$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D437FB47C913AEA6179E0C14443DEAC11C0E6DE6.cer File: D437FB47C913AEA6179E0C14443DEAC11C0E6DE6.cer (raw, json) Hash identifier: i0ymc8TiX2xbyald+KS/6XHO3RPtDbQ6IuiZA+h7Ufc= Subject key identifier: D4:37:FB:47:C9:13:AE:A6:17:9E:0C:14:44:3D:EA:C1:1C:0E:6D:E6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 092923DFD0CA23B8328ECEBEECD49909DC766349 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D437FB47C913AEA6179E0C14443DEAC11C0E6DE6.mft caRepository: rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Nov 2024 00:51:27 +0000 Certificate not after: Tue 25 Nov 2025 00:56:27 +0000 Subordinate resources: AS: 264999 IP: 170.84.76.0/22 IP: 2804:3130::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:29:23:df:d0:ca:23:b8:32:8e:ce:be:ec:d4:99:09:dc:76:63:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 26 00:51:27 2024 GMT Not After : Nov 25 00:56:27 2025 GMT Subject: CN=D437FB47C913AEA6179E0C14443DEAC11C0E6DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:f3:16:62:4d:03:dc:61:65:2a:b9:f6:d6: 7e:ce:8c:fa:e5:6c:87:76:e3:5c:56:8b:63:d9:42: 10:b8:57:e5:19:e5:66:1c:37:a1:d5:5f:79:6f:42: a8:7d:af:ad:de:c1:0c:7f:2e:7c:45:8f:2b:a1:5d: 00:56:4d:a4:49:4d:88:a3:df:5a:17:b9:3b:09:e7: fa:15:09:0e:39:dc:a1:de:9e:af:3a:6e:f5:6a:40: e0:96:7d:16:ad:0e:28:bd:fe:11:38:15:0d:cc:df: 4f:13:3a:54:63:89:81:98:19:3e:1e:db:be:3e:4e: a1:1e:3c:ec:01:f8:22:2c:65:56:eb:43:2e:5d:dc: e0:e5:bc:af:e2:78:d6:38:a6:bb:c4:90:d4:3e:21: 9c:3b:1f:84:0b:95:a8:ea:22:65:6b:e8:ab:4a:f1: b9:8e:39:40:af:bf:26:07:ce:23:52:2d:b3:49:7c: d0:18:51:92:35:74:a7:2e:b4:53:45:ed:b1:06:ad: ec:19:8e:6d:8a:6a:10:48:81:77:79:d4:d7:02:ba: 47:de:49:2e:a6:55:15:67:67:ad:76:39:8e:fb:70: b6:ba:df:a3:e0:de:57:03:a4:21:4a:dd:13:1d:3b: e8:69:88:53:4c:13:54:c2:35:f3:99:4c:61:2e:d7: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:37:FB:47:C9:13:AE:A6:17:9E:0C:14:44:3D:EA:C1:1C:0E:6D:E6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/D437FB47C913AEA6179E0C14443DEAC11C0E6DE6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.84.76.0/22 IPv6: 2804:3130::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264999 Signature Algorithm: sha256WithRSAEncryption 78:60:a5:dc:51:d3:71:9f:12:13:60:dc:e7:8d:d8:e4:0e:ca: 8e:00:ba:2f:41:58:b8:a9:0c:70:80:bf:9f:d8:4f:37:c2:df: 52:8f:b3:e0:93:0d:5e:e6:ef:e4:86:38:99:12:92:7b:70:14: a5:9c:0b:9a:54:9f:77:32:ed:b1:5a:32:e5:bb:75:4b:9e:72: 5e:e1:d9:b1:03:e0:dc:15:b1:ae:b9:2c:7f:6f:d4:64:d4:19: 76:de:05:37:54:f1:c2:b2:ad:32:5c:b4:ae:9b:f2:5f:8a:aa: d7:51:3b:79:da:d8:84:6e:42:66:fe:ac:c0:81:34:86:d6:e0: f1:00:8b:9b:6f:ee:c0:41:d1:1e:2d:06:77:08:3c:91:5e:1f: 6a:67:d0:2d:37:f3:52:d5:3f:ef:79:7e:28:c1:f4:63:25:12: 26:13:b3:e0:70:4b:82:ab:63:97:38:2b:57:de:56:cb:aa:60: 24:17:14:01:51:2e:c2:4e:0b:e1:f9:83:58:50:2a:ed:6b:c1: 79:c8:f7:b1:e6:ea:0f:c9:cc:9a:08:2a:7e:3a:a5:fd:b0:34: 84:05:7e:6c:05:1f:b9:e1:44:59:6a:5b:c9:d3:eb:ce:3c:de: 5f:1c:c5:be:e1:ec:cf:2f:75:00:7b:ef:6e:a3:f6:e5:5c:5d: f5:1c:75:8d -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUCSkj39DKI7gyjs6+7NSZCdx2Y0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjYwMDUxMjdaFw0yNTExMjUwMDU2MjdaMDMxMTAvBgNV BAMTKEQ0MzdGQjQ3QzkxM0FFQTYxNzlFMEMxNDQ0M0RFQUMxMUMwRTZERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWvMWYk0D3GFlKrn21n7OjPrl bId241xWi2PZQhC4V+UZ5WYcN6HVX3lvQqh9r63ewQx/LnxFjyuhXQBWTaRJTYij 31oXuTsJ5/oVCQ453KHenq86bvVqQOCWfRatDii9/hE4FQ3M308TOlRjiYGYGT4e 274+TqEePOwB+CIsZVbrQy5d3ODlvK/ieNY4prvEkNQ+IZw7H4QLlajqImVr6KtK 8bmOOUCvvyYHziNSLbNJfNAYUZI1dKcutFNF7bEGrewZjm2KahBIgXd51NcCukfe SS6mVRVnZ612OY77cLa636Pg3lcDpCFK3RMdO+hpiFNME1TCNfOZTGEu1+wxAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTUN/tHyROuphee DBREPerBHA5t5jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWcx amdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZNeE4vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vn MWpnSzJFWjV6eG9Hc0ZNWkRrbWVSZW9hYWlZd0VucXg1cndQQVF2TXhOLzAvRDQz N0ZCNDdDOTEzQUVBNjE3OUUwQzE0NDQzREVBQzExQzBFNkRFNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlRMMA0EAgACMAcDBQAoBDEwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQLJzANBgkqhkiG9w0BAQsFAAOCAQEAeGCl3FHTcZ8SE2Dc 543Y5A7KjgC6L0FYuKkMcIC/n9hPN8LfUo+z4JMNXubv5IY4mRKSe3AUpZwLmlSf dzLtsVoy5bt1S55yXuHZsQPg3BWxrrksf2/UZNQZdt4FN1TxwrKtMly0rpvyX4qq 11E7edrYhG5CZv6swIE0htbg8QCLm2/uwEHRHi0Gdwg8kV4famfQLTfzUtU/73l+ KMH0YyUSJhOz4HBLgqtjlzgrV95Wy6pgJBcUAVEuwk4L4fmDWFAq7WvBecj3sebq D8nMmggqfjql/bA0hAV+bAUfueFEWWpbydPrzjzeXxzFvuHszy91AHvvbqP25Vxd 9Rx1jQ== -----END CERTIFICATE-----Generated at Tue Nov 26 14:18:00 2024 by rpki-client on console-ams.rpki-client.org