$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8F8A7FF47CDD103EC352E1196652B4116F6D1128.cer File: 8F8A7FF47CDD103EC352E1196652B4116F6D1128.cer (raw, json) Hash identifier: BjaNsjyUge9q9DMuwH4ecpUi43R5A/JVn0/lr7+YsCY= Subject key identifier: 8F:8A:7F:F4:7C:DD:10:3E:C3:52:E1:19:66:52:B4:11:6F:6D:11:28 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4F42EF90500716BA7A9BAA51860BEDA9187903AC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/8F8A7FF47CDD103EC352E1196652B4116F6D1128.mft caRepository: rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Oct 2024 17:36:09 +0000 Certificate not after: Mon 27 Oct 2025 17:41:09 +0000 Subordinate resources: AS: 271007 IP: 170.254.236.0/22 IP: 2804:74d8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:42:ef:90:50:07:16:ba:7a:9b:aa:51:86:0b:ed:a9:18:79:03:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 28 17:36:09 2024 GMT Not After : Oct 27 17:41:09 2025 GMT Subject: CN=8F8A7FF47CDD103EC352E1196652B4116F6D1128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:34:ab:3c:ce:ad:b1:62:59:a7:47:15:c8: 24:16:a9:f9:56:e7:fe:bd:b6:03:46:a2:a7:09:32: 22:e2:35:76:a5:4c:69:74:a4:b0:52:f2:81:70:6f: 23:c1:7e:0d:c3:ee:28:19:ca:27:99:04:d9:24:39: 45:ea:df:85:b8:25:22:d5:a9:fd:f5:6f:bb:fb:fe: 40:a8:1a:74:ef:94:59:98:71:be:8d:bc:0d:17:80: 87:03:78:c4:4a:44:f3:9a:9c:4a:e4:a4:68:fa:e1: f2:cb:06:d8:e0:df:21:1f:e5:8b:b7:c5:0c:e9:54: 83:35:62:08:57:98:cf:1f:30:6d:c7:c1:a4:8e:13: e9:ec:62:b2:0e:9c:ef:f3:8a:3c:b5:a3:ad:90:c6: fa:99:ed:53:db:d6:68:d9:8e:f1:15:8d:b1:63:9c: 00:4c:40:ca:e4:2b:2a:94:94:e6:01:27:36:3b:d5: f1:ee:21:96:22:d7:49:39:53:9c:b6:44:c8:69:41: d3:8a:66:17:43:fc:f3:a8:6d:1a:a7:a4:bc:9a:d9: d1:92:96:da:44:c6:60:5a:00:3d:e8:e9:ab:b5:be: 00:f7:70:72:a2:34:ea:10:6d:82:10:5c:0b:45:9e: 41:78:82:35:93:97:d8:06:fb:89:07:b6:8a:1e:f9: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:8A:7F:F4:7C:DD:10:3E:C3:52:E1:19:66:52:B4:11:6F:6D:11:28 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/8F8A7FF47CDD103EC352E1196652B4116F6D1128.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.236.0/22 IPv6: 2804:74d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271007 Signature Algorithm: sha256WithRSAEncryption 29:a2:2f:20:61:a4:18:17:68:cd:c3:7d:a6:d9:b5:5c:5b:3d: 83:89:6c:96:23:cf:a6:4d:42:12:94:4a:8f:19:bb:c9:a2:e1: 6e:52:79:2c:2e:b4:47:d7:68:80:24:ab:97:f8:cc:77:fe:86: da:e3:c2:ff:0a:e1:3b:68:37:e1:d6:db:7b:6e:25:93:d6:04: 3d:41:c4:62:35:9d:dd:46:c0:f8:ed:ee:91:02:77:5b:1b:9d: cc:c8:11:46:10:4d:82:40:06:26:6f:8b:ea:0a:a8:e5:96:90: 70:2d:c8:db:62:ae:70:cf:72:c5:de:8f:b2:1f:f9:c1:e7:75: 70:dc:c9:e2:2e:75:2f:8a:0c:0d:d0:a2:e0:d6:5e:e0:36:41: c5:da:cb:be:f3:16:42:17:40:1d:bc:8a:ed:d9:44:dd:f1:3d: 71:fe:17:ab:b2:b2:fe:f0:1c:6e:eb:97:08:3c:30:0c:da:e0: f6:93:01:c7:c6:b2:82:47:d1:0e:ad:38:17:91:32:af:40:cf: 6c:a7:3c:d8:86:f8:4c:53:d4:06:af:50:71:fd:0f:9a:a1:99: 40:9b:f4:78:33:36:8b:ac:6e:39:9f:aa:3e:53:55:7e:de:f0: 08:43:fb:c5:eb:3c:fe:0d:a0:a4:6e:c2:7f:32:7c:3b:f6:75: 41:d4:51:98 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUT0LvkFAHFrp6m6pRhgvtqRh5A6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjgxNzM2MDlaFw0yNTEwMjcxNzQxMDlaMDMxMTAvBgNV BAMTKDhGOEE3RkY0N0NERDEwM0VDMzUyRTExOTY2NTJCNDExNkY2RDExMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeazSrPM6tsWJZp0cVyCQWqflW 5/69tgNGoqcJMiLiNXalTGl0pLBS8oFwbyPBfg3D7igZyieZBNkkOUXq34W4JSLV qf31b7v7/kCoGnTvlFmYcb6NvA0XgIcDeMRKRPOanErkpGj64fLLBtjg3yEf5Yu3 xQzpVIM1YghXmM8fMG3HwaSOE+nsYrIOnO/zijy1o62QxvqZ7VPb1mjZjvEVjbFj nABMQMrkKyqUlOYBJzY71fHuIZYi10k5U5y2RMhpQdOKZhdD/POobRqnpLya2dGS ltpExmBaAD3o6au1vgD3cHKiNOoQbYIQXAtFnkF4gjWTl9gG+4kHtooe+Rv5AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSPin/0fN0QPsNS 4RlmUrQRb20RKDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWtR c1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdGdzMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fr UXNQWjl2ZHAyQU5XUm9mN05mMmt3bXBKcXJoSFh2U0N5dWJMUmU3RnczLzAvOEY4 QTdGRjQ3Q0REMTAzRUMzNTJFMTE5NjY1MkI0MTE2RjZEMTEyOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqv7sMA0EAgACMAcDBQAoBHTYMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQinzANBgkqhkiG9w0BAQsFAAOCAQEAKaIvIGGkGBdozcN9 ptm1XFs9g4lsliPPpk1CEpRKjxm7yaLhblJ5LC60R9dogCSrl/jMd/6G2uPC/wrh O2g34dbbe24lk9YEPUHEYjWd3UbA+O3ukQJ3WxudzMgRRhBNgkAGJm+L6gqo5ZaQ cC3I22KucM9yxd6Psh/5wed1cNzJ4i51L4oMDdCi4NZe4DZBxdrLvvMWQhdAHbyK 7dlE3fE9cf4Xq7Ky/vAcbuuXCDwwDNrg9pMBx8aygkfRDq04F5Eyr0DPbKc82Ib4 TFPUBq9Qcf0PmqGZQJv0eDM2i6xuOZ+qPlNVft7wCEP7xes8/g2gpG7CfzJ8O/Z1 QdRRmA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:11:02 2024 by rpki-client on console-ams.rpki-client.org