$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F74C2D958B550F7D08449AE576084BD914E5F64F.cer File: F74C2D958B550F7D08449AE576084BD914E5F64F.cer (raw, json) Hash identifier: 2Mdw9wyezeOAuMiMmLDDtNj38Brhfl+izoRe7ciZrcQ= Subject key identifier: F7:4C:2D:95:8B:55:0F:7D:08:44:9A:E5:76:08:4B:D9:14:E5:F6:4F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2F7954C7980E054AD9B12A73D08A90938EE5BDFD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.mft caRepository: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 22 Oct 2024 17:22:16 +0000 Certificate not after: Tue 21 Oct 2025 17:27:16 +0000 Subordinate resources: AS: 28212 AS: 52892 AS: 268218 IP: 45.171.148.0/22 IP: 45.235.236.0/22 IP: 131.221.12.0/22 IP: 138.185.232.0/22 IP: 170.78.140.0/22 IP: 177.22.80.0/20 IP: 177.72.232.0/21 IP: 181.191.16.0/22 IP: 181.232.152.0/22 IP: 187.63.16.0/20 IP: 189.113.96.0/20 IP: 2804:1354::/32 IP: 2804:32d8::/32 IP: 2804:4dc4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:79:54:c7:98:0e:05:4a:d9:b1:2a:73:d0:8a:90:93:8e:e5:bd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 22 17:22:16 2024 GMT Not After : Oct 21 17:27:16 2025 GMT Subject: CN=F74C2D958B550F7D08449AE576084BD914E5F64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:1c:c7:2d:6f:bf:e1:5f:06:31:1e:91:f0: 12:de:c7:3f:6e:ca:ed:72:20:a0:1f:e6:92:7e:d2: 7b:7e:b6:cc:57:fb:17:38:b0:2c:86:0e:ff:08:fd: fa:60:c4:2a:0b:27:96:c7:85:0a:97:a9:59:4f:0a: 95:69:af:a4:71:21:21:90:d9:4d:23:df:57:49:b7: 21:2d:7d:aa:3f:72:c4:97:fc:21:19:a8:a1:c4:db: 26:87:1e:95:84:f8:60:7f:41:a7:8c:5d:91:9f:ab: 5f:ee:9f:4d:40:b1:3c:44:1a:af:ed:ad:a7:ae:f9: b1:18:4b:3b:6f:13:22:bc:c7:77:ce:ec:7a:2c:d9: d5:3e:e0:55:23:ad:2c:33:94:25:71:8e:9b:be:94: 41:b3:87:ee:81:35:d8:ed:45:d7:1c:0d:e0:99:14: ca:da:ad:f3:d8:e3:b4:46:3c:a1:a8:c0:b8:da:d1: 93:c0:fd:84:f9:12:12:99:e6:cc:81:4b:0d:44:00: 21:eb:3c:2c:13:03:fe:d4:d9:d4:ad:99:d0:44:43: a6:ac:fd:f8:a0:27:18:9d:12:a9:9f:6f:6f:88:bb: a9:52:eb:56:e5:9c:be:39:cd:98:11:dd:f0:49:5a: 05:20:70:7d:e2:74:eb:89:2f:f2:8f:0f:9e:7d:92: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:4C:2D:95:8B:55:0F:7D:08:44:9A:E5:76:08:4B:D9:14:E5:F6:4F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/0/F74C2D958B550F7D08449AE576084BD914E5F64F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.148.0/22 45.235.236.0/22 131.221.12.0/22 138.185.232.0/22 170.78.140.0/22 177.22.80.0/20 177.72.232.0/21 181.191.16.0/22 181.232.152.0/22 187.63.16.0/20 189.113.96.0/20 IPv6: 2804:1354::/32 2804:32d8::/32 2804:4dc4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28212 52892 268218 Signature Algorithm: