$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer File: 09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer (raw, json) Hash identifier: PPcxB+0EIChyi2+gXAM0S0bg4DjpJDTZPPFdFeWtfkc= Subject key identifier: 09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B4826F95F4ED394C3D36C5291637F6F076796B6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft caRepository: rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 20:14:43 +0000 Certificate not after: Wed 02 Apr 2025 20:19:43 +0000 Subordinate resources: AS: 52670 IP: 170.82.164.0/22 IP: 177.67.184.0/21 IP: 2804:1120::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:48:26:f9:5f:4e:d3:94:c3:d3:6c:52:91:63:7f:6f:07:67:96:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 20:14:43 2024 GMT Not After : Apr 2 20:19:43 2025 GMT Subject: CN=09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:74:8c:c6:e2:8c:fc:3b:fc:53:ef:00:77: 4e:be:14:a2:ef:42:21:9f:5d:bd:41:4b:71:30:92: 5b:01:4f:94:c0:94:d4:df:38:ab:c8:0e:5b:b3:2c: 1d:96:b6:8b:43:9e:74:1b:fa:b3:03:45:fd:98:79: 2a:d8:08:99:6f:35:b6:88:3b:42:77:85:c5:ee:af: 48:af:51:74:c2:2f:6d:26:9e:b2:66:ed:05:d4:74: 08:87:8c:df:8a:48:f5:96:cd:22:b2:49:fe:60:2d: 29:bb:4c:a3:e0:c3:ea:a2:0f:53:c4:c5:8f:48:72: 47:25:00:bd:b7:b6:a2:81:55:fe:ff:1f:ce:b8:09: 79:fd:e2:d1:d1:b4:4f:ef:bb:6d:f2:31:59:e0:2a: 0c:ea:36:28:3e:e0:33:e6:fa:71:6b:58:67:d9:33: dd:a8:75:ef:aa:c4:a1:5b:70:94:66:ca:3f:c9:05: 32:11:ac:87:e5:9e:58:53:ae:a0:bb:67:9a:78:b9: 81:00:51:d9:f5:f4:3c:34:db:bf:26:db:60:d2:41: 45:f0:63:02:b5:7f:f6:b2:5a:0b:49:fc:16:4d:1b: 3f:93:81:70:45:a2:89:2c:e5:3a:85:f0:cd:3f:ce: fc:0b:b8:0b:81:f0:25:d1:50:ab:8d:07:9d:62:cb: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.164.0/22 177.67.184.0/21 IPv6: 2804:1120::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52670 Signature Algorithm: sha256WithRSAEncryption 14:6a:41:a2:3a:40:08:32:18:e5:6d:d2:89:cb:2c:09:75:1c: d5:d0:5f:50:78:87:2d:13:7c:81:68:56:5c:a9:2a:61:6d:0c: 94:13:bb:e8:97:50:70:c1:4e:6a:e3:d9:a2:55:d6:89:92:53: e7:a8:7a:4e:e2:4f:52:b0:f5:fb:10:3c:e5:1f:0e:18:4a:b1: 63:5c:7e:57:ed:60:99:db:0c:4d:63:7f:71:99:80:d7:3f:86: 06:f9:58:92:3b:ce:e4:09:0a:9c:1c:8a:ef:53:d6:91:c5:b1: 12:b2:42:2c:06:24:35:d5:08:23:a8:73:90:5d:90:a1:b4:20: 85:10:7f:b5:78:19:59:7a:6f:94:99:3f:15:69:f7:07:f1:41: 97:6f:35:5a:2b:13:b4:55:b8:4c:bd:77:6d:02:c5:11:e8:ea: 6a:d7:2a:f3:13:24:e9:f5:02:6d:77:93:d1:8b:e8:7d:5e:e4: a9:eb:d9:ea:87:27:78:d9:71:5f:68:48:5b:9b:29:0e:e4:0e: 65:40:73:45:12:7d:97:b0:76:71:64:cb:f4:f5:87:fa:62:e0: 88:ae:7c:30:34:f5:11:e1:74:0b:82:fd:37:dc:2b:a3:ed:a9: 05:b9:24:d6:b9:65:6e:cc:9b:e6:2b:3f:fb:d1:e6:ae:e8:c5: e0:6e:59:fc -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUe0gm+V9O05TD02xSkWN/bwdnlrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMDE0NDNaFw0yNTA0MDIyMDE5NDNaMDMxMTAvBgNV BAMTKDA5RDJCREExMUY1RjMwRTcyQ0EwMkUxRjQzQ0NFQjU4M0UwMDcxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCilHSMxuKM/Dv8U+8Ad06+FKLv QiGfXb1BS3EwklsBT5TAlNTfOKvIDluzLB2WtotDnnQb+rMDRf2YeSrYCJlvNbaI O0J3hcXur0ivUXTCL20mnrJm7QXUdAiHjN+KSPWWzSKySf5gLSm7TKPgw+qiD1PE xY9IckclAL23tqKBVf7/H864CXn94tHRtE/vu23yMVngKgzqNig+4DPm+nFrWGfZ M92ode+qxKFbcJRmyj/JBTIRrIflnlhTrqC7Z5p4uYEAUdn19Dw0278m22DSQUXw YwK1f/ayWgtJ/BZNGz+TgXBFooks5TqF8M0/zvwLuAuB8CXRUKuNB51iyztLAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJ0r2hH18w5yyg Lh9DzOtYPgBxozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVBX dVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFFRmEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQVBX dVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFFRmEvMS8wOUQy QkRBMTFGNUYzMEU3MkNBMDJFMUY0M0NDRUI1ODNFMDA3MUEzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKqUqQDBAOxQ7gwDQQCAAIwBwMFACgEESAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM2+MA0GCSqGSIb3DQEBCwUAA4IBAQAUakGiOkAI MhjlbdKJyywJdRzV0F9QeIctE3yBaFZcqSphbQyUE7vol1BwwU5q49miVdaJklPn qHpO4k9SsPX7EDzlHw4YSrFjXH5X7WCZ2wxNY39xmYDXP4YG+ViSO87kCQqcHIrv U9aRxbESskIsBiQ11QgjqHOQXZChtCCFEH+1eBlZem+UmT8VafcH8UGXbzVaKxO0 VbhMvXdtAsUR6Opq1yrzEyTp9QJtd5PRi+h9XuSp69nqhyd42XFfaEhbmykO5A5l QHNFEn2XsHZxZMv09Yf6YuCIrnwwNPUR4XQLgv033Cuj7akFuSTWuWVuzJvmKz/7 0eau6MXgbln8 -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:06 2024 by rpki-client on console-ams.rpki-client.org