$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer File: E03CF531484EF901E008EB682C28C97D40536BB3.cer (raw, json) Hash identifier: x7vFkiVxvzm1HkeK0LD4LcJC8yqQGkOeThA17mXWxx8= Subject key identifier: E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5764650B88C955E31ECE339F8569F4039CD3D4B4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.mft caRepository: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 09 Aug 2024 20:22:23 +0000 Certificate not after: Fri 08 Aug 2025 20:27:23 +0000 Subordinate resources: AS: 268786 IP: 45.172.168.0/22 IP: 168.196.204.0/22 IP: 2804:5aa4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:64:65:0b:88:c9:55:e3:1e:ce:33:9f:85:69:f4:03:9c:d3:d4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 9 20:22:23 2024 GMT Not After : Aug 8 20:27:23 2025 GMT Subject: CN=E03CF531484EF901E008EB682C28C97D40536BB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:5a:fe:8e:cd:2e:36:4a:a3:75:a7:fe:0b: 53:88:f7:35:e4:c7:cc:59:22:d5:38:0b:16:4a:6b: 59:3a:bd:4e:3b:a8:1a:2e:c3:94:ea:15:cd:93:d0: a1:15:c8:44:ee:9c:00:74:5d:86:f2:36:cf:be:e9: af:e5:4f:c3:91:3e:68:f0:03:3b:8b:2b:7d:08:51: 4d:0a:90:b5:64:2c:2d:40:5a:08:c8:cb:0b:13:52: 2c:3a:bb:de:e3:d9:2e:aa:71:6a:22:ce:a1:4f:5b: ea:94:cd:4c:c9:3c:6c:a3:d2:fc:93:12:62:39:0c: e9:99:fa:52:fe:a8:70:62:17:34:b7:8b:25:51:98: 5a:18:41:b2:9c:ae:1e:6b:7c:ac:fc:59:c1:a6:0d: 9d:39:80:8c:50:33:c5:ac:7e:b0:f5:70:ad:8a:18: 8a:86:80:3c:88:3b:fb:c2:c4:72:3c:59:2b:43:e2: 13:d7:fc:30:15:10:cb:19:cc:e4:62:f1:75:ee:2b: bf:57:01:13:00:e7:ea:2c:5d:a2:eb:a5:5d:10:08: 24:da:d2:b9:e4:37:b5:a8:b1:ee:9e:be:2d:41:e1: 62:56:61:36:21:ab:5b:d8:c3:06:b9:4b:10:43:e7: 51:09:c6:cb:54:48:e0:4d:93:f1:fc:49:1c:7a:c5: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.172.168.0/22 168.196.204.0/22 IPv6: 2804:5aa4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268786 Signature Algorithm: sha256WithRSAEncryption cc:e9:f6:45:03:37:61:da:de:52:8b:29:cc:d6:00:e2:08:9a: 5f:f7:8c:6b:06:d8:e2:c4:d0:f8:a9:e3:f1:6c:5c:5b:cb:d4: ba:08:66:84:a1:b4:0e:4b:2b:4e:5e:dd:cf:de:e4:77:8e:84: 42:14:d7:34:bc:3a:16:18:22:b8:18:6f:a0:9f:79:3d:7f:e4: 65:c1:26:40:17:82:80:81:49:49:1b:80:6b:43:d1:1c:ae:7a: bc:30:e4:60:f0:26:ae:03:54:58:64:ca:59:d9:ed:51:f7:eb: 14:91:0a:33:58:01:12:cf:2e:b3:17:5b:5f:38:25:20:6c:a8: 26:dd:73:e8:24:e4:0c:d5:07:1c:85:e4:4f:46:a1:5d:21:65: 07:75:f0:0f:d7:a6:ee:94:ea:f9:a5:0b:00:66:6a:b2:1f:13: f3:43:96:b4:da:2e:c5:8c:d1:90:c6:ce:39:46:96:0b:14:83: 54:dc:6b:fa:c9:0f:2c:69:4d:ae:89:2f:da:d0:73:7d:39:6d: 19:01:9b:17:b0:62:ce:23:70:36:49:b1:92:8a:e2:94:ca:99: cf:10:b4:ee:28:a8:b0:c7:b8:49:1e:e8:9b:b4:96:6d:df:f2: b9:2d:7d:78:e5:d3:3c:8d:51:bd:96:ca:0d:a3:06:7e:d5:8f: de:9f:d7:70 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUV2RlC4jJVeMezjOfhWn0A5zT1LQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MDkyMDIyMjNaFw0yNTA4MDgyMDI3MjNaMDMxMTAvBgNV BAMTKEUwM0NGNTMxNDg0RUY5MDFFMDA4RUI2ODJDMjhDOTdENDA1MzZCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5lr+js0uNkqjdaf+C1OI9zXk x8xZItU4CxZKa1k6vU47qBouw5TqFc2T0KEVyETunAB0XYbyNs++6a/lT8ORPmjw AzuLK30IUU0KkLVkLC1AWgjIywsTUiw6u97j2S6qcWoizqFPW+qUzUzJPGyj0vyT EmI5DOmZ+lL+qHBiFzS3iyVRmFoYQbKcrh5rfKz8WcGmDZ05gIxQM8WsfrD1cK2K GIqGgDyIO/vCxHI8WStD4hPX/DAVEMsZzORi8XXuK79XARMA5+osXaLrpV0QCCTa 0rnkN7Wose6evi1B4WJWYTYhq1vYwwa5SxBD51EJxstUSOBNk/H8SRx6xaEJAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgPPUxSE75AeAI 62gsKMl9QFNrszAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHgz cXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3aDEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh4 M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzEvRTAz Q0Y1MzE0ODRFRjkwMUUwMDhFQjY4MkMyOEM5N0Q0MDUzNkJCMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLayoAwQCqMTMMA0EAgACMAcDBQAoBFqkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQZ8jANBgkqhkiG9w0BAQsFAAOCAQEAzOn2RQM3 YdreUospzNYA4giaX/eMawbY4sTQ+Knj8WxcW8vUughmhKG0DksrTl7dz97kd46E QhTXNLw6FhgiuBhvoJ95PX/kZcEmQBeCgIFJSRuAa0PRHK56vDDkYPAmrgNUWGTK WdntUffrFJEKM1gBEs8usxdbXzglIGyoJt1z6CTkDNUHHIXkT0ahXSFlB3XwD9em 7pTq+aULAGZqsh8T80OWtNouxYzRkMbOOUaWCxSDVNxr+skPLGlNrokv2tBzfTlt GQGbF7BiziNwNkmxkorilMqZzxC07iiosMe4SR7om7SWbd/yuS19eOXTPI1RvZbK DaMGftWP3p/XcA== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:00 2024 by rpki-client on console-fra.rpki-client.org