sha256WithRSAEncryption 49:d1:f5:19:12:9e:56:99:cb:4f:61:ef:f2:c4:51:7e:5a:dd: 49:61:e3:bd:63:e7:ea:7e:f7:aa:de:44:ca:58:3b:e6:70:f7: 1c:f4:10:6f:6b:a3:95:2c:dd:8c:2a:a2:98:3d:c0:1f:24:cc: 7a:de:81:eb:02:82:2d:2a:2c:78:2f:a9:f1:dc:be:cc:05:a9: 6f:d6:0f:b1:ea:20:f3:9d:a2:71:a5:c0:5f:cd:c2:dd:98:d5: 11:61:de:b2:c4:9a:6e:0a:72:5d:8a:5e:e9:e5:9a:55:c7:f5: 24:88:73:94:2f:ba:ff:02:87:e6:a2:fb:de:64:a3:46:0d:56: a0:e6:c2:18:2f:f6:28:d6:63:d6:4f:66:59:bf:3a:1d:60:6c: a4:8b:e4:c8:b4:61:84:44:d3:bc:54:e9:81:f1:79:d2:ba:1e: c1:ad:c4:c3:3d:11:53:62:ef:bb:46:70:84:41:d9:d7:f4:54: f7:7e:24:5a:da:29:be:91:ab:58:a7:60:af:df:68:f2:f9:21: 72:e5:58:be:84:a2:f5:3b:51:c1:8d:37:9c:0e:56:dc:e2:a7: 9f:99:85:24:32:67:68:66:c4:cc:23:19:2f:b5:0c:e7:18:80: 53:9b:49:36:1f:e0:61:75:2a:b0:33:31:6c:51:6d:1c:b0:f3: 8e:44:08:b2 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUL3lUx5gOBUrZsSpz0IqQk47lvf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjIxNzIyMTZaFw0yNTEwMjExNzI3MTZaMDMxMTAvBgNV BAMTKEY3NEMyRDk1OEI1NTBGN0QwODQ0OUFFNTc2MDg0QkQ5MTRFNUY2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQhzHLW+/4V8GMR6R8BLexz9u yu1yIKAf5pJ+0nt+tsxX+xc4sCyGDv8I/fpgxCoLJ5bHhQqXqVlPCpVpr6RxISGQ 2U0j31dJtyEtfao/csSX/CEZqKHE2yaHHpWE+GB/QaeMXZGfq1/un01AsTxEGq/t raeu+bEYSztvEyK8x3fO7Hos2dU+4FUjrSwzlCVxjpu+lEGzh+6BNdjtRdccDeCZ FMrarfPY47RGPKGowLja0ZPA/YT5EhKZ5syBSw1EACHrPCwTA/7U2dStmdBEQ6as /figJxidEqmfb2+Iu6lS61blnL45zZgR3fBJWgUgcH3idOuJL/KPD559koe5AgMB AAGjggONMIIDiTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3TC2Vi1UPfQhE muV2CEvZFOX2TzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0Jw V2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lWa1gvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NC cFdqRVhpUERTTE14WGVFS3RCMjNNVHRlaXFzTnVBTFBZSnc1eldZVmtYLzAvRjc0 QzJEOTU4QjU1MEY3RDA4NDQ5QUU1NzYwODRCRDkxNEU1RjY0Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEH AQH/BGkwZzBIBAIAATBCAwQCLauUAwQCLevsAwQCg90MAwQCirnoAwQCqk6MAwQE sRZQAwQDsUjoAwQCtb8QAwQCteiYAwQEuz8QAwQEvXFgMBsEAgACMBUDBQAoBBNU AwUAKAQy2AMFACgETcQwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICbjQCAwDOnAID BBe6MA0GCSqGSIb3DQEBCwUAA4IBAQBJ0fUZEp5WmctPYe/yxFF+Wt1JYeO9Y+fq fveq3kTKWDvmcPcc9BBva6OVLN2MKqKYPcAfJMx63oHrAoItKix4L6nx3L7MBalv 1g+x6iDznaJxpcBfzcLdmNURYd6yxJpuCnJdil7p5ZpVx/UkiHOUL7r/Aofmovve ZKNGDVag5sIYL/Yo1mPWT2ZZvzodYGyki+TItGGERNO8VOmB8XnSuh7BrcTDPRFT Yu+7RnCEQdnX9FT3fiRa2im+katYp2Cv32jy+SFy5Vi+hKL1O1HBjTecDlbc4qef mYUkMmdoZsTMIxkvtQznGIBTm0k2H+BhdSqwMzFsUW0csPOORAiy -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:06 2024 by rpki-client on console-fra.rpki-client.org