$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer File: FF5D171186C7F92AA82E56A3848B9D1390938458.cer (raw, json) Hash identifier: +Gx4HF911p1//9Os75qnC3uAOd9+uDd5nSMiLdEw3ms= Subject key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 494E946DDE884538BE8EF3D8D80D82D8A65B866D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft caRepository: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 04 Sep 2024 14:54:07 +0000 Certificate not after: Wed 03 Sep 2025 14:59:07 +0000 Subordinate resources: AS: 28635 AS: 52547 AS: 52609 AS: 52682 AS: 61794 AS: 262526 AS: 264367 AS: 264487 AS: 266130 AS: 267601 IP: 45.6.108.0/22 IP: 45.71.68.0/22 IP: 45.174.156.0/22 IP: 131.108.32.0/22 IP: 131.255.112.0/22 IP: 138.185.216.0/22 IP: 168.196.136.0/22 IP: 168.228.36.0/22 IP: 170.233.52.0/22 IP: 177.67.192.0/21 IP: 177.152.176.0/21 IP: 177.200.176.0/20 IP: 177.221.192.0/19 IP: 179.189.48.0/20 IP: 200.11.8.0/21 IP: 201.71.128.0/18 IP: 201.140.220.0/22 IP: 2804:598::/32 IP: 2804:e28::/32 IP: 2804:1408::/32 IP: 2804:196c::/32 IP: 2804:1d68::/32 IP: 2804:2058::/32 IP: 2804:2d90::/32 IP: 2804:30bc::/32 IP: 2804:3b1c::/32 IP: 2804:43f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 06:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4e:94:6d:de:88:45:38:be:8e:f3:d8:d8:0d:82:d8:a6:5b:86:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 4 14:54:07 2024 GMT Not After : Sep 3 14:59:07 2025 GMT Subject: CN=FF5D171186C7F92AA82E56A3848B9D1390938458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c0:d9:d2:08:3c:af:7a:a5:cd:e0:d2:62:e9: 8d:37:c6:6d:c3:6a:bb:34:1e:d8:a5:30:c1:ad:a6: 35:b2:25:7f:9e:e8:09:69:3b:be:8e:67:77:58:c6: 4e:4d:df:dd:6d:8d:47:b6:1f:01:8c:3a:5a:1b:9d: 79:86:09:ff:04:4b:09:99:08:2a:a4:bc:b5:12:cb: 5d:d4:52:21:91:8e:5e:64:3d:da:f3:06:1a:c0:45: 0c:e8:6e:da:d9:0d:5d:6e:93:e1:3a:2c:80:2e:e1: cf:7d:81:02:43:29:e7:4a:26:2c:2d:f9:40:b7:60: b9:24:32:a6:78:7b:0a:74:c6:30:7c:7f:55:2a:02: b7:e9:8d:40:f2:6a:b2:2e:a7:ab:2e:83:18:5e:86: 73:b0:93:ab:72:7b:94:03:d5:23:d2:64:54:64:da: bc:30:fd:d5:5a:6f:70:5a:d0:a8:9a:dd:7c:4f:48: 0d:2a:ed:60:f3:e0:e3:ec:50:04:1c:54:56:28:e3: c5:c4:a2:75:35:0a:ea:32:85:16:02:71:1f:8b:7c: 77:98:4b:1f:73:ea:bf:bb:5d:b8:42:0f:26:dc:9d: b2:eb:f5:fc:a5:11:e4:46:22:65:60:eb:34:eb:27: 9f:bc:da:95:48:3c:04:e2:2f:59:a0:c6:05:08:4b: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.6.108.0/22 45.71.68.0/22 45.174.156.0/22 131.108.32.0/22 131.255.112.0/22 138.185.216.0/22 168.196.136.0/22 168.228.36.0/22 170.233.52.0/22 177.67.192.0/21 177.152.176.0/21 177.200.176.0/20 177.221.192.0/19 179.189.48.0/20 200.11.8.0/21 201.71.128.0/18 201.140.220.0/22 IPv6: 2804:598::/32 2804:e28::/32 2804:1408::/32 2804:196c::/32 2804:1d68::/32 2804:2058::/32 2804:2d90::/32 2804:30bc::/32 2804:3b1c::/32 2804:43f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28635 