$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer File: D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer (raw, json) Hash identifier: th7J868UFZE9zVqSH9WZLXVm5o9AxznWV5TJU7znh6k= Subject key identifier: D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5E1073075D6D3BDCBBEF0C7C0FAD7D150E896084 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft caRepository: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 28 Oct 2024 16:59:55 +0000 Certificate not after: Mon 27 Oct 2025 17:04:55 +0000 Subordinate resources: AS: 262346 IP: 138.97.0.0/22 IP: 143.202.224.0/22 IP: 170.150.100.0/22 IP: 177.125.160.0/21 IP: 177.125.204.0/22 IP: 179.107.56.0/21 IP: 2804:81c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:10:73:07:5d:6d:3b:dc:bb:ef:0c:7c:0f:ad:7d:15:0e:89:60:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 28 16:59:55 2024 GMT Not After : Oct 27 17:04:55 2025 GMT Subject: CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:f2:2f:12:8a:62:c5:3d:d5:c5:b7:c1:98: a1:ca:60:65:70:89:75:4a:b2:6e:6e:5b:81:d6:3f: e3:4c:bf:87:b0:64:8e:d0:d3:52:22:e5:6e:d7:05: 9b:60:a2:a4:d3:b6:a6:45:88:cd:13:b5:55:f7:f4: 44:e7:71:dc:5a:52:67:bc:06:d2:17:56:c3:77:fe: 2b:3b:ab:31:bb:95:e3:cc:ec:f2:84:8e:1a:f5:ef: 1b:27:ec:be:7a:07:24:82:69:f7:a8:20:53:c1:b1: 46:a3:f0:16:8b:ec:85:72:1e:13:4a:76:f1:b9:b8: 60:3a:c3:ca:82:f2:e3:50:ce:02:cb:b4:ab:5a:99: c2:99:88:d8:bf:55:b4:37:d6:96:93:27:9d:98:6c: 6b:c1:16:30:74:ee:3c:09:fd:d1:9c:1b:0d:ac:97: d1:98:0c:34:6e:29:6a:62:2c:01:34:b2:b3:ed:ff: 5b:c9:59:b0:c3:f4:39:c3:15:1f:1f:02:27:95:55: 61:0c:5e:cd:c3:24:41:6c:7f:e9:72:f1:db:4e:4d: e3:a1:22:21:3d:dc:40:33:7e:5b:8a:c2:ff:7e:ab: 46:57:35:e9:24:ec:0a:86:65:48:2f:46:d9:af:f0: a4:40:70:d8:1b:bb:c9:73:62:f6:e7:72:57:d9:38: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.0.0/22 143.202.224.0/22 170.150.100.0/22 177.125.160.0/21 177.125.204.0/22 179.107.56.0/21 IPv6: 2804:81c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262346 Signature Algorithm: sha256WithRSAEncryption 4e:3f:17:9a:51:36:84:b2:a8:ad:c5:32:80:db:b9:83:14:16: ca:08:f9:2c:a1:8b:d6:fd:60:cd:5f:08:cc:e8:45:73:94:36: 10:4d:a2:de:2e:e5:db:89:02:78:a2:54:88:66:33:13:df:91: e1:aa:8d:55:30:37:a8:87:11:b8:15:b2:29:48:04:59:ab:8e: 86:4a:fd:e3:16:61:40:9b:0a:80:71:b6:e2:10:ba:d3:db:e3: e8:23:8d:0e:1d:cb:05:d8:53:15:92:35:39:e6:5a:b0:6a:20: c8:3a:e0:7a:ab:e0:b0:28:47:2e:8e:bd:1b:aa:79:71:38:4f: 6a:dc:f1:3d:91:65:f3:09:7d:82:11:f3:45:c6:bb:0b:fd:16: 27:92:32:8e:f1:da:09:cd:f3:f1:cd:a1:c9:57:92:ab:b9:f5: f8:8b:be:3f:63:37:89:b0:b1:18:08:3d:2e:c8:56:2a:1b:d7: 68:b8:30:dc:67:aa:4f:02:b2:be:4c:1c:9a:43:f8:11:d3:9c: e4:e0:0e:f6:14:43:18:93:75:03:b9:ea:36:c4:36:a3:04:12: 13:96:e3:43:fd:47:d5:86:f4:3a:33:bb:06:d0:16:97:04:89: c4:78:76:d8:ab:9e:6a:33:17:92:49:5d:fc:4a:7f:1d:82:cc: e7:4f:34:e3 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUXhBzB11tO9y77wx8D619FQ6JYIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjgxNjU5NTVaFw0yNTEwMjcxNzA0NTVaMDMxMTAvBgNV BAMTKEQ2QkI0QTkxRkJFRkI1REVCN0Y5MTBFMEU1MzQ2NUVFNjQzREVGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRPIvEopixT3VxbfBmKHKYGVw iXVKsm5uW4HWP+NMv4ewZI7Q01Ii5W7XBZtgoqTTtqZFiM0TtVX39ETncdxaUme8 BtIXVsN3/is7qzG7lePM7PKEjhr17xsn7L56BySCafeoIFPBsUaj8BaL7IVyHhNK dvG5uGA6w8qC8uNQzgLLtKtamcKZiNi/VbQ31paTJ52YbGvBFjB07jwJ/dGcGw2s l9GYDDRuKWpiLAE0srPt/1vJWbDD9DnDFR8fAieVVWEMXs3DJEFsf+ly8dtOTeOh IiE93EAzfluKwv9+q0ZXNekk7AqGZUgvRtmv8KRAcNgbu8lzYvbnclfZONPvAgMB AAGjggNYMIIDVDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWu0qR+++13rf5 EODlNGXuZD3v7jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkU2 QTROQmJrVldIbmZHY0oxUVJVYWN6OE5oZTkyYnE3QmYxR3NodGNxWlAvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZF NkE0TkJia1ZXSG5mR2NKMVFSVWFjejhOaGU5MmJxN0JmMUdzaHRjcVpQLzAvRDZC QjRBOTFGQkVGQjVERUI3RjkxMEUwRTUzNDY1RUU2NDNERUZFRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEH AQH/BD0wOzAqBAIAATAkAwQCimEAAwQCj8rgAwQCqpZkAwQDsX2gAwQCsX3MAwQD s2s4MA0EAgACMAcDBQAoBAgcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQAyjAN BgkqhkiG9w0BAQsFAAOCAQEATj8XmlE2hLKorcUygNu5gxQWygj5LKGL1v1gzV8I zOhFc5Q2EE2i3i7l24kCeKJUiGYzE9+R4aqNVTA3qIcRuBWyKUgEWauOhkr94xZh QJsKgHG24hC609vj6CONDh3LBdhTFZI1OeZasGogyDrgeqvgsChHLo69G6p5cThP atzxPZFl8wl9ghHzRca7C/0WJ5IyjvHaCc3z8c2hyVeSq7n1+Iu+P2M3ibCxGAg9 LshWKhvXaLgw3GeqTwKyvkwcmkP4EdOc5OAO9hRDGJN1A7nqNsQ2owQSE5bjQ/1H 1Yb0OjO7BtAWlwSJxHh22KueajMXkkld/Ep/HYLM50804w== -----END CERTIFICATE-----Generated at Fri Nov 22 21:03:35 2024 by rpki-client on console-fra.rpki-client.org