$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.cer File: 953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.cer (raw, json) Hash identifier: 9Z11I1eQ2NeX6I5uUX5oTr2Z0YbngiRv2dpBN66v6x0= Subject key identifier: 95:3F:2B:CF:F3:25:6F:C6:3A:E0:A2:F1:22:7B:03:D7:34:47:C5:C9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 238701B5D4E9A07443156F4C6C7EDE1FEB539C6B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.mft caRepository: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Oct 2024 18:17:31 +0000 Certificate not after: Fri 24 Oct 2025 18:22:31 +0000 Subordinate resources: AS: 11432 IP: 200.155.128.0/18 IP: 200.170.192.0/18 IP: 200.194.248.0/21 IP: 200.201.128.0/19 IP: 2804:138::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:87:01:b5:d4:e9:a0:74:43:15:6f:4c:6c:7e:de:1f:eb:53:9c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 25 18:17:31 2024 GMT Not After : Oct 24 18:22:31 2025 GMT Subject: CN=953F2BCFF3256FC63AE0A2F1227B03D73447C5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:67:28:c9:68:f3:a4:b9:d8:49:cb:f5:d9: 7b:80:50:fc:6e:7e:1a:6a:27:a0:e2:16:a6:70:2f: e3:08:e4:32:22:03:7d:4a:84:68:36:3e:59:35:bd: d0:16:df:3e:8a:8a:f4:c5:8a:d9:3b:91:ed:58:c5: d8:1d:18:84:c5:66:82:22:51:9e:1f:20:25:e6:fd: f1:07:ab:ae:2d:b1:69:29:f2:c5:f4:66:21:41:59: 90:3c:26:b9:8c:74:d1:37:59:52:79:75:b1:03:ad: 44:4b:ed:57:3a:73:60:b6:25:05:23:d5:32:f5:d0: 8f:98:db:87:39:3e:5f:d5:2c:be:6e:fe:0e:78:30: 78:96:c8:90:74:f7:88:aa:37:91:da:6e:5f:91:cb: 7a:04:d0:3a:0a:bd:0b:75:1a:cd:f2:48:64:76:39: 21:70:8e:5c:cf:e6:ad:d9:fc:4f:56:7e:17:80:8c: 34:b4:7a:b4:c0:e5:12:71:ee:53:e7:11:00:f2:dd: cb:7d:cf:1e:42:de:14:3e:91:fd:58:e2:26:4e:68: af:50:97:db:aa:0a:b1:6f:40:c3:98:5c:f0:eb:27: a3:60:f1:47:5d:ec:8a:1c:5f:7c:c7:83:6b:bd:c2: 65:1f:e6:0c:30:3f:b1:ee:ba:1d:49:92:59:63:01: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:3F:2B:CF:F3:25:6F:C6:3A:E0:A2:F1:22:7B:03:D7:34:47:C5:C9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/953F2BCFF3256FC63AE0A2F1227B03D73447C5C9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.155.128.0/18 200.170.192.0/18 200.194.248.0/21 200.201.128.0/19 IPv6: 2804:138::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11432 Signature Algorithm: sha256WithRSAEncryption 9e:66:11:c5:79:8b:1e:a2:d9:01:77:fc:7e:2d:2d:59:b5:3b: d3:29:42:15:2a:06:a0:cb:0d:ac:df:b1:32:07:85:c5:6e:59: bd:eb:03:01:53:82:2e:be:e8:62:98:62:01:17:d3:f1:50:30: 8a:1a:6d:f2:9b:1c:aa:e5:0c:ec:80:41:15:07:ba:e2:3c:83: 8f:78:56:19:7a:15:53:fb:42:6e:97:89:9a:bb:63:44:94:ec: 35:eb:f6:9b:a0:fc:d0:1f:ec:d9:68:0b:db:d4:73:d2:3f:c1: 62:27:f0:a1:32:9e:2b:7d:ed:dc:26:a4:81:45:3c:15:76:76: b2:8e:e0:8d:af:99:06:8a:c1:6b:94:da:79:2e:ac:ad:46:ae: 63:12:0f:bc:1a:f9:18:8d:b9:25:b3:71:70:c9:81:84:72:a2: 90:7d:89:6b:ee:ae:cc:be:04:5f:ff:79:25:f2:e3:84:66:50: 1f:35:b4:63:43:ec:c6:0c:52:b2:1a:dd:21:b1:6a:09:54:99: 08:35:03:1c:9c:b7:0b:99:47:61:3f:3f:88:e5:c5:a1:53:85: 6d:01:55:27:64:43:44:4b:dc:70:22:84:8c:cd:17:47:47:fc: 71:e9:fc:e4:2d:cb:33:63:0f:d6:0a:b4:57:33:3f:68:8c:cf: 7e:dd:d8:cf -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUI4cBtdTpoHRDFW9MbH7eH+tTnGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjUxODE3MzFaFw0yNTEwMjQxODIyMzFaMDMxMTAvBgNV BAMTKDk1M0YyQkNGRjMyNTZGQzYzQUUwQTJGMTIyN0IwM0Q3MzQ0N0M1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDGcoyWjzpLnYScv12XuAUPxu fhpqJ6DiFqZwL+MI5DIiA31KhGg2Plk1vdAW3z6KivTFitk7ke1YxdgdGITFZoIi UZ4fICXm/fEHq64tsWkp8sX0ZiFBWZA8JrmMdNE3WVJ5dbEDrURL7Vc6c2C2JQUj 1TL10I+Y24c5Pl/VLL5u/g54MHiWyJB094iqN5Habl+Ry3oE0DoKvQt1Gs3ySGR2 OSFwjlzP5q3Z/E9WfheAjDS0erTA5RJx7lPnEQDy3ct9zx5C3hQ+kf1Y4iZOaK9Q l9uqCrFvQMOYXPDrJ6Ng8Udd7IocX3zHg2u9wmUf5gwwP7Huuh1JklljAYYVAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSVPyvP8yVvxjrg ovEiewPXNEfFyTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhH aHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQalMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4 R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAvOTUz RjJCQ0ZGMzI1NkZDNjNBRTBBMkYxMjI3QjAzRDczNDQ3QzVDOS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAeBAIAATAYAwQGyJuAAwQGyKrAAwQDyML4AwQFyMmAMA0EAgACMAcD BQAoBAE4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiyoMA0GCSqGSIb3DQEBCwUA A4IBAQCeZhHFeYseotkBd/x+LS1ZtTvTKUIVKgagyw2s37EyB4XFblm96wMBU4Iu vuhimGIBF9PxUDCKGm3ymxyq5QzsgEEVB7riPIOPeFYZehVT+0Jul4mau2NElOw1 6/aboPzQH+zZaAvb1HPSP8FiJ/ChMp4rfe3cJqSBRTwVdnayjuCNr5kGisFrlNp5 LqytRq5jEg+8GvkYjbkls3FwyYGEcqKQfYlr7q7MvgRf/3kl8uOEZlAfNbRjQ+zG DFKyGt0hsWoJVJkINQMcnLcLmUdhPz+I5cWhU4VtAVUnZENES9xwIoSMzRdHR/xx 6fzkLcszYw/WCrRXMz9ojM9+3djP -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:15 2024 by rpki-client on console-ams.rpki-client.org