$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.cer File: FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.cer (raw, json) Hash identifier: YtE8HmKwk3JHa0LA9D+RCCJRiHulswNcboPH9i3cN/s= Subject key identifier: FE:44:0F:56:23:3E:EE:C4:62:7A:6A:A0:E1:DF:FE:3C:9A:BE:3F:31 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4B41523AC5FAB92B5162EE1B7776A050F7B9B622 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.mft caRepository: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 26 Nov 2024 00:06:52 +0000 Certificate not after: Tue 25 Nov 2025 00:11:52 +0000 Subordinate resources: AS: 264360 IP: 131.161.28.0/22 IP: 138.255.132.0/22 IP: 2804:1d50::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:41:52:3a:c5:fa:b9:2b:51:62:ee:1b:77:76:a0:50:f7:b9:b6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 26 00:06:52 2024 GMT Not After : Nov 25 00:11:52 2025 GMT Subject: CN=FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:ed:5b:55:86:ea:66:a4:76:b0:d3:e5:ee: fd:ec:f7:6e:eb:9e:df:ca:f8:d5:4a:ba:fa:d1:b5: 97:00:f2:04:51:b0:6d:c1:41:7a:ef:1b:34:b3:dd: bb:c5:e3:d0:cd:7b:4c:5f:12:bc:1e:74:e1:15:77: 8d:da:b3:f6:8f:a7:6d:8b:78:4f:c5:4b:70:84:a6: 9f:c4:9a:39:a4:88:7d:97:c1:89:f0:ed:b6:46:96: 6f:a7:20:0e:8d:b9:53:95:bf:44:73:3b:b2:02:a7: 22:9b:0f:88:45:d7:a9:cc:d9:be:1e:47:fa:61:ab: e9:9b:7f:be:67:4e:6c:20:66:e5:76:f5:35:e3:89: d8:4a:10:2c:6f:8f:b7:dc:c4:a6:6b:36:22:96:3e: 59:4d:e0:34:0c:f2:06:68:6f:9f:e7:98:34:e8:53: 40:04:ae:76:91:5d:23:2d:e9:5d:e5:4d:c3:78:94: 07:33:3a:9d:fd:bc:cb:4f:14:90:f1:4e:61:14:56: bc:a9:13:ad:ec:60:92:7a:c7:14:22:1e:77:23:24: 9c:4e:6c:b3:76:0d:10:c0:ee:41:1b:30:a6:2e:52: cb:3d:08:0d:03:1e:6f:97:57:ff:6e:e8:25:d7:91: 37:db:57:4c:ad:6e:b2:b2:df:e4:86:4e:03:86:21: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:44:0F:56:23:3E:EE:C4:62:7A:6A:A0:E1:DF:FE:3C:9A:BE:3F:31 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/FE440F56233EEEC4627A6AA0E1DFFE3C9ABE3F31.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.161.28.0/22 138.255.132.0/22 IPv6: 2804:1d50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264360 Signature Algorithm: sha256WithRSAEncryption 95:06:78:57:bf:a4:79:d1:66:0a:81:c5:d7:9d:06:fd:83:86: 98:9f:8d:34:75:5c:85:ba:82:a5:3f:66:5d:0d:13:73:16:92: d7:40:69:25:22:d7:82:9d:6d:41:62:3b:52:a7:24:cf:60:d4: cb:0f:f7:a3:10:60:ff:9b:12:e3:ee:72:04:7b:a4:3b:9e:10: 35:64:44:92:bc:8b:ef:f1:ca:8a:e1:42:40:82:d3:41:c0:e0: 76:37:31:0e:e4:51:d4:62:b9:ce:a6:55:1e:fd:b7:97:66:42: ef:0f:6f:71:c9:f2:1c:6b:7f:a1:ea:55:e5:d7:e0:56:79:ec: 6f:29:ee:a7:78:80:62:05:c7:25:ed:80:8e:47:1b:41:82:67: 0a:42:e2:b5:1f:dd:89:03:b6:09:d4:b8:a0:a1:1c:b4:63:99: 91:d7:53:3f:65:67:37:92:c4:e2:1e:ca:09:40:eb:65:86:61: fd:2e:86:f0:bb:3c:f9:71:e6:9b:2e:33:9c:87:2c:23:81:c1: 14:56:8e:dc:61:d0:d7:6e:01:4f:9d:e2:d9:07:eb:2e:ee:7e: 9f:ac:af:5d:bd:1d:f9:23:bf:c8:7f:7c:3b:16:08:85:13:c2: 31:ca:45:db:db:b2:41:ce:53:a6:24:09:1b:7b:9e:06:a2:6a: 0e:b2:30:84 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUS0FSOsX6uStRYu4bd3agUPe5tiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjYwMDA2NTJaFw0yNTExMjUwMDExNTJaMDMxMTAvBgNV BAMTKEZFNDQwRjU2MjMzRUVFQzQ2MjdBNkFBMEUxREZGRTNDOUFCRTNGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxe1bVYbqZqR2sNPl7v3s927r nt/K+NVKuvrRtZcA8gRRsG3BQXrvGzSz3bvF49DNe0xfErwedOEVd43as/aPp22L eE/FS3CEpp/EmjmkiH2XwYnw7bZGlm+nIA6NuVOVv0RzO7ICpyKbD4hF16nM2b4e R/phq+mbf75nTmwgZuV29TXjidhKECxvj7fcxKZrNiKWPllN4DQM8gZob5/nmDTo U0AErnaRXSMt6V3lTcN4lAczOp39vMtPFJDxTmEUVrypE63sYJJ6xxQiHncjJJxO bLN2DRDA7kEbMKYuUss9CA0DHm+XV/9u6CXXkTfbV0ytbrKy3+SGTgOGITC1AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+RA9WIz7uxGJ6 aqDh3/48mr4/MTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0tM NGI0S2s4UFFjbzZYb3NQNGdHY3hZMnNiZGl5UGZKRER6UzF2UnNhTHUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNL TDRiNEtrOFBRY282WG9zUDRnR2N4WTJzYmRpeVBmSkREelMxdlJzYUx1LzAvRkU0 NDBGNTYyMzNFRUVDNDYyN0E2QUEwRTFERkZFM0M5QUJFM0YzMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCg6EcAwQCiv+EMA0EAgACMAcDBQAoBB1QMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIqDANBgkqhkiG9w0BAQsFAAOCAQEAlQZ4V7+k edFmCoHF150G/YOGmJ+NNHVchbqCpT9mXQ0TcxaS10BpJSLXgp1tQWI7Uqckz2DU yw/3oxBg/5sS4+5yBHukO54QNWREkryL7/HKiuFCQILTQcDgdjcxDuRR1GK5zqZV Hv23l2ZC7w9vccnyHGt/oepV5dfgVnnsbynup3iAYgXHJe2AjkcbQYJnCkLitR/d iQO2CdS4oKEctGOZkddTP2VnN5LE4h7KCUDrZYZh/S6G8Ls8+XHmmy4znIcsI4HB FFaO3GHQ124BT53i2QfrLu5+n6yvXb0d+SO/yH98OxYIhRPCMcpF29uyQc5TpiQJ G3ueBqJqDrIwhA== -----END CERTIFICATE-----Generated at Wed Nov 27 02:00:37 2024 by rpki-client on console-ams.rpki-client.org