: 47:69:7a:27:03:56:2f:42:d8:c3:88:54:ac:48:cd:b8:ba:28: 6a:ab:77:cd:28:d5:d7:72:df:25:9e:18:03:50:96:45:4e:65: c1:05:e5:b3:db:6b:59:7d:c3:7f:fe:29:76:2d:02:19:b4:a7: 31:4d:fd:cf:5b:36:79:46:1a:3b:0a:77:ec:7f:4b:ba:2c:24: 80:8b:b4:58:f6:9c:74:b6:a8:35:a0:9e:d8:1c:c0:21:fa:94: 43:32:ae:f2:34:0e:59:c0:95:3e:87:37:66:e4:9c:c9:18:db: f8:26:95:34:e7:b7:2a:a6:c9:1d:53:da:54:74:5e:70:4a:92: c4:4b:3d:dd -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUYWZ/3fRBPdU2zWy5C0te6N6GmAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjYxODE0MTZaFw0yNTExMjUxODE5MTZaMDMxMTAvBgNV BAMTKDg3MTQ1QURCRjdFRUVDOEMxQTBFNDI1NTJERjdEMTNCNTFBNTY5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4jrTHh57Uk22Fmo7h/aoP9ff uoiKecAHwM7pP/lSZqMOYjz6TpVujrY9MoT/UySGp1TZyLdUcM+B2gDGMqYKQ7mc r1z5PQ/+VViC4akmQhnseC4ZRhc23eFbdx+2epravKQ0UzGIikG65DBKE2BlU4Hd Z4lbrvakvx/cb1mG0pdX0HyHhWupy9vigo6nZ8fAfBWVwsQ2XrmlPHiFbDDV3aVD toKrOEE4l1B2i06VOa+15Zb8w+JWUbl9oqCC+v6/ZQWCsVZAE7P/kp2MsnQG+TdU RbRQ07la8Ykl6QIj89pPh4z27axTRFuplrGe2hxWGOg5uXUbs3wRjHcubpWfAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHFFrb9+7sjBoO QlUt99E7UaVpxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXB3 UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vw d1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAvODcx NDVBREJGN0VFRUM4QzFBMEU0MjU1MkRGN0QxM0I1MUE1NjlDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvfIAwQCxjoIMA0EAgACMAcDBQAoBBfgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEWDANBgkqhkiG9w0BAQsFAAOCAQEA08+XQwkO 2sUpsOw7oOYHj5bQF5gKyOu2eD+zf0P74ZOqwcqoe2E500x/JFaaK27biQk6/Zdt MNn9uIZF0r2foQEBs0/9rO4BQ9LluDB9gAk2i8lRQ1pgUcrIGIlsBJtNmkcZJMId l54MgBu8xdOqupn9YbSgze5BMElWA99qR2l6JwNWL0LYw4hUrEjNuLooaqt3zSjV 13LfJZ4YA1CWRU5lwQXls9trWX3Df/4pdi0CGbSnMU39z1s2eUYaOwp37H9Luiwk gIu0WPacdLaoNaCe2BzAIfqUQzKu8jQOWcCVPoc3ZuScyRjb+CaVNOe3KqbJHVPa VHRecEqSxEs93Q== -----END CERTIFICATE-----Generated at Wed Nov 27 02:00:12 2024 by rpki-client on console-ams.rpki-client.org