$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer File: F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer (raw, json) Hash identifier: Q1x0ONdIiQsqQ1uCt70ntP/HWDkX74oQ9MwDHnWvfPY= Subject key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6B4DB9E83C2F9F6B2210646144564591EE5D0323 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 07 Nov 2024 20:42:52 +0000 Certificate not after: Thu 06 Nov 2025 20:47:52 +0000 Subordinate resources: AS: 28220 IP: 45.4.64.0/22 IP: 138.0.100.0/22 IP: 168.227.108.0/22 IP: 168.228.68.0/22 IP: 170.82.92.0/22 IP: 177.89.0.0/16 IP: 177.137.192.0/20 IP: 179.96.192.0/21 IP: 179.96.240.0/20 IP: 179.190.128.0/17 IP: 186.192.16.0/20 IP: 186.193.96.0/20 IP: 186.208.208.0/21 IP: 186.235.0.0/20 IP: 186.236.192.0/19 IP: 186.251.112.0/21 IP: 187.49.192.0/20 IP: 187.60.64.0/19 IP: 187.61.128.0/17 IP: 187.86.96.0/20 IP: 187.87.112.0/20 IP: 187.108.64.0/20 IP: 187.109.176.0/20 IP: 187.111.224.0/19 IP: 189.45.16.0/20 IP: 189.124.128.0/17 IP: 191.241.40.0/21 IP: 200.233.80.0/20 IP: 201.148.188.0/22 IP: 2804:54::/32 IP: 2804:2140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:b9:e8:3c:2f:9f:6b:22:10:64:61:44:56:45:91:ee:5d:03:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 7 20:42:52 2024 GMT Not After : Nov 6 20:47:52 2025 GMT Subject: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:4b:65:a4:26:52:9a:2d:35:b3:54:9f:6a: 85:43:48:d3:62:10:e7:cd:61:23:e5:4b:d0:e5:9f: 0a:06:7b:ca:66:7c:b2:0b:38:3e:a9:4b:c2:2e:b6: a8:30:d6:33:97:e1:b0:0c:f2:4f:b7:08:cb:17:2b: 70:53:76:3c:20:dc:5c:17:22:02:e7:b5:ce:cd:af: c9:37:6f:d7:21:07:9e:6e:4e:e8:c7:ca:b7:8b:d9: 4c:0d:fc:bf:b6:1e:2a:fe:a1:81:56:9e:e6:bf:45: 04:c1:31:b3:8e:7e:05:8b:bc:91:31:c1:10:59:77: 32:44:b6:96:0c:b5:97:cd:53:4a:92:9d:76:b8:93: 85:0c:af:b3:85:cd:3b:00:d5:a8:68:4f:e2:40:5e: ce:f4:bb:be:05:7a:c9:20:0e:aa:a8:ff:b1:75:57: 0c:72:3f:7c:84:c9:7a:34:20:a6:27:00:4b:18:cd: 7a:20:da:6d:f0:47:89:97:0b:30:70:de:cb:5e:a0: dd:25:16:10:c0:a3:a7:7e:e4:5c:2a:60:b6:9e:19: 3b:c7:b8:48:ce:58:af:45:78:ed:49:9d:12:46:d5: 1f:6d:18:c8:50:c7:b7:4c:c9:a4:3e:6c:cf:b6:e0: 89:7a:88:92:3f:ad:12:d5:e9:fa:1a:62:3d:3e:3f: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.64.0/22 138.0.100.0/22 168.227.108.0/22 168.228.68.0/22 170.82.92.0/22 177.89.0.0/16 177.137.192.0/20 179.96.192.0/21 179.96.240.0/20 179.190.128.0/17 186.192.16.0/20 186.193.96.0/20 186.208.208.0/21 186.235.0.0/20 186.236.192.0/19 186.251.112.0/21 187.49.192.0/20 187.60.64.0/19 187.61.128.0/17 187.86.96.0/20 187.87.112.0/20 187.108.64.0/20 187.109.176.0/20 187.111.224.0/19 189.45.16.0/20 189.124.128.0/17 191.241.40.0/21 200.233.80.0/20 201.148.188.0/22 IPv6: 2804:54::/32 2804:2140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28220 