$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.cer File: C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.cer (raw, json) Hash identifier: WubCBtWnlAUqsg5Ovi0//wFyUTcYj+sVzcXi/JhQoDc= Subject key identifier: C4:98:7A:54:31:76:65:CB:0A:5B:8A:3C:7E:EF:B7:BB:9D:25:EA:0B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 044C4EEE7531B1769076D49A180853B301DFBEB4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.mft caRepository: rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 06 Nov 2024 20:23:51 +0000 Certificate not after: Wed 05 Nov 2025 20:28:51 +0000 Subordinate resources: AS: 262368 IP: 177.128.96.0/21 IP: 2804:85c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4c:4e:ee:75:31:b1:76:90:76:d4:9a:18:08:53:b3:01:df:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 6 20:23:51 2024 GMT Not After : Nov 5 20:28:51 2025 GMT Subject: CN=C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:ec:fc:2c:88:36:b0:44:ef:4f:f9:cd:8e: 89:37:10:4b:11:0b:99:12:19:35:11:dd:61:bf:d9: 58:b2:93:05:d1:84:90:27:59:10:e3:9c:ea:41:65: 0b:38:da:1b:9f:3f:0d:a2:0f:37:4b:2b:e9:e9:e5: c0:11:59:e1:67:6d:d2:26:3b:e2:d8:a9:cd:75:83: d4:64:2b:74:b0:af:f0:03:0b:3a:6c:36:86:26:9d: 9c:88:0d:6a:b8:f9:28:a6:27:ca:93:05:8c:a3:71: 32:7d:21:f6:7c:0f:7f:df:d9:79:a4:0c:08:17:29: 4b:c0:3c:9d:5b:01:70:2b:03:ab:87:de:00:fd:c9: ba:52:a1:92:63:1f:aa:30:f8:da:08:34:c3:78:4d: 45:72:36:62:5a:1b:66:18:15:02:47:80:a5:03:2f: 24:f9:c5:8b:aa:a1:d6:0d:38:b3:e3:30:bb:e0:e3: 24:47:d4:1a:0a:12:02:69:4d:92:98:dc:a8:cd:ed: 4a:65:5d:34:d1:93:d9:4c:a8:2f:2b:5c:c9:81:20: 8d:56:36:f3:e4:75:25:ce:a7:ed:1d:a5:93:a5:f5: af:c7:7d:bd:6e:77:68:09:fb:00:c7:dc:18:2a:d3: 07:08:fe:f0:92:c1:c5:32:16:56:c9:fa:da:89:39: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:98:7A:54:31:76:65:CB:0A:5B:8A:3C:7E:EF:B7:BB:9D:25:EA:0B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.128.96.0/21 IPv6: 2804:85c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262368 Signature Algorithm: sha256WithRSAEncryption 9a:8f:04:06:cf:4d:c9:3f:0f:29:cb:d6:e1:1b:5f:38:30:3b: e9:ab:ad:47:d8:d1:b5:9e:8b:45:d8:69:f9:2d:bc:26:54:ff: 0c:dd:df:9d:d7:02:47:5d:b8:00:de:17:6d:ea:9f:bb:46:25: 00:70:04:97:6e:41:c3:12:1a:96:0f:c1:01:14:67:4d:e8:21: 60:45:79:be:ac:35:17:bf:27:e4:bf:78:b4:41:a9:69:09:94: 0f:ff:fe:1f:eb:53:02:dd:e6:68:0b:23:f4:8e:5f:6d:99:97: 9d:aa:68:fc:d8:e5:b0:68:10:9d:b3:e7:0b:d4:cd:92:77:28: c3:90:8a:b6:68:dd:11:e2:d5:9f:2a:ca:26:e1:72:28:a8:39: 1f:54:08:05:1b:2b:a8:da:27:42:33:5a:e8:3d:ec:62:e1:5c: 7c:a4:d5:5b:47:2b:85:f4:68:e9:22:e7:31:e8:9e:0f:fa:9b: 4e:5e:53:01:f7:94:5f:f9:79:36:44:a5:2e:10:f4:fe:07:84: 82:a0:b9:d8:7c:7c:f6:02:31:51:f4:d0:57:5e:ac:07:95:4c: e2:46:47:a5:ac:fe:9e:aa:fe:41:6a:69:04:66:a4:2c:68:40: a3:af:4a:4d:54:1a:57:ea:1a:95:89:92:03:a4:2b:9a:35:8a: 21:46:d8:77 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBExO7nUxsXaQdtSaGAhTswHfvrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDYyMDIzNTFaFw0yNTExMDUyMDI4NTFaMDMxMTAvBgNV BAMTKEM0OTg3QTU0MzE3NjY1Q0IwQTVCOEEzQzdFRUZCN0JCOUQyNUVBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0Oz8LIg2sETvT/nNjok3EEsR C5kSGTUR3WG/2ViykwXRhJAnWRDjnOpBZQs42hufPw2iDzdLK+np5cARWeFnbdIm O+LYqc11g9RkK3Swr/ADCzpsNoYmnZyIDWq4+SimJ8qTBYyjcTJ9IfZ8D3/f2Xmk DAgXKUvAPJ1bAXArA6uH3gD9ybpSoZJjH6ow+NoINMN4TUVyNmJaG2YYFQJHgKUD LyT5xYuqodYNOLPjMLvg4yRH1BoKEgJpTZKY3KjN7UplXTTRk9lMqC8rXMmBII1W NvPkdSXOp+0dpZOl9a/Hfb1ud2gJ+wDH3Bgq0wcI/vCSwcUyFlbJ+tqJOc4bAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTEmHpUMXZlywpb ijx+77e7nSXqCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEVG SFVCeXlFaW9mYmk4Znhadk1HU28yUDRTSDZ1RVoybmdTVXhzVjV4MXEvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hF RkhVQnl5RWlvZmJpOGZ4WnZNR1NvMlA0U0g2dUVaMm5nU1V4c1Y1eDFxLzAvQzQ5 ODdBNTQzMTc2NjVDQjBBNUI4QTNDN0VFRkI3QkI5RDI1RUEwQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQDsYBgMA0EAgACMAcDBQAoBAhcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQA4DANBgkqhkiG9w0BAQsFAAOCAQEAmo8EBs9NyT8PKcvW 4RtfODA76autR9jRtZ6LRdhp+S28JlT/DN3fndcCR124AN4Xbeqfu0YlAHAEl25B wxIalg/BARRnTeghYEV5vqw1F78n5L94tEGpaQmUD//+H+tTAt3maAsj9I5fbZmX napo/NjlsGgQnbPnC9TNkncow5CKtmjdEeLVnyrKJuFyKKg5H1QIBRsrqNonQjNa 6D3sYuFcfKTVW0crhfRo6SLnMeieD/qbTl5TAfeUX/l5NkSlLhD0/geEgqC52Hx8 9gIxUfTQV16sB5VM4kZHpaz+nqr+QWppBGakLGhAo69KTVQaV+oalYmSA6QrmjWK IUbYdw== -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:27 2024 by rpki-client on console-ams.rpki-client.org