$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer File: D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer (raw, json) Hash identifier: UQHSgh0UjdjYoh50jGA99butziCBtdGQ3dgXvDmEQx4= Subject key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3238652A4837AB2B7FE957B01AD88B808013B411 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft caRepository: rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 20 Nov 2024 19:37:52 +0000 Certificate not after: Wed 19 Nov 2025 19:42:52 +0000 Subordinate resources: AS: 52573 IP: 45.6.228.0/22 IP: 131.0.12.0/22 IP: 138.118.68.0/22 IP: 143.255.148.0/22 IP: 168.90.20.0/22 IP: 170.247.68.0/22 IP: 170.254.8.0/22 IP: 177.86.72.0/22 IP: 177.86.168.0/21 IP: 177.92.176.0/21 IP: 177.125.108.0/22 IP: 179.42.96.0/22 IP: 2804:ce4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:38:65:2a:48:37:ab:2b:7f:e9:57:b0:1a:d8:8b:80:80:13:b4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 20 19:37:52 2024 GMT Not After : Nov 19 19:42:52 2025 GMT Subject: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:ad:73:63:0f:57:91:cb:eb:ae:20:cf:38: 06:55:a3:df:6e:11:62:f1:d7:0e:82:84:79:43:54: 65:d5:fc:9c:2f:eb:a6:88:e7:af:19:44:98:7a:36: 5d:12:9a:23:89:0e:28:17:54:2e:6b:df:d3:56:bc: 2c:d7:9d:26:78:4e:c8:83:9a:47:c8:d1:c3:20:fe: 44:39:39:9b:ee:c9:a2:44:fb:85:77:56:64:4b:95: 23:7a:16:10:34:44:03:a2:4d:f7:7f:79:7c:bc:8e: 6f:b5:d5:d3:ce:c6:ea:db:d5:e4:90:10:99:a8:35: 84:69:27:21:08:bd:19:c1:d8:5a:57:8d:9d:58:c7: 89:e4:e0:25:74:e3:8c:eb:60:d9:d7:f6:ee:15:e2: 34:10:48:e2:65:58:a4:5d:c2:e3:c4:f8:ec:6a:51: da:5c:f6:78:c1:0d:bc:26:0f:48:cc:b2:c7:e8:24: f2:47:da:b0:e8:af:bb:b0:2e:34:e1:f7:9e:d1:87: 21:3d:4c:a9:75:c5:27:73:ed:3e:38:f7:3b:68:c3: 5b:a4:54:24:ec:60:6e:32:a2:bf:b7:64:5d:c1:72: 7c:cd:10:a9:a7:bb:52:ce:9b:25:17:06:0f:bc:ed: 84:b4:5c:9a:f5:2f:98:89:3b:71:da:fa:ce:a7:70: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.228.0/22 131.0.12.0/22 138.118.68.0/22 143.255.148.0/22 168.90.20.0/22 170.247.68.0/22 170.254.8.0/22 177.86.72.0/22 177.86.168.0/21 177.92.176.0/21 177.125.108.0/22 179.42.96.0/22 IPv6: 2804:ce4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52573 Signature Algorithm: sha256WithRSAEncryption 97:d6:37:74:71:73:7d:03:39:e1:18:d0:71:09:99:58:e7:29: e3:63:a9:d4:f8:6c:2f:54:f2:5e:1e:91:78:eb:d5:14:70:75: a7:04:dc:44:8b:db:f5:77:55:fc:15:1a:c2:1f:0f:ec:17:1a: