$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer File: C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer (raw, json) Hash identifier: sLb2daXiqjfeToJlcgyVYcetSTGqlf5juCmB1vfwsac= Subject key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0A27AD59853A4AD3B40E36A5234A8364B26D0A98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft caRepository: rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Sep 2024 20:48:46 +0000 Certificate not after: Mon 22 Sep 2025 20:53:46 +0000 Subordinate resources: AS: 262740 IP: 179.97.32.0/20 IP: 186.208.64.0/20 IP: 2804:2bf0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:27:ad:59:85:3a:4a:d3:b4:0e:36:a5:23:4a:83:64:b2:6d:0a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 23 20:48:46 2024 GMT Not After : Sep 22 20:53:46 2025 GMT Subject: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:1c:9c:65:0d:5f:63:b3:ba:8c:f7:3e:2f: 60:39:d5:56:1b:05:72:49:98:bc:54:42:87:b5:1c: 75:48:52:57:b5:9d:49:39:14:41:38:04:7a:51:86: 6a:4a:46:74:e2:79:f7:53:06:61:d7:63:6d:c9:86: e8:b1:af:f4:ff:38:c9:4c:a9:b9:c3:c5:8f:34:7f: 3d:ee:66:46:2e:eb:c0:0c:b4:67:a8:45:4d:ce:e2: 65:a2:8a:4a:ab:52:ca:99:d1:7c:25:51:7b:51:d2: 71:9a:11:58:fc:44:f9:92:77:8b:bb:88:c7:ab:8f: ce:55:b6:72:b0:40:2d:01:32:fd:8e:24:2f:a7:30: b6:35:06:47:f3:23:de:43:cf:8e:24:29:9d:7b:74: 68:99:25:64:c6:92:c4:76:57:3f:7d:f6:a0:5f:c8: 96:e5:09:23:0f:e0:9d:16:97:18:db:78:e7:9e:a1: 63:1e:8b:85:b9:a8:cb:1a:70:11:ab:78:6d:82:e3: 2c:06:16:c2:87:20:41:af:81:87:20:1e:4c:9f:f9: 45:d7:13:75:b5:fe:a7:ba:41:31:62:fd:0b:05:3a: 27:13:b6:49:35:02:74:f5:23:86:b6:c6:ff:4f:0f: b1:1e:46:a3:22:08:2e:de:73:08:27:b5:a5:21:a7: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.97.32.0/20 186.208.64.0/20 IPv6: 2804:2bf0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262740 Signature Algorithm: sha256WithRSAEncryption 37:ca:f2:80:6f:92:77:38:23:e4:5c:2b:e8:a2:d0:39:c1:93: 03:fa:a2:03:7a:ae:e2:a3:d3:3f:b5:0e:04:f5:7a:89:55:52: 19:a1:1d:48:58:17:a9:fc:01:63:ba:32:2c:1a:f8:59:fb:7e: cb:7f:ba:87:d9:79:f2:1c:5d:59:12:50:39:65:fe:3a:5a:0e: 28:38:45:81:c7:9e:bd:db:e0:36:90:0b:11:a1:89:10:b0:61: 4b:eb:df:bc:57:95:48:1c:80:73:28:c5:0f:8a:4c:f0:59:69: 4b:8a:ff:ce:14:09:e2:7c:9a:6e:45:02:6e:aa:b7:00:23:e6: e3:66:7e:d1:32:31:09:9d:c8:fb:08:f4:25:6d:f0:67:78:54: 3e:cf:8a:00:4b:94:a9:b0:6f:f5:98:2c:a5:7b:35:d1:30:b3: e0:5a:4f:ad:54:80:8c:1b:63:18:9d:4c:35:9c:6f:51:be:b3: e1:5f:a2:32:89:52:d5:81:94:61:c0:79:e4:1a:d3:08:84:fd: 33:43:d5:dc:fb:3c:f1:9d:3f:68:e2:b7:2a:7e:8f:24:4d:a0: 76:e3:35:e6:8f:69:31:e4:64:ff:12:f6:25:70:be:d6:27:27: 75:92:34:ee:94:7b:72:8f:f9:79:22:bb:3e:1c:9a:37:e5:e2: 3f:8a:0b:d7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUCietWYU6StO0DjalI0qDZLJtCpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MjMyMDQ4NDZaFw0yNTA5MjIyMDUzNDZaMDMxMTAvBgNV BAMTKEM4QUQ1OTg5Qzk2OTJDRTI5REI5QzNGRTQwNDQ4QTQ3NjIyQzQyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSrxycZQ1fY7O6jPc+L2A51VYb BXJJmLxUQoe1HHVIUle1nUk5FEE4BHpRhmpKRnTiefdTBmHXY23Jhuixr/T/OMlM qbnDxY80fz3uZkYu68AMtGeoRU3O4mWiikqrUsqZ0XwlUXtR0nGaEVj8RPmSd4u7 iMerj85VtnKwQC0BMv2OJC+nMLY1BkfzI95Dz44kKZ17dGiZJWTGksR2Vz999qBf yJblCSMP4J0WlxjbeOeeoWMei4W5qMsacBGreG2C4ywGFsKHIEGvgYcgHkyf+UXX E3W1/qe6QTFi/QsFOicTtkk1AnT1I4a2xv9PD7EeRqMiCC7ecwgntaUhpzwlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTIrVmJyWks4p25 w/5ARIpHYixCyzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM21y ZGlMc1FCa0xKaTFTQ25ZdjVRUXM0MVBTaURmUmlQTVNVQmlYWW93bU4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNt cmRpTHNRQmtMSmkxU0NuWXY1UVFzNDFQU2lEZlJpUE1TVUJpWFlvd21OLzAvQzhB RDU5ODlDOTY5MkNFMjlEQjlDM0ZFNDA0NDhBNDc2MjJDNDJDQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEs2EgAwQEutBAMA0EAgACMAcDBQAoBCvwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCVDANBgkqhkiG9w0BAQsFAAOCAQEAN8rygG+S dzgj5Fwr6KLQOcGTA/qiA3qu4qPTP7UOBPV6iVVSGaEdSFgXqfwBY7oyLBr4Wft+ y3+6h9l58hxdWRJQOWX+OloOKDhFgceevdvgNpALEaGJELBhS+vfvFeVSByAcyjF D4pM8FlpS4r/zhQJ4nyabkUCbqq3ACPm42Z+0TIxCZ3I+wj0JW3wZ3hUPs+KAEuU qbBv9ZgspXs10TCz4FpPrVSAjBtjGJ1MNZxvUb6z4V+iMolS1YGUYcB55BrTCIT9 M0PV3Ps88Z0/aOK3Kn6PJE2gduM15o9pMeRk/xL2JXC+1icndZI07pR7co/5eSK7 PhyaN+XiP4oL1w== -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:54 2024 by rpki-client on console-fra.rpki-client.org