$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.cer File: B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.cer (raw, json) Hash identifier: bdQCUXCSlSJtSnOx6cU1LIkPUgMlkvv/5DVtnfNLQWc= Subject key identifier: B9:B6:9C:97:E4:DE:0D:B9:7A:35:90:F4:48:77:D8:8C:EA:1D:F4:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0AD5A326936ED156AA41B4A319610C1ED9523079 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.mft caRepository: rsync://rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 30 Jul 2024 14:18:05 +0000 Certificate not after: Tue 29 Jul 2025 14:23:05 +0000 Subordinate resources: AS: 266923 IP: 45.224.172.0/22 IP: 2804:4564::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d5:a3:26:93:6e:d1:56:aa:41:b4:a3:19:61:0c:1e:d9:52:30:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 30 14:18:05 2024 GMT Not After : Jul 29 14:23:05 2025 GMT Subject: CN=B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:9e:a9:75:5d:21:6a:42:56:1e:65:08:69: 86:2e:82:52:33:4a:f6:20:5f:d2:9e:99:f0:1b:ed: 8b:80:b2:3b:e0:ac:39:74:aa:73:36:b9:ad:87:7b: 72:e3:c5:c2:af:55:be:50:a7:33:8b:ea:aa:9e:5a: cd:e9:75:55:83:37:26:1c:4e:93:f6:17:9f:68:dd: 6b:a5:10:1b:64:b9:fa:70:cc:62:4a:09:91:bd:e2: 8e:07:02:dc:f8:9f:bf:91:b5:62:49:20:34:5b:89: 33:6b:43:1c:36:f2:49:8d:d0:a6:c5:3e:35:26:ce: d4:6a:89:65:b2:32:db:73:f5:04:7d:8d:05:45:45: 5c:27:6d:40:b5:0f:be:de:68:51:30:57:93:d3:05: f5:8f:79:c1:a9:77:10:ad:ee:e0:15:29:aa:8b:95: c1:56:a8:d5:c6:26:d1:50:c4:07:87:32:62:07:9e: b6:56:4d:e5:85:2d:cf:3b:a8:ff:6c:35:64:be:9a: 5e:15:96:0f:66:4f:36:b7:c2:44:8e:e9:04:01:2c: af:f0:2e:00:58:57:67:24:93:d6:e4:9a:7b:db:29: 8a:d1:a3:60:b2:72:ab:03:ef:69:f4:4c:9d:df:b7: b6:a1:ff:1d:4b:bc:1a:68:1e:5f:1b:47:3b:2e:bd: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:B6:9C:97:E4:DE:0D:B9:7A:35:90:F4:48:77:D8:8C:EA:1D:F4:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3hVjDC9UoVfqHBp2qUD4SnR6cWqzJ3pUNKyxiSDvRu9e/0/B9B69C97E4DE0DB97A3590F44877D88CEA1DF4FC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.224.172.0/22 IPv6: 2804:4564::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266923 Signature Algorithm: sha256WithRSAEncryption 9d:8e:17:c1:40:84:47:cb:48:b9:9d:a4:c4:7e:53:bc:ef:4a: 9c:d9:c6:98:0b:5e:ff:f9:55:58:d9:52:a3:b2:dc:d9:c7:6f: 1a:4d:5d:36:34:50:09:9e:4e:b3:64:e6:43:14:47:f4:e3:a5: 8b:d5:ec:6c:d7:c8:38:8f:07:e6:a9:49:97:ac:77:77:5d:8c: 80:d2:ea:cf:48:21:0f:b9:c5:b9:60:a0:4a:95:a8:30:b6:1f: 47:90:99:29:49:54:89:30:b0:c6:4b:11:dc:17:cd:48:14:73: f0:fe:39:e1:76:e8:3f:62:74:51:e0:1f:4a:5d:29:92:ac:5b: a3:1a:df:20:d2:f3:0e:41:d7:64:92:5a:25:46:a7:63:b7:c6: 65:15:01:27:9e:37:13:e4:2e:58:75:05:09:61:48:dd:b8:c8: 30:de:3f:75:4e:54:cd:39:b5:73:e7:2f:df:2a:df:c1:55:10: 1a:0c:21:a8:fc:b8:ef:7c:85:89:ea:97:44:cf:75:e0:58:e9: 85:cb:ea:13:1c:d7:bd:0f:52:e6:63:59:25:35:28:c8:12:8d: f8:bc:f9:ed:33:e2:c8:50:16:ec:c2:7e:1f:d3:54:44:f1:df: cd:b3:73:93:d5:32:ee:39:b8:7a:c1:ec:fd:fb:70:60:46:ab: 73:30:02:7a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCtWjJpNu0VaqQbSjGWEMHtlSMHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MzAxNDE4MDVaFw0yNTA3MjkxNDIzMDVaMDMxMTAvBgNV BAMTKEI5QjY5Qzk3RTRERTBEQjk3QTM1OTBGNDQ4NzdEODhDRUExREY0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGJ6pdV0hakJWHmUIaYYuglIz SvYgX9KemfAb7YuAsjvgrDl0qnM2ua2He3LjxcKvVb5QpzOL6qqeWs3pdVWDNyYc TpP2F59o3WulEBtkufpwzGJKCZG94o4HAtz4n7+RtWJJIDRbiTNrQxw28kmN0KbF PjUmztRqiWWyMttz9QR9jQVFRVwnbUC1D77eaFEwV5PTBfWPecGpdxCt7uAVKaqL lcFWqNXGJtFQxAeHMmIHnrZWTeWFLc87qP9sNWS+ml4Vlg9mTza3wkSO6QQBLK/w LgBYV2ckk9bkmnvbKYrRo2CycqsD72n0TJ3ft7ah/x1LvBpoHl8bRzsuvSnJAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5tpyX5N4NuXo1 kPRId9iM6h30/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM2hW akRDOVVvVmZxSEJwMnFVRDRTblI2Y1dxekozcFVOS3l4aVNEdlJ1OWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNo VmpEQzlVb1ZmcUhCcDJxVUQ0U25SNmNXcXpKM3BVTkt5eGlTRHZSdTllLzAvQjlC NjlDOTdFNERFMERCOTdBMzU5MEY0NDg3N0Q4OENFQTFERjRGQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeCsMA0EAgACMAcDBQAoBEVkMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQSqzANBgkqhkiG9w0BAQsFAAOCAQEAnY4XwUCER8tIuZ2k xH5TvO9KnNnGmAte//lVWNlSo7Lc2cdvGk1dNjRQCZ5Os2TmQxRH9OOli9XsbNfI OI8H5qlJl6x3d12MgNLqz0ghD7nFuWCgSpWoMLYfR5CZKUlUiTCwxksR3BfNSBRz 8P454XboP2J0UeAfSl0pkqxboxrfINLzDkHXZJJaJUanY7fGZRUBJ543E+QuWHUF CWFI3bjIMN4/dU5UzTm1c+cv3yrfwVUQGgwhqPy473yFieqXRM914FjphcvqExzX vQ9S5mNZJTUoyBKN+Lz57TPiyFAW7MJ+H9NURPHfzbNzk9Uy7jm4esHs/ftwYEar czACeg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:51 2024 by rpki-client on console-fra.rpki-client.org