$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer File: ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer (raw, json) Hash identifier: dEW3W5yOV/EbnNgxz4vSrJF4gYaNWZvv+qIJWnw+ufc= Subject key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 19A3631EFFAFED70B5F108C752C292A55C807B82 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft caRepository: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 27 May 2024 14:58:42 +0000 Certificate not after: Mon 26 May 2025 15:03:42 +0000 Subordinate resources: AS: 266539 IP: 45.65.220.0/22 IP: 177.223.32.0/20 IP: 2804:3d90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 12:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a3:63:1e:ff:af:ed:70:b5:f1:08:c7:52:c2:92:a5:5c:80:7b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 27 14:58:42 2024 GMT Not After : May 26 15:03:42 2025 GMT Subject: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:03:56:c2:b2:ab:f6:f2:ca:b0:c4:54:ea: 42:44:ad:ca:dd:a8:b7:31:f3:02:81:bb:8c:c9:33: 2c:be:eb:ce:63:c6:46:1a:6b:8f:5c:f9:7d:51:01: b8:69:1c:3f:a9:62:f9:f5:98:5e:de:08:85:89:88: d8:f6:1e:66:00:d5:31:22:a4:7e:94:c1:25:f8:57: 38:b1:0c:c3:9e:f2:8d:14:f5:6f:06:d0:29:43:59: d6:9c:0a:0e:fc:fe:ae:ab:4e:d6:29:23:e1:04:95: ba:08:a1:a5:9d:ae:85:e5:5b:f8:ac:07:ad:cc:92: fb:1c:39:df:f8:a5:67:2d:e5:14:b0:69:64:f5:bd: d7:40:57:b7:b6:53:b7:a9:00:9d:ee:91:37:ae:40: bb:7b:c5:24:c4:0f:66:ef:06:47:ae:25:16:e9:f4: 9e:c8:0c:d6:a1:2c:fc:9e:6a:e0:c4:51:6f:40:e6: 79:96:e3:86:71:ee:04:20:7e:a7:e7:05:c5:03:c0: a4:3f:3e:2b:39:ab:15:c1:53:fb:fa:5f:90:e5:f6: af:cb:43:0b:71:67:1c:51:2c:e6:f2:c8:54:df:e9: 73:6e:88:31:21:7b:57:86:31:4f:2c:0f:23:e0:e9: 22:4d:47:be:44:82:c4:ee:c5:06:2b:b6:7d:ad:a9: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.220.0/22 177.223.32.0/20 IPv6: 2804:3d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266539 Signature Algorithm: sha256WithRSAEncryption ab:ff:97:07:bf:fc:d0:dc:44:1c:89:8a:9c:d1:77:65:4b:bb: 34:c8:2d:f3:61:aa:3e:c1:b3:b8:9d:31:7e:1a:00:c2:e5:02: a9:4c:bf:49:a8:33:86:02:23:e6:b1:94:1b:06:83:2c:a1:c0: ab:36:4d:c0:c6:e3:a2:2c:78:19:00:fa:21:b8:bd:c6:72:b5: 80:c7:c0:d6:ab:eb:0d:16:e6:67:4c:33:14:9f:12:70:dd:8d: 93:64:98:74:2e:fe:44:dc:cf:90:b7:a6:3e:be:48:15:61:44: 96:6a:5d:dc:4a:12:a6:6b:8a:b1:1d:57:28:21:85:c4:16:23: 13:85:63:67:5a:04:c9:f6:2e:80:db:c2:d6:90:ec:f7:1c:a4: fe:8c:20:74:6b:55:89:bb:ca:fb:66:3d:09:a8:0a:8a:bf:5e: 57:d8:d7:85:c9:55:84:93:12:ce:d1:c7:18:86:03:39:f9:90: db:a7:8e:58:08:88:04:f6:3a:6d:59:59:5b:26:e3:14:13:ef: 98:76:9e:a5:c1:7d:07:58:5c:46:fe:94:7d:a7:47:d8:3d:ca: f3:7c:9c:ed:06:9c:4a:7f:7b:85:d5:ee:5f:5d:93:61:ca:fa: 32:f1:87:96:90:a8:bd:37:c4:af:2d:a5:26:4c:b0:25:29:5d: 25:6a:b5:59 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUGaNjHv+v7XC18QjHUsKSpVyAe4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjcxNDU4NDJaFw0yNTA1MjYxNTAzNDJaMDMxMTAvBgNV BAMTKEFDRUNBQUQyOUFBRjc1MTI2RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtwwNWwrKr9vLKsMRU6kJErcrd qLcx8wKBu4zJMyy+685jxkYaa49c+X1RAbhpHD+pYvn1mF7eCIWJiNj2HmYA1TEi pH6UwSX4VzixDMOe8o0U9W8G0ClDWdacCg78/q6rTtYpI+EElboIoaWdroXlW/is B63MkvscOd/4pWct5RSwaWT1vddAV7e2U7epAJ3ukTeuQLt7xSTED2bvBkeuJRbp 9J7IDNahLPyeauDEUW9A5nmW44Zx7gQgfqfnBcUDwKQ/Pis5qxXBU/v6X5Dl9q/L QwtxZxxRLObyyFTf6XNuiDEhe1eGMU8sDyPg6SJNR75EgsTuxQYrtn2tqZo9AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSs7KrSmq91Em2N L1lPxDqw57OhDTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG1m SmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYyblovMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ht ZkppVTh1UnZqbzVpSllRcFJ4SzFlWjZrNHh4SjVXMnNRTUY4MUhmMm5aLzIvQUNF Q0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBFN0IzQTEwRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLUHcAwQEsd8gMA0EAgACMAcDBQAoBD2QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQRKzANBgkqhkiG9w0BAQsFAAOCAQEAq/+XB7/8 0NxEHImKnNF3ZUu7NMgt82GqPsGzuJ0xfhoAwuUCqUy/SagzhgIj5rGUGwaDLKHA qzZNwMbjoix4GQD6Ibi9xnK1gMfA1qvrDRbmZ0wzFJ8ScN2Nk2SYdC7+RNzPkLem Pr5IFWFElmpd3EoSpmuKsR1XKCGFxBYjE4VjZ1oEyfYugNvC1pDs9xyk/owgdGtV ibvK+2Y9CagKir9eV9jXhclVhJMSztHHGIYDOfmQ26eOWAiIBPY6bVlZWybjFBPv mHaepcF9B1hcRv6UfadH2D3K83yc7QacSn97hdXuX12TYcr6MvGHlpCovTfEry2l JkywJSldJWq1WQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:57 2024 by rpki-client on console-fra.rpki-client.org