$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer File: FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer (raw, json) Hash identifier: r99pSnD0b16PBLN6dCDmsb1Zop43SR33H9Smpypl9BQ= Subject key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0BD0230130F4F0718783EDB08FA592C17F9D8E87 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft caRepository: rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 22 Nov 2024 21:07:46 +0000 Certificate not after: Fri 21 Nov 2025 21:12:46 +0000 Subordinate resources: AS: 265949 IP: 164.163.96.0/22 IP: 2804:4048::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d0:23:01:30:f4:f0:71:87:83:ed:b0:8f:a5:92:c1:7f:9d:8e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Nov 22 21:07:46 2024 GMT Not After : Nov 21 21:12:46 2025 GMT Subject: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:e4:ab:e9:01:c1:a8:a3:17:0c:76:f0:e4: f1:35:52:66:86:bc:92:c9:da:f8:7d:63:dc:c3:c5: d7:a9:54:39:2b:e4:19:13:df:27:10:8c:6c:8c:94: 86:02:a7:ae:fd:30:55:fd:dd:90:62:1b:1c:d1:16: 87:66:d2:bc:7c:ff:70:c3:7a:2f:86:1b:5d:c2:0d: b2:3e:bf:a6:91:50:88:92:c8:a8:e4:9e:be:e6:2e: b3:9e:1e:86:b0:3a:c7:cd:61:8e:50:33:18:be:21: 87:d9:32:d8:9d:b4:f6:af:89:7b:99:21:7e:84:9c: a0:3f:d7:f4:c0:d6:a6:3d:a8:ea:15:a3:8a:a6:76: d9:bf:40:f0:94:0a:59:f3:d4:a6:ed:8c:dd:1f:e3: 46:cb:54:b7:1e:e3:e8:61:88:d2:b1:9b:44:61:73: b5:93:24:58:2a:16:aa:09:1f:83:8e:cf:62:88:6e: fd:f5:81:16:a5:b9:3d:ea:7a:40:7a:69:f1:cb:ed: 3c:d4:6c:85:62:a6:b0:da:11:9a:5b:31:14:e6:9d: be:74:94:f5:c5:92:42:e2:31:b3:db:31:05:62:ea: 85:ae:27:d7:28:50:c7:a9:d7:6e:6f:89:37:5d:3d: f7:5d:aa:4f:08:bc:3d:38:aa:b8:e9:ad:c5:81:33: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.96.0/22 IPv6: 2804:4048::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265949 Signature Algorithm: sha256WithRSAEncryption 6b:64:f5:f3:d9:f7:99:15:5f:b6:08:c8:43:5f:66:9f:67:1a: a2:a4:03:31:96:b9:ec:e5:47:45:db:99:15:88:b0:ea:eb:60: 42:da:60:0e:8e:aa:d8:03:ad:da:67:db:cf:0c:76:95:80:eb: 2a:dd:a4:f5:2e:d8:0b:91:fc:87:52:a4:d9:e1:92:08:32:75: c3:78:af:c5:6e:14:88:c8:7a:cc:76:1a:ed:1e:41:3b:de:7a: 9b:de:2d:c2:45:ae:3e:0f:b0:42:1f:17:49:e1:eb:50:c5:09: 09:51:97:5e:75:37:a3:56:fa:30:2c:e0:89:21:95:91:9f:bc: 0d:ed:a4:09:8a:70:3e:8d:c4:7d:df:ac:40:ec:82:09:64:6a: 7d:9e:cc:7e:0a:19:f5:9d:10:b1:20:32:70:c0:90:54:fa:51: bc:20:d3:a8:fe:fb:b6:c5:ed:fc:e7:e6:b0:dd:1a:e1:2b:9d: 09:39:c8:3d:16:14:44:b2:e0:53:9a:49:d8:8d:90:dd:7e:a0: c9:36:1e:53:2a:3e:eb:2e:90:71:36:ca:c2:9c:56:25:31:87: 41:3c:e1:1b:b3:1b:8c:3b:c3:f3:bf:80:24:77:9b:83:79:a3: 82:3e:e5:5d:8b:d1:5b:9d:56:30:73:ab:5b:e2:ff:e7:0f:ba: 10:53:bb:fc -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUC9AjATD08HGHg+2wj6WSwX+djocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDExMjIyMTA3NDZaFw0yNTExMjEyMTEyNDZaMDMxMTAvBgNV BAMTKEZGNEFDQjA4MjgxMDFGRkQ2RjkxQkZCQ0ZCRjA1RUU5OEYyRjk5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpOSr6QHBqKMXDHbw5PE1UmaG vJLJ2vh9Y9zDxdepVDkr5BkT3ycQjGyMlIYCp679MFX93ZBiGxzRFodm0rx8/3DD ei+GG13CDbI+v6aRUIiSyKjknr7mLrOeHoawOsfNYY5QMxi+IYfZMtidtPaviXuZ IX6EnKA/1/TA1qY9qOoVo4qmdtm/QPCUClnz1KbtjN0f40bLVLce4+hhiNKxm0Rh c7WTJFgqFqoJH4OOz2KIbv31gRaluT3qekB6afHL7TzUbIViprDaEZpbMRTmnb50 lPXFkkLiMbPbMQVi6oWuJ9coUMep125viTddPfddqk8IvD04qrjprcWBMzEHAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/SssIKBAf/W+R v7z78F7pjy+ZIjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDl3 QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pXZVovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Q5 d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAvRkY0 QUNCMDgyODEwMUZGRDZGOTFCRkJDRkJGMDVFRTk4RjJGOTkyMi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCpKNgMA0EAgACMAcDBQAoBEBIMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQO3TANBgkqhkiG9w0BAQsFAAOCAQEAa2T189n3mRVftgjI Q19mn2caoqQDMZa57OVHRduZFYiw6utgQtpgDo6q2AOt2mfbzwx2lYDrKt2k9S7Y C5H8h1Kk2eGSCDJ1w3ivxW4UiMh6zHYa7R5BO956m94twkWuPg+wQh8XSeHrUMUJ CVGXXnU3o1b6MCzgiSGVkZ+8De2kCYpwPo3Efd+sQOyCCWRqfZ7MfgoZ9Z0QsSAy cMCQVPpRvCDTqP77tsXt/OfmsN0a4SudCTnIPRYURLLgU5pJ2I2Q3X6gyTYeUyo+ 6y6QcTbKwpxWJTGHQTzhG7MbjDvD87+AJHebg3mjgj7lXYvRW51WMHOrW+L/5w+6 EFO7/A== -----END CERTIFICATE-----Generated at Wed Nov 27 02:00:37 2024 by rpki-client on console-ams.rpki-client.org