$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer File: 8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.cer (raw, json) Hash identifier: PWYnxVer96K1ZDk92pFUOo+MNniu2rDjHWMee4Vaogw= Subject key identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7316A92B37489DFEE612C916C54B09A994B2E069 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.mft caRepository: rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 30 Jul 2024 18:27:18 +0000 Certificate not after: Tue 29 Jul 2025 18:32:18 +0000 Subordinate resources: AS: 28577 IP: 138.99.52.0/22 IP: 186.208.216.0/21 IP: 2804:d74::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:16:a9:2b:37:48:9d:fe:e6:12:c9:16:c5:4b:09:a9:94:b2:e0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 18:27:18 2024 GMT Not After : Jul 29 18:32:18 2025 GMT Subject: CN=8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:5f:1b:9d:10:23:50:98:6f:57:bb:30:53: 3b:23:a7:84:d2:11:b3:0b:04:ba:60:4c:3e:17:a3: 4a:a1:5e:07:ad:f1:4e:0d:7e:c1:37:d3:a9:04:52: 34:3a:48:ff:69:de:14:e5:7f:87:2d:35:3a:4f:8d: 1c:3d:06:7e:48:3b:93:23:e7:67:0a:9f:21:ec:09: 2a:42:be:51:d3:d6:54:bd:42:dd:60:3a:dc:b3:c1: 3e:21:b6:47:94:da:59:bd:ee:b4:6f:80:b7:e9:97: 8f:33:54:c7:46:39:9e:5f:87:38:a0:d4:b6:57:9f: 69:9b:0e:7d:79:03:bc:e5:ba:94:05:d4:df:3e:17: a3:15:8e:2b:dc:d9:a8:42:e6:2b:c6:50:39:6d:d8: 44:cc:aa:70:10:cd:80:20:f1:5e:ba:c1:60:32:1a: 87:e4:1d:ad:0b:4e:88:e8:c6:8f:d3:e6:1d:56:18: 33:d0:2d:72:8d:35:49:76:c1:62:4b:cb:9b:ab:25: 50:19:93:83:46:b5:ee:2a:af:9b:ba:4c:9a:69:2a: 31:df:0e:83:4b:22:d9:74:9e:42:1e:24:43:d8:57: 70:fd:ec:f2:20:e6:16:97:ec:82:1a:cf:5f:79:80: 0a:c6:23:66:ae:5f:53:69:3f:d2:a7:2e:9b:60:dc: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:AA:8B:2D:24:A1:84:59:06:84:6F:8F:9F:EF:9D:5C:F6:AA:C1:91 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DwWFi4gHNefR79hus69DSk9Cu3FA5Hu8wtvSL8rQJTWM/0/8CAA8B2D24A1845906846F8F9FEF9D5CF6AAC191.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.52.0/22 186.208.216.0/21 IPv6: 2804:d74::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28577 Signature Algorithm: sha256WithRSAEncryption 20:43:ac:f1:0d:73:d6:10:e8:32:79:b6:03:59:93:f4:9a:23: ec:ad:2b:cf:cf:94:bb:52:38:75:3c:68:bb:6a:b1:eb:e4:2c: f7:9f:9d:11:26:61:e6:f0:a8:f6:90:79:d1:8c:86:11:a3:80: 22:f0:09:6e:b8:02:91:b8:b5:82:46:05:7a:d2:46:3d:cc:b9: cd:17:56:25:76:80:46:2f:3a:c0:27:3e:28:c3:cc:ee:0e:0a: df:b7:fc:7e:90:5e:50:0c:18:b5:32:28:67:5c:e3:91:0d:5f: a4:36:39:01:7f:16:a6:b9:3b:4c:97:80:3a:28:86:e3:fd:3c: 3d:b1:c1:b8:c4:4d:36:f0:88:01:c5:e8:10:de:87:9c:8d:40: db:f6:81:03:01:6d:06:93:eb:23:c6:36:ef:20:d2:49:83:ad: cd:87:d1:dc:9f:e0:47:cd:de:8f:ac:83:e8:ec:ab:3d:04:ee: 4f:d4:a5:f5:94:9b:a8:f7:46:71:4f:ff:2d:c1:2e:64:19:54: 50:b8:e1:96:1e:e8:f9:11:34:d5:b6:a2:8f:ae:bc:2d:27:21: dc:41:33:42:9d:d8:70:5e:3c:49:55:80:2e:2a:a5:6d:cf:bd: 62:c1:4e:1d:84:b9:ba:11:17:da:54:63:bf:c4:c5:02:1f:aa: ca:8e:be:20 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUcxapKzdInf7mEskWxUsJqZSy4GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MzAxODI3MThaFw0yNTA3MjkxODMyMThaMDMxMTAvBgNV BAMTKDhDQUE4QjJEMjRBMTg0NTkwNjg0NkY4RjlGRUY5RDVDRjZBQUMxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImF8bnRAjUJhvV7swUzsjp4TS EbMLBLpgTD4Xo0qhXget8U4NfsE306kEUjQ6SP9p3hTlf4ctNTpPjRw9Bn5IO5Mj 52cKnyHsCSpCvlHT1lS9Qt1gOtyzwT4htkeU2lm97rRvgLfpl48zVMdGOZ5fhzig 1LZXn2mbDn15A7zlupQF1N8+F6MVjivc2ahC5ivGUDlt2ETMqnAQzYAg8V66wWAy GofkHa0LTojoxo/T5h1WGDPQLXKNNUl2wWJLy5urJVAZk4NGte4qr5u6TJppKjHf DoNLItl0nkIeJEPYV3D97PIg5haX7IIaz195gArGI2auX1NpP9KnLptg3A1JAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMqostJKGEWQaE b4+f751c9qrBkTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHdX Rmk0Z0hOZWZSNzlodXM2OURTazlDdTNGQTVIdTh3dHZTTDhyUUpUV00vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R3 V0ZpNGdITmVmUjc5aHVzNjlEU2s5Q3UzRkE1SHU4d3R2U0w4clFKVFdNLzAvOENB QThCMkQyNEExODQ1OTA2ODQ2RjhGOUZFRjlENUNGNkFBQzE5MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimM0AwQDutDYMA0EAgACMAcDBQAoBA10MBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAm+hMA0GCSqGSIb3DQEBCwUAA4IBAQAgQ6zxDXPW EOgyebYDWZP0miPsrSvPz5S7Ujh1PGi7arHr5Cz3n50RJmHm8Kj2kHnRjIYRo4Ai 8AluuAKRuLWCRgV60kY9zLnNF1YldoBGLzrAJz4ow8zuDgrft/x+kF5QDBi1Mihn XOORDV+kNjkBfxamuTtMl4A6KIbj/Tw9scG4xE028IgBxegQ3oecjUDb9oEDAW0G k+sjxjbvINJJg63Nh9Hcn+BHzd6PrIPo7Ks9BO5P1KX1lJuo90ZxT/8twS5kGVRQ uOGWHuj5ETTVtqKPrrwtJyHcQTNCndhwXjxJVYAuKqVtz71iwU4dhLm6ERfaVGO/ xMUCH6rKjr4g -----END CERTIFICATE-----Generated at Wed Nov 27 02:00:13 2024 by rpki-client on console-ams.rpki-client.org