$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer File: C0DD64892A0C121799367350C68DE3D2965E859B.cer (raw, json) Hash identifier: Sf8XYgPpC/7KKtZlF4INQl77ITwORQpHreOc8VuYMK4= Subject key identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4BDDCDF2F1684FE62BB44A7A1432820F3FE05B86 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft caRepository: rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 18 Oct 2024 14:30:08 +0000 Certificate not after: Fri 17 Oct 2025 14:35:08 +0000 Subordinate resources: AS: 272730 IP: 170.80.60.0/22 IP: 2804:87c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:dd:cd:f2:f1:68:4f:e6:2b:b4:4a:7a:14:32:82:0f:3f:e0:5b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 18 14:30:08 2024 GMT Not After : Oct 17 14:35:08 2025 GMT Subject: CN=C0DD64892A0C121799367350C68DE3D2965E859B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:5d:25:f5:3a:78:38:b8:54:db:26:2e:ec: 62:ec:50:c5:8e:21:61:00:54:83:b5:42:3e:2d:c2: 2a:65:af:7f:9a:c9:4b:0a:e0:9b:87:67:bc:6c:d9: 30:e3:70:24:41:5d:16:5c:a8:03:e3:50:ae:af:fd: 1b:cf:f7:9b:31:78:6f:7f:df:2f:7b:e4:27:11:ff: 6e:b7:62:f0:8e:f2:a7:25:dc:a8:b2:a7:59:b1:ac: 1a:aa:02:91:e7:fd:86:41:96:37:86:8c:e8:9c:00: 29:03:2f:62:a7:0e:ea:15:ce:0f:b9:f3:a9:da:fa: 98:05:5a:aa:8b:d7:b8:a3:85:a1:8d:73:93:9b:24: 5c:5a:a8:53:36:03:29:09:41:0d:96:d6:36:ee:d2: 79:53:ef:5c:1b:1d:38:0b:e9:cf:10:f7:e1:6f:e7: 67:9f:eb:48:4c:f4:12:16:08:f4:b2:82:da:a2:20: b2:05:ee:c2:64:3d:6b:b3:8a:d6:f8:6d:40:14:f9: 4b:ec:3c:0a:0c:0e:ed:9d:9b:06:7b:61:fb:a1:fc: 0d:4c:ca:41:76:f2:a1:e4:2c:85:a9:23:3e:50:22: 6f:d0:19:e1:0f:1b:9c:84:8a:dc:fa:b1:05:74:07: 6d:be:6a:12:ae:6b:25:97:78:f6:67:0a:18:6e:60: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.60.0/22 IPv6: 2804:87c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272730 Signature Algorithm: sha256WithRSAEncryption ba:e1:b5:c1:1c:da:f6:7e:d3:d6:b1:3a:ee:f4:9f:19:1a:b9: 7d:6d:2a:06:4c:68:79:a7:28:1f:a9:c6:3c:6a:7e:fd:ed:fc: 74:1c:4f:2c:b7:7c:94:6c:06:b5:fe:9d:2c:7b:1b:70:8e:d7: 77:c3:ec:51:9c:4c:bc:73:b7:b3:b4:67:11:d7:cc:34:60:4d: d2:22:e0:48:7e:e4:c3:cb:87:9a:f3:48:f6:f6:b0:d5:dc:db: dd:30:af:2f:b2:2e:c1:33:ca:7a:e3:5c:ab:80:8a:a4:37:70: a5:a8:5a:5c:c4:f8:5e:e1:2c:cd:9b:d9:12:05:1b:3d:49:04: 22:5a:db:dd:11:0d:15:fe:79:63:4b:af:b0:eb:7b:cb:66:52: 17:60:95:fc:af:46:6b:94:0f:7a:03:0c:0c:93:86:1c:04:3d: 00:73:95:60:37:af:6a:06:53:d5:e8:7e:b4:57:2f:87:ac:8b: 45:a7:2c:04:f8:da:1b:e6:71:b8:2c:04:90:0a:8d:0a:04:41: 8a:72:c3:18:39:67:18:cc:49:87:10:31:d3:bc:d1:d4:50:f5: e5:cb:54:32:23:47:f1:0c:a7:de:17:7d:39:a7:d9:43:50:51: 00:61:e1:44:4e:ac:bf:e9:1f:6d:0e:54:d1:89:52:94:33:7d: cd:84:99:46 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUS93N8vFoT+YrtEp6FDKCDz/gW4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMTgxNDMwMDhaFw0yNTEwMTcxNDM1MDhaMDMxMTAvBgNV BAMTKEMwREQ2NDg5MkEwQzEyMTc5OTM2NzM1MEM2OERFM0QyOTY1RTg1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsV0l9Tp4OLhU2yYu7GLsUMWO IWEAVIO1Qj4twiplr3+ayUsK4JuHZ7xs2TDjcCRBXRZcqAPjUK6v/RvP95sxeG9/ 3y975CcR/263YvCO8qcl3Kiyp1mxrBqqApHn/YZBljeGjOicACkDL2KnDuoVzg+5 86na+pgFWqqL17ijhaGNc5ObJFxaqFM2AykJQQ2W1jbu0nlT71wbHTgL6c8Q9+Fv 52ef60hM9BIWCPSygtqiILIF7sJkPWuzitb4bUAU+UvsPAoMDu2dmwZ7Yfuh/A1M ykF28qHkLIWpIz5QIm/QGeEPG5yEitz6sQV0B22+ahKuayWXePZnChhuYKc5AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTA3WSJKgwSF5k2 c1DGjePSll6FmzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnR5 Z3pVM2RSdkNwMXlidjdoVHhGUjJ5TGM3Z05LUXE5UzQzSEt0Q2dvdFYvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnR5 Z3pVM2RSdkNwMXlidjdoVHhGUjJ5TGM3Z05LUXE5UzQzSEt0Q2dvdFYvMC9DMERE NjQ4OTJBMEMxMjE3OTkzNjczNTBDNjhERTNEMjk2NUU4NTlCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqUDwwDQQCAAIwBwMFACgEh8QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBClaMA0GCSqGSIb3DQEBCwUAA4IBAQC64bXBHNr2ftPWsTru 9J8ZGrl9bSoGTGh5pygfqcY8an797fx0HE8st3yUbAa1/p0sextwjtd3w+xRnEy8 c7eztGcR18w0YE3SIuBIfuTDy4ea80j29rDV3NvdMK8vsi7BM8p641yrgIqkN3Cl qFpcxPhe4SzNm9kSBRs9SQQiWtvdEQ0V/nljS6+w63vLZlIXYJX8r0ZrlA96AwwM k4YcBD0Ac5VgN69qBlPV6H60Vy+HrItFpywE+Nob5nG4LASQCo0KBEGKcsMYOWcY zEmHEDHTvNHUUPXly1QyI0fxDKfeF305p9lDUFEAYeFETqy/6R9tDlTRiVKUM33N hJlG -----END CERTIFICATE-----Generated at Mon Feb 17 07:57:36 2025 by rpki-client