$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer File: 8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.cer (raw, json) Hash identifier: g0iowrabdk9VGuA8wUKqpVnCbQJyoxFRGkDXm3k88yM= Subject key identifier: 8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E29A52A09B6353BB44837C04F420B3328378A31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft caRepository: rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 24 Jun 2024 17:55:12 +0000 Certificate not after: Mon 23 Jun 2025 18:00:12 +0000 Subordinate resources: AS: 52532 IP: 45.235.80.0/22 IP: 179.106.96.0/20 IP: 2804:2d8::/32 IP: 2804:df8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 21:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:29:a5:2a:09:b6:35:3b:b4:48:37:c0:4f:42:0b:33:28:37:8a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jun 24 17:55:12 2024 GMT Not After : Jun 23 18:00:12 2025 GMT Subject: CN=8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:1f:59:d2:ad:76:18:42:1b:8c:a8:ae:a4: 36:ce:5b:b7:c8:e8:ac:92:e4:9a:7d:6d:8a:67:2e: 4b:a7:1f:4f:30:87:4c:81:c7:11:a1:14:32:8e:9d: da:42:49:1a:a1:1f:90:98:8d:12:73:f7:2d:69:e4: 91:69:05:a0:c1:86:22:cb:dd:25:40:5f:ab:bb:89: 6a:36:a8:af:83:3c:26:a9:ab:c0:cc:0b:82:eb:88: 0a:a2:1a:8a:d5:53:f2:b7:1a:54:35:10:83:fa:57: 29:c8:11:94:82:5b:e9:37:19:7a:15:6e:7f:fd:65: 69:f6:41:88:6b:65:80:3b:7a:d3:b4:af:c4:b2:ee: 38:e3:28:f5:f4:5d:ca:30:25:fc:28:b4:c9:97:e0: 78:ab:24:43:1a:26:47:8c:54:2b:de:78:de:48:7e: a2:8e:4a:48:9a:25:30:ab:b3:89:42:45:45:b3:d6: 09:d4:27:bc:2b:e0:fd:05:11:25:e6:30:a5:04:4c: 7f:a7:42:5b:5a:36:5a:b8:bd:9c:0b:3a:18:2c:e6: 4d:95:b6:2e:84:7f:8f:08:22:ed:12:b2:07:eb:19: 81:24:2d:66:64:01:e5:2d:d4:27:cf:0d:b4:eb:ac: 5c:e3:4a:93:2b:93:bd:43:f1:00:ec:65:97:51:c7: bc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:FC:66:9F:D8:1A:66:51:E6:EE:3A:3A:38:E7:B0:91:B9:1D:08:F0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/8EFC669FD81A6651E6EE3A3A38E7B091B91D08F0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.80.0/22 179.106.96.0/20 IPv6: 2804:2d8::/32 2804:df8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52532 Signature Algorithm: sha256WithRSAEncryption 9e:aa:cb:f1:6f:df:82:61:80:9e:d6:48:a6:09:a9:2f:15:9d: a4:07:8f:fb:cb:70:dd:8e:5b:01:a5:9b:17:2f:71:98:b3:04: cb:ae:d3:b7:0c:b7:d6:13:e9:1b:eb:61:82:d9:be:16:da:e1: 67:cd:02:90:65:04:af:a9:3f:f1:7f:cd:3a:ec:b2:c0:db:4b: eb:d8:e5:9d:2c:50:17:df:05:6b:e6:f5:fb:66:69:0a:7f:aa: 5f:2f:d2:25:95:a8:7d:1c:29:a3:f7:b2:84:66:e1:0d:fc:28: 65:b9:04:ad:99:de:d3:9d:94:6e:30:d9:f2:3d:10:54:9b:82: 86:ae:b9:d8:7f:fc:23:d8:fb:b3:24:1e:2a:bb:ad:49:8a:d6: 5a:56:41:70:17:1a:70:5a:78:25:1d:0d:a9:64:0d:17:a7:6f: 9d:ef:a2:69:0a:e9:64:c5:05:e9:c6:83:91:57:f1:dc:f4:24: a9:02:17:bb:2b:82:52:b5:d0:a4:18:14:da:4e:b5:58:86:92: aa:be:91:58:24:26:a2:42:5a:39:6b:84:18:09:49:f8:c4:bd: 8e:24:26:9d:d8:93:a1:21:c7:93:42:95:f4:8c:56:fa:fe:b3: ae:85:42:62:d5:ae:5c:c9:8e:ae:84:f0:a3:ae:45:04:d3:a1: 2d:34:dd:69 -----BEGIN CERTIFICATE----- MIIGPTCCBSWgAwIBAgIUPimlKgm2NTu0SDfAT0ILMyg3ijEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA2MjQxNzU1MTJaFw0yNTA2MjMxODAwMTJaMDMxMTAvBgNV BAMTKDhFRkM2NjlGRDgxQTY2NTFFNkVFM0EzQTM4RTdCMDkxQjkxRDA4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDR9Z0q12GEIbjKiupDbOW7fI 6KyS5Jp9bYpnLkunH08wh0yBxxGhFDKOndpCSRqhH5CYjRJz9y1p5JFpBaDBhiLL 3SVAX6u7iWo2qK+DPCapq8DMC4LriAqiGorVU/K3GlQ1EIP6VynIEZSCW+k3GXoV bn/9ZWn2QYhrZYA7etO0r8Sy7jjjKPX0XcowJfwotMmX4HirJEMaJkeMVCveeN5I fqKOSkiaJTCrs4lCRUWz1gnUJ7wr4P0FESXmMKUETH+nQltaNlq4vZwLOhgs5k2V ti6Ef48IIu0SsgfrGYEkLWZkAeUt1CfPDbTrrFzjSpMrk71D8QDsZZdRx7zhAgMB AAGjggNHMIIDQzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSO/Gaf2BpmUebu Ojo457CRuR0I8DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM01y ZWk3Y3M1ZFlZdXFFOFdSTlpRanFVYkRZNG9mcTNlcEd0UTlLc05GVG8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNN cmVpN2NzNWRZWXVxRThXUk5aUWpxVWJEWTRvZnEzZXBHdFE5S3NORlRvLzAvOEVG QzY2OUZEODFBNjY1MUU2RUUzQTNBMzhFN0IwOTFCOTFEMDhGMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjASBAIAATAMAwQCLetQAwQEs2pgMBQEAgACMA4DBQAoBALYAwUAKAQN +DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAzTQwDQYJKoZIhvcNAQELBQADggEB AJ6qy/Fv34JhgJ7WSKYJqS8VnaQHj/vLcN2OWwGlmxcvcZizBMuu07cMt9YT6Rvr YYLZvhba4WfNApBlBK+pP/F/zTrsssDbS+vY5Z0sUBffBWvm9ftmaQp/ql8v0iWV qH0cKaP3soRm4Q38KGW5BK2Z3tOdlG4w2fI9EFSbgoauudh//CPY+7MkHiq7rUmK 1lpWQXAXGnBaeCUdDalkDRenb53vomkK6WTFBenGg5FX8dz0JKkCF7srglK10KQY FNpOtViGkqq+kVgkJqJCWjlrhBgJSfjEvY4kJp3Yk6Ehx5NClfSMVvr+s66FQmLV rlzJjq6E8KOuRQTToS003Wk= -----END CERTIFICATE-----Generated at Mon Jul 1 19:49:04 2024 by rpki-client on console-fra.rpki-client.org