$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer File: BF45F5442049793490E484E18AD1516C8FDC8087.cer (raw, json) Hash identifier: c6SMNKJ1yA0yosB6OfPMVGCYDuyXcLSjS56S/MPGg1A= Subject key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 30E14FC254EB8E8DDA83AA21BB5565535C76F485 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft caRepository: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Oct 2024 21:54:38 +0000 Certificate not after: Tue 21 Oct 2025 21:59:38 +0000 Subordinate resources: AS: 271193 IP: 179.49.144.0/22 IP: 2804:77b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e1:4f:c2:54:eb:8e:8d:da:83:aa:21:bb:55:65:53:5c:76:f4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 21:54:38 2024 GMT Not After : Oct 21 21:59:38 2025 GMT Subject: CN=BF45F5442049793490E484E18AD1516C8FDC8087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:77:2e:6a:4a:2c:f1:e6:f6:c7:1e:ce:ad: 58:64:16:cd:e1:a7:b0:29:e0:39:4d:6d:10:cf:80: 89:64:19:9f:ab:3e:ed:3b:4c:b9:94:5c:a5:24:e0: 2c:5b:33:e0:09:86:1f:e2:37:14:3c:ea:b6:e6:97: 66:3d:c8:5a:fb:76:c8:85:de:3f:65:78:ac:4d:15: 3c:11:77:37:fa:40:b4:7c:ae:0a:99:82:6a:b6:ad: 36:64:88:20:cb:67:b9:29:30:55:87:16:b1:32:ad: c0:53:5c:f4:f7:5e:12:db:07:be:69:3f:4c:9a:b2: 3a:32:c7:40:8b:e5:58:bc:e3:32:f5:14:f7:8a:ba: 1f:78:ab:41:42:49:65:c4:37:82:ce:6a:3d:3f:ae: 60:b1:ef:d8:7a:33:dc:3b:c1:f8:0d:2e:d6:61:39: 1d:5c:54:d3:b3:3a:47:17:7f:a4:ec:12:14:b8:ce: 6b:ba:40:a9:eb:e9:e9:58:d9:6e:64:11:97:4f:0c: 07:a1:39:97:7e:12:98:ac:f1:31:00:d7:63:f4:db: 77:3e:51:8e:6b:27:09:24:00:03:e2:7e:ba:93:b9: f8:00:73:c4:f4:87:9c:b1:90:39:23:03:71:bc:71: b4:c7:5d:e4:77:db:e0:47:b9:6c:f0:87:1b:36:4f: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.49.144.0/22 IPv6: 2804:77b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271193 Signature Algorithm: sha256WithRSAEncryption a1:0a:88:a5:6c:a7:1b:4c:44:1c:c4:80:a3:ef:d5:d1:f2:1c: be:2d:b3:30:59:56:d4:2e:0d:eb:88:72:17:35:90:63:9a:50: 71:cf:d9:3b:9e:55:ab:c9:95:d1:af:27:3c:75:f6:07:67:1d: 1f:9c:a4:eb:81:24:51:62:ae:86:23:3c:99:dd:55:7f:1b:68: 6a:44:a4:dd:2c:0e:bb:ba:b3:79:ee:9d:9f:e4:e0:42:ec:cb: b3:0f:62:08:e3:c7:ff:8b:80:51:23:ab:b0:95:12:e5:f6:99: 92:8a:e2:fb:5d:aa:f5:8e:ec:97:3b:2c:39:69:4d:bc:ca:ed: fe:38:d8:99:f6:77:43:3c:71:87:4f:88:e1:74:8d:e1:2e:0c: 8d:be:12:57:27:99:67:84:fb:5c:e2:70:1b:cc:5f:94:64:b6: af:51:37:24:5d:b2:1b:d9:df:e5:27:05:4a:57:2b:a2:ae:87: 67:0b:21:cd:e7:01:b8:ee:7f:46:c0:f7:09:6a:e6:4e:d5:6f: e8:8b:ca:0d:61:11:49:69:d4:f8:0d:09:0c:e6:99:97:a8:a9: 73:bb:6a:f1:eb:3d:b3:7c:e8:ea:51:59:f5:5e:ee:5f:63:35: b2:c9:60:f7:a0:0a:5d:30:b1:d1:17:7e:5a:22:07:b1:71:d4: 0b:4e:dd:04 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUMOFPwlTrjo3ag6ohu1VlU1x29IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjIyMTU0MzhaFw0yNTEwMjEyMTU5MzhaMDMxMTAvBgNV BAMTKEJGNDVGNTQ0MjA0OTc5MzQ5MEU0ODRFMThBRDE1MTZDOEZEQzgwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc73cuakos8eb2xx7OrVhkFs3h p7Ap4DlNbRDPgIlkGZ+rPu07TLmUXKUk4CxbM+AJhh/iNxQ86rbml2Y9yFr7dsiF 3j9leKxNFTwRdzf6QLR8rgqZgmq2rTZkiCDLZ7kpMFWHFrEyrcBTXPT3XhLbB75p P0yasjoyx0CL5Vi84zL1FPeKuh94q0FCSWXEN4LOaj0/rmCx79h6M9w7wfgNLtZh OR1cVNOzOkcXf6TsEhS4zmu6QKnr6elY2W5kEZdPDAehOZd+Epis8TEA12P023c+ UY5rJwkkAAPifrqTufgAc8T0h5yxkDkjA3G8cbTHXeR32+BHuWzwhxs2TyVpAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/RfVEIEl5NJDk hOGK0VFsj9yAhzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0M0 S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNYRWkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0M0 S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNYRWkvMS9CRjQ1 RjU0NDIwNDk3OTM0OTBFNDg0RTE4QUQxNTE2QzhGREM4MDg3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKzMZAwDQQCAAIwBwMFACgEd7AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCNZMA0GCSqGSIb3DQEBCwUAA4IBAQChCoilbKcbTEQcxICj 79XR8hy+LbMwWVbULg3riHIXNZBjmlBxz9k7nlWryZXRryc8dfYHZx0fnKTrgSRR Yq6GIzyZ3VV/G2hqRKTdLA67urN57p2f5OBC7MuzD2II48f/i4BRI6uwlRLl9pmS iuL7Xar1juyXOyw5aU28yu3+ONiZ9ndDPHGHT4jhdI3hLgyNvhJXJ5lnhPtc4nAb zF+UZLavUTckXbIb2d/lJwVKVyuirodnCyHN5wG47n9GwPcJauZO1W/oi8oNYRFJ adT4DQkM5pmXqKlzu2rx6z2zfOjqUVn1Xu5fYzWyyWD3oApdMLHRF35aIgexcdQL Tt0E -----END CERTIFICATE-----Generated at Fri Nov 22 08:01:14 2024 by rpki-client on console-ams.rpki-client.org