$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B39CB8F6173B3CEBF8B7F32BAE3B2BDDA1868568.cer File: B39CB8F6173B3CEBF8B7F32BAE3B2BDDA1868568.cer (raw, json) Hash identifier: urasc5ZtZ6CrbkkHSaQz0QlV2r9zFiriOgconkopM5A= Subject key identifier: B3:9C:B8:F6:17:3B:3C:EB:F8:B7:F3:2B:AE:3B:2B:DD:A1:86:85:68 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 427174F2949D625CD44E14E33C8C9066D37B7373 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/B39CB8F6173B3CEBF8B7F32BAE3B2BDDA1868568.mft caRepository: rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 14 Nov 2024 17:08:18 +0000 Certificate not after: Thu 13 Nov 2025 17:13:18 +0000 Subordinate resources: AS: 268037 IP: 45.168.48.0/22 IP: 2804:5700::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:71:74:f2:94:9d:62:5c:d4:4e:14:e3:3c:8c:90:66:d3:7b:73:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 14 17:08:18 2024 GMT Not After : Nov 13 17:13:18 2025 GMT Subject: CN=B39CB8F6173B3CEBF8B7F32BAE3B2BDDA1868568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:4b:ce:55:10:e8:ff:70:4c:38:98:38:24: 7c:5b:10:66:83:d1:01:a6:8c:fb:bd:8c:fe:a4:fc: 46:da:4e:1e:37:ae:11:cd:61:3c:5f:5b:ae:ce:7b: 2e:28:cd:a3:56:9d:ae:21:28:a6:be:46:ad:8f:71: 9e:37:7f:16:9c:ba:8c:e9:12:06:31:ed:89:e5:db: 6f:e7:6a:1a:74:51:c5:e0:de:03:78:4c:7a:48:f7: 5e:a7:ea:36:f5:27:d8:fd:91:46:18:a3:b5:b9:69: 4e:87:18:87:a6:05:15:dd:db:eb:c2:45:5c:8f:64: 30:ed:dd:e0:cd:85:c2:2b:ba:a0:f5:fe:c3:96:61: 10:ba:49:24:3b:5f:55:96:d3:cb:6f:d3:37:7b:a6: 36:32:2d:13:48:5f:10:79:bb:2d:7d:11:b3:e5:04: 0e:fe:5f:ba:6d:4e:16:0c:8c:44:f5:c5:e9:39:05: ba:5a:cf:74:fb:8e:98:58:72:76:fd:12:a6:f0:1b: af:bb:e7:d4:42:46:a8:01:54:51:d9:cb:e4:7e:b2: 76:3f:ed:c8:cc:93:cf:c3:98:69:30:4d:4f:6d:29: 79:6c:06:60:67:64:1b:3f:a1:e9:05:55:38:90:96: a0:8f:e4:57:f6:59:9c:a4:af:c1:49:d3:4e:a3:62: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:9C:B8:F6:17:3B:3C:EB:F8:B7:F3:2B:AE:3B:2B:DD:A1:86:85:68 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/B39CB8F6173B3CEBF8B7F32BAE3B2BDDA1868568.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.48.0/22 IPv6: 2804:5700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268037 Signature Algorithm: sha256WithRSAEncryption 7a:73:1f:28:63:86:5b:01:84:97:57:ca:65:3c:9b:d0:e7:71: 28:e6:ce:8a:78:b3:f5:9e:8c:d9:da:83:46:65:a2:48:cf:63: a7:b3:8d:99:65:b7:d9:0b:3a:59:cd:b4:68:6e:7a:59:de:93: 5b:f5:81:2b:2a:1f:c2:f5:23:ef:c6:58:f7:d3:12:ae:dd:14: 87:54:c2:09:ca:bb:cb:f3:bd:45:7d:58:f4:e1:06:8c:63:89: 36:42:79:c7:23:67:5b:31:34:40:b8:80:a4:59:ab:ec:d7:15: d6:9f:29:47:84:0c:1d:e7:e0:db:9e:d7:93:42:c1:83:02:9b: 4a:6c:01:75:e2:7e:d9:cf:d9:fb:77:45:90:fa:33:98:ec:e5: fc:5a:e4:ac:28:24:0a:43:0d:16:30:64:ae:ea:23:2f:18:20: 77:47:ad:d1:a4:5d:5c:bf:75:7e:54:66:cb:3f:8a:8a:5c:65: 14:b0:c7:86:0b:06:c4:20:32:4e:3c:9a:33:c3:8e:30:7b:6f: 77:d2:77:f9:a0:39:e7:2e:26:4c:53:67:81:ec:5f:c2:49:91: a6:25:73:b1:ee:45:bb:d4:e9:06:ff:7a:75:5d:5e:80:9e:b8: 81:2f:a7:0a:b4:1a:58:4a:fa:42:af:1d:96:d9:92:dc:5c:37: 72:b4:1a:73 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUQnF08pSdYlzUThTjPIyQZtN7c3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTQxNzA4MThaFw0yNTExMTMxNzEzMThaMDMxMTAvBgNV BAMTKEIzOUNCOEY2MTczQjNDRUJGOEI3RjMyQkFFM0IyQkREQTE4Njg1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90EvOVRDo/3BMOJg4JHxbEGaD 0QGmjPu9jP6k/EbaTh43rhHNYTxfW67Oey4ozaNWna4hKKa+Rq2PcZ43fxacuozp EgYx7Ynl22/nahp0UcXg3gN4THpI916n6jb1J9j9kUYYo7W5aU6HGIemBRXd2+vC RVyPZDDt3eDNhcIruqD1/sOWYRC6SSQ7X1WW08tv0zd7pjYyLRNIXxB5uy19EbPl BA7+X7ptThYMjET1xek5Bbpaz3T7jphYcnb9EqbwG6+759RCRqgBVFHZy+R+snY/ 7cjMk8/DmGkwTU9tKXlsBmBnZBs/oekFVTiQlqCP5Ff2WZykr8FJ006jYuiJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSznLj2Fzs86/i3 8yuuOyvdoYaFaDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzd0 ZHNqSGZzYWQ3SHprNW1ITTU0VTd2ZkhQQzl2UEtCeVB0ejJybU4ydlcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc3 dGRzakhmc2FkN0h6azVtSE01NFU3dmZIUEM5dlBLQnlQdHoycm1OMnZXLzAvQjM5 Q0I4RjYxNzNCM0NFQkY4QjdGMzJCQUUzQjJCRERBMTg2ODU2OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLagwMA0EAgACMAcDBQAoBFcAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXBTANBgkqhkiG9w0BAQsFAAOCAQEAenMfKGOGWwGEl1fK ZTyb0OdxKObOiniz9Z6M2dqDRmWiSM9jp7ONmWW32Qs6Wc20aG56Wd6TW/WBKyof wvUj78ZY99MSrt0Uh1TCCcq7y/O9RX1Y9OEGjGOJNkJ5xyNnWzE0QLiApFmr7NcV 1p8pR4QMHefg257Xk0LBgwKbSmwBdeJ+2c/Z+3dFkPozmOzl/FrkrCgkCkMNFjBk ruojLxggd0et0aRdXL91flRmyz+KilxlFLDHhgsGxCAyTjyaM8OOMHtvd9J3+aA5 5y4mTFNngexfwkmRpiVzse5Fu9TpBv96dV1egJ64gS+nCrQaWEr6Qq8dltmS3Fw3 crQacw== -----END CERTIFICATE-----Generated at Sat Nov 23 07:44:20 2024 by rpki-client on console-ams.rpki-client.org