$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB4C4C0A9BBE1D980D701315119A0A71E39F6567.cer File: CB4C4C0A9BBE1D980D701315119A0A71E39F6567.cer (raw, json) Hash identifier: eMFRjknejXfiq9IOc4/c0qtJapB3qe6VkWL0ZH329K8= Subject key identifier: CB:4C:4C:0A:9B:BE:1D:98:0D:70:13:15:11:9A:0A:71:E3:9F:65:67 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 04026460EC288E35D4D2DF5D1E3E35FFCEED9937 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/CB4C4C0A9BBE1D980D701315119A0A71E39F6567.mft caRepository: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 25 Oct 2024 18:06:55 +0000 Certificate not after: Fri 24 Oct 2025 18:11:55 +0000 Subordinate resources: AS: 268815 IP: 45.173.152.0/22 IP: 2804:5b0c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:02:64:60:ec:28:8e:35:d4:d2:df:5d:1e:3e:35:ff:ce:ed:99:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 25 18:06:55 2024 GMT Not After : Oct 24 18:11:55 2025 GMT Subject: CN=CB4C4C0A9BBE1D980D701315119A0A71E39F6567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:3f:be:fd:9a:ad:cd:6c:b3:16:c6:fc:b4: d1:e3:2e:2d:5b:df:71:d5:1a:76:cd:50:c7:f5:45: 72:8e:52:10:62:ea:7a:d2:9f:ea:11:8c:ce:19:b0: cc:b0:e8:10:c1:42:95:ca:a3:3d:41:b9:a5:63:5a: ab:ba:58:49:cb:1a:ea:db:49:25:0d:ed:2f:e3:e8: cf:92:c7:e7:a1:75:8d:53:d4:da:ae:58:46:59:5c: 50:0d:6e:ce:64:19:4a:53:b9:e5:22:41:c6:bc:58: fe:2b:d8:d3:30:1c:6b:f8:5a:e9:72:7c:86:55:5d: 83:99:ac:03:37:1b:bb:fb:c7:c5:4f:98:83:cd:ab: 96:0a:b5:15:d1:46:a6:0f:24:06:ab:40:4c:8f:06: 24:03:e4:b0:1a:bf:76:df:d8:72:cb:3d:39:49:19: 8f:53:95:17:4c:32:4b:52:22:7f:53:44:59:30:80: 49:cf:ba:1c:12:a5:7a:5a:99:c2:1c:60:0b:38:86: 6d:5a:3b:96:99:64:41:85:64:88:eb:db:98:7d:0c: fa:3e:5a:19:6c:92:d7:d1:f9:bf:3c:18:85:7b:25: c4:cb:1a:68:5d:e4:bf:d7:37:22:b6:63:ec:a2:2c: b9:55:73:c2:d1:0c:8a:6d:0f:d5:18:27:47:88:53: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:4C:4C:0A:9B:BE:1D:98:0D:70:13:15:11:9A:0A:71:E3:9F:65:67 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/CB4C4C0A9BBE1D980D701315119A0A71E39F6567.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.152.0/22 IPv6: 2804:5b0c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268815 Signature Algorithm: sha256WithRSAEncryption d8:38:8c:70:3c:77:18:53:07:f0:04:8a:25:d7:be:48:17:10: 3e:22:2d:a7:29:c2:44:f2:95:ed:b8:b4:b8:2b:49:61:88:c6: e3:1d:0d:3f:df:fc:d9:ff:af:c4:72:5a:e5:03:c3:01:71:ad: a5:77:88:ea:d6:e3:fb:10:e6:0f:f9:91:3c:85:c5:d0:d2:df: d5:1a:1a:8a:da:06:3a:2c:7b:06:17:68:a6:32:43:ee:25:34: ed:be:5b:aa:84:77:25:83:c6:7e:48:de:18:a9:eb:bc:8d:b2: 15:07:f8:7e:88:6f:56:33:27:8e:74:02:bc:db:03:3d:c7:45: e5:7a:fa:94:cd:ea:4d:46:71:4a:ce:ba:6a:cb:4a:d7:a1:d1: 72:cc:da:2d:0b:d9:fc:2f:e0:9c:68:11:bc:6f:fc:de:90:b0: 92:39:18:59:5b:b2:f8:de:63:6c:e0:8c:08:c4:3a:df:89:b2: 2f:74:d9:f6:5b:55:28:39:37:f8:0c:76:bf:1b:94:d8:38:56: dc:49:f9:af:af:e0:81:8b:0d:db:a5:e8:96:d5:9e:1a:82:7f: 64:5f:7f:cf:4b:19:0d:18:0d:4b:cf:64:88:8d:ff:9e:5b:ba: ee:69:44:aa:66:eb:d2:7a:a0:a9:46:f8:3a:82:dd:8e:7b:d8: ff:a2:20:d1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUBAJkYOwojjXU0t9dHj41/87tmTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjUxODA2NTVaFw0yNTEwMjQxODExNTVaMDMxMTAvBgNV BAMTKENCNEM0QzBBOUJCRTFEOTgwRDcwMTMxNTExOUEwQTcxRTM5RjY1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsz++/ZqtzWyzFsb8tNHjLi1b 33HVGnbNUMf1RXKOUhBi6nrSn+oRjM4ZsMyw6BDBQpXKoz1BuaVjWqu6WEnLGurb SSUN7S/j6M+Sx+ehdY1T1NquWEZZXFANbs5kGUpTueUiQca8WP4r2NMwHGv4Wuly fIZVXYOZrAM3G7v7x8VPmIPNq5YKtRXRRqYPJAarQEyPBiQD5LAav3bf2HLLPTlJ GY9TlRdMMktSIn9TRFkwgEnPuhwSpXpamcIcYAs4hm1aO5aZZEGFZIjr25h9DPo+ WhlsktfR+b88GIV7JcTLGmhd5L/XNyK2Y+yiLLlVc8LRDIptD9UYJ0eIU/LVAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLTEwKm74dmA1w ExURmgpx459lZzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTVH dTRvZEJOYm9YcmdoM1daUktLUm9XdnRXTHZCQ0tiRGszWWpQRjRzUnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E1 R3U0b2RCTmJvWHJnaDNXWlJLS1JvV3Z0V0x2QkNLYkRrM1lqUEY0c1JyLzAvQ0I0 QzRDMEE5QkJFMUQ5ODBENzAxMzE1MTE5QTBBNzFFMzlGNjU2Ny5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa2YMA0EAgACMAcDBQAoBFsMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaDzANBgkqhkiG9w0BAQsFAAOCAQEA2DiMcDx3GFMH8ASK Jde+SBcQPiItpynCRPKV7bi0uCtJYYjG4x0NP9/82f+vxHJa5QPDAXGtpXeI6tbj +xDmD/mRPIXF0NLf1RoaitoGOix7BhdopjJD7iU07b5bqoR3JYPGfkjeGKnrvI2y FQf4fohvVjMnjnQCvNsDPcdF5Xr6lM3qTUZxSs66astK16HRcszaLQvZ/C/gnGgR vG/83pCwkjkYWVuy+N5jbOCMCMQ634myL3TZ9ltVKDk3+Ax2vxuU2DhW3En5r6/g gYsN26XoltWeGoJ/ZF9/z0sZDRgNS89kiI3/nlu67mlEqmbr0nqgqUb4OoLdjnvY /6Ig0Q== -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:55 2024 by rpki-client on console-fra.rpki-client.org