$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer File: F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer (raw, json) Hash identifier: 3xLlGPMWBfJ95TXi5DlQnsCjYDiwsYWuPPY2OD+AyRQ= Subject key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5653819BE8DE7E0D4D54BE56602EAE47952DDE5D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft caRepository: rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:27:01 +0000 Certificate not after: Wed 02 Apr 2025 18:32:01 +0000 Subordinate resources: AS: 266211 IP: 45.229.164.0/22 IP: 192.144.100.0/22 IP: 2804:3c70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:53:81:9b:e8:de:7e:0d:4d:54:be:56:60:2e:ae:47:95:2d:de:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:27:01 2024 GMT Not After : Apr 2 18:32:01 2025 GMT Subject: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:4b:71:47:2e:42:36:5e:37:2f:58:1b:72: 6c:9f:11:f2:e1:18:31:26:34:08:c4:14:54:b6:d1: 25:01:eb:44:62:f2:b1:e6:e2:ae:2c:8d:aa:10:0a: aa:40:06:87:55:cc:3e:3f:fa:48:da:7c:f2:a4:45: f9:c7:77:2d:13:18:ad:8c:6f:69:a2:78:48:87:d0: 2a:6f:46:1c:ce:63:b1:76:02:3d:cb:cf:50:d8:88: 34:2e:08:45:5c:1d:90:03:d9:c2:60:38:be:f0:64: c0:31:f7:8e:39:d4:5c:d6:29:6d:f4:60:3a:2e:95: 5a:a5:5f:98:d8:8d:2e:41:c0:c6:8f:14:0c:8c:fb: 50:4f:6e:c4:51:da:1a:f3:64:a7:58:59:6d:db:32: d9:32:03:85:44:f5:b1:54:9b:7c:d6:96:19:9d:56: 63:76:84:6a:fd:d5:6b:44:3e:5d:a3:e9:ea:7b:04: d2:bc:ec:35:3f:e9:8f:0e:4d:23:29:42:d9:6f:f0: de:cf:ed:cf:a4:fa:e4:15:92:3e:c5:f1:c2:57:1b: 10:8d:e4:d0:40:c0:93:d4:17:ab:63:de:ab:6f:77: b2:01:42:8e:a0:21:b1:04:7e:22:cd:a7:ff:6d:c8: 74:ee:eb:76:b8:06:cf:5a:86:8d:39:f0:d7:8d:e3: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.229.164.0/22 192.144.100.0/22 IPv6: 2804:3c70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266211 Signature Algorithm: sha256WithRSAEncryption 1b:96:2c:fc:55:be:fe:a8:9b:8a:d1:87:21:e8:72:ea:b1:73: 2d:ca:8e:86:45:ea:63:61:d3:d0:5a:be:57:5d:9b:4a:37:7d: 75:9c:81:8d:4b:fb:cb:63:8c:c6:5b:0d:8a:07:a9:3a:33:1b: d7:90:61:f7:1d:20:75:88:f3:43:2b:d3:1e:cc:4e:d7:bf:11: d2:29:ed:79:6a:61:67:8b:c5:82:94:da:93:53:05:7c:a2:52: bf:c1:40:33:92:c3:33:82:b3:30:5c:5d:bb:69:fb:86:66:0e: a8:56:98:b9:a9:ae:b1:d8:cc:17:8e:aa:f9:d2:30:2c:c4:8d: 22:55:7a:6b:57:0d:b6:45:f0:a0:bc:99:73:76:cd:46:39:6e: 9b:1d:6b:c3:b8:0a:6d:6f:1d:8e:6f:f1:c0:b2:73:bd:86:d4: 33:8a:de:d0:87:cb:9a:3c:fa:f4:b5:ce:1f:25:a2:5e:fb:0e: ee:83:a9:6f:66:ba:4f:33:7a:4f:db:e9:0b:7b:a4:aa:5d:30: 69:f1:b0:ec:5a:d7:9d:29:fc:73:00:80:75:99:76:8b:38:75: c2:ff:bb:28:50:b8:60:7a:7c:1d:fb:25:7f:67:3b:83:5b:70: 55:6a:22:30:97:14:e4:38:35:35:4e:c2:dc:c9:dd:a8:60:20: 9d:ec:79:fe -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUVlOBm+jefg1NVL5WYC6uR5Ut3l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI3MDFaFw0yNTA0MDIxODMyMDFaMDMxMTAvBgNV BAMTKEY1QjNDQzY5NjNGMjkxRDExRjAxOTNCRDI3RkM0RTgzRDE0NTkyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYktxRy5CNl43L1gbcmyfEfLh GDEmNAjEFFS20SUB60Ri8rHm4q4sjaoQCqpABodVzD4/+kjafPKkRfnHdy0TGK2M b2mieEiH0CpvRhzOY7F2Aj3Lz1DYiDQuCEVcHZAD2cJgOL7wZMAx94451FzWKW30 YDoulVqlX5jYjS5BwMaPFAyM+1BPbsRR2hrzZKdYWW3bMtkyA4VE9bFUm3zWlhmd VmN2hGr91WtEPl2j6ep7BNK87DU/6Y8OTSMpQtlv8N7P7c+k+uQVkj7F8cJXGxCN 5NBAwJPUF6tj3qtvd7IBQo6gIbEEfiLNp/9tyHTu63a4Bs9aho058NeN48vrAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1s8xpY/KR0R8B k70n/E6D0UWSuTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVZH SHYzZ2ZSeUJycnFzRllIWldrZW5IajZZcG13VzJaY1VZU1NkY1U5eHcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVZH SHYzZ2ZSeUJycnFzRllIWldrZW5IajZZcG13VzJaY1VZU1NkY1U5eHcvMS9GNUIz Q0M2OTYzRjI5MUQxMUYwMTkzQkQyN0ZDNEU4M0QxNDU5MkI5Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAIt5aQDBALAkGQwDQQCAAIwBwMFACgEPHAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBA/jMA0GCSqGSIb3DQEBCwUAA4IBAQAbliz8Vb7+ qJuK0Ych6HLqsXMtyo6GRepjYdPQWr5XXZtKN311nIGNS/vLY4zGWw2KB6k6MxvX kGH3HSB1iPNDK9MezE7XvxHSKe15amFni8WClNqTUwV8olK/wUAzksMzgrMwXF27 afuGZg6oVpi5qa6x2MwXjqr50jAsxI0iVXprVw22RfCgvJlzds1GOW6bHWvDuApt bx2Ob/HAsnO9htQzit7Qh8uaPPr0tc4fJaJe+w7ug6lvZrpPM3pP2+kLe6SqXTBp 8bDsWtedKfxzAIB1mXaLOHXC/7soULhgenwd+yV/ZzuDW3BVaiIwlxTkODU1TsLc yd2oYCCd7Hn+ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:11 2024 by rpki-client on console-fra.rpki-client.org