$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer File: CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer (raw, json) Hash identifier: y+XNg4g2EVoKNpIVmoMzG6csECqx5PmHnml1mNYzN/I= Subject key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A4D13D06C342013F901D6E66460B15B8F217338 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft caRepository: rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 03 Sep 2024 19:42:44 +0000 Certificate not after: Tue 02 Sep 2025 19:47:44 +0000 Subordinate resources: AS: 262828 IP: 177.155.192.0/21 IP: 186.251.96.0/21 IP: 2804:2a4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4d:13:d0:6c:34:20:13:f9:01:d6:e6:64:60:b1:5b:8f:21:73:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 3 19:42:44 2024 GMT Not After : Sep 2 19:47:44 2025 GMT Subject: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:0f:50:55:92:45:21:9a:f5:65:a4:5f:07: 83:48:61:28:7c:86:d1:94:62:7e:e6:1d:a9:5e:f3: a9:48:4e:63:e2:15:94:99:f1:0d:d8:a2:49:71:29: 15:73:1d:cb:51:97:e3:f5:a2:ab:a3:38:27:37:b8: 95:47:88:98:0d:d9:fc:94:60:cc:50:4c:8a:49:94: c0:c4:8c:24:18:52:14:c5:76:d1:ff:ac:1b:19:52: d4:da:89:8b:04:73:a7:2e:18:a9:fa:74:de:82:16: 2a:02:f1:1f:ef:0c:46:13:0c:7f:a6:86:5b:51:5f: 3e:63:3e:1b:da:4e:92:bc:93:1a:75:aa:3d:ce:f4: 45:43:40:c1:ea:7d:53:6b:22:47:65:b9:c7:ec:c9: e1:f8:3a:47:fb:0f:0f:75:9a:7e:46:43:ba:4d:76: b6:e2:12:a5:79:23:5e:85:ff:e0:60:d9:fa:dc:8f: 5f:57:ef:c4:58:df:b5:ec:0f:03:cb:6f:ff:e0:d4: a5:db:1c:dc:72:ae:1c:eb:8b:b0:73:37:30:85:e8: b5:29:2e:cf:36:bf:ca:80:2a:dd:d7:ca:52:77:00: c8:85:00:1d:2a:81:38:51:68:7a:b4:eb:c0:41:f4: 2b:67:3a:c1:54:a7:d8:8b:0d:b6:a0:91:19:c9:e7: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.155.192.0/21 186.251.96.0/21 IPv6: 2804:2a4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262828 Signature Algorithm: sha256WithRSAEncryption 51:27:7e:6a:cf:23:40:96:9e:b4:19:3e:82:49:b9:ba:e0:3e: ae:41:4f:0f:0e:6d:35:0d:06:e4:ae:43:52:98:c1:6e:9d:9f: fa:31:43:d2:77:44:95:3b:b7:86:31:39:e6:a3:a7:a9:a4:ae: b4:a7:2f:f6:18:86:b2:9a:ff:1e:d3:f4:01:aa:50:a5:6c:f2: 8b:ae:da:87:65:48:8e:3e:64:8c:3a:d3:0f:38:1f:6c:36:6e: 92:27:30:35:38:ce:0b:31:d4:30:69:73:c5:18:4a:9b:3c:9e: 97:ed:d1:f0:9d:58:3a:f2:5e:ed:9d:c0:15:0b:31:19:cd:c2: 07:98:6d:94:52:2e:b6:66:a2:3b:55:bd:f7:50:36:47:e9:77: 39:bd:cb:9b:90:82:6a:1b:fe:d1:96:86:c9:69:5e:0e:73:52: 84:9e:81:c5:cd:ca:1d:0d:89:8f:76:33:d0:4d:dc:b9:9b:35: 6b:3c:6f:0a:c8:77:8e:26:13:72:4a:e8:3e:42:ad:bb:46:5b: a8:e5:a3:f7:50:81:be:70:a2:30:6b:bc:51:f3:a5:ec:ab:6c: bf:88:d0:98:09:bd:ce:a5:fe:e1:1d:ee:65:3b:73:51:dd:de: f6:2e:b8:27:bd:76:8f:b2:6a:9c:41:49:25:ed:4f:6a:2e:cf: 92:65:6e:7e -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUSk0T0Gw0IBP5AdbmZGCxW48hczgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDMxOTQyNDRaFw0yNTA5MDIxOTQ3NDRaMDMxMTAvBgNV BAMTKENDMUY0QUIzOUM3OEYwOEE3ODAxRUVEN0U3QTMxQjJERjE4MDQyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzw9QVZJFIZr1ZaRfB4NIYSh8 htGUYn7mHale86lITmPiFZSZ8Q3YoklxKRVzHctRl+P1oqujOCc3uJVHiJgN2fyU YMxQTIpJlMDEjCQYUhTFdtH/rBsZUtTaiYsEc6cuGKn6dN6CFioC8R/vDEYTDH+m hltRXz5jPhvaTpK8kxp1qj3O9EVDQMHqfVNrIkdlucfsyeH4Okf7Dw91mn5GQ7pN drbiEqV5I16F/+Bg2frcj19X78RY37XsDwPLb//g1KXbHNxyrhzri7BzNzCF6LUp Ls82v8qAKt3XylJ3AMiFAB0qgThRaHq068BB9CtnOsFUp9iLDbagkRnJ59b1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMH0qznHjwingB 7tfnoxst8YBC6DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRUZG WDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlExOGYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VG Rlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAvQ0Mx RjRBQjM5Qzc4RjA4QTc4MDFFRUQ3RTdBMzFCMkRGMTgwNDJFOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsZvAAwQDuvtgMA0EAgACMAcDBQAoBAKkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCrDANBgkqhkiG9w0BAQsFAAOCAQEAUSd+as8j QJaetBk+gkm5uuA+rkFPDw5tNQ0G5K5DUpjBbp2f+jFD0ndElTu3hjE55qOnqaSu tKcv9hiGspr/HtP0AapQpWzyi67ah2VIjj5kjDrTDzgfbDZukicwNTjOCzHUMGlz xRhKmzyel+3R8J1YOvJe7Z3AFQsxGc3CB5htlFIutmaiO1W991A2R+l3Ob3Lm5CC ahv+0ZaGyWleDnNShJ6Bxc3KHQ2Jj3Yz0E3cuZs1azxvCsh3jiYTckroPkKtu0Zb qOWj91CBvnCiMGu8UfOl7Ktsv4jQmAm9zqX+4R3uZTtzUd3e9i64J712j7JqnEFJ Je1Pai7PkmVufg== -----END CERTIFICATE-----Generated at Sat Nov 23 07:44:29 2024 by rpki-client on console-ams.rpki-client.org