$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.cer File: A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.cer (raw, json) Hash identifier: TkGpanCuterMLK5wrT8cABhEoeCiWCpILT1LM68+z5A= Subject key identifier: A9:F1:AA:96:6F:8C:E0:6F:DF:C5:67:34:1E:85:6B:B5:CA:5C:18:E8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 66D23CA52022426663834BBF49810C4F55AB755E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.mft caRepository: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 18 Nov 2024 17:52:58 +0000 Certificate not after: Mon 17 Nov 2025 17:57:58 +0000 Subordinate resources: AS: 271297 IP: 45.229.136.0/24 IP: 192.231.175.0/24 IP: 2804:794c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d2:3c:a5:20:22:42:66:63:83:4b:bf:49:81:0c:4f:55:ab:75:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 18 17:52:58 2024 GMT Not After : Nov 17 17:57:58 2025 GMT Subject: CN=A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:56:89:8d:c8:d4:15:0a:5b:ed:aa:fd:47: c7:a9:76:bc:5e:10:c4:db:41:47:3a:0b:5b:0d:da: 63:bb:71:fa:d9:06:a4:4f:7c:02:a5:ea:1f:e6:f6: c4:b1:9b:8b:b9:8b:83:53:54:4b:94:ab:4e:46:a5: f3:0f:01:83:f3:96:a5:98:1e:a9:14:c3:ab:a7:f8: f2:2f:19:b3:35:6d:83:37:14:49:54:c6:e9:3b:25: 12:03:04:49:e5:c1:8c:00:0e:03:2e:66:4a:0e:6c: 48:c6:24:e1:ed:8f:fc:08:d6:20:44:36:df:a9:f0: 2e:49:11:c4:da:23:ec:b5:64:21:6d:03:1c:3d:64: e4:d5:27:01:73:fe:7a:1e:79:5d:8c:2c:39:37:2a: 92:cc:64:97:82:7e:08:54:5c:3a:d0:b2:63:26:a1: 0c:23:68:f4:7e:33:9b:dc:f5:81:91:8a:aa:5e:5e: 1b:96:2e:02:18:88:36:c0:96:5a:ae:1d:95:3b:f6: 43:16:d8:c0:8f:43:b7:73:ec:ba:9f:92:3b:f0:26: 35:f0:1a:c0:52:03:81:ef:8b:1a:ee:17:6d:7a:6a: dc:cf:08:a8:e4:e7:19:32:18:b4:7a:64:d3:a9:d3: c4:3b:ef:6d:b0:32:63:7a:6d:5b:50:39:e8:25:24: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:F1:AA:96:6F:8C:E0:6F:DF:C5:67:34:1E:85:6B:B5:CA:5C:18:E8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/A9F1AA966F8CE06FDFC567341E856BB5CA5C18E8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.136.0/24 192.231.175.0/24 IPv6: 2804:794c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271297 Signature Algorithm: sha256WithRSAEncryption a4:3b:22:bc:11:2c:9e:45:7f:92:d9:8b:37:c9:6c:4d:52:b6: c0:37:96:67:51:05:cb:32:16:6e:38:d9:18:83:df:69:94:c6: 4c:ee:52:5c:78:f1:c1:a9:96:68:e4:b7:db:4e:ae:c7:5a:b2: 44:36:48:9f:c6:f1:66:84:60:ad:fa:40:39:06:88:b9:81:c5: fc:72:d2:b7:a7:6c:f4:88:01:41:f3:70:5a:32:92:4d:ad:b3: f6:bf:20:80:54:43:f6:5d:68:73:25:4d:28:b9:b4:35:5e:22: fd:fe:56:6f:d2:31:f2:65:9a:8c:23:3f:d3:97:ce:53:87:4e: 44:e3:13:67:b9:7e:77:6c:45:66:dc:c6:05:67:d5:6c:2d:8b: 37:cb:d4:39:c5:3c:80:72:60:ea:4d:ae:ef:69:3c:f9:37:56: 3e:3d:15:cc:a9:eb:09:61:8f:a0:0f:4b:10:4f:56:5e:9e:b6: e7:75:03:e7:17:5b:83:8f:2f:8a:f4:b5:72:f9:b1:e5:74:af: 0b:47:29:c2:9d:f4:54:53:a7:78:77:75:9f:f4:c5:ee:12:8e: b0:e8:80:33:5a:f0:89:e2:02:26:6e:3e:1e:92:fe:89:3e:24: 3b:ee:5d:31:83:0a:ca:22:6c:32:e6:b6:25:40:e1:bd:2d:9d: 4b:04:68:29 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUZtI8pSAiQmZjg0u/SYEMT1WrdV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTgxNzUyNThaFw0yNTExMTcxNzU3NThaMDMxMTAvBgNV BAMTKEE5RjFBQTk2NkY4Q0UwNkZERkM1NjczNDFFODU2QkI1Q0E1QzE4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7v1aJjcjUFQpb7ar9R8epdrxe EMTbQUc6C1sN2mO7cfrZBqRPfAKl6h/m9sSxm4u5i4NTVEuUq05GpfMPAYPzlqWY HqkUw6un+PIvGbM1bYM3FElUxuk7JRIDBEnlwYwADgMuZkoObEjGJOHtj/wI1iBE Nt+p8C5JEcTaI+y1ZCFtAxw9ZOTVJwFz/noeeV2MLDk3KpLMZJeCfghUXDrQsmMm oQwjaPR+M5vc9YGRiqpeXhuWLgIYiDbAllquHZU79kMW2MCPQ7dz7LqfkjvwJjXw GsBSA4HvixruF216atzPCKjk5xkyGLR6ZNOp08Q7722wMmN6bVtQOeglJGMvAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSp8aqWb4zgb9/F ZzQehWu1ylwY6DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN01a RWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRoZFEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdN WkVpbW5hUzU5RTJlQXc4aDRvWEtlaHI1Q1ltbU10SFhrbjFvdUF0aGRRLzAvQTlG MUFBOTY2RjhDRTA2RkRGQzU2NzM0MUU4NTZCQjVDQTVDMThFOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQALeWIAwQAwOevMA0EAgACMAcDBQAoBHlMMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQjwTANBgkqhkiG9w0BAQsFAAOCAQEApDsivBEs nkV/ktmLN8lsTVK2wDeWZ1EFyzIWbjjZGIPfaZTGTO5SXHjxwamWaOS3206ux1qy RDZIn8bxZoRgrfpAOQaIuYHF/HLSt6ds9IgBQfNwWjKSTa2z9r8ggFRD9l1ocyVN KLm0NV4i/f5Wb9Ix8mWajCM/05fOU4dOROMTZ7l+d2xFZtzGBWfVbC2LN8vUOcU8 gHJg6k2u72k8+TdWPj0VzKnrCWGPoA9LEE9WXp6253UD5xdbg48vivS1cvmx5XSv C0cpwp30VFOneHd1n/TF7hKOsOiAM1rwieICJm4+HpL+iT4kO+5dMYMKyiJsMua2 JUDhvS2dSwRoKQ== -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:20 2024 by rpki-client on console-ams.rpki-client.org