$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer File: DDF75D11A85F5023747B20E973994EC53D23A68E.cer (raw, json) Hash identifier: 7sTLpPoyy8RXPO7GVvHYOkVR4o7+Rz48NXKRg4eYlnI= Subject key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7233F307B0209FF8063BA58088528C915454BC1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft caRepository: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Nov 2024 20:46:44 +0000 Certificate not after: Thu 06 Nov 2025 20:51:44 +0000 Subordinate resources: AS: 263665 IP: 45.165.20.0/22 IP: 45.227.188.0/22 IP: 131.161.108.0/22 IP: 131.255.156.0/22 IP: 138.255.172.0/22 IP: 168.196.20.0/22 IP: 170.150.112.0/22 IP: 170.150.204.0/22 IP: 191.241.32.0/21 IP: 2804:1134::/32 IP: 2804:343c::/32 IP: 2804:47c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:33:f3:07:b0:20:9f:f8:06:3b:a5:80:88:52:8c:91:54:54:bc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 7 20:46:44 2024 GMT Not After : Nov 6 20:51:44 2025 GMT Subject: CN=DDF75D11A85F5023747B20E973994EC53D23A68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:29:78:a5:58:c6:12:33:2a:85:41:bb:6d: d9:6a:5a:50:2d:4c:b2:dc:cb:89:a0:0b:e4:c4:c5: 57:fa:b0:85:c4:d1:1c:04:8a:b8:97:46:9b:ab:53: 1d:e6:94:16:77:10:81:7d:de:2e:95:5c:9c:d5:f6: 09:54:c1:6f:61:c2:9a:82:b2:a1:14:42:cc:00:eb: 73:9c:e3:15:5b:09:31:e4:9e:6b:a4:82:fe:95:29: 0b:e7:d9:9a:27:43:12:5f:ef:17:5e:78:83:0e:59: 7e:fe:ab:ff:ce:2a:41:b6:d3:96:dc:ee:55:4f:46: f2:7e:0a:db:3e:4b:7c:4a:12:65:34:46:91:fd:f2: 96:71:0b:26:67:5a:b4:89:25:6a:0d:e4:85:c1:53: 1f:92:7b:8a:70:9a:de:34:e6:b7:b2:9f:ff:29:cc: 9f:c9:84:c3:63:3b:1a:f2:99:98:ff:7d:54:75:f4: 7c:3c:23:7e:f3:61:4f:48:b6:ca:1b:99:fc:f0:60: f7:e9:ea:81:63:9e:05:40:d4:4d:63:bb:a4:54:8b: f8:71:fe:94:72:47:07:ec:09:54:02:88:d8:b3:49: ee:b8:2f:6a:1b:8a:9e:85:cf:8e:eb:1a:6e:79:29: 97:c9:9c:74:32:93:35:99:04:5e:8f:88:32:f9:33: 1d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.165.20.0/22 45.227.188.0/22 131.161.108.0/22 131.255.156.0/22 138.255.172.0/22 168.196.20.0/22 170.150.112.0/22 170.150.204.0/22 191.241.32.0/21 IPv6: 2804:1134::/32 2804:343c::/32 2804:47c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263665 Signature Algorithm: sha256WithRSAEncryption 58:e7:c4:ea:50:90:2c:26:62:87:05:fa:c3:74:b6:82:0d:be: 47:1a:ea:68:7d:b5:81:06:b4:7e:9a:cd:20:b1:6f:1b:5d:43: 70:19:13:2b:ef:f8:05:f1:a6:a7:fe:ac:c4:89:f6:8e:aa:ec: fe:e2:4f:30:20:7d:48:e2:57:3b:61:6b:22:20:3f:74:dc:6d: 93:78:a2:c3:d5:14:c4:fe:fe:2f:ac:8f:5b:fd:67:e3:0d:83: 4e:99:f7:21:a8:4e:03:bb:58:b3:e7:d4:a1:80:0c:ec:e7:f8: bb:88:48:53:0a:20:1e:f3:e9:e9:be:97:a3:dc:75:45:b0:cd: d9:44:27:54:d8:17:c1:63:4a:29:0a:a0:c9:d3:3e:5b:68:95: 22:3f:79:25:17:d2:63:19:f6:9d:5c:75:aa:b4:f2:c2:95:48: c2:75:f0:5a:d0:4b:d2:23:7e:78:b5:08:d1:8d:03:3a:3d:30: 14:0c:5e:ad:15:f4:21:6d:57:d6:5a:5b:da:fa:df:0b:82:62: e0:e6:62:5e:38:3a:ee:f2:bf:32:ee:93:42:92:7b:cb:a8:e2: 2c:2c:d2:ca:86:79:32:a0:3a:44:dd:cb:0c:29:af:04:f1:5a: 10:1e:0b:c2:a4:86:88:5c:28:49:ec:0c:e1:e4:53:7e:ea:96: 8f:18:ed:03 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUcjPzB7Agn/gGO6WAiFKMkVRUvBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDcyMDQ2NDRaFw0yNTExMDYyMDUxNDRaMDMxMTAvBgNV BAMTKERERjc1RDExQTg1RjUwMjM3NDdCMjBFOTczOTk0RUM1M0QyM0E2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheSl4pVjGEjMqhUG7bdlqWlAt TLLcy4mgC+TExVf6sIXE0RwEiriXRpurUx3mlBZ3EIF93i6VXJzV9glUwW9hwpqC sqEUQswA63Oc4xVbCTHknmukgv6VKQvn2ZonQxJf7xdeeIMOWX7+q//OKkG205bc 7lVPRvJ+Cts+S3xKEmU0RpH98pZxCyZnWrSJJWoN5IXBUx+Se4pwmt405reyn/8p zJ/JhMNjOxrymZj/fVR19Hw8I37zYU9ItsobmfzwYPfp6oFjngVA1E1ju6RUi/hx /pRyRwfsCVQCiNizSe64L2obip6Fz47rGm55KZfJnHQykzWZBF6PiDL5Mx23AgMB AAGjggN4MIIDdDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTd910RqF9QI3R7 IOlzmU7FPSOmjjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOU03 WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1ncmYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlN N1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAvRERG NzVEMTFBODVGNTAyMzc0N0IyMEU5NzM5OTRFQzUzRDIzQTY4RS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEH AQH/BF0wWzA8BAIAATA2AwQCLaUUAwQCLeO8AwQCg6FsAwQCg/+cAwQCiv+sAwQC qMQUAwQCqpZwAwQCqpbMAwQDv/EgMBsEAgACMBUDBQAoBBE0AwUAKAQ0PAMFACgE R8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAXxMA0GCSqGSIb3DQEBCwUAA4IB AQBY58TqUJAsJmKHBfrDdLaCDb5HGupofbWBBrR+ms0gsW8bXUNwGRMr7/gF8aan /qzEifaOquz+4k8wIH1I4lc7YWsiID903G2TeKLD1RTE/v4vrI9b/WfjDYNOmfch qE4Du1iz59ShgAzs5/i7iEhTCiAe8+npvpej3HVFsM3ZRCdU2BfBY0opCqDJ0z5b aJUiP3klF9JjGfadXHWqtPLClUjCdfBa0EvSI354tQjRjQM6PTAUDF6tFfQhbVfW Wlva+t8LgmLg5mJeODru8r8y7pNCknvLqOIsLNLKhnkyoDpE3csMKa8E8VoQHgvC pIaIXChJ7Azh5FN+6paPGO0D -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:13 2024 by rpki-client on console-fra.rpki-client.org