$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer File: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer (raw, json) Hash identifier: nb8Nsy5vyLRPcRNo0aBXgbdph1e6oxrVBc7q9UIfYG0= Subject key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7EE9B83E08B3F8BDDC4449564A8EEDF547FEDF72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft caRepository: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 30 Apr 2024 13:47:32 +0000 Certificate not after: Tue 29 Apr 2025 13:52:32 +0000 Subordinate resources: AS: 263495 IP: 170.233.76.0/22 IP: 191.243.48.0/22 IP: 2804:12bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e9:b8:3e:08:b3:f8:bd:dc:44:49:56:4a:8e:ed:f5:47:fe:df:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 30 13:47:32 2024 GMT Not After : Apr 29 13:52:32 2025 GMT Subject: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:06:cb:e3:a6:62:79:39:b7:c8:00:1c:70: 9e:c2:3f:69:d0:9c:0c:3f:bc:77:ba:2b:1a:5b:b0: d9:5b:52:9a:fd:f6:be:89:49:0c:a7:41:d6:70:a3: fc:cf:39:15:95:e0:df:75:03:30:c0:6c:44:31:0d: 99:d0:d7:24:0f:4e:08:dc:3e:38:52:8c:4f:45:d7: 3a:cb:e5:a2:60:c6:ee:05:dc:f9:c9:20:74:ae:1c: ac:7e:c5:03:0c:45:e1:ee:39:1e:7d:38:ea:46:93: 1f:12:f4:4f:da:5f:38:30:f1:62:89:1d:84:e9:aa: e4:42:1d:34:fd:89:4b:74:70:e0:8b:3c:1c:3f:19: 47:aa:e5:39:3d:e5:00:a6:14:21:5e:2c:d4:3d:a0: f3:a2:0b:4b:8b:1f:22:5c:3a:a5:c4:e1:c2:99:e6: 0e:91:cb:e1:7e:e6:c6:82:11:a4:e2:ac:0e:d7:fa: cb:c9:f4:bc:9c:22:49:ab:0e:52:e5:06:4b:8f:5f: 61:17:05:07:25:a3:5d:55:12:6f:cb:24:2e:fd:8f: 05:bb:2f:73:45:2f:f5:2a:76:af:21:73:14:47:1c: 9a:e9:57:dd:27:ae:f5:fa:14:54:51:e6:17:0c:16: db:5c:bb:3a:ef:84:cd:0b:43:f8:2e:14:07:b7:3f: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.233.76.0/22 191.243.48.0/22 IPv6: 2804:12bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263495 Signature Algorithm: sha256WithRSAEncryption b4:5c:1c:92:86:28:2c:39:cd:96:ec:06:09:ef:e8:42:d6:ec: ef:b3:98:ea:9a:a1:fd:8b:c6:1a:7c:0a:ef:e6:ff:58:a4:65: fd:ea:e8:36:79:84:6d:fb:dd:d6:14:5b:63:a5:53:c2:14:cd: 65:6a:4d:cc:fa:1b:82:e1:7e:a9:89:cc:dc:a1:71:3a:49:ef: fe:48:4d:5d:a7:62:68:ed:44:8a:3a:ac:46:d0:e8:22:4c:07: 97:de:86:22:2c:98:07:e4:37:ef:60:d1:b0:a4:52:67:cc:cc: c3:06:fc:36:f8:5a:cf:d8:a9:69:8d:52:71:98:51:d4:6e:56: f0:ff:e2:4c:f3:f1:cb:2e:58:21:23:8d:08:0c:7c:9c:1e:87: af:aa:8a:9b:99:82:fe:84:42:9c:82:4d:36:1f:c8:cb:76:94: 7f:80:81:4d:d6:31:e2:a8:9a:5b:d3:7a:46:66:36:a6:ff:5c: 9c:d8:10:d2:2b:8d:b8:16:a9:9d:cd:77:30:78:9e:10:84:e3: 08:bf:f7:a2:6a:7d:21:ff:54:4d:00:5c:2e:a8:93:a5:28:ea: b5:45:24:ae:2a:6f:db:c6:73:f6:ef:17:24:4f:a5:f4:4a:d2: d0:af:b3:b2:65:1a:33:d2:2d:68:36:71:ac:df:71:e4:9b:81: ab:9a:a3:98 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUfum4Pgiz+L3cRElWSo7t9Uf+33IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MzAxMzQ3MzJaFw0yNTA0MjkxMzUyMzJaMDMxMTAvBgNV BAMTKERFNEZDNTY4MDVDNzY2N0UxODAxODU0QjNDNzdBRENCNjRBNjNERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vwbL46ZieTm3yAAccJ7CP2nQ nAw/vHe6KxpbsNlbUpr99r6JSQynQdZwo/zPORWV4N91AzDAbEQxDZnQ1yQPTgjc PjhSjE9F1zrL5aJgxu4F3PnJIHSuHKx+xQMMReHuOR59OOpGkx8S9E/aXzgw8WKJ HYTpquRCHTT9iUt0cOCLPBw/GUeq5Tk95QCmFCFeLNQ9oPOiC0uLHyJcOqXE4cKZ 5g6Ry+F+5saCEaTirA7X+svJ9LycIkmrDlLlBkuPX2EXBQclo11VEm/LJC79jwW7 L3NFL/Uqdq8hcxRHHJrpV90nrvX6FFRR5hcMFttcuzrvhM0LQ/guFAe3P90TAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTeT8VoBcdmfhgB hUs8d63LZKY91zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ3Vp eUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2ZpU1kvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N1 aXlCWFdwUFVISnp6UFoxQkViU2s2WUMydXRITkFpUzVyRW9VbW9maVNZLzAvREU0 RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2NEE2M0RENy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqulMAwQCv/MwMA0EAgACMAcDBQAoBBK8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFRzANBgkqhkiG9w0BAQsFAAOCAQEAtFwckoYo LDnNluwGCe/oQtbs77OY6pqh/YvGGnwK7+b/WKRl/eroNnmEbfvd1hRbY6VTwhTN ZWpNzPobguF+qYnM3KFxOknv/khNXadiaO1EijqsRtDoIkwHl96GIiyYB+Q372DR sKRSZ8zMwwb8Nvhaz9ipaY1ScZhR1G5W8P/iTPPxyy5YISONCAx8nB6Hr6qKm5mC /oRCnIJNNh/Iy3aUf4CBTdYx4qiaW9N6RmY2pv9cnNgQ0iuNuBapnc13MHieEITj CL/3omp9If9UTQBcLqiTpSjqtUUkripv28Zz9u8XJE+l9ErS0K+zsmUaM9ItaDZx rN9x5JuBq5qjmA== -----END CERTIFICATE-----Generated at Fri Nov 22 22:11:19 2024 by rpki-client on console-ams.rpki-client.org