$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer File: 886EEAC9FB3433BE96A51A9D0154D4663682FF65.cer (raw, json) Hash identifier: OW2IkIURy4yWydaYlWfU+Lg+llofHJe3rWrjPH6pMjs= Subject key identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3BB9831F8EC45E25BD3D601996DDFCBF73EB15A0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft caRepository: rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 05 Apr 2024 01:22:02 +0000 Certificate not after: Fri 04 Apr 2025 01:27:02 +0000 Subordinate resources: AS: 263506 IP: 170.150.192.0/22 IP: 177.107.216.0/21 IP: 2804:12f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b9:83:1f:8e:c4:5e:25:bd:3d:60:19:96:dd:fc:bf:73:eb:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 5 01:22:02 2024 GMT Not After : Apr 4 01:27:02 2025 GMT Subject: CN=886EEAC9FB3433BE96A51A9D0154D4663682FF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:b1:2c:54:b5:7e:47:b9:a2:5d:ae:e3:fe: 82:46:03:04:90:87:d0:2a:1a:8a:47:5c:54:a4:3d: f3:14:c0:3a:5e:36:78:fa:95:b3:4b:00:46:1f:6f: 8f:0a:c5:d6:4e:18:7f:54:92:0c:15:ea:27:7b:3e: 20:4a:85:09:cd:d8:da:de:29:ea:d4:04:72:87:cd: 4c:8f:3f:c6:3e:d1:42:8e:88:55:da:01:a2:ef:2c: 9e:e8:39:7f:3c:24:b6:5f:db:9d:50:fc:5c:8f:e0: cf:4b:c5:9b:39:51:e0:20:b8:5e:6d:4b:d4:90:ac: 44:9a:6e:f2:1c:2d:ab:98:61:65:1d:36:bc:a6:60: 09:8a:c6:f1:01:c8:af:73:a4:1c:a8:99:5c:97:2e: b0:3e:9f:6d:1c:8f:82:f9:7a:c7:e1:39:8d:b4:7f: 7e:f1:b9:0b:e3:05:58:24:12:b4:60:db:14:af:13: 83:7f:7c:68:3e:d5:2d:9c:6a:2c:70:3a:07:a7:39: f9:fa:92:85:1d:52:2b:c3:ff:2c:38:c3:12:ad:9a: db:12:5d:8e:88:b6:39:05:4a:f6:b8:d6:38:94:b8: aa:5f:33:52:28:a6:1a:20:4d:09:0d:c7:a2:1b:e0: 05:59:9e:51:a5:ab:31:80:9f:61:95:8b:bb:bd:1a: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:6E:EA:C9:FB:34:33:BE:96:A5:1A:9D:01:54:D4:66:36:82:FF:65 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ExGi97V2TcbP7jQozzzaXaH3Rv7A7cYvvkPD5DWta1Yc/1/886EEAC9FB3433BE96A51A9D0154D4663682FF65.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.150.192.0/22 177.107.216.0/21 IPv6: 2804:12f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263506 Signature Algorithm: sha256WithRSAEncryption cd:3d:55:e5:35:3c:20:8b:4c:33:14:d8:b9:e6:1a:8a:f8:f6: e4:e7:e4:68:ce:1f:31:54:4b:bc:d1:f5:67:ed:aa:f5:e4:a0: 92:8f:84:a6:f3:74:07:57:21:1b:8b:38:b2:97:95:f0:43:f5: 4e:bb:fc:58:0e:56:d1:2b:5a:07:3c:6f:f2:ed:75:e5:c5:87: 56:da:23:4b:15:7c:c6:e4:aa:32:86:d6:85:21:66:15:f7:02: cd:2c:12:ed:49:8d:df:12:6b:15:5c:cb:63:f0:20:7b:30:c8: be:87:89:b0:88:90:7b:91:cc:65:b2:7b:f1:ae:86:21:dc:0b: 77:53:05:ba:5e:90:64:ef:99:29:8e:72:90:ad:0e:ac:f9:31: 9b:6b:dd:cc:70:66:ff:0d:3c:2a:c9:da:9d:c7:34:5d:a5:6d: 8b:b7:62:af:8f:59:12:96:d6:18:e7:52:87:fc:30:74:7d:81: 31:ba:9b:ff:92:5e:28:8c:67:b4:6f:19:4c:1c:4c:0a:6e:f9: 58:b0:51:40:d8:48:fd:52:dd:c9:ad:21:83:42:19:20:84:9d: 8a:31:59:17:ab:18:48:c5:86:af:bf:03:2c:df:67:51:29:69: 65:1d:c3:62:95:1b:38:74:35:27:31:e6:b8:42:e1:6b:32:09: 0e:33:14:37 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUO7mDH47EXiW9PWAZlt38v3PrFaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDUwMTIyMDJaFw0yNTA0MDQwMTI3MDJaMDMxMTAvBgNV BAMTKDg4NkVFQUM5RkIzNDMzQkU5NkE1MUE5RDAxNTRENDY2MzY4MkZGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7rEsVLV+R7miXa7j/oJGAwSQ h9AqGopHXFSkPfMUwDpeNnj6lbNLAEYfb48KxdZOGH9UkgwV6id7PiBKhQnN2Nre KerUBHKHzUyPP8Y+0UKOiFXaAaLvLJ7oOX88JLZf251Q/FyP4M9LxZs5UeAguF5t S9SQrESabvIcLauYYWUdNrymYAmKxvEByK9zpByomVyXLrA+n20cj4L5esfhOY20 f37xuQvjBVgkErRg2xSvE4N/fGg+1S2caixwOgenOfn6koUdUivD/yw4wxKtmtsS XY6ItjkFSva41jiUuKpfM1IophogTQkNx6Ib4AVZnlGlqzGAn2GVi7u9GgAlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSIburJ+zQzvpal Gp0BVNRmNoL/ZTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXhH aTk3VjJUY2JQN2pRb3p6emFYYUgzUnY3QTdjWXZ2a1BENURXdGExWWMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V4 R2k5N1YyVGNiUDdqUW96enphWGFIM1J2N0E3Y1l2dmtQRDVEV3RhMVljLzEvODg2 RUVBQzlGQjM0MzNCRTk2QTUxQTlEMDE1NEQ0NjYzNjgyRkY2NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqpbAAwQDsWvYMA0EAgACMAcDBQAoBBL0MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFUjANBgkqhkiG9w0BAQsFAAOCAQEAzT1V5TU8 IItMMxTYueYaivj25OfkaM4fMVRLvNH1Z+2q9eSgko+EpvN0B1chG4s4speV8EP1 Trv8WA5W0StaBzxv8u115cWHVtojSxV8xuSqMobWhSFmFfcCzSwS7UmN3xJrFVzL Y/AgezDIvoeJsIiQe5HMZbJ78a6GIdwLd1MFul6QZO+ZKY5ykK0OrPkxm2vdzHBm /w08Ksnancc0XaVti7dir49ZEpbWGOdSh/wwdH2BMbqb/5JeKIxntG8ZTBxMCm75 WLBRQNhI/VLdya0hg0IZIISdijFZF6sYSMWGr78DLN9nUSlpZR3DYpUbOHQ1JzHm uELhazIJDjMUNw== -----END CERTIFICATE-----Generated at Mon Feb 17 08:12:55 2025 by rpki-client