$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer File: E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer (raw, json) Hash identifier: /gyOILGHfxLE63xlpNq/l4VdK80fJToCrq8VY3oe0nE= Subject key identifier: E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 13A64EDE503B91197FE391194CD1B1BD3EA2150B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft caRepository: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 12 Aug 2024 16:52:46 +0000 Certificate not after: Mon 11 Aug 2025 16:57:46 +0000 Subordinate resources: AS: 263623 IP: 143.255.44.0/22 IP: 177.185.240.0/20 IP: 2804:102c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a6:4e:de:50:3b:91:19:7f:e3:91:19:4c:d1:b1:bd:3e:a2:15:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Aug 12 16:52:46 2024 GMT Not After : Aug 11 16:57:46 2025 GMT Subject: CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:75:2a:1d:34:98:db:cd:1d:32:77:dd:87: f6:2b:eb:fe:25:fc:50:c7:f7:cc:3f:62:2c:04:24: 83:f0:94:a7:b9:85:e4:0e:35:29:c7:78:bb:bf:da: 84:05:bf:af:cc:e4:d0:e5:43:5b:33:ae:b6:70:a1: ed:ed:6f:10:7d:f5:61:48:91:f2:cd:5f:7e:90:a6: 91:05:47:00:5d:53:19:1e:b2:f2:a5:5a:59:d8:d1: a3:a0:63:13:31:56:38:2c:5a:64:c0:71:16:92:3f: 14:ab:b9:3b:05:db:2f:44:5a:dc:01:25:d3:dd:62: e9:15:e6:f3:55:b6:88:71:bf:55:e3:1f:4e:92:a5: 35:1b:1e:6c:a7:9d:10:fa:73:aa:f3:2e:40:0d:8c: d8:27:6f:2a:b0:fb:00:61:69:d8:45:b2:df:39:3f: fc:e9:1b:23:d2:56:84:98:b5:26:70:2d:97:2e:27: 2e:4a:8d:35:cd:56:e2:44:7c:8e:8b:9a:81:39:f0: 24:80:69:2d:2e:2d:83:d4:a6:49:9b:d8:15:23:b3: 1c:62:75:ea:05:e6:de:91:fc:9e:88:51:c6:e6:3e: fc:62:e4:60:d6:2a:41:cf:da:f3:98:e9:23:91:66: 85:20:b1:b9:5a:c9:ee:5d:15:7b:e3:9b:6f:4a:13: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.255.44.0/22 177.185.240.0/20 IPv6: 2804:102c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263623 Signature Algorithm: sha256WithRSAEncryption 3b:28:6a:e8:7b:ac:c3:81:74:cf:e2:b8:63:dd:86:b9:22:0c: 1b:b4:54:45:b0:a8:72:7b:b8:ff:92:fb:a6:30:7b:ca:aa:15: b4:cf:a2:27:6a:96:f7:44:55:fc:4f:74:d3:f5:4b:92:b9:c2: a9:e3:19:b9:dc:19:84:cb:73:79:e9:25:fa:c1:b1:f0:e2:65: 76:01:24:87:e3:99:3e:13:7d:e0:69:c2:51:ab:93:1c:a3:db: 2c:c4:07:4f:2d:5c:f8:67:8c:2c:47:3e:61:19:a4:ab:5d:2f: 27:d5:0b:e8:41:fe:0b:e4:64:ce:0c:62:b4:35:1e:c8:36:96: 8d:37:a4:78:1c:a3:f2:7f:b4:10:1f:12:5f:67:8b:71:27:aa: 6e:02:0c:bb:ec:f3:64:d3:d9:74:6a:d6:d6:1c:e5:64:48:a2: ca:e0:97:6f:9e:0d:de:dc:26:b6:88:7a:97:0f:9e:39:54:6e: 85:92:75:cc:05:24:47:2a:ef:e6:af:28:09:6c:43:9c:9f:dc: ab:4a:38:ce:ad:fc:ab:75:12:52:f5:21:0d:ef:9d:89:ea:f7: 9b:3b:cc:78:18:30:c3:4b:7b:c1:20:24:8b:d3:8f:76:a9:94: 1f:e9:a2:e9:21:42:57:cb:f0:f6:16:1d:8c:ac:b1:71:d4:1b: 1c:3f:c0:07 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUE6ZO3lA7kRl/45EZTNGxvT6iFQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA4MTIxNjUyNDZaFw0yNTA4MTExNjU3NDZaMDMxMTAvBgNV BAMTKEUzOUM4QkE1RjNEMTIyN0Q4NjI1Q0U2RjAyRkVDQkZBNkUzQjgyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mXUqHTSY280dMnfdh/Yr6/4l /FDH98w/YiwEJIPwlKe5heQONSnHeLu/2oQFv6/M5NDlQ1szrrZwoe3tbxB99WFI kfLNX36QppEFRwBdUxkesvKlWlnY0aOgYxMxVjgsWmTAcRaSPxSruTsF2y9EWtwB JdPdYukV5vNVtohxv1XjH06SpTUbHmynnRD6c6rzLkANjNgnbyqw+wBhadhFst85 P/zpGyPSVoSYtSZwLZcuJy5KjTXNVuJEfI6LmoE58CSAaS0uLYPUpkmb2BUjsxxi deoF5t6R/J6IUcbmPvxi5GDWKkHP2vOY6SORZoUgsblaye5dFXvjm29KE1M3AgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTjnIul89EifYYl zm8C/sv6bjuCsTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0t0 SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdhTUgvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0t0 SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdhTUgvMC9FMzlD OEJBNUYzRDEyMjdEODYyNUNFNkYwMkZFQ0JGQTZFM0I4MkIxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKP/ywDBASxufAwDQQCAAIwBwMFACgEECwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAXHMA0GCSqGSIb3DQEBCwUAA4IBAQA7KGroe6zD gXTP4rhj3Ya5IgwbtFRFsKhye7j/kvumMHvKqhW0z6Inapb3RFX8T3TT9UuSucKp 4xm53BmEy3N56SX6wbHw4mV2ASSH45k+E33gacJRq5Mco9ssxAdPLVz4Z4wsRz5h GaSrXS8n1QvoQf4L5GTODGK0NR7INpaNN6R4HKPyf7QQHxJfZ4txJ6puAgy77PNk 09l0atbWHOVkSKLK4Jdvng3e3Ca2iHqXD545VG6FknXMBSRHKu/mrygJbEOcn9yr SjjOrfyrdRJS9SEN752J6vebO8x4GDDDS3vBICSL0492qZQf6aLpIUJXy/D2Fh2M rLFx1BscP8AH -----END CERTIFICATE-----Generated at Fri Nov 22 22:22:07 2024 by rpki-client on console-fra.rpki-client.org