$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer File: 8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer (raw, json) Hash identifier: wwS+PSM06Nw89QylA3aqi8Dn1GT2ahtmjug00b+ID/g= Subject key identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 01F724B146C3CF1D7560ECC82BDCCF0E08E1FE14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft caRepository: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 09 Sep 2024 14:48:20 +0000 Certificate not after: Mon 08 Sep 2025 14:53:20 +0000 Subordinate resources: AS: 263665 IP: 45.165.20.0/22 IP: 45.227.188.0/22 IP: 131.161.108.0/22 IP: 131.255.156.0/22 IP: 138.255.172.0/22 IP: 168.196.20.0/22 IP: 170.150.112.0/22 IP: 170.150.204.0/22 IP: 191.241.32.0/21 IP: 2804:1134::/32 IP: 2804:343c::/32 IP: 2804:47c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 20:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f7:24:b1:46:c3:cf:1d:75:60:ec:c8:2b:dc:cf:0e:08:e1:fe:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 9 14:48:20 2024 GMT Not After : Sep 8 14:53:20 2025 GMT Subject: CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:dd:74:98:d6:78:38:eb:ba:1f:ef:b1:ca: c2:d5:04:c6:6d:64:b3:4a:b5:72:b8:2e:ea:83:df: 18:47:54:e5:ac:be:b9:53:92:63:94:86:88:71:1d: e4:0b:81:ae:39:19:5f:53:20:2b:08:f5:91:23:57: 99:0d:53:f0:6d:15:2c:14:2a:0e:b9:6c:30:d8:3f: 49:ed:40:69:88:e0:85:dc:72:4f:3e:49:a7:3e:af: b9:1d:57:9e:35:a4:68:1a:45:60:0c:5d:2b:7e:6d: 71:5b:80:90:c8:64:bb:61:2d:ae:0b:8e:c7:12:b4: d0:d1:40:a8:43:6a:36:ae:9c:20:9f:1d:d8:59:49: bb:f3:64:42:9f:5a:93:29:48:81:83:c3:f1:d3:b3: 3e:5e:00:46:2a:6a:85:31:48:a7:40:4a:8a:4a:d9: 8c:b8:ef:4b:57:d1:cc:0a:86:6a:be:e1:27:9a:aa: 06:39:d5:1d:74:02:4c:e1:b7:83:32:f6:48:cb:ec: 06:30:a7:b0:ff:58:34:1c:d3:18:da:68:f5:4a:a3: ba:86:77:b4:12:10:3e:a2:52:da:58:e3:74:9d:0f: be:d6:47:04:09:dd:86:c0:95:65:eb:fa:c9:94:fa: 58:4e:75:10:19:8a:7e:96:c5:d3:04:9d:51:2d:e2: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.20.0/22 45.227.188.0/22 131.161.108.0/22 131.255.156.0/22 138.255.172.0/22 168.196.20.0/22 170.150.112.0/22 170.150.204.0/22 191.241.32.0/21 IPv6: 2804:1134::/32 2804:343c::/32 2804:47c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263665 Signature Algorithm: sha256WithRSAEncryption 80:80:03:66:a9:0a:71:28:54:41:88:d3:b3:f6:2c:59:04:f4: 7c:34:0b:5d:d7:ac:29:5b:af:a5:91:12:da:3f:85:ae:99:ad: 38:92:34:78:e9:09:1c:dc:24:25:e3:fe:2e:1c:9b:58:e1:81: 66:ba:ae:b1:96:84:d6:f6:4e:38:18:f4:93:f0:95:3f:13:57: 79:66:2c:57:c9:23:7f:95:1b:88:90:da:eb:92:c7:1d:dd:dd: 0f:1e:9c:31:da:f5:d8:7c:f0:bf:de:63:be:a5:12:07:99:ed: 30:09:03:7a:08:ec:20:7b:17:a1:bb:e8:51:2a:5a:32:6f:4a: 47:fd:af:47:5e:8b:af:87:e9:4b:c1:76:a3:33:c1:40:60:19: de:f1:bc:10:7d:f6:c5:ec:20:6e:9b:63:64:14:e9:f2:3a:02: ff:39:ee:b3:7c:46:92:54:1a:b2:3b:da:ba:80:4f:c1:4c:80: f0:3d:10:e6:4a:2d:9c:b9:fb:25:b8:76:d4:40:74:76:3e:04: 27:12:d3:6c:2f:c1:48:f7:84:51:a9:66:37:d8:0d:c7:a8:14: 1a:2b:9d:d4:45:86:f3:c8:cc:84:10:e0:4c:53:34:0a:41:99: 70:5d:30:29:ab:4c:d0:d0:8d:39:88:f8:29:4d:8b:a7:29:83: 66:6f:7c:c7 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUAfcksUbDzx11YOzIK9zPDgjh/hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDkxNDQ4MjBaFw0yNTA5MDgxNDUzMjBaMDMxMTAvBgNV BAMTKDhFRjFBQTg3ODNBREIzM0NBQkRCRjk3MTNGOTVGMjkwQzIyNUI3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6d10mNZ4OOu6H++xysLVBMZt ZLNKtXK4LuqD3xhHVOWsvrlTkmOUhohxHeQLga45GV9TICsI9ZEjV5kNU/BtFSwU Kg65bDDYP0ntQGmI4IXcck8+Sac+r7kdV541pGgaRWAMXSt+bXFbgJDIZLthLa4L jscStNDRQKhDajaunCCfHdhZSbvzZEKfWpMpSIGDw/HTsz5eAEYqaoUxSKdASopK 2Yy470tX0cwKhmq+4SeaqgY51R10Akzht4My9kjL7AYwp7D/WDQc0xjaaPVKo7qG d7QSED6iUtpY43SdD77WRwQJ3YbAlWXr+smU+lhOdRAZin6WxdMEnVEt4gh5AgMB AAGjggN4MIIDdDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSO8aqHg62zPKvb +XE/lfKQwiW3/TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU03 WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1ncmYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlN N1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAvOEVG MUFBODc4M0FEQjMzQ0FCREJGOTcxM0Y5NUYyOTBDMjI1QjdGRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEH AQH/BF0wWzA8BAIAATA2AwQCLaUUAwQCLeO8AwQCg6FsAwQCg/+cAwQCiv+sAwQC qMQUAwQCqpZwAwQCqpbMAwQDv/EgMBsEAgACMBUDBQAoBBE0AwUAKAQ0PAMFACgE R8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAXxMA0GCSqGSIb3DQEBCwUAA4IB AQCAgANmqQpxKFRBiNOz9ixZBPR8NAtd16wpW6+lkRLaP4Wuma04kjR46Qkc3CQl 4/4uHJtY4YFmuq6xloTW9k44GPST8JU/E1d5ZixXySN/lRuIkNrrkscd3d0PHpwx 2vXYfPC/3mO+pRIHme0wCQN6COwgexehu+hRKloyb0pH/a9HXouvh+lLwXajM8FA YBne8bwQffbF7CBum2NkFOnyOgL/Oe6zfEaSVBqyO9q6gE/BTIDwPRDmSi2cufsl uHbUQHR2PgQnEtNsL8FI94RRqWY32A3HqBQaK53URYbzyMyEEOBMUzQKQZlwXTAp q0zQ0I05iPgpTYunKYNmb3zH -----END CERTIFICATE-----Generated at Sat Sep 28 19:14:52 2024 by rpki-client on console-ams.rpki-client.org