$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer File: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer (raw, json) Hash identifier: H3A0pcGqZUqSnHvCvS5kma1n+XwThxIj7RyVed8umSw= Subject key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 78C6F7137F12F392F5EEBF38740389035B309C06 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft caRepository: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 07 Oct 2024 17:55:24 +0000 Certificate not after: Mon 06 Oct 2025 18:00:24 +0000 Subordinate resources: AS: 52612 IP: 170.79.248.0/22 IP: 177.124.20.0/22 IP: 2804:22fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c6:f7:13:7f:12:f3:92:f5:ee:bf:38:74:03:89:03:5b:30:9c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 7 17:55:24 2024 GMT Not After : Oct 6 18:00:24 2025 GMT Subject: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3c:d4:34:16:09:a4:1b:3e:ec:0a:93:c9:29: bd:12:96:27:39:a7:dd:f2:93:e0:d2:fe:cc:ea:8a: 23:37:6a:6c:8b:37:52:e8:56:0d:44:80:fb:d5:cb: 0e:c0:a2:21:04:2e:03:14:cc:60:32:7f:b9:17:0c: 7c:aa:88:11:90:01:d8:dc:64:87:03:cd:e9:a1:e2: 8c:50:09:f0:e5:3c:38:70:8e:bb:9e:12:34:ad:3d: 98:9a:e6:f8:58:81:d1:b0:48:f4:88:a5:49:42:c6: 1d:f9:af:21:cf:ad:62:8d:aa:d1:89:f6:48:21:77: 11:f9:d5:ea:d9:69:fb:d4:28:d4:de:90:e4:bb:f2: 4c:5e:a1:82:65:5f:03:5c:c5:58:f3:29:5e:f1:19: 07:29:f9:0a:d4:b2:92:ac:54:b7:30:9d:2c:f2:93: cd:bf:53:3d:b5:ad:78:37:90:88:6c:68:81:3b:b0: e2:8a:31:db:9b:2c:69:0c:b2:f0:73:7f:68:5a:1f: d7:3e:89:c2:4b:16:6d:6d:82:17:02:b1:8b:51:bd: 67:d2:d9:38:59:5d:39:08:05:7b:8d:62:f5:af:51: 07:f7:8c:c8:5a:f3:53:a5:86:c7:aa:5b:7b:9d:59: e9:bc:37:0d:eb:32:bd:d7:d3:31:e4:e7:81:c2:d5: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.248.0/22 177.124.20.0/22 IPv6: 2804:22fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52612 Signature Algorithm: sha256WithRSAEncryption 66:d7:9a:a1:02:14:65:9f:31:5c:b7:06:87:e1:30:f0:46:cf: df:81:b7:fd:f4:c7:7e:f8:64:8d:cc:cf:60:ed:28:8e:70:f3: 97:8a:64:92:f3:36:e3:64:28:41:99:5b:de:97:b7:b3:1a:ab: 91:dd:5c:3c:83:58:2f:9f:18:19:5a:1a:e6:35:b7:88:f6:8c: 19:45:59:6a:c7:b6:68:24:26:34:d2:04:28:e8:79:c4:9c:80: 79:64:46:52:d6:d4:3e:96:e9:4d:ab:62:c5:83:ce:bb:4c:e5: d3:75:5f:86:dd:9e:02:1e:38:b9:be:f4:65:c4:2c:a4:10:ba: c5:dd:ea:3a:e4:56:81:b6:62:cc:6e:17:50:51:5f:f8:be:7e: a6:60:a8:67:06:60:ae:53:f6:b1:a2:01:b5:d3:b5:d7:06:da: a8:06:31:00:80:fe:f7:e9:79:c0:0a:d3:5f:6f:61:75:cb:74: 78:33:2c:ad:48:2a:91:45:bc:f1:39:e8:6e:ac:84:ff:72:e1: c7:01:3e:3e:f4:1b:95:93:f6:de:e7:e6:3c:3b:cf:7d:b2:c9: 97:e9:51:c3:66:f6:29:04:e6:c1:16:5b:08:53:32:5f:00:34: 4e:4a:36:e6:cd:4c:d1:5f:b9:31:47:12:f2:a5:95:32:b4:21: f8:9e:5e:1a -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUeMb3E38S85L17r84dAOJA1swnAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMDcxNzU1MjRaFw0yNTEwMDYxODAwMjRaMDMxMTAvBgNV BAMTKEQ2MzM5Qzg2REUwQzY1RjQyOTlFMEI5MjVFREQ4OEVBQjg4NkY3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbPNQ0FgmkGz7sCpPJKb0Slic5 p93yk+DS/szqiiM3amyLN1LoVg1EgPvVyw7AoiEELgMUzGAyf7kXDHyqiBGQAdjc ZIcDzemh4oxQCfDlPDhwjrueEjStPZia5vhYgdGwSPSIpUlCxh35ryHPrWKNqtGJ 9kghdxH51erZafvUKNTekOS78kxeoYJlXwNcxVjzKV7xGQcp+QrUspKsVLcwnSzy k82/Uz21rXg3kIhsaIE7sOKKMdubLGkMsvBzf2haH9c+icJLFm1tghcCsYtRvWfS 2ThZXTkIBXuNYvWvUQf3jMha81OlhseqW3udWem8Nw3rMr3X0zHk54HC1Ro1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWM5yG3gxl9Cme C5Je3YjquIb3LTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFF5 cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZvRWUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hR eXJhSm5QRUVRV21qRkxhNGRCcFE5UTU4Mkx0N0prejJMNzNhM2p2b0VlLzAvRDYz MzlDODZERTBDNjVGNDI5OUUwQjkyNUVERDg4RUFCODg2RjcyRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk/4AwQCsXwUMA0EAgACMAcDBQAoBCL8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNhDANBgkqhkiG9w0BAQsFAAOCAQEAZteaoQIU ZZ8xXLcGh+Ew8EbP34G3/fTHfvhkjczPYO0ojnDzl4pkkvM242QoQZlb3pe3sxqr kd1cPINYL58YGVoa5jW3iPaMGUVZase2aCQmNNIEKOh5xJyAeWRGUtbUPpbpTati xYPOu0zl03Vfht2eAh44ub70ZcQspBC6xd3qOuRWgbZizG4XUFFf+L5+pmCoZwZg rlP2saIBtdO11wbaqAYxAID+9+l5wArTX29hdct0eDMsrUgqkUW88TnobqyE/3Lh xwE+PvQblZP23ufmPDvPfbLJl+lRw2b2KQTmwRZbCFMyXwA0Tko25s1M0V+5MUcS 8qWVMrQh+J5eGg== -----END CERTIFICATE-----Generated at Fri Nov 22 22:22:04 2024 by rpki-client on console-fra.rpki-client.org