a3:79:9a:a6:87:51:0a:a2:bc:d4:d2:26:7a:e3:1a:6f:d0:8c: 27:9a:88:2d:22:c8:03:c1:94:7d:2c:8d:4b:6b:9f:5c:4a:10: c8:9b:b2:84:83:cb:83:84:f0:5b:13:86:78:e4:cc:aa:c3:3e: 10:44:72:e4:52:29:f1:60:45:70:c9:a1:4c:8c:68:d3:b4:a1: 78:fd:2f:f0:e6:7c:8e:c0:22:ee:66:e2:ab:a2:76:30:e1:3f: 81:1d:14:4b:e0:38:15:e7:ef:d6:70:2a:87:1b:ff:a4:46:ae: 9c:03:af:4a:75:ba:0a:a1:f3:91:65:be:94:1e:67:73:40:22: 38:7a:4e:72:37:6c:80:57:77:c5:27:63:56:8d:f2:7a:f3:bd: dc:50:99:e0:ed:0a:05:fa:e2:37:19:be:50:e7:0c:e5:ce:b4: ee:46:7f:f8:d6:b2:4c:ba:20:80:47:55:c7:03:58:2e:f2:f0: 16:43:7c:4e:dc:96:e2:a5:0b:a3:11:4b:6b:32:d8:5c:18:99: 75:89:3c:02 -----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgIUMjhlKkg3qyt/6VewGtiLgIATtBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjAxOTM3NTJaFw0yNTExMTkxOTQyNTJaMDMxMTAvBgNV BAMTKEQ2ODZGMkQxQzhENkYwRTE4MjAwRDdCQTNCNEUxMzhBODY3RTI1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfa1zYw9XkcvrriDPOAZVo99u EWLx1w6ChHlDVGXV/Jwv66aI568ZRJh6Nl0SmiOJDigXVC5r39NWvCzXnSZ4TsiD mkfI0cMg/kQ5OZvuyaJE+4V3VmRLlSN6FhA0RAOiTfd/eXy8jm+11dPOxurb1eSQ EJmoNYRpJyEIvRnB2FpXjZ1Yx4nk4CV044zrYNnX9u4V4jQQSOJlWKRdwuPE+Oxq Udpc9njBDbwmD0jMssfoJPJH2rDor7uwLjTh957RhyE9TKl1xSdz7T449ztow1uk VCTsYG4yor+3ZF3BcnzNEKmnu1LOmyUXBg+87YS0XJr1L5iJO3Ha+s6ncAHbAgMB AAGjggN8MIIDeDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWhvLRyNbw4YIA 17o7ThOKhn4lxzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkpm eWJDaDRQMWZhaHZpUUNQOE5MSDloaDRxU0t1NEdqQkNWR2U4WnZFZVovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJK ZnliQ2g0UDFmYWh2aVFDUDhOTEg5aGg0cVNLdTRHakJDVkdlOFp2RWVaLzAvRDY4 NkYyRDFDOEQ2RjBFMTgyMDBEN0JBM0I0RTEzOEE4NjdFMjVDNy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEH AQH/BGEwXzBOBAIAATBIAwQCLQbkAwQCgwAMAwQCinZEAwQCj/+UAwQCqFoUAwQC qvdEAwQCqv4IAwQCsVZIAwQDsVaoAwQDsVywAwQCsX1sAwQCsypgMA0EAgACMAcD BQAoBAzkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNXTANBgkqhkiG9w0BAQsF AAOCAQEAl9Y3dHFzfQM54RjQcQmZWOcp42Op1PhsL1TyXh6ReOvVFHB1pwTcRIvb 9XdV/BUawh8P7Bcao3mapodRCqK81NImeuMab9CMJ5qILSLIA8GUfSyNS2ufXEoQ yJuyhIPLg4TwWxOGeOTMqsM+EERy5FIp8WBFcMmhTIxo07SheP0v8OZ8jsAi7mbi q6J2MOE/gR0US+A4Fefv1nAqhxv/pEaunAOvSnW6CqHzkWW+lB5nc0AiOHpOcjds gFd3xSdjVo3yevO93FCZ4O0KBfriNxm+UOcM5c607kZ/+NayTLoggEdVxwNYLvLw FkN8TtyW4qULoxFLazLYXBiZdYk8Ag== -----END CERTIFICATE-----Generated at Sat Nov 23 06:12:14 2024 by rpki-client on console-ams.rpki-client.org