$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer File: FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer (raw, json) Hash identifier: 7Q550Wis+Tze6p+hRhjYDk7DZO7LzIBOC/lwcxs24bc= Subject key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 51BE62BA329C5FB5ACEE584860B27D7C3C2A9DEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft caRepository: rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:28:08 +0000 Certificate not after: Wed 02 Apr 2025 18:33:08 +0000 Subordinate resources: AS: 262891 IP: 177.20.184.0/21 IP: 177.23.64.0/21 IP: 191.253.72.0/21 IP: 2804:c50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 20:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:be:62:ba:32:9c:5f:b5:ac:ee:58:48:60:b2:7d:7c:3c:2a:9d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:28:08 2024 GMT Not After : Apr 2 18:33:08 2025 GMT Subject: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:72:c0:d5:a9:c1:d7:90:74:d0:90:4d:dd: 7a:76:da:dd:25:09:38:49:50:17:b2:25:59:6b:0f: 4d:6c:9b:7d:06:a9:12:06:48:84:de:57:c8:99:d7: de:1b:ce:1d:75:f2:ee:64:fd:ee:7a:d8:d7:72:70: 56:6a:b5:21:c4:98:8c:e1:c7:73:e4:a2:82:87:89: 25:21:83:47:0a:51:99:e1:c3:a8:4f:7a:ae:c3:a3: e9:94:45:b0:5f:4d:e9:54:bc:03:8e:f2:1e:84:26: ac:52:a3:4a:8a:47:d0:71:a8:49:61:a6:aa:7d:1d: 86:12:83:41:a8:ec:63:a2:a6:e9:94:4b:fd:ea:68: 61:b9:43:93:6a:d0:13:a8:ec:05:14:1a:c8:29:88: bb:69:b6:33:f4:94:dc:9d:29:77:ae:73:76:fc:f8: 9e:22:5b:ee:76:72:f6:ef:fe:95:dd:38:0c:46:a9: 29:78:2f:14:4f:00:60:98:dc:2e:f3:c1:74:59:7a: 46:49:f4:72:f3:3a:d1:7a:47:f9:c1:2c:23:8d:be: 08:13:a2:a3:e2:17:6d:65:39:2f:b1:50:07:9a:af: c6:33:f5:91:3b:6d:6d:da:bd:35:e3:b1:ec:57:24: a5:54:7d:37:6e:ab:46:90:ef:3d:9d:c0:0a:6a:fd: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.20.184.0/21 177.23.64.0/21 191.253.72.0/21 IPv6: 2804:c50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262891 Signature Algorithm: sha256WithRSAEncryption be:21:0b:61:06:40:79:2b:4e:85:5b:79:c4:81:0d:6f:6d:8d: 4b:28:58:f8:c9:81:dc:93:6d:81:b7:0e:56:05:06:b1:b5:c0: b3:68:31:4d:73:9d:71:20:8d:16:ac:5e:5a:0b:d4:f1:e4:53: b5:2e:d8:6b:08:a2:9c:17:15:d7:14:2c:bb:de:c6:08:b0:8e: 3d:45:0d:31:97:fb:83:c5:5d:3c:0b:89:f6:3c:e3:16:85:12: 2e:a3:9b:dd:de:2d:37:42:86:68:a3:d1:58:83:14:dd:a5:a1: ec:10:bf:f2:67:41:7c:83:65:9b:9a:72:3d:09:a7:65:93:32: 7d:a3:68:f8:47:e3:14:e1:75:fe:ef:13:4a:6e:dd:8d:a6:3a: 5a:8d:44:08:9d:5f:17:7c:00:23:c2:1e:1e:56:b1:ff:fd:04: 0f:97:b0:e0:61:be:4b:77:3a:9a:fe:9e:bc:37:00:18:9a:35: 06:29:04:52:d1:bf:b2:b9:4c:fb:66:1a:6f:92:3f:d5:39:71: 1c:41:3b:6c:b4:26:ab:d4:a6:12:b3:44:e2:8a:8b:c3:5f:32: 72:96:4a:c2:00:0c:d4:68:06:aa:c0:11:73:05:b9:db:76:70: 1d:43:4e:43:7e:78:b4:0d:9e:0a:72:2d:3e:08:d6:77:ea:13: be:63:6f:60 -----BEGIN CERTIFICATE----- MIIGOzCCBSOgAwIBAgIUUb5iujKcX7Ws7lhIYLJ9fDwqneswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI4MDhaFw0yNTA0MDIxODMzMDhaMDMxMTAvBgNV BAMTKEZBMTU4NUU0MkU3MzhFRTU5NkRCMkYyQjk3MENDM0NCNzQzQkQ4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChN3LA1anB15B00JBN3Xp22t0l CThJUBeyJVlrD01sm30GqRIGSITeV8iZ194bzh118u5k/e562NdycFZqtSHEmIzh x3PkooKHiSUhg0cKUZnhw6hPeq7Do+mURbBfTelUvAOO8h6EJqxSo0qKR9BxqElh pqp9HYYSg0Go7GOipumUS/3qaGG5Q5Nq0BOo7AUUGsgpiLtptjP0lNydKXeuc3b8 +J4iW+52cvbv/pXdOAxGqSl4LxRPAGCY3C7zwXRZekZJ9HLzOtF6R/nBLCONvggT oqPiF21lOS+xUAear8Yz9ZE7bW3avTXjsexXJKVUfTduq0aQ7z2dwApq/XkHAgMB AAGjggNFMIIDQTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6FYXkLnOO5Zbb LyuXDMPLdDvY/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWZj VmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQYWQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWZj VmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQYWQvMS9GQTE1 ODVFNDJFNzM4RUU1OTZEQjJGMkI5NzBDQzNDQjc0M0JEOEZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcB Af8EKzApMBgEAgABMBIDBAOxFLgDBAOxF0ADBAO//UgwDQQCAAIwBwMFACgEDFAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBALrMA0GCSqGSIb3DQEBCwUAA4IBAQC+ IQthBkB5K06FW3nEgQ1vbY1LKFj4yYHck22Btw5WBQaxtcCzaDFNc51xII0WrF5a C9Tx5FO1LthrCKKcFxXXFCy73sYIsI49RQ0xl/uDxV08C4n2POMWhRIuo5vd3i03 QoZoo9FYgxTdpaHsEL/yZ0F8g2WbmnI9CadlkzJ9o2j4R+MU4XX+7xNKbt2Npjpa jUQInV8XfAAjwh4eVrH//QQPl7DgYb5Ldzqa/p68NwAYmjUGKQRS0b+yuUz7Zhpv kj/VOXEcQTtstCar1KYSs0TiiovDXzJylkrCAAzUaAaqwBFzBbnbdnAdQ05Dfni0 DZ4Kci0+CNZ36hO+Y29g -----END CERTIFICATE-----Generated at Sat Sep 28 19:15:19 2024 by rpki-client on console-ams.rpki-client.org