$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer File: C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer (raw, json) Hash identifier: JRcYv+g+M0Lufso9SsoaSi4JzjDFyGggKXCbJ9534Ds= Subject key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B463B5AD8B7906B07D01DD925244FA5DA744387 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft caRepository: rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 25 Nov 2024 14:25:14 +0000 Certificate not after: Mon 24 Nov 2025 14:30:14 +0000 Subordinate resources: AS: 274667 IP: 192.141.160.0/24 IP: 2801:81:80::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:46:3b:5a:d8:b7:90:6b:07:d0:1d:d9:25:24:4f:a5:da:74:43:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 25 14:25:14 2024 GMT Not After : Nov 24 14:30:14 2025 GMT Subject: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:10:d4:84:b0:37:0a:83:52:13:2c:39:16: 09:f4:db:e4:db:af:78:49:5b:98:b4:82:92:4a:0d: 34:4c:26:39:39:03:0d:47:3a:96:c6:2e:88:0b:b1: 77:cf:25:bf:13:44:7c:92:21:e9:76:d9:8d:24:98: 9b:c4:5a:db:45:c0:23:54:84:65:78:ce:6e:43:4f: 96:e0:ce:6c:ff:36:0d:06:c1:75:a7:14:79:4a:7e: f7:20:da:84:15:5f:a5:b0:b3:7d:6f:bf:01:da:b6: 5c:5e:c2:a9:3c:0d:4d:a0:c5:9e:80:53:88:d6:d5: b2:e9:87:a6:87:b2:fd:5d:24:e9:e9:12:01:76:9b: b1:c0:dc:1e:7b:a6:43:74:cc:59:0c:a0:35:70:8e: e2:f6:f6:85:49:64:59:cb:59:19:f0:4d:e6:e5:b2: d7:ee:32:72:e2:f9:5d:1b:b2:de:38:77:5d:ce:92: c6:06:ff:6f:37:f3:75:16:22:e9:41:58:17:e4:6d: 3e:7c:0a:eb:35:65:27:15:b2:e9:da:6a:12:7c:25: e1:f1:99:54:da:e9:2d:31:89:84:25:8e:77:e1:48: cb:99:6d:67:8a:19:6c:f2:4b:e2:83:64:96:dc:b6: b2:0d:40:bf:70:44:93:93:e1:07:fe:29:fe:e7:ac: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.141.160.0/24 IPv6: 2801:81:80::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 274667 Signature Algorithm: sha256WithRSAEncryption d4:26:15:d5:f7:90:e4:7a:5d:23:6c:fe:ae:be:80:d1:34:29: 02:bc:3d:a4:a8:73:5b:18:ea:32:e5:5a:99:91:ec:95:38:b6: 1d:90:a5:9a:52:9f:3d:e4:d6:ce:d6:4f:34:cb:f3:7d:ce:68: 0b:bc:de:19:04:b4:88:43:68:c9:c5:a7:4a:54:34:18:d3:7e: 70:42:bc:15:6b:68:f2:4c:49:d3:80:79:23:cf:1f:0a:79:98: 4d:d8:f9:a6:d1:60:54:45:74:a6:34:36:d2:61:d5:ed:22:e7: 1d:a2:37:e8:93:2b:ad:fc:31:71:71:3c:10:e6:53:90:8a:7d: 9e:61:c3:f8:ed:41:bb:b8:18:50:09:0f:1b:e5:26:ed:2e:7c: 49:97:0f:aa:ab:70:96:87:b2:25:c5:4d:48:83:cd:6e:2e:3d: cb:e8:47:76:92:56:8c:e3:ff:a0:79:65:45:3a:9d:c3:25:1e: a1:2a:8a:b2:ef:70:ee:41:18:53:83:c8:a7:d2:8e:bc:6f:2c: 66:b6:62:9d:b1:cc:5b:84:f3:3d:96:2a:58:17:f1:a1:d8:09: 84:2f:c7:c3:42:dc:5a:04:5c:d6:34:a7:9b:fe:bd:30:c0:3e: 4c:dd:55:fa:48:89:61:e9:f1:ca:c6:42:f2:0d:48:b6:23:58: 8b:a7:da:2c -----BEGIN CERTIFICATE----- MIIGMTCCBRmgAwIBAgIUS0Y7Wti3kGsH0B3ZJSRPpdp0Q4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjUxNDI1MTRaFw0yNTExMjQxNDMwMTRaMDMxMTAvBgNV BAMTKEM2OTREMUU5MTQ5NDUxQUZBQzBFQTZFN0M3NjQ0MDgzNDU0REYyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUxDUhLA3CoNSEyw5Fgn02+Tb r3hJW5i0gpJKDTRMJjk5Aw1HOpbGLogLsXfPJb8TRHySIel22Y0kmJvEWttFwCNU hGV4zm5DT5bgzmz/Ng0GwXWnFHlKfvcg2oQVX6Wws31vvwHatlxewqk8DU2gxZ6A U4jW1bLph6aHsv1dJOnpEgF2m7HA3B57pkN0zFkMoDVwjuL29oVJZFnLWRnwTebl stfuMnLi+V0bst44d13OksYG/28383UWIulBWBfkbT58Cus1ZScVsunaahJ8JeHx mVTa6S0xiYQljnfhSMuZbWeKGWzyS+KDZJbctrINQL9wRJOT4Qf+Kf7nrLAxAgMB AAGjggM7MIIDNzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTGlNHpFJRRr6wO pufHZECDRU3y3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRK WUFmUGNiWktMYjFFS1pmdngxcHRSdDVjTTdBUzZ1Y1ZWcDhDeHJWbmMvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzRK WUFmUGNiWktMYjFFS1pmdngxcHRSdDVjTTdBUzZ1Y1ZWcDhDeHJWbmMvMC9DNjk0 RDFFOTE0OTQ1MUFGQUMwRUE2RTdDNzY0NDA4MzQ1NERGMkRDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcB Af8EITAfMAwEAgABMAYDBADAjaAwDwQCAAIwCQMHACgBAIEAgDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMEMOswDQYJKoZIhvcNAQELBQADggEBANQmFdX3kOR6XSNs /q6+gNE0KQK8PaSoc1sY6jLlWpmR7JU4th2QpZpSnz3k1s7WTzTL833OaAu83hkE tIhDaMnFp0pUNBjTfnBCvBVraPJMSdOAeSPPHwp5mE3Y+abRYFRFdKY0NtJh1e0i 5x2iN+iTK638MXFxPBDmU5CKfZ5hw/jtQbu4GFAJDxvlJu0ufEmXD6qrcJaHsiXF TUiDzW4uPcvoR3aSVozj/6B5ZUU6ncMlHqEqirLvcO5BGFODyKfSjrxvLGa2Yp2x zFuE8z2WKlgX8aHYCYQvx8NC3FoEXNY0p5v+vTDAPkzdVfpIiWHp8crGQvINSLYj WIun2iw= -----END CERTIFICATE-----Generated at Mon Feb 17 08:28:10 2025 by rpki-client