$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer File: 87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer (raw, json) Hash identifier: jDqvu/BZgBHnMhqpZx+0U7zetgwotkhMSEqLMNiRJJs= Subject key identifier: 87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E499AB2EB93FE80F2244B5D6FA152F789EF0F17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.mft caRepository: rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 26 Jul 2024 08:23:02 +0000 Certificate not after: Fri 25 Jul 2025 08:28:02 +0000 Subordinate resources: AS: 28223 IP: 189.126.32.0 -- 189.126.38.255 IP: 2804:84ac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 21:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:49:9a:b2:eb:93:fe:80:f2:24:4b:5d:6f:a1:52:f7:89:ef:0f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 26 08:23:02 2024 GMT Not After : Jul 25 08:28:02 2025 GMT Subject: CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:94:36:7b:7a:c6:3e:3b:9b:c6:69:75:9e: 30:21:87:e2:00:bb:61:b4:eb:9c:9b:f3:a6:db:ea: 05:0e:76:fb:90:1e:eb:eb:30:f5:32:e2:f7:1d:d4: a1:92:8b:4a:3c:26:44:80:09:c1:b4:26:5b:57:e8: 64:b6:9d:e3:9a:b9:b9:c4:fd:e8:dd:91:22:33:9f: 5e:43:c9:f6:7a:1c:07:09:ed:50:ea:87:59:37:28: f3:75:63:ff:8a:e3:af:6c:0e:e2:f6:8a:5c:2f:73: 26:93:32:8a:80:28:63:fc:f9:48:9b:3c:68:88:24: 4c:77:ef:de:92:54:df:22:e4:36:1c:12:6e:ee:2a: b4:fd:5a:93:4f:e7:46:ee:82:23:19:46:c4:1d:e4: 6e:7f:f1:0e:8c:fc:b3:40:3c:ee:3f:69:4a:c9:d2: a4:3a:53:55:88:1a:22:ba:ce:bd:16:84:b3:73:d8: 14:d5:cc:2f:c3:47:bd:a5:7e:6a:24:6e:b1:49:92: e5:54:28:c5:a1:06:3c:59:ae:30:9a:39:76:c6:87: 6e:87:4a:54:ba:b8:1f:44:bf:a5:87:e8:1f:bc:36: 32:7e:d3:4a:19:8a:5e:69:6b:39:5b:c3:1a:9d:4a: a2:99:58:a7:2a:14:8b:8b:38:88:fe:50:83:0f:9d: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 189.126.32.0-189.126.38.255 IPv6: 2804:84ac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28223 Signature Algorithm: sha256WithRSAEncryption 06:1b:c4:d1:38:ad:8e:94:05:b3:ff:94:c7:68:86:85:bb:82: c8:ff:2d:77:16:61:b1:b0:d7:bc:bd:79:e1:73:a4:aa:54:e5: 73:6d:30:d6:59:42:ac:63:00:59:2e:22:8d:84:b7:44:46:0d: 0f:be:41:3b:9a:15:c1:6e:a1:7b:47:19:a8:f2:9e:ab:c3:8a: ad:89:c7:e5:48:34:23:6c:75:e0:6c:d8:f5:44:ae:6e:80:de: 23:08:00:53:32:f4:72:3d:b8:d1:b4:ab:15:59:77:d6:38:12: 41:63:a8:45:5d:dc:10:3c:89:02:56:ef:44:a5:be:ec:1b:9d: de:00:d1:4d:66:be:36:3b:8d:ca:7d:26:7f:c0:54:8e:d7:cc: 67:13:8b:39:f1:a9:9a:21:61:b7:c5:e3:bf:0f:af:0c:1d:a0: cd:a1:81:58:1f:d3:4a:b5:d2:d4:c1:11:08:8f:04:31:4a:a1: 40:a0:fa:e2:0b:d0:f8:d8:c0:fb:0e:5b:83:0f:36:0c:82:16: ab:73:9b:8f:cd:81:e7:79:43:61:2a:4c:a4:7d:18:27:8b:bb: 7b:a6:c7:91:21:33:52:75:bc:f2:06:42:66:74:79:ac:19:a1: 9c:a0:34:d5:59:48:b3:96:43:46:e7:26:aa:95:b7:eb:c5:08: 5d:50:cf:28 -----BEGIN CERTIFICATE----- MIIGNzCCBR+gAwIBAgIUDkmasuuT/oDyJEtdb6FS94nvDxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MjYwODIzMDJaFw0yNTA3MjUwODI4MDJaMDMxMTAvBgNV BAMTKDg3QUE2NjZCQUIyRDc1NDc3REFCNjNDREM1QUU3NkMwMEY4OURBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVpQ2e3rGPjubxml1njAhh+IA u2G065yb86bb6gUOdvuQHuvrMPUy4vcd1KGSi0o8JkSACcG0JltX6GS2neOaubnE /ejdkSIzn15DyfZ6HAcJ7VDqh1k3KPN1Y/+K469sDuL2ilwvcyaTMoqAKGP8+Uib PGiIJEx3796SVN8i5DYcEm7uKrT9WpNP50bugiMZRsQd5G5/8Q6M/LNAPO4/aUrJ 0qQ6U1WIGiK6zr0WhLNz2BTVzC/DR72lfmokbrFJkuVUKMWhBjxZrjCaOXbGh26H SlS6uB9Ev6WH6B+8NjJ+00oZil5pazlbwxqdSqKZWKcqFIuLOIj+UIMPnd+bAgMB AAGjggNBMIIDPTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHqmZrqy11R32r Y83FrnbAD4naGTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkhS aXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4c0ovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZI UmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzEvODdB QTY2NkJBQjJENzU0NzdEQUI2M0NEQzVBRTc2QzAwRjg5REExOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEH AQH/BCcwJTAUBAIAATAOMAwDBAW9fiADBAC9fiYwDQQCAAIwBwMFACgEhKwwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICbj8wDQYJKoZIhvcNAQELBQADggEBAAYbxNE4 rY6UBbP/lMdohoW7gsj/LXcWYbGw17y9eeFzpKpU5XNtMNZZQqxjAFkuIo2Et0RG DQ++QTuaFcFuoXtHGajynqvDiq2Jx+VINCNsdeBs2PVErm6A3iMIAFMy9HI9uNG0 qxVZd9Y4EkFjqEVd3BA8iQJW70Slvuwbnd4A0U1mvjY7jcp9Jn/AVI7XzGcTiznx qZohYbfF478PrwwdoM2hgVgf00q10tTBEQiPBDFKoUCg+uIL0PjYwPsOW4MPNgyC Fqtzm4/Nged5Q2EqTKR9GCeLu3umx5EhM1J1vPIGQmZ0eawZoZygNNVZSLOWQ0bn JqqVt+vFCF1Qzyg= -----END CERTIFICATE-----Generated at Sat Sep 28 20:53:45 2024 by rpki-client on console-ams.rpki-client.org