$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer File: DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer (raw, json) Hash identifier: WPZ1LtATq1M5XOYqAgn7KsKHHM6Nx+iZVM/j/WTCjy4= Subject key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 59CAD194DCC30013D83D4FB52EFEBCCB8C49ACD3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.mft caRepository: rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 15 Aug 2024 18:33:29 +0000 Certificate not after: Thu 14 Aug 2025 18:38:29 +0000 Subordinate resources: AS: 263520 IP: 177.126.152.0/21 IP: 181.192.80.0/20 IP: 2804:1330::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 17 Feb 2025 20:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ca:d1:94:dc:c3:00:13:d8:3d:4f:b5:2e:fe:bc:cb:8c:49:ac:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 15 18:33:29 2024 GMT Not After : Aug 14 18:38:29 2025 GMT Subject: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:a3:c4:3c:41:39:74:50:84:c3:3c:a7:d1: bb:19:2f:93:3a:ca:82:b0:62:ac:85:18:4d:8f:ee: 6c:a4:e9:b3:95:06:28:78:bc:dd:70:fe:d0:6b:43: a7:1c:91:69:4e:04:7b:86:9f:41:71:02:56:a3:19: ed:29:26:35:7c:50:16:20:bf:05:11:fc:74:38:6e: 12:4b:2a:27:5f:c1:32:1e:94:74:2d:3a:90:18:3c: 14:f1:23:63:7d:0e:b9:65:4f:a4:18:37:47:38:92: ad:e5:2b:5d:1d:d2:17:39:03:13:2c:a1:dc:d4:82: 33:82:cd:9c:39:79:7d:7b:39:a2:6b:11:95:4a:a7: 8c:bd:29:18:f3:f7:b8:86:7d:b3:5d:1d:c2:2e:aa: 9b:e3:f6:45:19:91:95:67:01:3c:3a:05:5c:2c:f9: 9d:ef:43:83:6c:fc:fb:d5:36:77:79:39:47:59:3c: 60:ae:6d:eb:e9:0d:b4:e9:ee:72:59:68:3f:b1:84: fd:44:4b:40:82:fd:b7:24:13:1e:47:d9:30:6c:8d: 72:f0:6a:43:36:2a:de:16:92:1c:13:f7:0b:d7:04: ad:87:2f:50:e2:f8:90:e6:99:0f:34:e9:63:7b:5c: df:0a:c9:64:2b:d5:dc:36:37:e3:bd:12:ce:1a:26: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.126.152.0/21 181.192.80.0/20 IPv6: 2804:1330::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263520 Signature Algorithm: sha256WithRSAEncryption 38:3c:79:20:b7:f5:b1:cc:8c:a9:07:40:bf:fc:86:3b:20:59: 27:cb:23:1b:f2:82:f4:50:69:83:d7:b3:38:af:d8:4e:21:24: c4:48:f7:07:ff:67:ef:d7:7c:1c:5e:d7:70:bc:4e:a4:c1:a6: 6c:c2:69:98:33:39:6e:81:23:f6:63:77:dc:03:4b:ae:55:83: 30:a7:be:5b:98:b4:48:54:2f:c3:81:75:9d:ce:e5:5f:db:ba: 39:d5:3f:23:3c:8c:96:7e:a8:8b:81:36:c6:71:b9:fd:8e:0e: c8:37:f7:76:bf:c6:a3:94:3c:a7:a1:5c:75:2e:63:63:50:c0: 7a:5a:30:6b:4a:37:6b:95:6f:ca:c2:44:b1:20:10:e6:1c:73: 99:43:3f:4f:f2:0a:26:41:24:58:66:b9:5a:78:1e:57:83:14: f1:10:6a:61:01:be:1a:be:2e:80:ab:cd:00:cb:32:5c:db:f8: 11:ba:f1:4b:eb:10:79:97:8a:59:34:7b:13:5f:b0:1b:85:f1: 03:9d:59:35:dc:65:ec:c3:0a:d2:2a:e1:1b:1f:88:3e:88:6d: 4c:5a:16:ce:1a:c4:90:3f:4b:d9:98:d1:21:eb:2d:d1:82:99: db:5a:90:ca:f2:9f:36:87:5c:50:5a:a8:5e:79:4d:18:03:4f: d4:bc:e5:ea -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUWcrRlNzDABPYPU+1Lv68y4xJrNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MTUxODMzMjlaFw0yNTA4MTQxODM4MjlaMDMxMTAvBgNV BAMTKERBQjI2MkYxQ0RFMEQ2NTZEMUVEMkY5NDk1NUJEQTJCOEM4MTRFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5waPEPEE5dFCEwzyn0bsZL5M6 yoKwYqyFGE2P7myk6bOVBih4vN1w/tBrQ6cckWlOBHuGn0FxAlajGe0pJjV8UBYg vwUR/HQ4bhJLKidfwTIelHQtOpAYPBTxI2N9DrllT6QYN0c4kq3lK10d0hc5AxMs odzUgjOCzZw5eX17OaJrEZVKp4y9KRjz97iGfbNdHcIuqpvj9kUZkZVnATw6BVws +Z3vQ4Ns/PvVNnd5OUdZPGCubevpDbTp7nJZaD+xhP1ES0CC/bckEx5H2TBsjXLw akM2Kt4WkhwT9wvXBK2HL1Di+JDmmQ806WN7XN8KyWQr1dw2N+O9Es4aJmoLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTasmLxzeDWVtHt L5SVW9orjIFOcjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjl0 Wnd5cHlFRHZFeVhKa0dXeGJUTlVIcnZiZ2kzaEdwQ0xxcXBUSDZyZXkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o5 dFp3eXB5RUR2RXlYSmtHV3hiVE5VSHJ2YmdpM2hHcENMcXFwVEg2cmV5LzAvREFC MjYyRjFDREUwRDY1NkQxRUQyRjk0OTU1QkRBMkI4QzgxNEU3Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsX6YAwQEtcBQMA0EAgACMAcDBQAoBBMwMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFYDANBgkqhkiG9w0BAQsFAAOCAQEAODx5ILf1 scyMqQdAv/yGOyBZJ8sjG/KC9FBpg9ezOK/YTiEkxEj3B/9n79d8HF7XcLxOpMGm bMJpmDM5boEj9mN33ANLrlWDMKe+W5i0SFQvw4F1nc7lX9u6OdU/IzyMln6oi4E2 xnG5/Y4OyDf3dr/Go5Q8p6FcdS5jY1DAelowa0o3a5VvysJEsSAQ5hxzmUM/T/IK JkEkWGa5WngeV4MU8RBqYQG+Gr4ugKvNAMsyXNv4EbrxS+sQeZeKWTR7E1+wG4Xx A51ZNdxl7MMK0irhGx+IPohtTFoWzhrEkD9L2ZjRIest0YKZ21qQyvKfNodcUFqo XnlNGANP1Lzl6g== -----END CERTIFICATE-----Generated at Mon Feb 17 08:03:14 2025 by rpki-client