$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer File: B1FAF030A01493504761E684192B146956A636E6.cer (raw, json) Hash identifier: d8IEtSq1h9p5p6nR/i+E8Q1wv5nSOxxSQXD+X0AZ01o= Subject key identifier: B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 429A7A4CD647615678DEE9A52B35D3E2FE4D4087 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.mft caRepository: rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 30 Aug 2024 17:14:02 +0000 Certificate not after: Fri 29 Aug 2025 17:19:02 +0000 Subordinate resources: AS: 52965 IP: 131.0.224.0/22 IP: 177.36.0.0/20 IP: 177.72.208.0/21 IP: 177.221.32.0/20 IP: 179.124.136.0/21 IP: 187.103.64.0/20 IP: 2804:3b8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9a:7a:4c:d6:47:61:56:78:de:e9:a5:2b:35:d3:e2:fe:4d:40:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 30 17:14:02 2024 GMT Not After : Aug 29 17:19:02 2025 GMT Subject: CN=B1FAF030A01493504761E684192B146956A636E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:8a:5e:8f:b9:de:b6:db:fd:22:5d:22:b4: 58:c5:1d:9c:d6:d4:99:c5:c4:bb:6d:28:f3:e4:86: bd:d0:3c:0b:fe:bc:2d:33:a2:47:98:7e:e4:ae:22: b8:a3:3f:ef:12:41:2b:4e:2c:9a:78:e4:4f:2c:9f: c7:74:d3:18:ea:14:67:b8:2a:9b:1e:99:9d:08:96: 20:35:2f:67:b0:72:a4:89:d5:15:ba:53:71:89:a1: 95:0b:e0:61:b6:a0:9b:ee:bc:2b:5a:bf:cd:54:11: c2:60:0e:e8:6c:01:a3:ec:de:a4:bd:10:26:bd:ec: ed:37:63:a7:e2:12:7f:ab:2f:f6:33:4a:c0:e0:05: 22:c3:7d:6a:7a:08:14:3f:ab:6c:85:ca:9c:1b:b2: 35:92:af:12:cd:93:7a:a9:b9:01:4a:26:d1:5f:dc: fe:30:db:fe:a4:0e:c3:a5:f7:21:e4:de:ed:77:4f: f9:6f:ab:c2:8b:f6:8f:8d:07:42:00:73:98:ba:36: b9:52:95:fd:81:8d:a5:17:61:d7:ae:55:7c:db:a4: 76:90:d4:ce:3e:8c:6d:33:95:4d:48:9e:82:47:ed: a2:48:83:c8:db:5b:89:ee:2a:c4:1f:3e:9f:66:a9: e8:35:b7:da:ea:4b:99:7c:8a:2a:69:b4:85:fa:39: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.0.224.0/22 177.36.0.0/20 177.72.208.0/21 177.221.32.0/20 179.124.136.0/21 187.103.64.0/20 IPv6: 2804:3b8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52965 Signature Algorithm: sha256WithRSAEncryption 7b:7f:ef:4d:c1:1b:09:56:b8:45:b2:5d:be:68:b5:b2:54:aa: d1:d6:b8:28:ca:13:bd:79:43:22:83:76:4a:db:ff:28:fd:65: 89:e5:4c:1a:2a:b0:b2:77:b9:73:6c:be:78:60:a4:db:d1:5f: 00:e2:c2:5d:bf:93:2a:dd:1f:32:27:3e:aa:54:7a:fe:18:bd: 86:87:3c:3d:e6:0a:26:d8:e5:eb:5f:d8:a0:62:5e:5f:17:22: 95:bc:a3:e5:2e:75:94:3a:f7:52:d9:9d:45:de:ae:e4:78:d9: 06:09:df:cc:9a:81:1e:62:bc:f6:3c:2d:3c:cb:70:e9:66:63: 30:65:10:72:9f:2c:67:7a:19:22:69:95:55:f5:a9:91:7f:95: 28:61:b7:b9:53:57:cd:c7:cb:a8:b8:ab:56:d9:9a:c2:f5:81: 9b:04:4f:55:eb:06:d4:5d:40:39:b7:d2:80:9c:a4:93:9f:2e: 10:25:c1:89:71:40:d4:5a:1d:3c:d6:c2:0d:d8:e2:7d:2a:16: ee:5d:27:9f:cc:38:a6:03:16:a0:19:bb:1b:06:09:7b:82:b9: 02:37:31:b4:de:8d:1b:d6:5a:68:e2:6a:e5:8c:e9:2b:da:3a: 23:64:14:97:96:63:5e:b7:9c:81:25:37:ac:92:e6:d8:d6:03: 98:4d:82:c6 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUQpp6TNZHYVZ43umlKzXT4v5NQIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MzAxNzE0MDJaFw0yNTA4MjkxNzE5MDJaMDMxMTAvBgNV BAMTKEIxRkFGMDMwQTAxNDkzNTA0NzYxRTY4NDE5MkIxNDY5NTZBNjM2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqopej7nettv9Il0itFjFHZzW 1JnFxLttKPPkhr3QPAv+vC0zokeYfuSuIrijP+8SQStOLJp45E8sn8d00xjqFGe4 KpsemZ0IliA1L2ewcqSJ1RW6U3GJoZUL4GG2oJvuvCtav81UEcJgDuhsAaPs3qS9 ECa97O03Y6fiEn+rL/YzSsDgBSLDfWp6CBQ/q2yFypwbsjWSrxLNk3qpuQFKJtFf 3P4w2/6kDsOl9yHk3u13T/lvq8KL9o+NB0IAc5i6NrlSlf2BjaUXYdeuVXzbpHaQ 1M4+jG0zlU1InoJH7aJIg8jbW4nuKsQfPp9mqeg1t9rqS5l8iipptIX6Od/bAgMB AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSx+vAwoBSTUEdh 5oQZKxRpVqY25jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR24y OHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFCQ1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0du MjhzeG1QdGdFZnFwYUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzAvQjFG QUYwMzBBMDE0OTM1MDQ3NjFFNjg0MTkyQjE0Njk1NkE2MzZFNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEH AQH/BD0wOzAqBAIAATAkAwQCgwDgAwQEsSQAAwQDsUjQAwQEsd0gAwQDs3yIAwQE u2dAMA0EAgACMAcDBQAoBAO4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDO5TAN BgkqhkiG9w0BAQsFAAOCAQEAe3/vTcEbCVa4RbJdvmi1slSq0da4KMoTvXlDIoN2 Stv/KP1lieVMGiqwsne5c2y+eGCk29FfAOLCXb+TKt0fMic+qlR6/hi9hoc8PeYK Jtjl61/YoGJeXxcilbyj5S51lDr3UtmdRd6u5HjZBgnfzJqBHmK89jwtPMtw6WZj MGUQcp8sZ3oZImmVVfWpkX+VKGG3uVNXzcfLqLirVtmawvWBmwRPVesG1F1AObfS gJykk58uECXBiXFA1FodPNbCDdjifSoW7l0nn8w4pgMWoBm7GwYJe4K5AjcxtN6N G9ZaaOJq5YzpK9o6I2QUl5ZjXrecgSU3rJLm2NYDmE2Cxg== -----END CERTIFICATE-----Generated at Mon Feb 17 08:24:10 2025 by rpki-client