$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer File: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer (raw, json) Hash identifier: iklIxEtie9VZkjOb71dKmHVPCEoDt4SQ3Fi3dh1L6uU= Subject key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 39F371D3DCD8BB1EDA6A711A8653293458072FFD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft caRepository: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 19:32:03 +0000 Certificate not after: Thu 18 Dec 2025 19:37:03 +0000 Subordinate resources: AS: 265928 IP: 131.196.132.0/22 IP: 187.109.118.0/24 IP: 2804:4004::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f3:71:d3:dc:d8:bb:1e:da:6a:71:1a:86:53:29:34:58:07:2f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 19 19:32:03 2024 GMT Not After : Dec 18 19:37:03 2025 GMT Subject: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:66:b1:f7:bc:d2:8f:32:65:c0:37:d8:57: be:2d:39:d9:2e:7a:29:30:de:6d:d9:44:81:27:73: ea:e4:e6:54:ca:88:d4:af:ff:98:5f:fd:c1:33:d1: 35:7a:80:7f:57:25:38:53:da:4c:65:3e:d4:a1:3f: 8b:46:4c:21:3d:af:5f:b2:58:e7:5d:e1:ee:d4:67: 7e:59:a9:9c:33:53:f4:8c:20:ba:95:32:1d:27:c2: 20:ab:c2:d0:02:ed:f2:ae:df:5d:20:7d:19:e5:17: 2f:33:88:b3:d7:c5:e9:13:c8:78:c6:9d:5f:46:5c: 10:68:45:58:72:76:7d:8f:aa:a1:af:54:4b:25:e8: 57:53:e6:da:91:aa:f5:d2:76:d7:05:12:4a:94:5b: fc:ca:05:f2:d7:42:88:ea:f2:65:23:d6:d8:5c:e7: ec:46:8b:b3:07:1a:f4:24:14:92:f3:c9:7b:8e:ae: 05:91:e7:76:1c:ef:21:b5:61:c9:de:5d:d2:57:66: 08:32:5d:08:69:aa:19:78:61:66:f9:a6:98:76:43: d4:57:03:6f:9b:06:8f:46:64:8c:b6:2c:22:96:ef: 62:db:4b:4b:d5:c5:3b:5b:e8:3b:1c:78:93:46:58: e9:48:d2:41:ea:c1:b0:e8:62:71:13:34:d6:8b:31: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.132.0/22 187.109.118.0/24 IPv6: 2804:4004::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265928 Signature Algorithm: sha256WithRSAEncryption 26:70:f8:bc:44:bb:ee:d0:d0:88:84:8e:43:d0:8e:24:c1:67: cd:b7:86:f7:02:08:69:62:b0:34:6c:4d:0b:84:c7:3f:f9:2f: 2a:cb:cc:71:c8:e7:45:f0:3a:42:cc:d8:e8:e7:4e:aa:df:28: 2e:ca:c4:b2:fe:33:9e:9e:ff:b9:0e:74:f3:51:1f:6e:cb:5a: e8:53:0a:7f:20:cf:46:ff:0f:1e:eb:60:6e:26:1a:d2:5a:db: 87:33:d0:ec:71:12:56:6b:3e:c6:60:1f:9f:51:a4:34:1c:46: d9:78:d8:60:53:fd:b2:44:bf:5d:ea:4b:98:e0:60:e4:98:59: 16:0c:80:12:ef:0f:b9:e9:a7:5e:59:a3:22:60:ed:99:50:04: 1c:7d:55:a0:c2:95:2e:b3:89:13:b8:f5:d4:c7:b6:ca:f0:ae: 44:b4:69:18:19:d4:32:dd:5b:74:64:a4:ba:e2:a9:d6:a7:e8: 28:e9:df:41:9a:7e:e0:c0:af:4b:d8:73:9d:26:e8:12:f2:96: 1e:ef:ed:94:9f:83:3c:ec:22:fc:6c:da:07:87:4a:cb:8b:f4: ac:8c:f6:06:2a:9d:f2:b9:4e:14:66:a7:2f:85:5f:c2:c9:a4: 44:60:fe:d6:20:23:28:2e:92:75:c5:38:e8:23:5e:72:2a:57: 66:34:af:29 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOfNx09zYux7aanEahlMpNFgHL/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMTkxOTMyMDNaFw0yNTEyMTgxOTM3MDNaMDMxMTAvBgNV BAMTKEI4RDU5RjRCNTZCQjU0RkMzMUNEOUJGMUM3RkREREExOUQzQjAzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhWax97zSjzJlwDfYV74tOdku eikw3m3ZRIEnc+rk5lTKiNSv/5hf/cEz0TV6gH9XJThT2kxlPtShP4tGTCE9r1+y WOdd4e7UZ35ZqZwzU/SMILqVMh0nwiCrwtAC7fKu310gfRnlFy8ziLPXxekTyHjG nV9GXBBoRVhydn2PqqGvVEsl6FdT5tqRqvXSdtcFEkqUW/zKBfLXQojq8mUj1thc 5+xGi7MHGvQkFJLzyXuOrgWR53Yc7yG1YcneXdJXZggyXQhpqhl4YWb5pph2Q9RX A2+bBo9GZIy2LCKW72LbS0vVxTtb6DsceJNGWOlI0kHqwbDoYnETNNaLMfgRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS41Z9LVrtU/DHN m/HH/d2hnTsDaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkha QkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNaSmkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZI WkJGa1lKUmpjSHQ4QmFKd2pXRzlwd1VUWkRLNXBHejRRSlRxWkZTWkppLzAvQjhE NTlGNEI1NkJCNTRGQzMxQ0Q5QkYxQzdGREREQTE5RDNCMDM2OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg8SEAwQAu212MA0EAgACMAcDBQAoBEAEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQOyDANBgkqhkiG9w0BAQsFAAOCAQEAJnD4vES7 7tDQiISOQ9COJMFnzbeG9wIIaWKwNGxNC4THP/kvKsvMccjnRfA6QszY6OdOqt8o LsrEsv4znp7/uQ5081Efbsta6FMKfyDPRv8PHutgbiYa0lrbhzPQ7HESVms+xmAf n1GkNBxG2XjYYFP9skS/XepLmOBg5JhZFgyAEu8PuemnXlmjImDtmVAEHH1VoMKV LrOJE7j11Me2yvCuRLRpGBnUMt1bdGSkuuKp1qfoKOnfQZp+4MCvS9hznSboEvKW Hu/tlJ+DPOwi/GzaB4dKy4v0rIz2Biqd8rlOFGanL4VfwsmkRGD+1iAjKC6SdcU4 6CNecipXZjSvKQ== -----END CERTIFICATE-----Generated at Sat Apr 5 02:36:36 2025 by rpki-client