$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.cer File: FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.cer (raw, json) Hash identifier: 7lFKb39kANEtsFdvdS8wxRyBghOPQd/zEhYAACddejk= Subject key identifier: FF:CE:70:C4:98:DD:F3:03:B6:74:A6:EA:ED:25:A1:F9:18:A2:F7:A8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4910A279FAAD05F07AE93C847E48959104FE6DC0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1/FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.mft caRepository: rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 06:32:20 +0000 Certificate not after: Thu 03 Apr 2025 06:37:20 +0000 Subordinate resources: AS: 273665 IP: 2804:8a60::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:10:a2:79:fa:ad:05:f0:7a:e9:3c:84:7e:48:95:91:04:fe:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 06:32:20 2024 GMT Not After : Apr 3 06:37:20 2025 GMT Subject: CN=FFCE70C498DDF303B674A6EAED25A1F918A2F7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:e8:43:0c:8c:5e:05:7f:75:fd:48:6c:f5: de:36:d2:d5:a6:16:40:18:95:d7:27:2b:eb:a6:25: bf:a7:45:5e:5a:b5:30:e4:d5:50:12:5f:a6:16:73: f1:72:55:2d:ad:4b:35:88:44:7c:15:7e:db:d0:84: 39:6e:64:6b:f7:56:df:f6:d2:bd:df:00:1d:7c:16: 4d:5c:be:ee:96:a3:78:c5:9a:2d:eb:2d:92:3a:8e: 36:02:0a:77:00:ff:0f:5e:ed:ee:de:90:22:04:22: 40:3e:1f:b8:7f:4f:58:2f:b7:93:f4:fe:1d:38:c1: c1:57:e2:e0:a4:74:90:4a:64:bb:cd:d4:fb:dd:7c: 57:1e:2b:ca:4e:ef:dd:08:4c:51:92:17:2f:9b:7c: 7e:6b:c7:c4:02:3e:d5:3f:9f:ed:11:e3:b9:9e:1f: 1f:ec:e4:bb:9d:14:c8:4c:51:3d:2e:69:6b:f4:c6: f6:e6:ac:26:a5:a1:77:55:77:26:b4:72:e7:5a:29: 68:17:fe:0a:15:ea:ce:d8:52:0c:29:03:bc:97:bd: 5d:b7:4f:09:7d:5f:d2:55:7c:3b:1f:6f:70:90:51: 8f:88:f0:7c:a2:4e:66:9d:5a:60:3e:dc:67:32:d5: 83:97:7d:07:63:ff:7a:4e:fe:83:e4:9c:c8:02:28: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:CE:70:C4:98:DD:F3:03:B6:74:A6:EA:ED:25:A1:F9:18:A2:F7:A8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EJRtnbDzWaMALwXxZwZVz4X1MCBDCyr69XTqSFNgFBW/1/FFCE70C498DDF303B674A6EAED25A1F918A2F7A8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8a60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273665 Signature Algorithm: sha256WithRSAEncryption 06:c5:a0:65:01:02:c1:5f:5c:07:36:14:4c:93:9e:11:83:47: ac:ca:57:73:04:58:44:a9:58:46:9e:7c:6a:5f:74:8e:b5:18: b0:c5:ed:2e:23:14:bf:05:46:8f:e8:85:24:c9:2a:90:e3:96: 9d:e6:1b:87:a3:9f:a1:78:09:4b:3b:fe:6e:19:57:11:01:8e: 6e:b7:d5:ee:b6:d8:0a:0c:69:a5:f0:43:75:33:e9:08:80:d5: 5a:94:5f:7a:8f:ed:e2:8b:98:cf:07:e1:2c:7c:a3:f8:1b:35: 23:83:ff:d2:55:fb:e4:b7:81:ba:c2:64:0a:e9:7e:9b:fb:e4: a7:aa:7f:8b:75:42:ea:26:6c:bf:c8:09:8d:21:c8:d9:9d:1e: 9d:f6:ee:32:00:d8:7f:32:fa:34:5a:18:be:c9:a5:ea:71:c8: ae:d2:b3:33:5f:59:a0:47:68:be:80:ad:70:8c:91:4e:60:c2: b1:df:84:d1:f0:c1:7b:6e:dd:ab:21:8f:71:95:2f:62:a1:4f: 63:b9:09:1f:4b:13:73:11:7d:a3:d5:de:e8:f4:32:dd:ee:17: 77:9a:64:21:0a:f0:61:f3:7a:5c:86:f9:61:32:17:6b:99:b8: b1:86:44:ab:2b:ab:5e:21:53:ae:f0:1d:ed:fa:c2:5e:d6:20: ab:f7:ef:19 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIUSRCiefqtBfB66TyEfkiVkQT+bcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNjMyMjBaFw0yNTA0MDMwNjM3MjBaMDMxMTAvBgNV BAMTKEZGQ0U3MEM0OThEREYzMDNCNjc0QTZFQUVEMjVBMUY5MThBMkY3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpOhDDIxeBX91/Uhs9d420tWm FkAYldcnK+umJb+nRV5atTDk1VASX6YWc/FyVS2tSzWIRHwVftvQhDluZGv3Vt/2 0r3fAB18Fk1cvu6Wo3jFmi3rLZI6jjYCCncA/w9e7e7ekCIEIkA+H7h/T1gvt5P0 /h04wcFX4uCkdJBKZLvN1PvdfFceK8pO790ITFGSFy+bfH5rx8QCPtU/n+0R47me Hx/s5LudFMhMUT0uaWv0xvbmrCaloXdVdya0cudaKWgX/goV6s7YUgwpA7yXvV23 Twl9X9JVfDsfb3CQUY+I8HyiTmadWmA+3Gcy1YOXfQdj/3pO/oPknMgCKGYHAgMB AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT/znDEmN3zA7Z0 purtJaH5GKL3qDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0VK UnRuYkR6V2FNQUx3WHhad1pWejRYMU1DQkRDeXI2OVhUcVNGTmdGQlcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0VK UnRuYkR6V2FNQUx3WHhad1pWejRYMU1DQkRDeXI2OVhUcVNGTmdGQlcvMS9GRkNF NzBDNDk4RERGMzAzQjY3NEE2RUFFRDI1QTFGOTE4QTJGN0E4Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBIpgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQt ATANBgkqhkiG9w0BAQsFAAOCAQEABsWgZQECwV9cBzYUTJOeEYNHrMpXcwRYRKlY Rp58al90jrUYsMXtLiMUvwVGj+iFJMkqkOOWneYbh6OfoXgJSzv+bhlXEQGObrfV 7rbYCgxppfBDdTPpCIDVWpRfeo/t4ouYzwfhLHyj+Bs1I4P/0lX75LeBusJkCul+ m/vkp6p/i3VC6iZsv8gJjSHI2Z0enfbuMgDYfzL6NFoYvsml6nHIrtKzM19ZoEdo voCtcIyRTmDCsd+E0fDBe27dqyGPcZUvYqFPY7kJH0sTcxF9o9Xe6PQy3e4Xd5pk IQrwYfN6XIb5YTIXa5m4sYZEqyurXiFTrvAd7frCXtYgq/fvGQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:08 2024 by rpki-client on console-fra.rpki-client.org