52547 52609 52682 61794 262526 264367 264487 266130 267601 Signature Algorithm: sha256WithRSAEncryption 9d:b9:50:b7:28:41:20:21:be:93:8e:5d:96:92:ee:67:75:73: 2b:65:01:ed:4b:ea:41:be:77:4b:22:32:5c:69:ae:e0:5e:36: 2b:68:5d:98:f4:9c:df:93:16:8a:e4:9f:ab:6d:80:96:a2:18: a1:ae:1b:c5:9a:da:08:51:a0:08:a6:39:c5:88:0b:8b:7d:95: 2e:98:21:3e:88:39:d5:cc:b3:83:dc:1f:02:71:42:2d:db:c4: 61:e2:4d:02:39:d0:b7:ca:00:56:c4:e2:3b:ca:4b:a5:5c:40: 23:42:fa:1e:a8:49:3c:4b:1c:6e:10:2b:b8:d8:5a:0e:09:97: 79:c4:0c:25:46:4b:36:65:1b:6a:3e:a9:61:40:96:27:21:f6: d3:49:e4:b2:7d:0d:2e:e1:a2:18:c1:53:47:09:6e:61:49:f4: 93:06:a9:3b:6a:8c:cf:cc:70:ac:9f:dc:fa:5d:a2:c5:ec:33: 17:b7:39:12:d6:e0:ae:22:a7:ba:2b:4d:f5:a1:11:ab:72:19: 83:33:e2:8d:7d:1c:fe:c9:d0:81:4c:d8:79:cc:59:c9:bd:a8: e3:c0:a4:02:77:b9:45:96:df:c2:e7:a1:1d:f9:e2:db:ce:4c: 1f:83:63:8e:a0:4a:50:15:e2:ba:cd:f8:f3:53:ba:cb:99:86: ca:fe:7d:76 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUSU6Ubd6IRTi+jvPY2A2C2KZbhm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA5MDQxNDU0MDdaFw0yNTA5MDMxNDU5MDdaMDMxMTAvBgNV BAMTKEZGNUQxNzExODZDN0Y5MkFBODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwNnSCDyveqXN4NJi6Y03xm3D ars0HtilMMGtpjWyJX+e6AlpO76OZ3dYxk5N391tjUe2HwGMOlobnXmGCf8ESwmZ CCqkvLUSy13UUiGRjl5kPdrzBhrARQzobtrZDV1uk+E6LIAu4c99gQJDKedKJiwt +UC3YLkkMqZ4ewp0xjB8f1UqArfpjUDyarIup6sugxhehnOwk6tye5QD1SPSZFRk 2rww/dVab3Ba0Kia3XxPSA0q7WDz4OPsUAQcVFYo48XEonU1CuoyhRYCcR+LfHeY Sx9z6r+7XbhCDybcnbLr9fylEeRGImVg6zTrJ5+82pVIPATiL1mgxgUISyU5AgMB AAGjggQIMIIEBDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/XRcRhsf5Kqgu VqOEi50TkJOEWDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFZh Qk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0SDQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RW YUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAvRkY1 RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5MDkzODQ1OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHPBggrBgEFBQcB BwEB/wSBvzCBvDBsBAIAATBmAwQCLQZsAwQCLUdEAwQCLa6cAwQCg2wgAwQCg/9w AwQCirnYAwQCqMSIAwQCqOQkAwQCquk0AwQDsUPAAwQDsZiwAwQEsciwAwQFsd3A AwQEs70wAwQDyAsIAwQGyUeAAwQCyYzcMEwEAgACMEYDBQAoBAWYAwUAKAQOKAMF ACgEFAgDBQAoBBlsAwUAKAQdaAMFACgEIFgDBQAoBC2QAwUAKAQwvAMFACgEOxwD BQAoBEP0MEYGCCsGAQUFBwEIAQH/BDcwNaAzMDECAm/bAgMAzUMCAwDNgQIDAM3K AgMA8WICAwQBfgIDBAivAgMECScCAwQPkgIDBBVRMA0GCSqGSIb3DQEBCwUAA4IB AQCduVC3KEEgIb6Tjl2Wku5ndXMrZQHtS+pBvndLIjJcaa7gXjYraF2Y9JzfkxaK 5J+rbYCWohihrhvFmtoIUaAIpjnFiAuLfZUumCE+iDnVzLOD3B8CcUIt28Rh4k0C OdC3ygBWxOI7ykulXEAjQvoeqEk8SxxuECu42FoOCZd5xAwlRks2ZRtqPqlhQJYn IfbTSeSyfQ0u4aIYwVNHCW5hSfSTBqk7aozPzHCsn9z6XaLF7DMXtzkS1uCuIqe6 K031oRGrchmDM+KNfRz+ydCBTNh5zFnJvajjwKQCd7lFlt/C56Ed+eLbzkwfg2OO oEpQFeK6zfjzU7rLmYbK/n12 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:13 2024 by rpki-client on console-fra.rpki-client.org