$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer File: 9D103AA204540DE0058FABD735474D7C4AE2DC8F.cer (raw, json) Hash identifier: B1JGSaa3f7SiTz/q+Shfm256Kzc1Xutxr4z8ax2NZ1k= Subject key identifier: 9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 528EF249B4D441B63CF79BD88586B45B77C55547 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.mft caRepository: rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 01 Nov 2024 19:05:19 +0000 Certificate not after: Fri 31 Oct 2025 19:10:19 +0000 Subordinate resources: AS: 52941 IP: 45.169.212.0/22 IP: 177.38.40.0/21 IP: 2804:b18::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8e:f2:49:b4:d4:41:b6:3c:f7:9b:d8:85:86:b4:5b:77:c5:55:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 1 19:05:19 2024 GMT Not After : Oct 31 19:10:19 2025 GMT Subject: CN=9D103AA204540DE0058FABD735474D7C4AE2DC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:ac:7d:56:3e:0b:ad:e6:8e:11:19:2e:17: e6:12:91:69:2f:8b:74:04:58:db:b5:c7:b2:2e:c8: a5:0f:2a:08:80:be:f4:42:86:d0:e5:54:ff:02:4c: 6d:bb:b2:ec:43:55:fe:8b:bd:9e:98:3f:11:aa:43: 94:c3:46:68:c9:5b:eb:2e:c4:f8:8c:9b:a9:00:fa: 1c:82:3a:86:ba:b9:cb:c0:ab:a1:5d:c0:c4:30:0b: e3:83:72:06:4f:96:4d:f9:c5:a6:f2:8a:d9:a1:34: 6f:df:bf:87:93:0e:47:ff:ee:9a:bd:53:71:0c:e8: c0:ab:0e:bc:59:fb:0d:53:80:4b:e2:bf:38:74:27: 0e:8e:23:c6:32:10:32:86:8b:ae:d0:7a:bd:5f:40: b4:40:77:01:39:ed:46:f2:06:af:31:ff:58:06:70: 80:52:00:73:e7:05:18:2c:ec:03:f2:37:82:8f:22: 1c:66:29:8c:72:d9:97:7b:8b:34:7f:ff:6d:98:e0: 38:26:47:cb:2d:01:3c:7b:9b:55:17:a1:4c:b6:af: f6:d2:3f:cf:50:e8:f8:53:06:04:f0:54:46:ba:69: 30:c7:5d:64:34:eb:f8:f1:ba:fe:48:60:c8:e8:c6: 4e:93:a2:5e:b0:b6:15:92:ef:08:b9:04:58:97:21: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:10:3A:A2:04:54:0D:E0:05:8F:AB:D7:35:47:4D:7C:4A:E2:DC:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/9D103AA204540DE0058FABD735474D7C4AE2DC8F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.169.212.0/22 177.38.40.0/21 IPv6: 2804:b18::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52941 Signature Algorithm: sha256WithRSAEncryption c3:f6:a0:c9:27:f8:c4:9f:30:33:f2:bf:29:b7:83:b7:f0:8d: 9d:17:c5:d3:c8:fd:c4:3d:8c:0c:eb:e3:01:66:50:39:ff:8f: fe:e1:96:01:7b:2e:8c:44:ff:81:7c:9e:8d:80:62:35:a1:05: 10:c5:8c:20:a5:48:60:8d:29:c7:72:6f:2f:bd:52:f3:8b:b4: ef:e5:d8:2d:37:4d:d3:12:38:43:db:81:35:6e:ff:d8:d3:e8: 91:6d:71:36:55:8c:bd:4d:e9:5f:1a:37:ea:70:71:04:95:32: 48:01:c0:e9:4d:cf:84:dd:69:81:b6:ae:bf:d7:af:19:6c:2a: 67:70:d6:45:fa:c1:e1:62:13:58:10:78:85:88:3c:75:88:d9: 65:7d:c9:ad:22:0a:5c:ae:95:01:8f:73:0c:ec:16:48:bc:cd: f3:77:d7:78:31:35:4f:33:72:bd:e6:78:77:fa:1e:70:20:1e: 73:36:99:c3:da:bf:84:69:71:26:ee:d3:5b:7e:f7:c2:3c:91: 4d:39:4b:59:b3:6c:1c:11:54:b4:61:f9:52:ca:97:c5:b5:bc: 67:52:a3:2b:1d:54:3f:af:3d:8f:5d:13:32:fc:cd:77:cb:f7: 6f:73:43:4d:b1:74:e3:70:65:88:ba:65:3a:16:4e:b7:93:d7: d4:e7:45:31 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUUo7ySbTUQbY895vYhYa0W3fFVUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDExOTA1MTlaFw0yNTEwMzExOTEwMTlaMDMxMTAvBgNV BAMTKDlEMTAzQUEyMDQ1NDBERTAwNThGQUJENzM1NDc0RDdDNEFFMkRDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelKx9Vj4LreaOERkuF+YSkWkv i3QEWNu1x7IuyKUPKgiAvvRChtDlVP8CTG27suxDVf6LvZ6YPxGqQ5TDRmjJW+su xPiMm6kA+hyCOoa6ucvAq6FdwMQwC+ODcgZPlk35xabyitmhNG/fv4eTDkf/7pq9 U3EM6MCrDrxZ+w1TgEvivzh0Jw6OI8YyEDKGi67Qer1fQLRAdwE57UbyBq8x/1gG cIBSAHPnBRgs7APyN4KPIhxmKYxy2Zd7izR//22Y4DgmR8stATx7m1UXoUy2r/bS P89Q6PhTBgTwVEa6aTDHXWQ06/jxuv5IYMjoxk6Tol6wthWS7wi5BFiXIWPlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSdEDqiBFQN4AWP q9c1R018SuLcjzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN25q cmNDY3U2MTdiRzdqV1F3endUMVpRWXpudHJqQ29DMzdOOXBRcU1DV0wvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdu anJjQ2N1NjE3Ykc3aldRd3p3VDFaUVl6bnRyakNvQzM3TjlwUXFNQ1dMLzAvOUQx MDNBQTIwNDU0MERFMDA1OEZBQkQ3MzU0NzREN0M0QUUyREM4Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLanUAwQDsSYoMA0EAgACMAcDBQAoBAsYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOzTANBgkqhkiG9w0BAQsFAAOCAQEAw/agySf4 xJ8wM/K/KbeDt/CNnRfF08j9xD2MDOvjAWZQOf+P/uGWAXsujET/gXyejYBiNaEF EMWMIKVIYI0px3JvL71S84u07+XYLTdN0xI4Q9uBNW7/2NPokW1xNlWMvU3pXxo3 6nBxBJUySAHA6U3PhN1pgbauv9evGWwqZ3DWRfrB4WITWBB4hYg8dYjZZX3JrSIK XK6VAY9zDOwWSLzN83fXeDE1TzNyveZ4d/oecCAeczaZw9q/hGlxJu7TW373wjyR TTlLWbNsHBFUtGH5UsqXxbW8Z1KjKx1UP689j10TMvzNd8v3b3NDTbF043BliLpl OhZOt5PX1OdFMQ== -----END CERTIFICATE-----Generated at Fri Nov 22 21:03:19 2024 by rpki-client on console-fra.rpki-client.org