$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer File: DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer (raw, json) Hash identifier: IxT+pf3iwNShRdD7FoeAzOnDa67oUW0wwWdydQdk0JE= Subject key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 31754C8B3CDCC3D1FB425E596DB360815F898B51 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft caRepository: rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 23:03:02 +0000 Certificate not after: Wed 02 Apr 2025 23:08:02 +0000 Subordinate resources: AS: 262798 IP: 177.129.164.0/22 IP: 186.236.48.0/20 IP: 2804:240::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:75:4c:8b:3c:dc:c3:d1:fb:42:5e:59:6d:b3:60:81:5f:89:8b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 23:03:02 2024 GMT Not After : Apr 2 23:08:02 2025 GMT Subject: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:dd:49:e4:6b:69:9a:4d:70:2e:2b:02:c2: 2c:80:b4:11:18:d4:ba:f8:e3:1c:71:5c:7a:af:0b: c7:11:a6:c4:3c:93:07:e1:f2:19:88:ea:3b:f7:1a: 7f:50:f5:cb:d1:5c:4e:85:5b:21:b0:02:c4:25:c4: 79:7a:24:20:e1:3c:4c:6e:24:7c:8f:22:27:a5:91: 6d:83:9d:9b:9d:e5:17:e9:0a:7d:6e:b1:12:83:7d: 33:84:25:58:da:75:e3:d2:ab:a5:b7:00:84:0b:aa: ef:ac:c1:65:29:a2:84:75:31:5c:47:30:a7:65:e8: 63:1b:2d:a2:d8:b3:4f:ca:55:c6:cd:0d:be:47:6a: a9:66:fd:8c:e1:e5:b4:ab:ef:5d:10:ac:76:5e:94: 44:54:9f:4a:86:b0:2e:a5:43:7a:f3:68:da:af:cf: 7c:2e:fc:3e:f7:8d:43:70:72:5c:27:83:0c:f6:52: d5:9a:ad:f6:e0:e5:75:df:f8:22:a1:96:95:41:0c: 97:3a:13:45:62:c1:9c:5a:1d:da:4f:65:12:97:a4: 00:a5:4b:7e:ec:c1:e0:85:b9:e6:07:9e:df:5f:b6: 5a:4c:14:07:61:ac:ee:36:f4:d9:d1:11:c4:ad:21: 54:8a:37:4b:e9:bd:52:9e:c0:b9:8c:50:0e:4a:2f: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.129.164.0/22 186.236.48.0/20 IPv6: 2804:240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262798 Signature Algorithm: sha256WithRSAEncryption 67:4a:32:8c:58:35:1d:e8:6c:ab:b1:0d:9f:14:46:26:5d:0e: aa:78:6d:d8:06:0d:03:75:17:be:7e:f9:24:18:05:a4:f5:95: 6b:34:83:32:03:a4:9c:cd:92:a2:24:03:f4:30:0a:2a:09:53: 0a:69:c0:5e:54:17:fc:46:5f:b9:cc:93:61:1f:eb:29:7f:c8: 42:2b:d1:0e:2a:29:11:62:d3:1c:e3:f6:5d:4c:2c:e2:1d:06: 8d:f1:81:cc:cf:9c:21:4c:6d:b7:94:a2:72:20:63:1e:96:9d: ee:4b:e5:2e:54:fc:26:2d:b2:49:a7:f4:b2:84:20:46:e4:7f: ec:21:92:45:99:18:94:24:d9:45:4e:1d:bf:1f:b3:77:1d:09: 57:73:e1:9d:b1:a7:93:f4:74:0e:9a:63:25:d0:8e:cd:b2:e8: 03:9f:97:85:db:ee:9e:dd:f2:a9:99:05:7b:04:4a:0f:e2:b4: 45:d9:11:c7:60:79:0f:dc:74:ae:ba:17:f9:fa:d2:18:3f:6b: 26:eb:43:12:fc:a5:14:d5:3b:d4:a6:c4:00:75:59:8d:71:cc: 51:19:1a:5e:25:98:0d:67:ba:5c:83:13:32:75:4d:f2:81:39: 9e:cc:5f:a2:56:b7:0b:e7:cd:11:ca:54:63:44:2b:0f:80:9f: 81:e9:68:be -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUMXVMizzcw9H7Ql5ZbbNggV+Ji1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMzAzMDJaFw0yNTA0MDIyMzA4MDJaMDMxMTAvBgNV BAMTKERGODRBNTVBREQyQTM0QkIyMjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4N1J5Gtpmk1wLisCwiyAtBEY 1Lr44xxxXHqvC8cRpsQ8kwfh8hmI6jv3Gn9Q9cvRXE6FWyGwAsQlxHl6JCDhPExu JHyPIielkW2DnZud5RfpCn1usRKDfTOEJVjadePSq6W3AIQLqu+swWUpooR1MVxH MKdl6GMbLaLYs0/KVcbNDb5Haqlm/Yzh5bSr710QrHZelERUn0qGsC6lQ3rzaNqv z3wu/D73jUNwclwngwz2UtWarfbg5XXf+CKhlpVBDJc6E0ViwZxaHdpPZRKXpACl S37sweCFueYHnt9ftlpMFAdhrO429NnREcStIVSKN0vpvVKewLmMUA5KL57XAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTfhKVa3So0uyKS FgZuFaursNf/ijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVJF VHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2VvOG0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlS RVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEvREY4 NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJCMEQ3RkY4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCsYGkAwQEuuwwMA0EAgACMAcDBQAoBAJAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQCjjANBgkqhkiG9w0BAQsFAAOCAQEAZ0oyjFg1 Hehsq7ENnxRGJl0Oqnht2AYNA3UXvn75JBgFpPWVazSDMgOknM2SoiQD9DAKKglT CmnAXlQX/EZfucyTYR/rKX/IQivRDiopEWLTHOP2XUws4h0GjfGBzM+cIUxtt5Si ciBjHpad7kvlLlT8Ji2ySaf0soQgRuR/7CGSRZkYlCTZRU4dvx+zdx0JV3PhnbGn k/R0DppjJdCOzbLoA5+Xhdvunt3yqZkFewRKD+K0RdkRx2B5D9x0rroX+frSGD9r JutDEvylFNU71KbEAHVZjXHMURkaXiWYDWe6XIMTMnVN8oE5nsxfola3C+fNEcpU Y0QrD4Cfgelovg== -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:38 2024 by rpki-client on console-ams.rpki-client.org