$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer File: 03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer (raw, json) Hash identifier: L+v4f8QTPs8m0jxGovludpWWomjXj9uTAu0pj7WpCY8= Subject key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 36D7B872BD3BF4E402578D88875B45F03247EC30 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft caRepository: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 23:17:49 +0000 Certificate not after: Wed 02 Apr 2025 23:22:49 +0000 Subordinate resources: AS: 52653 IP: 138.122.180.0/22 IP: 177.221.80.0/20 IP: 2804:bf8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d7:b8:72:bd:3b:f4:e4:02:57:8d:88:87:5b:45:f0:32:47:ec:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 23:17:49 2024 GMT Not After : Apr 2 23:22:49 2025 GMT Subject: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:83:9f:43:e3:1b:8a:c2:44:8c:79:a1:a0: 16:cb:2e:29:bc:0d:46:89:f3:d5:6b:70:a1:c5:eb: c9:5a:33:4c:ec:87:91:fa:59:02:4e:ac:ca:3f:f1: 91:74:43:28:d7:5d:b2:c3:ca:37:b1:1f:e1:d0:9c: 66:ee:b6:11:08:51:53:f0:64:9e:93:d9:3e:24:26: a5:1a:0e:73:d0:57:91:90:fa:65:08:43:90:ee:3e: 79:57:11:55:95:8c:68:4b:f1:b0:4c:cc:d8:07:42: 26:f2:4e:11:24:8d:31:79:42:05:ae:d0:e3:a7:73: 93:37:58:86:33:ab:79:94:14:25:4e:58:3b:83:c2: 32:73:43:c9:c1:b2:c5:52:21:fb:0c:30:36:9b:01: 24:0a:d4:c1:ee:b0:db:4c:2b:63:06:b8:b6:fa:a6: e3:5a:aa:a1:ac:cd:82:d9:8c:82:9f:19:85:58:4a: e7:63:6b:8e:b2:88:37:4f:3c:39:39:a8:00:e9:be: 33:8a:18:34:5c:fb:8b:5b:7d:66:c8:86:9d:f8:9f: e0:75:b5:ae:14:25:0c:2b:c5:d9:10:fe:56:e2:0c: c2:86:cb:68:5c:ad:bb:ea:fb:5b:0d:39:39:d0:26: 09:ca:9a:d8:22:1c:f6:8b:7f:de:0a:85:58:51:b3: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.122.180.0/22 177.221.80.0/20 IPv6: 2804:bf8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52653 Signature Algorithm: sha256WithRSAEncryption 67:15:7e:5d:4d:1f:ae:60:0a:75:46:e5:ca:2e:ec:86:2d:98: fe:e9:66:e5:e9:5c:f6:f6:5b:dd:7e:e2:4e:e4:fb:89:f7:ba: 66:ce:eb:fd:95:64:11:a4:45:2c:c8:6f:c0:1b:08:31:4f:53: 1a:5a:06:14:6c:0b:06:33:f5:eb:0f:1a:6d:49:1e:87:d3:83: 8c:fc:d2:7d:6a:a5:1f:a2:ad:a4:b1:ae:2d:64:22:ab:26:b4: d5:01:9d:15:91:7c:41:0a:c1:ac:db:30:17:15:d3:5d:5d:f1: 5d:a9:14:2e:d5:5a:96:1a:83:3f:a3:83:b3:e8:19:a0:16:21: 15:4a:6f:76:17:e0:e1:c3:e9:f0:ff:08:a4:78:86:de:31:0b: 38:f4:86:e9:b9:c8:64:70:b2:84:63:e0:5c:8e:62:d7:0c:91: 97:04:64:d8:59:41:bb:1d:06:60:07:e0:d0:03:84:df:2a:62: 53:94:b5:8f:c1:76:51:49:bb:43:24:f9:e6:20:81:92:f9:d0: 06:7c:d0:e6:61:eb:ee:ae:3c:2e:35:34:9a:93:eb:cf:c1:a1: 41:69:dd:d8:75:13:77:68:89:54:11:9a:5e:2c:7d:3e:a0:0c: 5f:8f:47:19:bd:92:bf:2f:af:be:2e:ec:38:04:39:eb:78:a5: 91:80:85:95 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNte4cr079OQCV42Ih1tF8DJH7DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMzE3NDlaFw0yNTA0MDIyMzIyNDlaMDMxMTAvBgNV BAMTKDAzNzQ4NDQxRDlDQzdFRTJBOTNFMTYwQkFCMjcyNERBRUI3OTlGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEeIOfQ+MbisJEjHmhoBbLLim8 DUaJ89VrcKHF68laM0zsh5H6WQJOrMo/8ZF0QyjXXbLDyjexH+HQnGbuthEIUVPw ZJ6T2T4kJqUaDnPQV5GQ+mUIQ5DuPnlXEVWVjGhL8bBMzNgHQibyThEkjTF5QgWu 0OOnc5M3WIYzq3mUFCVOWDuDwjJzQ8nBssVSIfsMMDabASQK1MHusNtMK2MGuLb6 puNaqqGszYLZjIKfGYVYSudja46yiDdPPDk5qADpvjOKGDRc+4tbfWbIhp34n+B1 ta4UJQwrxdkQ/lbiDMKGy2hcrbvq+1sNOTnQJgnKmtgiHPaLf94KhVhRs8dLAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQDdIRB2cx+4qk+ FgurJyTa63mfOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDRU VVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6SjYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ0 VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEvMDM3 NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFFQjc5OUYzQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinq0AwQEsd1QMA0EAgACMAcDBQAoBAv4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNrTANBgkqhkiG9w0BAQsFAAOCAQEAZxV+XU0f rmAKdUblyi7shi2Y/ulm5elc9vZb3X7iTuT7ife6Zs7r/ZVkEaRFLMhvwBsIMU9T GloGFGwLBjP16w8abUkeh9ODjPzSfWqlH6KtpLGuLWQiqya01QGdFZF8QQrBrNsw FxXTXV3xXakULtValhqDP6ODs+gZoBYhFUpvdhfg4cPp8P8IpHiG3jELOPSG6bnI ZHCyhGPgXI5i1wyRlwRk2FlBux0GYAfg0AOE3ypiU5S1j8F2UUm7QyT55iCBkvnQ BnzQ5mHr7q48LjU0mpPrz8GhQWnd2HUTd2iJVBGaXix9PqAMX49HGb2Svy+vvi7s OAQ563ilkYCFlQ== -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:06 2024 by rpki-client on console-ams.rpki-client.org