$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer File: 9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer (raw, json) Hash identifier: MNmjHQo8mhzNI/eMiQSvfyRo7rU9IVvA5H4VVbYclks= Subject key identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 391F28425505AF7ADF551BD8CDAE287A85AAA5AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft caRepository: rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 12:49:28 +0000 Certificate not after: Thu 03 Apr 2025 12:54:28 +0000 Subordinate resources: AS: 264150 IP: 138.99.12.0/22 IP: 170.247.104.0/22 IP: 2804:233c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Oct 2024 05:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1f:28:42:55:05:af:7a:df:55:1b:d8:cd:ae:28:7a:85:aa:a5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 12:49:28 2024 GMT Not After : Apr 3 12:54:28 2025 GMT Subject: CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:ab:e5:5d:f0:25:1b:eb:7e:44:39:08:95: ae:c5:98:73:a5:33:76:14:7d:c0:b8:cc:9e:12:17: 0f:40:73:fd:ed:82:da:1f:61:9b:d2:46:49:6a:fa: a6:88:14:36:41:e2:0a:0c:d9:a8:3f:d9:12:bd:d6: 19:99:f5:04:9d:e0:20:e3:17:08:62:17:74:71:5b: 36:9d:65:5e:2c:70:11:04:66:aa:40:df:6d:0f:ca: 8b:a9:3a:ae:16:92:c7:37:9e:bd:06:28:c4:6e:b1: 3d:2d:d9:23:cf:e9:fc:61:01:d7:b6:bd:33:f7:53: dd:e2:e8:e6:7d:1e:2b:d7:ca:f5:da:84:f4:92:3f: 96:2a:1c:a0:0a:ef:ef:b5:f4:c5:5a:e7:2d:ba:61: aa:31:9e:47:d3:d0:6d:61:08:f5:a0:ce:c4:2d:fa: e9:42:dc:90:25:7e:8c:c6:19:c6:8d:a1:64:77:82: 80:3b:f2:51:70:f1:b4:d3:d0:a5:0b:93:67:5b:90: 94:15:ca:8b:29:6a:ad:bd:30:77:73:bc:a8:74:ec: 27:63:98:d6:8a:5c:f0:f5:79:7a:43:ae:48:a2:6d: 75:8a:ee:64:23:69:70:78:3d:83:a6:d7:85:30:b9: 86:3a:af:7a:5d:13:d5:5e:f0:b2:b3:c4:52:51:06: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.99.12.0/22 170.247.104.0/22 IPv6: 2804:233c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264150 Signature Algorithm: sha256WithRSAEncryption 19:ff:01:ce:8b:0e:c7:af:6f:e9:46:a6:63:91:42:a5:64:e4: 56:bb:d4:08:be:bf:11:fc:87:db:b5:62:5b:5d:dc:df:22:55: b2:47:27:b3:a5:76:2c:be:f0:17:c6:34:9b:e8:0c:17:57:29: 8d:76:95:f3:82:e1:26:3f:d1:99:92:6b:49:99:b2:a1:f1:b7: 92:90:22:28:9f:2b:b1:69:8b:41:f1:05:ea:a1:8d:64:ff:fb: f1:61:e5:f2:e1:9f:ba:66:3a:5f:be:36:08:d0:f1:9a:d4:3e: 11:12:5a:3a:35:0a:6f:13:d2:10:4e:7c:2d:c4:ba:49:4b:81: ef:79:68:51:ba:d2:de:21:56:15:86:44:35:47:55:d6:7e:1a: 37:67:c0:21:69:ac:a1:ed:cc:6c:56:f2:47:82:74:cc:93:8a: 91:4e:ee:f4:03:c3:56:f2:9c:9a:27:17:9b:a6:5e:90:2e:aa: c1:20:ef:f7:9c:b6:84:30:71:9e:79:85:cb:68:7a:34:b3:2a: 33:5b:04:70:02:de:c4:8a:b6:49:48:3b:62:64:31:d7:3a:11: cb:f4:c6:fb:96:1d:86:80:15:45:52:f6:61:ec:bd:75:d4:22: 84:55:3c:89:03:34:c8:0a:6a:dc:31:d0:1e:85:7f:a2:08:36: 6b:58:40:79 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUOR8oQlUFr3rfVRvYza4oeoWqpa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMjQ5MjhaFw0yNTA0MDMxMjU0MjhaMDMxMTAvBgNV BAMTKDk5MjdDMTRFQTM1QkNFOUYyQjczNkFERENDMERFMEIxQTA3QzlFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeo6vlXfAlG+t+RDkIla7FmHOl M3YUfcC4zJ4SFw9Ac/3tgtofYZvSRklq+qaIFDZB4goM2ag/2RK91hmZ9QSd4CDj FwhiF3RxWzadZV4scBEEZqpA320PyoupOq4Wksc3nr0GKMRusT0t2SPP6fxhAde2 vTP3U93i6OZ9HivXyvXahPSSP5YqHKAK7++19MVa5y26YaoxnkfT0G1hCPWgzsQt +ulC3JAlfozGGcaNoWR3goA78lFw8bTT0KULk2dbkJQVyospaq29MHdzvKh07Cdj mNaKXPD1eXpDrkiibXWK7mQjaXB4PYOm14UwuYY6r3pdE9Ve8LKzxFJRBhLNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSZJ8FOo1vOnytz at3MDeCxoHyeFzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTl2 RlNlS1RQcTE3UFpRNEhtQlFSVUZzZ1h1TFAyNlRYeDUxNHduRnhHczEvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTl2 RlNlS1RQcTE3UFpRNEhtQlFSVUZzZ1h1TFAyNlRYeDUxNHduRnhHczEvMi85OTI3 QzE0RUEzNUJDRTlGMkI3MzZBRERDQzBERTBCMUEwN0M5RTE3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKKYwwDBAKq92gwDQQCAAIwBwMFACgEIzwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAfWMA0GCSqGSIb3DQEBCwUAA4IBAQAZ/wHOiw7H r2/pRqZjkUKlZORWu9QIvr8R/IfbtWJbXdzfIlWyRyezpXYsvvAXxjSb6AwXVymN dpXzguEmP9GZkmtJmbKh8beSkCIonyuxaYtB8QXqoY1k//vxYeXy4Z+6ZjpfvjYI 0PGa1D4RElo6NQpvE9IQTnwtxLpJS4HveWhRutLeIVYVhkQ1R1XWfho3Z8Ahaayh 7cxsVvJHgnTMk4qRTu70A8NW8pyaJxebpl6QLqrBIO/3nLaEMHGeeYXLaHo0syoz WwRwAt7EirZJSDtiZDHXOhHL9Mb7lh2GgBVFUvZh7L111CKEVTyJAzTICmrcMdAe hX+iCDZrWEB5 -----END CERTIFICATE-----Generated at Mon Oct 21 06:37:06 2024 by rpki-client on console.sobornost.net