$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer File: F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer (raw, json) Hash identifier: TX3VuZ0NtQ9fxLWW+22j1GX01DeInJTLRQblK2yEelQ= Subject key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1EC432FBE4FEF9D7D360E0602C46AC2CA5C04851 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft caRepository: rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 23 Dec 2024 13:12:31 +0000 Certificate not after: Mon 22 Dec 2025 13:17:31 +0000 Subordinate resources: AS: 263608 IP: 170.244.28.0/22 IP: 177.136.96.0/21 IP: 2804:fdc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 02:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c4:32:fb:e4:fe:f9:d7:d3:60:e0:60:2c:46:ac:2c:a5:c0:48:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Dec 23 13:12:31 2024 GMT Not After : Dec 22 13:17:31 2025 GMT Subject: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1f:33:3b:f4:3f:f7:b7:e6:b6:03:05:41:b6: 33:f2:e5:c8:52:fa:1f:d3:cf:ae:e7:50:b5:65:be: 13:35:ca:d1:d0:07:78:92:f0:6c:d7:49:1d:4b:06: 87:ff:0b:d0:43:1d:f7:33:67:3b:d9:fd:4d:c8:13: e3:eb:1c:3b:b0:02:18:b8:84:11:18:39:7e:03:ee: 0a:94:5f:4f:11:aa:36:3e:eb:c6:17:ad:62:eb:7a: e8:c7:85:12:00:14:05:68:35:4f:e8:ad:5d:7d:28: 36:1d:ec:0a:15:15:f1:7d:75:4d:58:0c:5b:6e:f2: 00:c2:b1:3e:14:a8:21:48:8b:74:3d:b7:19:87:e8: c7:3c:96:89:40:c1:49:1f:65:d0:d0:b3:1f:94:bc: f3:2b:85:81:85:59:2a:72:d3:d1:0e:97:99:c6:e9: 50:ca:e7:61:c0:f7:5e:87:1b:a7:32:c6:9c:6a:69: bc:46:9e:5d:b7:1b:01:c0:eb:f9:df:4e:c2:5f:56: 53:3c:39:50:a8:da:c6:03:ae:ff:b9:da:31:94:61: 37:c3:05:f6:80:0e:53:41:cb:11:f2:84:37:21:6e: 6b:22:11:74:06:6b:1d:9d:87:0f:e0:20:58:79:53: 2b:8a:82:a4:92:9b:30:81:90:1c:f5:59:a7:63:8b: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.28.0/22 177.136.96.0/21 IPv6: 2804:fdc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263608 Signature Algorithm: sha256WithRSAEncryption 0b:e1:dd:48:15:8b:34:17:8f:21:62:cd:92:4a:81:d9:a3:fd: 23:a4:dd:53:67:f4:45:93:95:df:52:7d:9d:33:41:42:10:6e: 9e:63:ae:28:59:ea:45:0d:48:60:60:33:c6:89:c0:a6:bc:39: 23:46:17:53:f8:2b:b9:c4:1a:f7:c0:43:32:27:a7:51:41:8e: 8a:24:84:38:8a:ed:57:c0:55:d3:08:08:7b:59:76:24:75:42: 62:53:a8:ce:7d:a8:5f:23:0e:9d:97:39:4c:ab:47:fb:95:61: d7:2c:27:76:bf:59:3a:9d:23:71:29:87:3e:8b:77:64:31:7b: a7:15:92:b2:a6:3a:3e:bc:2d:8c:e2:a8:8e:49:e6:04:d5:cb: 94:8e:6e:b2:93:2c:26:f1:b9:49:09:4c:28:79:2a:4c:cb:75: e2:bd:8a:39:52:84:58:9f:44:37:42:53:db:6f:94:26:2d:72: bf:4c:46:cc:2c:ce:78:63:b4:19:37:81:c0:4b:e4:99:1a:2d: 89:37:42:aa:ad:61:40:81:aa:4b:b7:2f:7f:0f:d6:d9:5c:44: 47:38:c4:e4:35:bc:7e:71:89:c6:88:d1:48:ad:1c:50:9d:bb: c8:dd:71:24:3e:d9:39:f7:8d:30:15:ba:73:38:43:80:14:37: d4:e5:1c:96 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUHsQy++T++dfTYOBgLEasLKXASFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEyMjMxMzEyMzFaFw0yNTEyMjIxMzE3MzFaMDMxMTAvBgNV BAMTKEYxOUQ2NTVBQkZDQ0ZDOENCNTY2OTM1QjcxQUE3RDk0RDI5MDVFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnHzM79D/3t+a2AwVBtjPy5chS +h/Tz67nULVlvhM1ytHQB3iS8GzXSR1LBof/C9BDHfczZzvZ/U3IE+PrHDuwAhi4 hBEYOX4D7gqUX08RqjY+68YXrWLreujHhRIAFAVoNU/orV19KDYd7AoVFfF9dU1Y DFtu8gDCsT4UqCFIi3Q9txmH6Mc8lolAwUkfZdDQsx+UvPMrhYGFWSpy09EOl5nG 6VDK52HA916HG6cyxpxqabxGnl23GwHA6/nfTsJfVlM8OVCo2sYDrv+52jGUYTfD BfaADlNByxHyhDchbmsiEXQGax2dhw/gIFh5UyuKgqSSmzCBkBz1WadjizoNAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTxnWVav8z8jLVm k1txqn2U0pBeSDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWJM R0FiRnl3TkZKNTZCU0VDREdZMURjczhwTDZTNm55UlJuQXZLbUpWTGYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzli TEdBYkZ5d05GSjU2QlNFQ0RHWTFEY3M4cEw2UzZueVJSbkF2S21KVkxmLzAvRjE5 RDY1NUFCRkNDRkM4Q0I1NjY5MzVCNzFBQTdEOTREMjkwNUU0OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqvQcAwQDsYhgMA0EAgACMAcDBQAoBA/cMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFuDANBgkqhkiG9w0BAQsFAAOCAQEAC+HdSBWL NBePIWLNkkqB2aP9I6TdU2f0RZOV31J9nTNBQhBunmOuKFnqRQ1IYGAzxonAprw5 I0YXU/grucQa98BDMienUUGOiiSEOIrtV8BV0wgIe1l2JHVCYlOozn2oXyMOnZc5 TKtH+5Vh1ywndr9ZOp0jcSmHPot3ZDF7pxWSsqY6PrwtjOKojknmBNXLlI5uspMs JvG5SQlMKHkqTMt14r2KOVKEWJ9EN0JT22+UJi1yv0xGzCzOeGO0GTeBwEvkmRot iTdCqq1hQIGqS7cvfw/W2VxERzjE5DW8fnGJxojRSK0cUJ27yN1xJD7ZOfeNMBW6 czhDgBQ31OUclg== -----END CERTIFICATE-----Generated at Sat Apr 5 02:39:56 2025 by rpki-client