$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer File: 996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer (raw, json) Hash identifier: SWNSjaWMNQRBskF4BT+zc5htBD+Y+g6kcRyGW2dzTbw= Subject key identifier: 99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 18CCC40F75C258AF6757CC8A3B1D65A897DDBD29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft caRepository: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 12 Sep 2024 15:03:26 +0000 Certificate not after: Thu 11 Sep 2025 15:08:26 +0000 Subordinate resources: AS: 271478 IP: 45.236.72.0/22 IP: 179.0.120.0/22 IP: 2804:7c24::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 01:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cc:c4:0f:75:c2:58:af:67:57:cc:8a:3b:1d:65:a8:97:dd:bd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 12 15:03:26 2024 GMT Not After : Sep 11 15:08:26 2025 GMT Subject: CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:40:a5:7e:6e:43:59:86:f4:54:80:b8:1a: 19:7e:c5:17:15:c7:ba:59:fc:38:4e:c3:1c:d0:57: 10:a6:84:84:7f:19:56:fe:c5:4a:20:e3:e0:f6:07: 04:78:4a:91:dd:3a:1f:1e:67:c3:cc:3d:41:05:46: 48:69:5b:c8:b8:2c:b8:96:e2:e8:4c:88:77:4e:41: 70:a7:83:4f:b3:06:e9:76:eb:96:b8:cb:f6:37:8d: 01:1c:ef:2a:4f:51:a8:19:d9:f5:3b:13:c1:ca:84: a4:1b:ac:0b:8b:b1:a3:1f:0b:e3:a8:73:39:67:67: a3:85:6f:fa:30:ee:c8:ca:a2:06:c1:ae:e2:0d:7a: 47:fa:4e:97:6e:08:7e:52:c6:aa:12:97:aa:83:fa: 0f:69:a8:78:5f:6d:fe:d0:23:fc:ae:7a:7b:89:0d: a2:c1:23:14:6f:e6:2b:ec:3a:d6:35:1d:6a:20:c3: ed:94:cf:2d:d2:de:bd:19:9b:6a:d3:aa:e4:6d:64: 39:e5:b9:7b:d5:7a:5a:db:87:a0:02:8e:a1:61:0f: 9a:aa:b5:d3:d7:b7:3b:95:b8:04:56:f6:f3:e3:11: e4:cc:9f:32:b8:41:78:ab:24:d4:17:42:5d:3b:47: fc:0f:74:c0:ad:80:50:21:1a:61:9a:79:a6:f1:4d: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.236.72.0/22 179.0.120.0/22 IPv6: 2804:7c24::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271478 Signature Algorithm: sha256WithRSAEncryption 0d:2a:c6:fc:ec:08:8e:08:05:f9:79:5e:7c:9d:26:69:8f:e7: 5f:0f:b5:32:0f:0b:e0:cf:a2:87:89:cd:91:3a:3a:77:3f:26: 01:59:bb:26:6a:3f:c9:54:62:ec:64:15:5c:76:83:0c:ec:28: c4:c5:b9:84:c0:fc:bf:48:04:59:f6:46:88:aa:10:f2:79:a1: 28:e5:b1:32:fc:09:83:22:58:4a:cf:6e:11:24:6f:a8:39:fd: 3e:15:19:2f:c3:87:8a:f6:ea:26:53:82:0d:1b:de:0a:ea:a0: f4:5c:c7:96:68:d3:d0:28:4d:7d:1b:27:8d:8e:11:d9:93:5c: a7:7e:31:9a:1f:bf:ce:5a:14:91:d1:d5:83:c0:f4:94:99:d7: ba:e3:16:db:b6:9e:9c:cd:96:fe:8a:2b:15:df:89:a3:36:56: b2:d7:50:73:7e:16:6f:af:b0:52:84:84:b5:c5:3d:b1:1e:ff: b6:28:19:d8:6a:00:78:68:8d:bc:91:44:30:b3:e6:97:e5:2c: 1f:dd:67:f5:5c:7c:38:a6:49:69:32:f4:96:84:69:02:6d:83: 2d:19:c6:33:64:4d:15:75:a0:c0:b7:ee:41:2d:38:70:21:cf: ca:2e:08:9c:36:c5:85:2c:35:15:45:c4:27:09:d3:ca:88:49: 26:33:c8:bf -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGMzED3XCWK9nV8yKOx1lqJfdvSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MTIxNTAzMjZaFw0yNTA5MTExNTA4MjZaMDMxMTAvBgNV BAMTKDk5NkI0QUNGMTlDQzY4MkYxQjZFNDU0OUE5QTNBMDA0QkMwMzEzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0m0Clfm5DWYb0VIC4Ghl+xRcV x7pZ/DhOwxzQVxCmhIR/GVb+xUog4+D2BwR4SpHdOh8eZ8PMPUEFRkhpW8i4LLiW 4uhMiHdOQXCng0+zBul265a4y/Y3jQEc7ypPUagZ2fU7E8HKhKQbrAuLsaMfC+Oo czlnZ6OFb/ow7sjKogbBruINekf6TpduCH5SxqoSl6qD+g9pqHhfbf7QI/yuenuJ DaLBIxRv5ivsOtY1HWogw+2Uzy3S3r0Zm2rTquRtZDnluXvVelrbh6ACjqFhD5qq tdPXtzuVuARW9vPjEeTMnzK4QXirJNQXQl07R/wPdMCtgFAhGmGaeabxTfTTAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZa0rPGcxoLxtu RUmpo6AEvAMTfTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRG9E NHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZSUHcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Rv RDR6MWtRS0ZyQzltZGlrWFZuU0xrbXZjQlozdW1uOUwzZmdRQ3BmUlB3LzAvOTk2 QjRBQ0YxOUNDNjgyRjFCNkU0NTQ5QTlBM0EwMDRCQzAzMTM3RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLexIAwQCswB4MA0EAgACMAcDBQAoBHwkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQkdjANBgkqhkiG9w0BAQsFAAOCAQEADSrG/OwI jggF+XlefJ0maY/nXw+1Mg8L4M+ih4nNkTo6dz8mAVm7Jmo/yVRi7GQVXHaDDOwo xMW5hMD8v0gEWfZGiKoQ8nmhKOWxMvwJgyJYSs9uESRvqDn9PhUZL8OHivbqJlOC DRveCuqg9FzHlmjT0ChNfRsnjY4R2ZNcp34xmh+/zloUkdHVg8D0lJnXuuMW27ae nM2W/oorFd+JozZWstdQc34Wb6+wUoSEtcU9sR7/tigZ2GoAeGiNvJFEMLPml+Us H91n9Vx8OKZJaTL0loRpAm2DLRnGM2RNFXWgwLfuQS04cCHPyi4InDbFhSw1FUXE JwnTyohJJjPIvw== -----END CERTIFICATE-----Generated at Fri Sep 27 23:27:09 2024 by rpki-client on console-fra.rpki-client.org