$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer File: 8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer (raw, json) Hash identifier: CZHxgFcotWyCV4Fg2AfV/XVEeusOBpq3N1cH9qJUZqs= Subject key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BB66B8F99D2FF08A6C9EA32DC7A59DFAA96F62A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft caRepository: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:27:18 +0000 Certificate not after: Wed 02 Apr 2025 18:32:18 +0000 Subordinate resources: AS: 266129 IP: 45.6.92.0/22 IP: 45.165.54.0/23 IP: 2804:3b18::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b6:6b:8f:99:d2:ff:08:a6:c9:ea:32:dc:7a:59:df:aa:96:f6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:27:18 2024 GMT Not After : Apr 2 18:32:18 2025 GMT Subject: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:41:56:f7:98:e2:57:34:da:13:4f:38:77: a9:54:2b:c5:b3:96:f2:44:c1:26:97:0f:d4:53:7c: ef:f1:ae:05:4e:e0:a8:dc:85:3f:74:6e:82:3a:5f: 35:9c:d5:6e:8d:6b:2e:fe:c6:c6:fe:47:f5:6c:95: 12:1d:ed:2a:06:c5:99:9e:8d:12:54:72:32:3a:ff: b8:e3:71:71:a1:7c:07:a8:59:8a:56:85:01:3d:4d: 0f:79:7e:39:6d:cb:88:d1:cb:9c:1b:7b:34:b7:b7: ab:aa:7e:89:f1:c6:5d:87:53:15:35:01:57:50:eb: d1:36:89:03:c1:3b:b0:06:63:7e:31:60:1c:a7:3f: 10:f6:9f:41:2b:18:fd:14:8e:95:1b:4e:6d:08:28: 21:68:6f:a1:43:28:33:3f:e5:d7:a0:02:df:88:d0: 07:fa:8d:30:34:46:05:c6:a1:e3:99:c5:a2:61:dd: 6a:73:67:a6:51:f2:c6:75:cc:5e:4c:70:fe:a1:fc: c4:aa:e9:0f:70:fa:0a:4c:35:89:4b:a6:0b:2a:a4: e0:21:74:9b:7c:ba:01:08:2f:74:37:02:37:4d:f1: ba:8e:de:02:b0:df:08:25:63:1d:a2:5c:58:e3:d0: bf:72:a6:2c:f3:8a:9a:0d:b3:6f:24:dd:77:b0:bf: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.92.0/22 45.165.54.0/23 IPv6: 2804:3b18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266129 Signature Algorithm: sha256WithRSAEncryption b7:24:29:e7:c1:d1:4c:71:eb:9f:60:13:f6:15:0b:dd:f0:98: 74:85:df:13:65:e3:82:72:f8:1b:38:a3:b6:7b:87:59:71:75: d9:d5:0d:05:e8:f8:b8:f4:3f:11:3d:44:bb:7d:c9:b7:ec:d1: 2a:d1:a1:c6:a7:e1:37:35:0a:f8:05:f4:58:52:84:86:53:bd: c1:63:56:05:79:ed:95:41:fe:cf:a4:b7:81:90:09:fc:f4:96: b0:2b:75:65:25:7b:7c:34:fd:99:33:03:66:b6:57:f2:f4:bd: 26:87:07:ce:cc:e0:03:bc:ba:2c:f8:03:5b:b0:13:3f:b9:6d: 09:ae:dc:f7:31:d3:e1:e3:79:5f:82:66:67:a5:87:c6:a9:98: 18:a6:d6:32:ff:eb:16:0b:dd:c2:eb:e8:c8:94:53:eb:1d:9f: c3:5d:40:e3:14:a3:5a:92:89:e3:0c:2f:39:47:c7:41:4f:73: f6:a8:c0:69:d3:9c:f6:14:f3:2a:f5:6b:20:49:61:55:63:68: 9b:68:bd:40:96:f0:5f:07:64:e3:53:62:61:f7:81:78:ef:07: e8:08:d7:d9:9c:09:d0:ac:e2:8a:5f:16:1b:bb:df:cb:2e:fb: 9b:bf:e2:47:3a:77:02:52:cc:e5:21:b4:5f:21:77:ac:a1:e7: f2:83:f8:ca -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUG7Zrj5nS/wimyeoy3HpZ36qW9iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI3MThaFw0yNTA0MDIxODMyMThaMDMxMTAvBgNV BAMTKDhFODRGRjkxMjFEOTI1NzM3NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoUFW95jiVzTaE084d6lUK8Wz lvJEwSaXD9RTfO/xrgVO4KjchT90boI6XzWc1W6Nay7+xsb+R/VslRId7SoGxZme jRJUcjI6/7jjcXGhfAeoWYpWhQE9TQ95fjlty4jRy5wbezS3t6uqfonxxl2HUxU1 AVdQ69E2iQPBO7AGY34xYBynPxD2n0ErGP0UjpUbTm0IKCFob6FDKDM/5degAt+I 0Af6jTA0RgXGoeOZxaJh3WpzZ6ZR8sZ1zF5McP6h/MSq6Q9w+gpMNYlLpgsqpOAh dJt8ugEIL3Q3AjdN8bqO3gKw3wglYx2iXFjj0L9ypizzipoNs28k3Xewv5dTAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOhP+RIdklc3bX d6CSUz2M7bnunjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lE elE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3dVcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1lE elE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3dVcvMS84RTg0 RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAItBlwDBAEtpTYwDQQCAAIwBwMFACgEOxgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBA+RMA0GCSqGSIb3DQEBCwUAA4IBAQC3JCnnwdFM ceufYBP2FQvd8Jh0hd8TZeOCcvgbOKO2e4dZcXXZ1Q0F6Pi49D8RPUS7fcm37NEq 0aHGp+E3NQr4BfRYUoSGU73BY1YFee2VQf7PpLeBkAn89JawK3VlJXt8NP2ZMwNm tlfy9L0mhwfOzOADvLos+ANbsBM/uW0Jrtz3MdPh43lfgmZnpYfGqZgYptYy/+sW C93C6+jIlFPrHZ/DXUDjFKNakonjDC85R8dBT3P2qMBp05z2FPMq9WsgSWFVY2ib aL1AlvBfB2TjU2Jh94F47wfoCNfZnAnQrOKKXxYbu9/LLvubv+JHOncCUszlIbRf IXesoefyg/jK -----END CERTIFICATE-----Generated at Sat Nov 23 05:01:45 2024 by rpki-client on console-fra.rpki-client.org