$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer File: C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.cer (raw, json) Hash identifier: vyRG/JTW48sDaZTmD5EsP7ym3HGPe2/M1b2TsghzGpE= Subject key identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 71F9ACC82C4A7D5F9CB409D2FF1C39A50269BD72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.mft caRepository: rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Sat 13 Jul 2024 18:31:34 +0000 Certificate not after: Sat 12 Jul 2025 18:36:34 +0000 Subordinate resources: AS: 61910 IP: 201.87.232.0/21 IP: 2804:16b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f9:ac:c8:2c:4a:7d:5f:9c:b4:09:d2:ff:1c:39:a5:02:69:bd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 13 18:31:34 2024 GMT Not After : Jul 12 18:36:34 2025 GMT Subject: CN=C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:b3:ab:8a:23:33:26:53:a1:93:d8:8d:7e: da:ed:55:7e:9e:bc:ee:48:88:4f:89:e0:14:21:61: c7:21:4b:54:d7:21:54:e6:cf:91:6c:42:b8:8f:bd: 37:61:db:59:a1:ff:68:6d:a7:75:fa:a1:73:fc:88: 73:42:eb:51:ad:72:b2:ae:bd:ca:97:d6:3b:f4:fa: 44:c7:38:92:22:00:0d:5e:4b:e0:c5:9c:b9:22:d3: 7b:30:01:28:00:ef:80:8b:53:53:cf:3d:a4:35:69: a9:51:aa:42:5b:6b:40:b1:5b:b9:e4:38:b8:b4:9e: ba:05:b7:4b:90:96:29:15:de:17:91:d5:42:28:36: 59:24:47:7d:7d:c3:a5:a5:83:48:7f:8e:cf:37:2b: 8e:b2:0e:54:37:2b:a2:96:75:de:18:8b:68:7d:f6: 6f:8b:94:5a:0e:07:bc:b1:8e:a6:29:b2:3c:cd:ac: 06:f3:5d:57:fb:a6:87:7d:b5:a9:93:0d:c3:38:61: c9:ff:c1:61:17:4f:a7:b2:85:35:6f:d5:34:40:37: 0f:1f:31:40:c8:b7:68:89:fb:d2:34:6d:6f:44:5a: 79:66:e6:94:75:75:45:19:6a:b8:37:e4:a4:78:28: 50:c8:61:5f:3a:bd:bf:0c:57:ac:10:2d:e3:47:4f: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:B3:39:AE:1E:23:4B:AA:B2:6D:4F:E1:CD:5C:BC:34:BA:4A:5B:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bfoh79WZ5FgG9XSb8rMuuxESewzeHLokyh3iVM1zWkik/2/C1B339AE1E234BAAB26D4FE1CD5CBC34BA4A5B1A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.87.232.0/21 IPv6: 2804:16b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61910 Signature Algorithm: sha256WithRSAEncryption 57:6a:93:ab:dc:93:05:21:86:ab:24:af:4b:a7:71:07:06:d6: b1:a0:de:23:b4:59:d7:a4:b7:77:a6:15:4b:0a:68:c9:6a:ea: 22:13:08:47:0f:94:3a:b9:d7:22:f5:48:12:70:6a:fc:71:66: cf:8d:2a:93:e4:41:0b:f8:21:7f:ce:93:c8:0e:d6:69:a1:34: 7e:4c:24:7d:57:44:1b:b8:cf:32:e2:17:67:94:f1:46:20:96: e6:13:48:a6:4c:45:3a:23:bb:81:1f:ee:99:00:b5:79:bf:a1: 33:5c:4c:c2:54:7b:ea:68:66:3e:f2:d6:c2:03:2e:8f:45:f5: 4f:6e:ca:fd:2c:08:75:1f:c4:0d:44:1c:fa:cc:a3:48:61:2b: 50:58:01:a9:2b:f6:f7:58:bf:85:66:8c:34:19:6b:51:47:b8: 0b:8f:63:19:df:d2:5e:f1:cf:62:27:75:66:1e:5b:24:29:e7: c3:4a:85:0e:d9:a7:c0:3d:2f:8d:08:e3:1d:7e:66:f4:d5:fc: a3:e4:72:db:35:ac:fe:e0:83:06:c9:8a:ac:f7:0c:bb:55:6e: ed:8d:78:cd:ae:4c:9b:3a:58:9f:57:77:47:29:ba:91:b4:e3: d7:7a:d0:04:8d:64:94:2f:da:cb:d9:e9:a8:03:a7:45:ed:f1: 10:21:8a:7d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcfmsyCxKfV+ctAnS/xw5pQJpvXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MTMxODMxMzRaFw0yNTA3MTIxODM2MzRaMDMxMTAvBgNV BAMTKEMxQjMzOUFFMUUyMzRCQUFCMjZENEZFMUNENUNCQzM0QkE0QTVCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwrOriiMzJlOhk9iNftrtVX6e vO5IiE+J4BQhYcchS1TXIVTmz5FsQriPvTdh21mh/2htp3X6oXP8iHNC61GtcrKu vcqX1jv0+kTHOJIiAA1eS+DFnLki03swASgA74CLU1PPPaQ1aalRqkJba0CxW7nk OLi0nroFt0uQlikV3heR1UIoNlkkR319w6Wlg0h/js83K46yDlQ3K6KWdd4Yi2h9 9m+LlFoOB7yxjqYpsjzNrAbzXVf7pod9tamTDcM4Ycn/wWEXT6eyhTVv1TRANw8f MUDIt2iJ+9I0bW9EWnlm5pR1dUUZarg35KR4KFDIYV86vb8MV6wQLeNHT5DHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBszmuHiNLqrJt T+HNXLw0ukpbGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmZv aDc5V1o1RmdHOVhTYjhyTXV1eEVTZXd6ZUhMb2t5aDNpVk0xeldraWsvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jm b2g3OVdaNUZnRzlYU2I4ck11dXhFU2V3emVITG9reWgzaVZNMXpXa2lrLzIvQzFC MzM5QUUxRTIzNEJBQUIyNkQ0RkUxQ0Q1Q0JDMzRCQTRBNUIxQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDyVfoMA0EAgACMAcDBQAoBBawMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDx1jANBgkqhkiG9w0BAQsFAAOCAQEAV2qTq9yTBSGGqySv S6dxBwbWsaDeI7RZ16S3d6YVSwpoyWrqIhMIRw+UOrnXIvVIEnBq/HFmz40qk+RB C/ghf86TyA7WaaE0fkwkfVdEG7jPMuIXZ5TxRiCW5hNIpkxFOiO7gR/umQC1eb+h M1xMwlR76mhmPvLWwgMuj0X1T27K/SwIdR/EDUQc+syjSGErUFgBqSv291i/hWaM NBlrUUe4C49jGd/SXvHPYid1Zh5bJCnnw0qFDtmnwD0vjQjjHX5m9NX8o+Ry2zWs /uCDBsmKrPcMu1Vu7Y14za5MmzpYn1d3Rym6kbTj13rQBI1klC/ay9npqAOnRe3x ECGKfQ== -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:31 2024 by rpki-client on console-ams.rpki-client.org