$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer File: 8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer (raw, json) Hash identifier: nsR1jHjEQOUZSdg5UQvDuDqctT5tuV9c/2+XzMI6Fl0= Subject key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5932B715AE5065FB32903BBB1E85A24F0A372D22 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft caRepository: rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 08 Nov 2024 14:45:59 +0000 Certificate not after: Fri 07 Nov 2025 14:50:59 +0000 Subordinate resources: AS: 268663 IP: 45.165.12.0/22 IP: 2804:54a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 20:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:32:b7:15:ae:50:65:fb:32:90:3b:bb:1e:85:a2:4f:0a:37:2d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 8 14:45:59 2024 GMT Not After : Nov 7 14:50:59 2025 GMT Subject: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:71:10:39:21:bb:ad:81:e3:5f:6f:61:0c: 39:ef:15:37:c1:7f:28:70:5a:e4:c2:1c:d1:d2:4f: af:e0:1f:8b:83:27:34:5f:64:3d:16:11:d5:fd:56: ad:61:da:a8:ab:b4:2d:67:82:cc:a1:55:84:fc:11: 88:c3:30:86:c7:6d:8f:c4:1c:80:d5:10:2b:de:61: cb:4d:d7:87:78:8c:95:a2:7d:35:10:f1:7c:d7:bc: c3:3e:11:c4:f7:02:2a:00:cf:47:ce:4b:46:eb:75: 79:f8:0b:72:22:9f:43:eb:c9:17:6c:86:4d:93:f0: 8d:fc:23:be:27:ea:34:3f:ad:b5:4a:fe:d9:49:5a: c0:c8:96:b8:c9:db:52:85:c2:ef:aa:7c:a0:9d:f9: 3f:f7:fc:d7:28:57:f4:c4:8e:e0:06:e5:a2:c3:11: 2d:54:99:bf:c4:2c:be:e6:72:ae:3b:84:8d:0c:0b: e6:e0:48:14:09:b3:14:99:ab:9e:0b:88:4c:2d:33: 97:88:aa:67:f0:48:8c:b0:e3:f7:c1:8a:0e:01:17: be:d5:fc:e7:27:c9:bc:bd:04:1e:cb:19:6c:dc:f3: 36:cb:33:57:72:c8:ce:ef:11:1c:0d:71:70:fb:c7: ac:1f:b8:d6:2a:ff:e2:3b:49:32:e9:6f:03:d7:61: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.12.0/22 IPv6: 2804:54a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268663 Signature Algorithm: sha256WithRSAEncryption 9a:3f:a5:27:e4:e9:4a:3b:b4:e8:2e:e3:d8:f7:f2:6d:01:a8: ab:37:92:df:16:29:e6:95:6b:fc:a5:32:bc:bd:4e:69:e5:16: 7f:1a:79:14:3d:c6:72:2e:f9:f1:87:f8:99:80:c3:c0:7a:64: 71:01:d0:bf:c4:0f:a8:64:39:5d:6c:22:73:c4:a6:05:91:9f: f3:6d:17:1f:38:1a:c0:4c:c9:27:dd:b9:6e:53:92:97:d5:96: 14:6e:c6:93:4d:5a:d3:74:65:61:3a:91:58:ef:a9:81:46:74: 00:e4:9e:12:0c:a1:07:97:f4:4e:b1:98:a1:e0:fc:9d:b0:42: ba:db:d1:3a:12:ff:e2:3c:74:03:9d:7a:c8:e0:0b:93:61:33: c5:c4:81:5a:03:f2:02:5b:9d:d5:55:80:ed:cb:87:4d:7f:14: 56:22:a6:2c:ae:29:f4:9d:63:66:45:2f:2f:92:23:32:f8:ba: fb:19:9e:33:ae:4d:d8:8f:57:2f:98:95:4a:bb:49:a8:28:79: 94:c3:90:71:24:fe:05:76:0b:e5:0f:f3:72:07:1b:ce:ab:f8: 9b:8d:a3:c2:cb:c3:14:65:50:d2:09:bc:5b:b3:c6:45:1f:79: 23:95:f3:65:a5:6d:24:27:06:9c:3a:2c:ea:a4:af:68:b9:01: 16:05:74:8b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUWTK3Fa5QZfsykDu7HoWiTwo3LSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDgxNDQ1NTlaFw0yNTExMDcxNDUwNTlaMDMxMTAvBgNV BAMTKDhEQzVENUVEQUFGMzNDNzA2NjI0NEQyOEU1MzRDRkQ1RDY2OTEzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLHEQOSG7rYHjX29hDDnvFTfB fyhwWuTCHNHST6/gH4uDJzRfZD0WEdX9Vq1h2qirtC1ngsyhVYT8EYjDMIbHbY/E HIDVECveYctN14d4jJWifTUQ8XzXvMM+EcT3AioAz0fOS0brdXn4C3Iin0PryRds hk2T8I38I74n6jQ/rbVK/tlJWsDIlrjJ21KFwu+qfKCd+T/3/NcoV/TEjuAG5aLD ES1Umb/ELL7mcq47hI0MC+bgSBQJsxSZq54LiEwtM5eIqmfwSIyw4/fBig4BF77V /Ocnyby9BB7LGWzc8zbLM1dyyM7vERwNcXD7x6wfuNYq/+I7STLpbwPXYZwpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSNxdXtqvM8cGYk TSjlNM/V1mkTUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnRH aHJpOUdtcFduV3dva2lTRUttd2tSTWRhSENrOHpNeHREakxjR2tQZlovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ0 R2hyaTlHbXBXbld3b2tpU0VLbXdrUk1kYUhDazh6TXh0RGpMY0drUGZaLzAvOERD NUQ1RURBQUYzM0M3MDY2MjQ0RDI4RTUzNENGRDVENjY5MTM1My5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaUMMA0EAgACMAcDBQAoBFSoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQZdzANBgkqhkiG9w0BAQsFAAOCAQEAmj+lJ+TpSju06C7j 2PfybQGoqzeS3xYp5pVr/KUyvL1OaeUWfxp5FD3Gci758Yf4mYDDwHpkcQHQv8QP qGQ5XWwic8SmBZGf820XHzgawEzJJ925blOSl9WWFG7Gk01a03RlYTqRWO+pgUZ0 AOSeEgyhB5f0TrGYoeD8nbBCutvROhL/4jx0A516yOALk2EzxcSBWgPyAlud1VWA 7cuHTX8UViKmLK4p9J1jZkUvL5IjMvi6+xmeM65N2I9XL5iVSrtJqCh5lMOQcST+ BXYL5Q/zcgcbzqv4m42jwsvDFGVQ0gm8W7PGRR95I5XzZaVtJCcGnDos6qSvaLkB FgV0iw== -----END CERTIFICATE-----Generated at Fri Apr 4 19:42:16 2025 by rpki-client