$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer File: 9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer (raw, json) Hash identifier: DhSMcT7HI/u8NdGDpBHT41luwiwJbJSLyATu/aeNKRQ= Subject key identifier: 9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6044C836B75D18601D3F5AD913639FC1B5D76492 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.mft caRepository: rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 10:33:38 +0000 Certificate not after: Thu 03 Apr 2025 10:38:38 +0000 Subordinate resources: AS: 265143 IP: 143.255.92.0/22 IP: 2804:2b40::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:44:c8:36:b7:5d:18:60:1d:3f:5a:d9:13:63:9f:c1:b5:d7:64:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 10:33:38 2024 GMT Not After : Apr 3 10:38:38 2025 GMT Subject: CN=9C94842B2928FAED319D3BB427B8BDD7D2B246FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:06:34:ef:fd:be:83:45:48:5c:d0:27:ab: ca:b2:e8:d0:d9:3b:5e:01:de:a7:1b:f1:36:be:a1: d5:58:a3:85:b5:5d:b1:36:a3:f7:7e:14:f8:a1:7d: 34:fe:d9:14:7d:e5:df:33:5d:2f:26:63:3c:b8:1e: 80:f4:04:fa:54:53:52:8a:3a:74:e9:3f:16:9a:b5: 7f:40:a3:15:ad:8e:e5:aa:29:a5:76:e1:f5:b9:19: 0c:5c:a8:97:44:a3:fd:db:75:42:8a:44:35:e6:88: 1b:61:19:a9:f0:3c:a7:bb:2e:34:1a:15:de:d8:e1: 22:67:8f:08:a8:8f:b4:59:a1:e4:76:cd:1f:d7:1e: a3:9b:19:29:c6:f9:68:68:06:d4:dc:22:51:8c:dc: 88:56:95:58:db:c8:dd:fb:b5:5e:5c:63:6b:a7:c3: 5c:c7:5b:7d:c3:41:3e:99:14:9c:d7:7e:e2:ee:eb: cf:35:1d:03:b9:c3:cd:e0:b0:22:e1:f4:bd:b1:34: 4d:f7:15:56:ba:49:c0:23:43:10:ca:be:cb:03:1f: 3a:5b:45:29:aa:fa:20:75:75:30:4a:66:14:53:93: f2:0e:df:49:f2:9d:88:c9:70:d6:89:46:1d:de:20: 18:dd:19:fe:e9:da:b3:b0:58:f0:39:6e:0f:2e:ff: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.92.0/22 IPv6: 2804:2b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265143 Signature Algorithm: sha256WithRSAEncryption 3e:4c:33:b9:a3:31:b2:b4:28:34:07:c6:2f:f1:54:e9:91:4a: 7d:a6:10:f7:05:dc:f4:8e:fe:c7:7e:e8:d7:ec:5c:d7:9d:c6: ce:40:86:ed:b0:12:36:f1:26:5a:b2:63:b9:5b:c1:3f:cd:6f: cd:f0:1f:90:a6:be:f7:04:09:c8:b0:5d:f2:a0:62:83:df:b4: f4:8d:d7:77:de:da:4f:5e:26:7b:72:d8:99:0b:33:26:13:aa: 04:04:ec:9e:97:2e:dc:5a:70:77:c9:18:44:12:e7:fa:7b:b6: 05:e2:8b:b8:0c:1e:f8:83:ce:3d:1c:65:04:de:58:af:c9:94: bd:20:aa:e0:1a:f8:21:51:91:96:ee:ca:26:02:e5:67:6e:4e: 73:73:ea:1e:19:f9:ca:cf:09:b1:f3:03:29:4f:5a:56:9c:ea: 4c:32:02:0c:f6:76:56:40:c0:73:01:f7:c6:f0:67:7d:6d:73: e6:2d:56:2b:7b:48:da:e8:8d:9d:74:df:32:c2:cd:52:fb:70: 5e:25:2a:c2:09:38:5e:81:17:b8:6e:5d:1b:ab:c8:7e:8d:d3: 7d:b3:6e:8d:30:ce:61:e6:84:67:34:82:e6:13:a4:33:16:97: b3:bc:60:14:34:61:79:f5:58:37:b7:55:23:2b:ca:8c:fa:59: af:e7:37:62 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUYETINrddGGAdP1rZE2OfwbXXZJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMDMzMzhaFw0yNTA0MDMxMDM4MzhaMDMxMTAvBgNV BAMTKDlDOTQ4NDJCMjkyOEZBRUQzMTlEM0JCNDI3QjhCREQ3RDJCMjQ2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDezAY07/2+g0VIXNAnq8qy6NDZ O14B3qcb8Ta+odVYo4W1XbE2o/d+FPihfTT+2RR95d8zXS8mYzy4HoD0BPpUU1KK OnTpPxaatX9AoxWtjuWqKaV24fW5GQxcqJdEo/3bdUKKRDXmiBthGanwPKe7LjQa Fd7Y4SJnjwioj7RZoeR2zR/XHqObGSnG+WhoBtTcIlGM3IhWlVjbyN37tV5cY2un w1zHW33DQT6ZFJzXfuLu6881HQO5w83gsCLh9L2xNE33FVa6ScAjQxDKvssDHzpb RSmq+iB1dTBKZhRTk/IO30nynYjJcNaJRh3eIBjdGf7p2rOwWPA5bg8u/5YPAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSclIQrKSj67TGd O7QnuL3X0rJG/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVX N1pTakFUY3c5Ym1hbTJoQjVrTTViR3R2N2pXVnp3UGg1RmRuV0t4cHUvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOEVX N1pTakFUY3c5Ym1hbTJoQjVrTTViR3R2N2pXVnp3UGg1RmRuV0t4cHUvMS85Qzk0 ODQyQjI5MjhGQUVEMzE5RDNCQjQyN0I4QkREN0QyQjI0NkZGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKP/1wwDQQCAAIwBwMFACgEK0AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAu3MA0GCSqGSIb3DQEBCwUAA4IBAQA+TDO5ozGytCg0B8Yv 8VTpkUp9phD3Bdz0jv7HfujX7FzXncbOQIbtsBI28SZasmO5W8E/zW/N8B+Qpr73 BAnIsF3yoGKD37T0jdd33tpPXiZ7ctiZCzMmE6oEBOyely7cWnB3yRhEEuf6e7YF 4ou4DB74g849HGUE3livyZS9IKrgGvghUZGW7somAuVnbk5zc+oeGfnKzwmx8wMp T1pWnOpMMgIM9nZWQMBzAffG8Gd9bXPmLVYre0ja6I2ddN8yws1S+3BeJSrCCThe gRe4bl0bq8h+jdN9s26NMM5h5oRnNILmE6QzFpezvGAUNGF59Vg3t1UjK8qM+lmv 5zdi -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:23 2024 by rpki-client on console-ams.rpki-client.org