$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer File: CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer (raw, json) Hash identifier: AomcdCArZFSW/3eewOpbTtapnI/1KTyEEmv4EWoW1ME= Subject key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B389D2D005CA5DFDEE4A069E02B79111C77BBA0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft caRepository: rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 05 Nov 2024 18:07:56 +0000 Certificate not after: Tue 04 Nov 2025 18:12:56 +0000 Subordinate resources: AS: 52877 IP: 138.99.56.0/22 IP: 186.232.72.0/22 IP: 2804:91c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:38:9d:2d:00:5c:a5:df:de:e4:a0:69:e0:2b:79:11:1c:77:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 5 18:07:56 2024 GMT Not After : Nov 4 18:12:56 2025 GMT Subject: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:c5:d7:b5:bd:5b:0c:23:3e:aa:f7:32:20: 71:c5:2d:71:be:e0:cd:9b:12:60:e8:77:96:ee:75: 44:66:76:65:08:a5:81:de:3b:d6:22:1d:eb:59:5d: 86:4a:dd:32:f7:85:9b:fa:8c:d5:c6:32:7e:d6:a2: d0:69:e3:8e:9b:97:05:6d:13:f0:f6:51:b7:86:5c: 5c:ab:a4:4a:16:7f:3d:a2:ce:be:bb:e9:95:7d:c4: 07:58:74:7d:78:69:bb:4b:a6:70:4d:c8:65:68:0b: c3:5a:b4:eb:64:2f:42:65:8e:7e:22:b3:ae:57:2f: 97:48:07:fa:a6:72:e3:b3:8d:15:c5:1e:24:17:e2: 86:6d:a3:85:6d:3e:7a:d3:ee:63:b1:9c:5c:39:db: c5:51:6b:b7:9b:88:e3:53:94:38:f3:fa:a7:8e:c1: e0:30:fd:5c:8f:71:c2:66:9e:62:cd:1e:43:92:c0: 10:1f:fc:73:98:e9:30:3e:ee:04:38:76:1b:ec:bc: 3b:ff:7e:43:2f:e9:d6:4b:a1:ea:a2:d0:a8:7f:e0: 67:86:ae:7f:c7:b7:93:c8:49:5a:6b:c0:67:79:36: b7:ea:18:01:fa:d4:74:91:c6:1d:f5:24:c4:e0:19: dc:98:d3:fc:09:54:27:2d:99:81:a3:ad:38:65:d1: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.56.0/22 186.232.72.0/22 IPv6: 2804:91c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52877 Signature Algorithm: sha256WithRSAEncryption c0:15:df:5d:1c:91:b0:b8:3c:e0:b4:a3:b2:29:16:4f:6a:e7: d6:3c:3f:d9:dc:85:0e:d1:c4:8e:c1:96:f9:7a:97:18:1a:1f: 00:58:5e:84:bd:89:2e:99:fe:35:46:42:a9:eb:da:b0:3d:ac: 25:22:29:84:39:48:b4:f9:fa:a1:f0:3b:5c:12:88:12:e9:cb: de:af:0a:de:96:7e:f5:3b:d8:04:0b:92:d4:85:3a:eb:38:4b: 7f:b6:a3:04:9f:9f:f3:19:fc:df:47:00:2f:b4:ce:cc:a9:b0: cf:24:49:24:f5:c0:a3:09:e1:1f:d3:20:8d:87:af:ef:21:e2: 98:07:15:4b:00:2b:34:f0:3c:9e:2a:ea:95:0b:6b:72:c6:fa: e6:92:a6:23:eb:60:1f:ae:8f:36:d1:34:cb:0d:71:86:c2:8e: 6c:62:2e:38:02:08:ff:46:1d:61:8c:be:e6:59:5d:6e:12:f2: 69:04:c5:b6:96:a4:e2:e9:b5:ca:df:e0:45:04:91:a2:dc:f5: 82:f4:c2:9d:05:61:14:bb:7a:72:6a:bb:ba:79:da:27:02:04: 7a:0a:e4:06:4d:20:75:88:9b:85:df:9c:1b:ef:f8:3d:f8:51: be:f1:a0:83:99:cd:d8:9f:7d:f3:ae:14:85:35:d8:8e:98:24: 60:6d:ce:17 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUazidLQBcpd/e5KBp4Ct5ERx3u6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDUxODA3NTZaFw0yNTExMDQxODEyNTZaMDMxMTAvBgNV BAMTKENFMTk5Qjc2MUFCNDQ0RTgyREM0OTE4QjREMzg5MTdDMTZBRUM3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN08XXtb1bDCM+qvcyIHHFLXG+ 4M2bEmDod5budURmdmUIpYHeO9YiHetZXYZK3TL3hZv6jNXGMn7WotBp446blwVt E/D2UbeGXFyrpEoWfz2izr676ZV9xAdYdH14abtLpnBNyGVoC8NatOtkL0Jljn4i s65XL5dIB/qmcuOzjRXFHiQX4oZto4VtPnrT7mOxnFw528VRa7ebiONTlDjz+qeO weAw/VyPccJmnmLNHkOSwBAf/HOY6TA+7gQ4dhvsvDv/fkMv6dZLoeqi0Kh/4GeG rn/Ht5PISVprwGd5NrfqGAH61HSRxh31JMTgGdyY0/wJVCctmYGjrThl0YKTAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOGZt2GrRE6C3E kYtNOJF8Fq7HuDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNHh0 YVl6OFpkYmcyTWp3eUdEOXhTUWdUV2NnTXRDdmNUUkpKc1NyTGlqR2QvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzR4 dGFZejhaZGJnMk1qd3lHRDl4U1FnVFdjZ010Q3ZjVFJKSnNTckxpakdkLzAvQ0Ux OTlCNzYxQUI0NDRFODJEQzQ5MThCNEQzODkxN0MxNkFFQzdCOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCimM4AwQCuuhIMA0EAgACMAcDBQAoBAkcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOjTANBgkqhkiG9w0BAQsFAAOCAQEAwBXfXRyR sLg84LSjsikWT2rn1jw/2dyFDtHEjsGW+XqXGBofAFhehL2JLpn+NUZCqevasD2s JSIphDlItPn6ofA7XBKIEunL3q8K3pZ+9TvYBAuS1IU66zhLf7ajBJ+f8xn830cA L7TOzKmwzyRJJPXAownhH9MgjYev7yHimAcVSwArNPA8nirqlQtrcsb65pKmI+tg H66PNtE0yw1xhsKObGIuOAII/0YdYYy+5lldbhLyaQTFtpak4um1yt/gRQSRotz1 gvTCnQVhFLt6cmq7unnaJwIEegrkBk0gdYibhd+cG+/4PfhRvvGgg5nN2J99864U hTXYjpgkYG3OFw== -----END CERTIFICATE-----Generated at Sat Nov 23 07:30:55 2024 by rpki-client on console-fra.rpki-client.org