$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer File: DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer (raw, json) Hash identifier: 5+0aD7bkcrhbx1oOwhQ0db3e8rg4PCng1ldgrOtyy84= Subject key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BC20DC94B6B22793798C20526323739AB7A9A3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.mft caRepository: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 Nov 2024 19:04:47 +0000 Certificate not after: Tue 11 Nov 2025 19:09:47 +0000 Subordinate resources: AS: 268878 IP: 45.174.16.0/22 IP: 2804:5bf0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c2:0d:c9:4b:6b:22:79:37:98:c2:05:26:32:37:39:ab:7a:9a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 12 19:04:47 2024 GMT Not After : Nov 11 19:09:47 2025 GMT Subject: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:44:c4:b6:0d:59:bb:55:8e:a8:af:ca:3b:00: 39:41:c8:ce:a0:fd:d1:5e:78:87:b1:7d:c7:d4:32: 39:16:29:8b:5d:22:fd:10:85:25:c6:54:50:db:25: f2:f2:e8:cc:dc:33:72:83:48:70:ab:bd:93:fd:17: 70:ce:85:8b:94:a7:08:14:74:a8:52:1a:ae:ae:8a: 46:c7:b2:52:d9:fa:cd:79:0e:c0:af:44:bf:b7:94: 7b:48:b6:e9:c6:6c:7f:b9:1c:b2:c7:14:de:1c:5d: 8d:af:b1:be:ea:f7:74:61:66:66:ed:e2:55:8c:4e: f9:96:ec:97:c8:ba:c5:01:25:2a:92:a0:59:00:1b: 29:c9:09:6c:14:ff:fd:ad:a3:f5:20:a3:b7:ea:b6: be:87:6a:b7:ed:da:6d:a0:ff:eb:bf:4a:bf:82:a1: b4:d6:19:05:68:b3:da:6f:ad:21:0d:69:3a:b1:02: 21:1a:74:d9:49:2d:9b:8b:2f:8b:bf:6e:34:49:30: 5b:64:05:68:b9:f0:12:3f:e0:be:28:04:a1:f8:cc: c1:13:c1:05:55:1b:fd:0c:de:37:76:c6:96:2e:0b: 95:9f:ac:35:ca:11:ca:3c:69:f3:56:3a:63:95:e9: 04:9c:e5:74:ef:c7:33:58:14:35:05:99:0c:74:0b: 5d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.16.0/22 IPv6: 2804:5bf0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268878 Signature Algorithm: sha256WithRSAEncryption 99:43:d8:64:09:8d:6a:98:28:4b:20:4a:37:17:ab:39:cc:dd: cb:2e:69:f6:7f:73:e1:95:ca:88:8a:7b:b1:27:48:42:38:80: fe:56:5d:e7:78:99:1e:99:ce:ac:ef:b7:4b:b8:91:94:45:8d: 3b:40:f0:4d:6a:49:0b:64:ca:b3:e0:7f:95:44:08:fe:39:8a: 8d:76:92:95:fd:28:da:e9:0b:f2:b2:11:aa:48:72:26:12:57: 19:78:d8:78:ae:57:85:de:a4:2a:7a:df:62:3e:a0:c5:3c:f4: 53:93:32:94:7f:49:ed:b0:c5:b2:79:a4:44:68:d6:02:d1:f8: fd:be:89:4a:4b:6a:ba:e4:ef:75:24:48:20:8f:c2:d6:45:ca: 85:c8:e5:7f:08:da:49:b2:64:1e:67:1d:e4:44:9c:42:c2:e3: be:e3:db:63:ed:d3:58:ed:38:0b:a6:26:88:27:78:ee:94:98: 7f:6c:79:ff:7d:4e:62:81:20:db:2c:77:39:53:68:cb:13:d9: f5:95:41:6c:ee:a7:f3:c8:d6:b9:ce:68:b9:04:11:ff:6d:c6: e5:83:7f:e8:4c:54:57:9c:2b:23:a9:c8:27:e8:ea:29:e3:a9: 72:6d:9c:a7:bd:8f:6f:c1:e1:72:2d:0b:53:7a:8c:3a:e4:81: 93:b3:14:52 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUG8INyUtrInk3mMIFJjI3Oat6mj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTIxOTA0NDdaFw0yNTExMTExOTA5NDdaMDMxMTAvBgNV BAMTKERCQzQyREE4RjA5MTMwNjQwQjZERTAwQUE4NERGQjEwODYyQTJGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+RMS2DVm7VY6or8o7ADlByM6g /dFeeIexfcfUMjkWKYtdIv0QhSXGVFDbJfLy6MzcM3KDSHCrvZP9F3DOhYuUpwgU dKhSGq6uikbHslLZ+s15DsCvRL+3lHtItunGbH+5HLLHFN4cXY2vsb7q93RhZmbt 4lWMTvmW7JfIusUBJSqSoFkAGynJCWwU//2to/Ugo7fqtr6Harft2m2g/+u/Sr+C obTWGQVos9pvrSENaTqxAiEadNlJLZuLL4u/bjRJMFtkBWi58BI/4L4oBKH4zMET wQVVG/0M3jd2xpYuC5WfrDXKEco8afNWOmOV6QSc5XTvxzNYFDUFmQx0C11NAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTbxC2o8JEwZAtt 4AqoTfsQhiovWTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzlL NGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNrYm8vMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzc5 SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAvREJD NDJEQThGMDkxMzA2NDBCNkRFMDBBQTg0REZCMTA4NjJBMkY1OS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa4QMA0EAgACMAcDBQAoBFvwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaTjANBgkqhkiG9w0BAQsFAAOCAQEAmUPYZAmNapgoSyBK NxerOczdyy5p9n9z4ZXKiIp7sSdIQjiA/lZd53iZHpnOrO+3S7iRlEWNO0DwTWpJ C2TKs+B/lUQI/jmKjXaSlf0o2ukL8rIRqkhyJhJXGXjYeK5Xhd6kKnrfYj6gxTz0 U5MylH9J7bDFsnmkRGjWAtH4/b6JSktquuTvdSRIII/C1kXKhcjlfwjaSbJkHmcd 5EScQsLjvuPbY+3TWO04C6YmiCd47pSYf2x5/31OYoEg2yx3OVNoyxPZ9ZVBbO6n 88jWuc5ouQQR/23G5YN/6ExUV5wrI6nIJ+jqKeOpcm2cp72Pb8Hhci0LU3qMOuSB k7MUUg== -----END CERTIFICATE-----Generated at Fri Nov 22 21:03:36 2024 by rpki-client on console-fra.rpki-client.org