$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer File: CB4E9C406D5F0885AD85C9212628075DF1A74B32.cer (raw, json) Hash identifier: WBxo6b2K9vEjhmVbIBd6tSPR1U0lxXuPytVAVdDJJy4= Subject key identifier: CB:4E:9C:40:6D:5F:08:85:AD:85:C9:21:26:28:07:5D:F1:A7:4B:32 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4AB0CB97C0E85EDB49051B85573E13BDD2A18C73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.mft caRepository: rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Nov 2024 19:46:56 +0000 Certificate not after: Tue 25 Nov 2025 19:51:56 +0000 Subordinate resources: AS: 268503 IP: 45.162.56.0/22 IP: 2804:5238::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b0:cb:97:c0:e8:5e:db:49:05:1b:85:57:3e:13:bd:d2:a1:8c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 26 19:46:56 2024 GMT Not After : Nov 25 19:51:56 2025 GMT Subject: CN=CB4E9C406D5F0885AD85C9212628075DF1A74B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:b1:69:04:ce:69:05:be:10:5d:57:cc:4f: 29:eb:c2:2a:cd:ba:7f:b4:47:7d:dc:69:82:f8:1a: f7:d8:83:c5:54:ba:63:08:3b:dc:55:10:cd:0e:70: 52:d1:a5:56:ab:f5:1b:4e:ca:e7:88:b7:27:53:9f: 4b:94:04:42:33:7d:8c:41:0a:87:bd:3e:35:7c:96: a2:d9:ff:a2:55:c2:d1:79:44:56:24:c1:1e:ad:ab: 14:45:94:bd:02:f0:1a:36:56:e0:16:27:a4:21:64: 80:af:e5:1d:c5:d1:9a:af:d0:f3:a2:55:4a:fb:c1: 95:69:91:e6:05:61:b7:ac:2a:1d:87:f9:27:34:fd: 98:55:56:10:6e:c5:92:59:39:f4:53:b3:d6:4e:2d: 86:67:32:a7:19:06:13:5e:d8:31:e4:8d:e1:42:90: 78:34:40:b3:2b:0e:f4:68:db:50:17:3d:5d:f0:c2: 59:00:e1:dd:5e:3a:b0:67:d5:9c:ca:16:a0:20:83: e9:b6:5d:b8:4c:07:20:dd:f2:1d:86:f5:91:0c:fa: 84:7b:e0:3f:d8:ec:b3:e1:cd:d1:aa:18:68:63:7f: c0:c7:89:d5:c2:2d:34:9c:9b:ee:9b:24:fd:2c:16: fa:82:16:a0:e2:9a:33:3b:af:a2:24:96:80:21:6a: 8e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:4E:9C:40:6D:5F:08:85:AD:85:C9:21:26:28:07:5D:F1:A7:4B:32 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/CB4E9C406D5F0885AD85C9212628075DF1A74B32.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.56.0/22 IPv6: 2804:5238::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268503 Signature Algorithm: sha256WithRSAEncryption da:53:3a:45:6e:21:1f:ac:c3:b7:b3:85:cd:0e:40:b3:33:4b: 9a:6d:ca:5a:60:2e:12:9d:84:4d:90:8b:94:73:3e:6c:4d:8d: 0d:68:5d:38:24:ae:3b:d7:ec:5c:ed:fb:66:e6:90:12:88:51: 56:15:8d:a4:3a:44:be:f5:33:35:c4:bf:ed:03:aa:69:d6:eb: 0a:00:f0:20:1d:f5:9d:fd:fb:19:69:48:8f:d8:1f:43:e2:1e: de:ba:6c:1d:cf:2a:d2:22:a9:6e:0d:fe:11:85:ee:16:ec:a0: be:8f:a9:b7:71:9d:29:0b:b4:c6:64:9f:f8:05:43:17:18:82: 50:79:0d:cf:8f:53:0a:40:a0:75:27:f0:e0:8f:d6:10:ec:2f: 3e:cb:76:6c:67:19:06:83:ec:fc:ad:8b:bc:63:e2:e4:0d:0c: f1:b4:57:ff:53:3e:32:e6:a1:b3:38:b3:af:9a:2d:36:40:c4: 16:54:0f:64:bc:17:b7:5b:97:c4:63:b8:8a:15:0c:77:4b:5c: 7e:ed:57:19:77:b7:27:32:25:a4:65:d5:e0:67:60:63:28:87: 27:ce:46:72:ba:8f:e3:ee:01:02:d7:18:a6:67:f6:74:b3:e6: 19:33:df:63:e0:b2:05:fb:f9:96:72:00:24:82:30:9c:43:1e: 99:9a:22:a7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUSrDLl8DoXttJBRuFVz4TvdKhjHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjYxOTQ2NTZaFw0yNTExMjUxOTUxNTZaMDMxMTAvBgNV BAMTKENCNEU5QzQwNkQ1RjA4ODVBRDg1QzkyMTI2MjgwNzVERjFBNzRCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHbFpBM5pBb4QXVfMTynrwirN un+0R33caYL4GvfYg8VUumMIO9xVEM0OcFLRpVar9RtOyueItydTn0uUBEIzfYxB Coe9PjV8lqLZ/6JVwtF5RFYkwR6tqxRFlL0C8Bo2VuAWJ6QhZICv5R3F0Zqv0POi VUr7wZVpkeYFYbesKh2H+Sc0/ZhVVhBuxZJZOfRTs9ZOLYZnMqcZBhNe2DHkjeFC kHg0QLMrDvRo21AXPV3wwlkA4d1eOrBn1ZzKFqAgg+m2XbhMByDd8h2G9ZEM+oR7 4D/Y7LPhzdGqGGhjf8DHidXCLTScm+6bJP0sFvqCFqDimjM7r6IkloAhao6vAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLTpxAbV8Iha2F ySEmKAdd8adLMjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUFT RGduTUdXWU5Xb281ZWZvWEF6V0R5ZGszREhDeERwWDNLenhzTlVtQ1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VB U0Rnbk1HV1lOV29vNWVmb1hBeldEeWRrM0RIQ3hEcFgzS3p4c05VbUNYLzAvQ0I0 RTlDNDA2RDVGMDg4NUFEODVDOTIxMjYyODA3NURGMUE3NEIzMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaI4MA0EAgACMAcDBQAoBFI4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQY1zANBgkqhkiG9w0BAQsFAAOCAQEA2lM6RW4hH6zDt7OF zQ5AszNLmm3KWmAuEp2ETZCLlHM+bE2NDWhdOCSuO9fsXO37ZuaQEohRVhWNpDpE vvUzNcS/7QOqadbrCgDwIB31nf37GWlIj9gfQ+Ie3rpsHc8q0iKpbg3+EYXuFuyg vo+pt3GdKQu0xmSf+AVDFxiCUHkNz49TCkCgdSfw4I/WEOwvPst2bGcZBoPs/K2L vGPi5A0M8bRX/1M+Muahszizr5otNkDEFlQPZLwXt1uXxGO4ihUMd0tcfu1XGXe3 JzIlpGXV4GdgYyiHJ85GcrqP4+4BAtcYpmf2dLPmGTPfY+CyBfv5lnIAJIIwnEMe mZoipw== -----END CERTIFICATE-----Generated at Wed Nov 27 02:00:26 2024 by rpki-client on console-ams.rpki-client.org