$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer File: D1D8C77A34CB2B0044058D74160F7A20912778C1.cer (raw, json) Hash identifier: kb/rOGsOUIG+MAShut/y29miLR/rzUSezTbO2ENwGIg= Subject key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2EB9F53E4EA390EEC6E924A70B2E9D91D16FA340 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft caRepository: rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:56 +0000 Certificate not after: Wed 02 Apr 2025 18:30:56 +0000 Subordinate resources: AS: 52863 IP: 143.255.200.0/22 IP: 177.124.128.0/22 IP: 2804:2870::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 12:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b9:f5:3e:4e:a3:90:ee:c6:e9:24:a7:0b:2e:9d:91:d1:6f:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:56 2024 GMT Not After : Apr 2 18:30:56 2025 GMT Subject: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:0d:01:d5:2c:5b:d0:f9:3c:6b:d6:ab:29: 01:dd:cd:c8:6c:90:3a:55:1d:4f:98:ab:9a:8f:e2: ed:b0:3a:39:9f:48:3e:d8:7c:1d:c3:76:9d:66:48: a1:f0:2d:d0:35:76:75:98:8e:3a:60:02:57:ff:89: 70:af:d9:85:35:df:ad:43:54:08:aa:3c:6e:70:a7: 65:5b:d6:03:87:01:bc:0f:ad:c1:79:a2:bb:d5:13: 86:fa:68:2b:9e:73:0c:8e:2a:44:8e:c4:68:12:1c: 5f:ad:54:35:60:3d:d1:07:29:31:61:d5:35:b8:cb: c0:6e:fb:f5:95:e4:60:6b:dd:39:f1:ce:7a:32:dd: ec:da:92:69:89:d2:3b:f7:21:04:74:c7:bd:cf:9e: 9f:1b:06:c7:6a:4a:66:0b:79:2a:be:69:19:29:27: be:e7:75:58:ad:aa:a9:ce:41:fa:fe:27:81:f2:81: 70:0f:30:4b:04:09:be:b8:41:6f:a8:37:c9:21:af: d8:d5:b1:53:1e:21:98:83:62:a1:fa:11:6c:05:ac: 8c:95:60:8c:4c:83:92:22:c9:c2:65:46:df:3b:0c: d8:4f:76:96:3d:15:7a:e9:46:fe:91:ea:c4:10:26: a3:dc:32:0f:83:33:e6:0a:c9:60:29:82:7b:8f:29: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.200.0/22 177.124.128.0/22 IPv6: 2804:2870::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52863 Signature Algorithm: sha256WithRSAEncryption 14:37:05:7c:40:a0:54:a7:1e:0e:81:22:c9:b5:de:bc:36:4c: 75:b3:a2:d6:e7:aa:5c:ee:5a:4f:e2:9c:f3:d2:f2:97:10:d3: 82:18:b0:2b:2d:be:de:3c:79:cf:bc:70:ad:a1:bb:7f:81:f8: 07:46:e9:5a:2a:fa:cf:12:df:e7:6b:63:a5:61:31:54:f9:2f: 14:50:ef:63:2c:e3:dd:d7:43:31:97:fc:1e:45:45:80:3c:16: f1:7a:2b:38:f2:66:95:ff:fb:9c:58:37:6b:64:aa:d8:64:79: f8:f1:f1:0d:56:97:1a:5f:04:56:ab:3e:a1:42:db:67:ef:37: 03:e1:3e:e6:63:48:c6:3e:48:62:85:46:3f:80:2e:0a:17:2f: 12:1f:e1:a9:ff:28:dd:9d:67:3e:0b:71:b4:ec:dc:92:56:ec: 98:30:2a:0a:a7:d7:66:75:57:c7:70:7b:61:62:c0:95:28:98: 70:df:b2:00:7d:56:54:bc:85:94:39:94:41:b0:46:1a:d7:ec: d8:7e:c6:fd:0c:b6:71:cb:13:29:42:2a:7a:82:53:cd:9b:2f: 7d:c9:92:d4:ab:36:a9:e8:8b:e1:e6:b6:70:c9:4e:1c:b6:0b: 22:99:9e:da:c1:86:02:c1:a8:49:2b:9d:35:e6:56:d3:0a:4d: ec:41:2f:df -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIULrn1Pk6jkO7G6SSnCy6dkdFvo0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1NTZaFw0yNTA0MDIxODMwNTZaMDMxMTAvBgNV BAMTKEQxRDhDNzdBMzRDQjJCMDA0NDA1OEQ3NDE2MEY3QTIwOTEyNzc4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Dw0B1Sxb0Pk8a9arKQHdzchs kDpVHU+Yq5qP4u2wOjmfSD7YfB3Ddp1mSKHwLdA1dnWYjjpgAlf/iXCv2YU1361D VAiqPG5wp2Vb1gOHAbwPrcF5orvVE4b6aCuecwyOKkSOxGgSHF+tVDVgPdEHKTFh 1TW4y8Bu+/WV5GBr3Tnxznoy3ezakmmJ0jv3IQR0x73Pnp8bBsdqSmYLeSq+aRkp J77ndVitqqnOQfr+J4HygXAPMEsECb64QW+oN8khr9jVsVMeIZiDYqH6EWwFrIyV YIxMg5IiycJlRt87DNhPdpY9FXrpRv6R6sQQJqPcMg+DM+YKyWApgnuPKcXzAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTR2Md6NMsrAEQF jXQWD3ogkSd4wTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRlZ3 aGhrQzlxcjlibkE2a2Fia01kWkhGUG9TTWtEbXZKUlYyZTFEa0NpTDMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZW d2hoa0M5cXI5Ym5BNmthYmtNZFpIRlBvU01rRG12SlJWMmUxRGtDaUwzLzEvRDFE OEM3N0EzNENCMkIwMDQ0MDU4RDc0MTYwRjdBMjA5MTI3NzhDMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj//IAwQCsXyAMA0EAgACMAcDBQAoBChwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDOfzANBgkqhkiG9w0BAQsFAAOCAQEAFDcFfECg VKceDoEiybXevDZMdbOi1ueqXO5aT+Kc89LylxDTghiwKy2+3jx5z7xwraG7f4H4 B0bpWir6zxLf52tjpWExVPkvFFDvYyzj3ddDMZf8HkVFgDwW8XorOPJmlf/7nFg3 a2Sq2GR5+PHxDVaXGl8EVqs+oULbZ+83A+E+5mNIxj5IYoVGP4AuChcvEh/hqf8o 3Z1nPgtxtOzcklbsmDAqCqfXZnVXx3B7YWLAlSiYcN+yAH1WVLyFlDmUQbBGGtfs 2H7G/Qy2ccsTKUIqeoJTzZsvfcmS1Ks2qeiL4ea2cMlOHLYLIpme2sGGAsGoSSud NeZW0wpN7EEv3w== -----END CERTIFICATE-----Generated at Fri Nov 22 09:40:22 2024 by rpki-client on console-ams.rpki-client.org