Signature Algorithm: sha256WithRSAEncryption a6:23:85:c6:ed:8a:15:bd:35:ae:ce:09:50:27:35:33:15:8e: c1:e5:57:c9:01:8f:80:66:17:3d:ef:ca:14:86:7b:c3:26:6a: 6c:a8:c9:ff:65:f4:c0:4c:3f:65:14:d9:38:a4:5d:25:9f:4a: 2d:b4:da:5f:cc:f4:e0:62:a7:c2:9a:e4:01:20:07:35:75:ad: 23:34:b5:b0:eb:04:12:13:75:8a:9e:46:3d:21:87:f9:9a:15: e0:6c:ff:5a:45:a1:b7:fd:35:5e:62:d9:ea:1d:a2:88:8d:7e: 74:33:c1:32:b0:cc:30:4b:c9:89:57:a2:b5:26:1c:47:b1:9c: 46:35:49:bb:91:e2:5a:ba:b3:16:15:29:df:3b:e5:11:3c:5d: 8a:af:4b:1b:98:2b:8a:f9:7b:42:0b:52:04:9e:1a:f5:0e:df: bc:c8:9a:30:b2:35:45:bf:30:6a:c5:cf:19:18:14:14:cc:05: cb:ef:73:a2:48:c2:48:84:61:08:10:b0:b6:1a:53:de:e0:45: 17:b7:b7:db:0c:8b:a0:5b:45:49:c6:c7:2c:b2:4a:aa:85:f5: 6a:b1:8e:e8:9d:85:ee:1f:92:a4:cc:de:f9:06:4b:a6:f1:22: f8:6b:e3:57:b3:f1:fc:51:4a:d1:0b:75:a8:a7:48:94:13:40: 23:c3:69:e5 -----BEGIN CERTIFICATE----- MIIG4jCCBcqgAwIBAgIUa0256Dwvn2siEGRhRFZFke5dAyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMDcyMDQyNTJaFw0yNTExMDYyMDQ3NTJaMDMxMTAvBgNV BAMTKEY2MkZBNTQwRTU5Qjg1NzAyMEM0QjIwOTU0MjMwRTBDMEFFOENBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcUtlpCZSmi01s1SfaoVDSNNi EOfNYSPlS9DlnwoGe8pmfLILOD6pS8Iutqgw1jOX4bAM8k+3CMsXK3BTdjwg3FwX IgLntc7Nr8k3b9chB55uTujHyreL2UwN/L+2Hir+oYFWnua/RQTBMbOOfgWLvJEx wRBZdzJEtpYMtZfNU0qSnXa4k4UMr7OFzTsA1ahoT+JAXs70u74FeskgDqqo/7F1 VwxyP3yEyXo0IKYnAEsYzXog2m3wR4mXCzBw3steoN0lFhDAo6d+5FwqYLaeGTvH uEjOWK9FeO1JnRJG1R9tGMhQx7dMyaQ+bM+24Il6iJI/rRLV6foaYj0+P2N3AgMB AAGjggPsMIID6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT2L6VA5ZuFcCDE sglUIw4MCujKDjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRH QVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk R0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAvRjYy RkE1NDBFNTlCODU3MDIwQzRCMjA5NTQyMzBFMEMwQUU4Q0EwRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHgBggrBgEFBQcB BwEB/wSB0DCBzTCBtAQCAAEwga0DBAItBEADBAKKAGQDBAKo42wDBAKo5EQDBAKq UlwDAwCxWQMEBLGJwAMEA7NgwAMEBLNg8AMEB7O+gAMEBLrAEAMEBLrBYAMEA7rQ 0AMEBLrrAAMEBbrswAMEA7r7cAMEBLsxwAMEBbs8QAMEB7s9gAMEBLtWYAMEBLtX cAMEBLtsQAMEBLttsAMEBbtv4AMEBL0tEAMEB718gAMEA7/xKAMEBMjpUAMEAsmU vDAUBAIAAjAOAwUAKAQAVAMFACgEIUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC bjwwDQYJKoZIhvcNAQELBQADggEBAKYjhcbtihW9Na7OCVAnNTMVjsHlV8kBj4Bm Fz3vyhSGe8Mmamyoyf9l9MBMP2UU2TikXSWfSi202l/M9OBip8Ka5AEgBzV1rSM0 tbDrBBITdYqeRj0hh/maFeBs/1pFobf9NV5i2eodooiNfnQzwTKwzDBLyYlXorUm HEexnEY1SbuR4lq6sxYVKd875RE8XYqvSxuYK4r5e0ILUgSeGvUO37zImjCyNUW/ MGrFzxkYFBTMBcvvc6JIwkiEYQgQsLYaU97gRRe3t9sMi6BbRUnGxyyySqqF9Wqx juidhe4fkqTM3vkGS6bxIvhr41ez8fxRStELdainSJQTQCPDaeU= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:11 2024 by rpki-client on console-fra.rpki-client.org