$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer File: FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.cer (raw, json) Hash identifier: Qx1RhWD80eLs3K/+P80RQrR0ZzG3hfV2xo0DsbDCr/Q= Subject key identifier: FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B3F19BE65783D45B8CABD1D39320296C6BC9BDB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.mft caRepository: rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 19 Nov 2024 12:38:41 +0000 Certificate not after: Tue 18 Nov 2025 12:43:41 +0000 Subordinate resources: AS: 268876 IP: 45.171.122.0/23 IP: 2804:5be8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3f:19:be:65:78:3d:45:b8:ca:bd:1d:39:32:02:96:c6:bc:9b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 19 12:38:41 2024 GMT Not After : Nov 18 12:43:41 2025 GMT Subject: CN=FDD4E609728A79B5F481EFFB6BE30EADF7E69F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:71:b7:72:06:69:a0:06:aa:35:72:35:d4: 61:d3:95:e7:2f:13:3a:6a:0a:f0:e8:89:bd:c2:db: 0b:ee:74:fb:e0:d8:07:a9:b0:88:d1:e1:34:c4:39: 8f:e9:b7:71:d7:81:eb:b9:f2:27:76:4c:11:bc:7f: 27:e1:da:70:64:fa:83:64:9c:7d:d8:15:5c:1e:db: 4c:5f:3e:88:08:3c:d0:03:76:5d:7e:cc:9a:90:22: 50:62:bd:e2:d8:22:33:91:c3:2d:48:a9:28:23:af: d9:32:6e:17:02:f4:e7:05:39:e1:80:64:1d:69:ca: 89:ed:5c:8f:2b:42:3c:fd:d0:05:05:0f:ab:b0:f8: 91:a2:5c:8c:ec:dd:b1:f3:b0:9f:1a:c5:9a:8b:42: 35:7a:c3:24:aa:b6:23:74:13:37:f6:28:ff:34:4c: 01:aa:f2:bd:76:a1:4c:0d:21:2b:6f:30:c2:dc:86: 4e:20:cf:13:50:46:af:ba:82:08:68:4c:b8:36:81: a1:30:59:08:55:88:e4:b7:bd:13:f4:fa:de:70:c9: 02:83:2b:ed:70:e0:86:36:2c:cb:d8:ac:2e:e4:1f: 43:e2:69:d0:cd:b7:d4:ba:18:2f:f6:65:ed:75:c6: fc:9e:a9:f2:d9:a5:81:47:82:66:9b:4e:5d:c2:72: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:D4:E6:09:72:8A:79:B5:F4:81:EF:FB:6B:E3:0E:AD:F7:E6:9F:36 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/FDD4E609728A79B5F481EFFB6BE30EADF7E69F36.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.171.122.0/23 IPv6: 2804:5be8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268876 Signature Algorithm: sha256WithRSAEncryption a3:be:4d:76:af:74:9c:0a:2d:35:a3:41:f8:72:f1:99:f4:77: d4:e1:06:7a:8b:fd:08:28:59:a6:9f:3a:e9:06:2d:e9:99:52: 88:0a:a6:47:c2:0f:34:27:7a:58:25:14:a5:42:2e:60:93:63: c3:e7:31:80:d6:3b:03:a6:5a:48:a4:b5:eb:35:10:af:24:d7: a8:d8:02:23:0e:b5:a4:65:4e:df:af:59:ad:ce:45:40:9a:dd: c6:ca:e8:f0:1c:42:07:49:8a:87:24:92:c3:f9:f0:2f:dd:61: 81:32:ee:5f:46:50:53:09:67:5d:f1:f7:89:60:5e:7d:52:78: 26:b1:95:2d:e7:cd:3f:43:87:4f:8b:07:bc:32:ae:88:fd:ec: 3a:0d:81:9b:f9:32:fe:84:79:23:f5:5b:03:38:2b:20:91:d6: cd:ea:46:87:62:8f:d2:75:84:0f:ca:ca:6c:87:df:79:b6:ce: ca:c3:18:f6:5f:d9:f7:57:d6:34:2f:d5:66:ec:32:62:5e:56: 4e:bc:59:93:6a:ce:41:9c:39:25:ba:36:9b:9e:d1:20:1e:b5: 9c:59:a3:ae:55:3f:c7:45:42:05:e0:62:d4:66:f6:37:74:de: df:42:b8:14:5f:63:dc:7f:99:3d:1e:82:c4:ac:02:52:84:5a: 21:4e:30:15 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUez8ZvmV4PUW4yr0dOTIClsa8m9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMTkxMjM4NDFaFw0yNTExMTgxMjQzNDFaMDMxMTAvBgNV BAMTKEZERDRFNjA5NzI4QTc5QjVGNDgxRUZGQjZCRTMwRUFERjdFNjlGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWHG3cgZpoAaqNXI11GHTlecv EzpqCvDoib3C2wvudPvg2AepsIjR4TTEOY/pt3HXgeu58id2TBG8fyfh2nBk+oNk nH3YFVwe20xfPogIPNADdl1+zJqQIlBiveLYIjORwy1IqSgjr9kybhcC9OcFOeGA ZB1pyontXI8rQjz90AUFD6uw+JGiXIzs3bHzsJ8axZqLQjV6wySqtiN0Ezf2KP80 TAGq8r12oUwNIStvMMLchk4gzxNQRq+6gghoTLg2gaEwWQhViOS3vRP0+t5wyQKD K+1w4IY2LMvYrC7kH0PiadDNt9S6GC/2Ze11xvyeqfLZpYFHgmabTl3CcpZ9AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT91OYJcop5tfSB 7/tr4w6t9+afNjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSDJI Tk5GVlNTbkNtNDZqODJ5QWFVREFkRHZpMXl5Qkw1cXJacFNHcnJuRXYvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gy SE5ORlZTU25DbTQ2ajgyeUFhVURBZER2aTF5eUJMNXFyWnBTR3JybkV2LzAvRkRE NEU2MDk3MjhBNzlCNUY0ODFFRkZCNkJFMzBFQURGN0U2OUYzNi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQBLat6MA0EAgACMAcDBQAoBFvoMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaTDANBgkqhkiG9w0BAQsFAAOCAQEAo75Ndq90nAotNaNB +HLxmfR31OEGeov9CChZpp866QYt6ZlSiAqmR8IPNCd6WCUUpUIuYJNjw+cxgNY7 A6ZaSKS16zUQryTXqNgCIw61pGVO369Zrc5FQJrdxsro8BxCB0mKhySSw/nwL91h gTLuX0ZQUwlnXfH3iWBefVJ4JrGVLefNP0OHT4sHvDKuiP3sOg2Bm/ky/oR5I/Vb AzgrIJHWzepGh2KP0nWED8rKbIffebbOysMY9l/Z91fWNC/VZuwyYl5WTrxZk2rO QZw5Jbo2m57RIB61nFmjrlU/x0VCBeBi1Gb2N3Te30K4FF9j3H+ZPR6CxKwCUoRa IU4wFQ== -----END CERTIFICATE-----Generated at Fri Nov 22 21:03:45 2024 by rpki-client on console-fra.rpki-client.org