$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer File: B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.cer (raw, json) Hash identifier: e9Xmijw1s8yO5HWwT1MDHovspyvSm3NWEaUr7CTqP0s= Subject key identifier: B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6319AB3DE8292C7B92CF25266E4640E2BC37013A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.mft caRepository: rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Oct 2024 19:23:25 +0000 Certificate not after: Fri 24 Oct 2025 19:28:25 +0000 Subordinate resources: AS: 28587 IP: 177.128.184.0/21 IP: 2804:da0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:19:ab:3d:e8:29:2c:7b:92:cf:25:26:6e:46:40:e2:bc:37:01:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 25 19:23:25 2024 GMT Not After : Oct 24 19:28:25 2025 GMT Subject: CN=B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:0d:fa:69:90:30:29:8e:9a:a0:45:c1:dd: 2a:88:56:8d:c9:98:22:5c:87:a2:68:a9:67:b0:64: 12:76:3e:28:09:b8:e1:f9:c7:97:d4:86:69:8e:38: 99:c0:a3:e7:c6:52:fa:4e:84:f9:a9:47:65:6a:73: c7:a5:55:f6:30:64:a1:15:cb:2e:35:e7:21:97:a9: a9:0a:1d:a6:c4:bd:51:37:64:68:f5:dd:d3:de:f4: 8d:89:38:81:7a:f8:b1:34:84:81:64:36:7e:c8:d1: fc:7f:9f:8c:55:96:f6:00:0a:17:16:7c:19:cd:36: bf:df:8f:b3:f0:e7:2c:86:e3:1f:3b:ac:ed:4a:3d: d2:f8:37:09:55:3d:a1:47:c4:59:aa:ab:45:12:ea: c7:e8:4c:88:c7:e8:09:d9:fa:8d:dc:48:b4:a0:00: cd:ae:5d:47:39:54:38:66:a8:be:7a:97:01:6e:28: 85:20:af:cb:be:75:11:2a:64:04:e2:b9:b8:f4:b5: 3e:8d:32:40:fb:27:79:8c:1a:ff:a8:f3:df:87:20: e5:86:dd:ef:c1:28:82:84:f5:0c:1e:0f:bb:ba:b7: f2:71:64:d2:4b:70:59:da:ed:85:bd:c3:04:75:8b: 1c:bd:6f:c2:20:bf:4b:ce:45:a4:8f:d9:fe:b1:07: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:65:B5:C9:5F:A0:F7:3E:B9:6D:28:D2:7A:CF:52:E0:D5:EB:F5:68 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/B865B5C95FA0F73EB96D28D27ACF52E0D5EBF568.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.184.0/21 IPv6: 2804:da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28587 Signature Algorithm: sha256WithRSAEncryption 04:ec:7f:c7:1b:58:5a:76:5a:47:2c:4e:98:29:cc:e0:a0:5c: 72:5a:a5:28:e9:a5:35:f6:7b:79:32:8d:d9:cf:9f:d3:0a:5e: ee:11:8e:b4:32:39:b4:05:9d:35:e1:ca:05:6e:4b:e9:8b:8d: 3e:34:b0:06:0e:cf:fb:de:2f:c5:c7:86:48:37:c3:2a:d7:98: 2c:a6:7a:80:86:e9:c0:d8:c6:b4:f0:dd:cb:8a:ae:2a:cf:ce: 53:7a:ad:e7:7b:0a:33:13:5f:14:bf:9a:e8:7f:43:44:e5:f5: 6e:fe:36:4a:a0:2c:af:a9:8c:d8:51:b0:ef:a3:aa:85:17:99: d4:84:73:ce:0b:23:91:db:02:00:00:dd:35:59:05:d0:b6:3e: 73:12:9a:e1:6b:8f:4f:69:fd:0c:66:3d:bd:f6:66:ca:38:b6: 44:41:b9:37:4b:9d:55:04:af:49:c1:5c:68:b1:f1:c5:db:0d: 17:df:8f:c5:74:dd:93:1e:8a:f5:c0:b5:52:06:93:6d:7b:c2: 02:b4:91:32:ac:25:b3:7d:23:bf:57:9d:2c:03:87:96:31:53: 65:80:97:ce:d0:89:85:b8:7e:89:d5:97:6f:81:fb:4e:8b:1a: ec:2e:86:31:ea:8f:77:30:52:71:dc:58:2f:f3:88:0a:58:cc: 22:29:7c:03 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUYxmrPegpLHuSzyUmbkZA4rw3ATowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjUxOTIzMjVaFw0yNTEwMjQxOTI4MjVaMDMxMTAvBgNV BAMTKEI4NjVCNUM5NUZBMEY3M0VCOTZEMjhEMjdBQ0Y1MkUwRDVFQkY1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEA36aZAwKY6aoEXB3SqIVo3J mCJch6JoqWewZBJ2PigJuOH5x5fUhmmOOJnAo+fGUvpOhPmpR2Vqc8elVfYwZKEV yy415yGXqakKHabEvVE3ZGj13dPe9I2JOIF6+LE0hIFkNn7I0fx/n4xVlvYAChcW fBnNNr/fj7Pw5yyG4x87rO1KPdL4NwlVPaFHxFmqq0US6sfoTIjH6AnZ+o3cSLSg AM2uXUc5VDhmqL56lwFuKIUgr8u+dREqZATiubj0tT6NMkD7J3mMGv+o89+HIOWG 3e/BKIKE9QweD7u6t/JxZNJLcFna7YW9wwR1ixy9b8Igv0vORaSP2f6xB7T3AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS4ZbXJX6D3Prlt KNJ6z1Lg1ev1aDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0cy SkZlcFhjMzlodXFQY3RkOHlxMVJrZHdlcHVYNXBGQlpGVFlHOXhTMjUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdH MkpGZXBYYzM5aHVxUGN0ZDh5cTFSa2R3ZXB1WDVwRkJaRlRZRzl4UzI1LzAvQjg2 NUI1Qzk1RkEwRjczRUI5NkQyOEQyN0FDRjUyRTBENUVCRjU2OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsYC4MA0EAgACMAcDBQAoBA2gMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAm+rMA0GCSqGSIb3DQEBCwUAA4IBAQAE7H/HG1hadlpHLE6Y KczgoFxyWqUo6aU19nt5Mo3Zz5/TCl7uEY60Mjm0BZ014coFbkvpi40+NLAGDs/7 3i/Fx4ZIN8Mq15gspnqAhunA2Ma08N3Liq4qz85Teq3newozE18Uv5rof0NE5fVu /jZKoCyvqYzYUbDvo6qFF5nUhHPOCyOR2wIAAN01WQXQtj5zEprha49Paf0MZj29 9mbKOLZEQbk3S51VBK9JwVxosfHF2w0X34/FdN2THor1wLVSBpNte8ICtJEyrCWz fSO/V50sA4eWMVNlgJfO0ImFuH6J1ZdvgftOixrsLoYx6o93MFJx3Fgv84gKWMwi KXwD -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:29 2024 by rpki-client on console-ams.rpki-client.org