$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer File: BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.cer (raw, json) Hash identifier: x40KMduhW38eUouyxOMqNMiVNUVcqrF9Dy5K+kt0AQk= Subject key identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 51790C6E2CF13A1F981BCB53FA3B50B248E32821 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft caRepository: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 03 Sep 2024 18:26:45 +0000 Certificate not after: Tue 02 Sep 2025 18:31:45 +0000 Subordinate resources: AS: 11097 IP: 192.207.194.0/24 IP: 200.0.70.0/24 IP: 200.202.128.0/18 IP: 2801:80:1400::/40 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:79:0c:6e:2c:f1:3a:1f:98:1b:cb:53:fa:3b:50:b2:48:e3:28:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 3 18:26:45 2024 GMT Not After : Sep 2 18:31:45 2025 GMT Subject: CN=BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:cf:60:c6:5b:95:8b:6c:ed:0c:88:fb:d5: e3:ac:a3:52:82:4f:f0:9e:7e:65:89:cd:c2:67:53: aa:6a:88:67:84:e3:71:36:7e:6e:f4:6a:c1:60:df: cf:57:ea:46:8e:6d:13:92:31:03:f2:16:8e:23:92: 4e:ea:8f:24:a6:41:12:07:10:1a:ef:d7:1b:d1:9e: 47:fc:eb:19:c9:af:de:a2:3d:89:6d:d9:e2:81:2c: c7:47:03:a9:76:8e:1e:e4:41:26:06:b4:fb:a5:5c: 09:0b:5c:a5:a6:d4:e6:79:6d:7e:09:12:b2:cc:de: 47:89:4e:de:ee:bc:14:f3:8e:bf:7a:dd:25:3c:c6: 68:10:9b:cc:17:cd:ea:80:9d:25:2a:49:0b:41:81: dc:e9:b1:7f:5d:49:fb:79:73:b1:6c:08:cf:34:8b: 07:40:46:5c:84:3f:b8:80:15:86:d5:17:f3:09:cd: 25:f0:7d:e5:48:e2:85:b8:4a:3b:a7:0c:1d:98:17: 15:45:dd:9e:07:19:be:54:d1:0c:11:a0:57:b3:c0: 49:8d:6a:c8:0e:fd:99:f0:f3:9e:4c:a1:91:a5:a1: ad:3c:c0:5d:33:c6:58:58:1a:5c:dd:48:e5:6b:05: 74:b5:98:3d:3b:e8:64:86:de:a5:07:8a:d7:fe:cd: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:61:E6:D5:F8:50:C8:FF:71:4F:E8:34:B7:A2:E7:1D:62:AB:BC:5C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/BC61E6D5F850C8FF714FE834B7A2E71D62ABBC5C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.207.194.0/24 200.0.70.0/24 200.202.128.0/18 IPv6: 2801:80:1400::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11097 Signature Algorithm: sha256WithRSAEncryption 8b:f0:8e:77:71:1a:60:db:df:aa:b7:ba:44:76:ec:f0:45:43: ee:9d:bd:36:69:38:e0:84:a3:fb:56:d0:78:cc:7f:82:14:93: b8:40:b0:44:a3:ad:74:d3:4f:a7:09:10:b8:7a:df:6d:66:e4: 58:5d:29:68:10:0d:64:88:8c:43:cd:58:8a:5d:c8:9e:3a:13: 55:5c:6d:ea:03:cf:b3:4c:14:e4:8d:e0:b1:f1:ae:65:9a:e6: 26:c3:d2:42:5d:21:83:9f:9e:7e:e0:eb:ea:60:21:8c:d0:a2: fe:1b:5a:1d:1b:35:d8:c7:be:cf:23:98:65:bd:09:31:07:39: dc:8c:1b:92:82:d7:a5:62:7b:4e:45:b8:77:9a:9d:6e:fc:51: bc:2f:4a:d8:14:3c:c0:80:a6:68:f1:67:17:86:6d:61:02:8b: 94:b1:4c:5f:28:17:5a:4f:69:32:d9:e4:61:42:92:a4:8c:20: 4b:56:bf:d0:70:1b:d6:7e:43:6b:28:6d:18:17:47:59:0a:b1: 74:87:7d:5f:46:1e:b7:c7:5e:1d:d1:15:0e:92:e1:b8:9e:85: 94:61:21:5e:6d:8a:ac:5a:8e:3c:3a:e5:1d:7a:3d:95:0e:bd: 24:75:c4:b4:9a:69:95:7a:c9:7d:03:ee:d7:26:78:be:c9:b5: 8d:39:bb:58 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUUXkMbizxOh+YG8tT+jtQskjjKCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDMxODI2NDVaFw0yNTA5MDIxODMxNDVaMDMxMTAvBgNV BAMTKEJDNjFFNkQ1Rjg1MEM4RkY3MTRGRTgzNEI3QTJFNzFENjJBQkJDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dM9gxluVi2ztDIj71eOso1KC T/CefmWJzcJnU6pqiGeE43E2fm70asFg389X6kaObROSMQPyFo4jkk7qjySmQRIH EBrv1xvRnkf86xnJr96iPYlt2eKBLMdHA6l2jh7kQSYGtPulXAkLXKWm1OZ5bX4J ErLM3keJTt7uvBTzjr963SU8xmgQm8wXzeqAnSUqSQtBgdzpsX9dSft5c7FsCM80 iwdARlyEP7iAFYbVF/MJzSXwfeVI4oW4SjunDB2YFxVF3Z4HGb5U0QwRoFezwEmN asgO/Znw855MoZGloa08wF0zxlhYGlzdSOVrBXS1mD076GSG3qUHitf+zRk7AgMB AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS8YebV+FDI/3FP 6DS3oucdYqu8XDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNFoy bm9zVVFQYnRtQkp4V0d4RkVmMUozM1p4VTZZak5TY3NOZFAxdVBpZWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRa Mm5vc1VRUGJ0bUJKeFdHeEZFZjFKMzNaeFU2WWpOU2NzTmRQMXVQaWVlLzAvQkM2 MUU2RDVGODUwQzhGRjcxNEZFODM0QjdBMkU3MUQ2MkFCQkM1Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEH AQH/BCwwKjAYBAIAATASAwQAwM/CAwQAyABGAwQGyMqAMA4EAgACMAgDBgAoAQCA FDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIrWTANBgkqhkiG9w0BAQsFAAOCAQEA i/COd3EaYNvfqre6RHbs8EVD7p29Nmk44ISj+1bQeMx/ghSTuECwRKOtdNNPpwkQ uHrfbWbkWF0paBANZIiMQ81Yil3InjoTVVxt6gPPs0wU5I3gsfGuZZrmJsPSQl0h g5+efuDr6mAhjNCi/htaHRs12Me+zyOYZb0JMQc53IwbkoLXpWJ7TkW4d5qdbvxR vC9K2BQ8wICmaPFnF4ZtYQKLlLFMXygXWk9pMtnkYUKSpIwgS1a/0HAb1n5Dayht GBdHWQqxdId9X0Yet8deHdEVDpLhuJ6FlGEhXm2KrFqOPDrlHXo9lQ69JHXEtJpp lXrJfQPu1yZ4vsm1jTm7WA== -----END CERTIFICATE-----Generated at Sat Nov 23 07:44:23 2024 by rpki-client on console-ams.rpki-client.org