$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer File: 0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer (raw, json) Hash identifier: 1+J8Q28xeJIhwhVrCKUTwKHQWyIE2oaNS56V0rRWM2o= Subject key identifier: 0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 458EE0442AF006B075C75C31AD9BDCBEADB1BA62 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft caRepository: rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 19:27:30 +0000 Certificate not after: Thu 03 Apr 2025 19:32:30 +0000 Subordinate resources: AS: 52608 IP: 177.86.143.0/24 IP: 2801:80:1bf0::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 22:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8e:e0:44:2a:f0:06:b0:75:c7:5c:31:ad:9b:dc:be:ad:b1:ba:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 19:27:30 2024 GMT Not After : Apr 3 19:32:30 2025 GMT Subject: CN=0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:65:68:53:60:ae:f6:01:e7:cd:60:d4:2b: a6:e5:48:6a:f1:eb:1f:a2:13:29:61:c5:03:45:ae: ba:97:fb:9e:e5:f9:65:e5:31:61:fd:22:bc:e2:35: 92:07:6d:c6:8a:b1:72:fc:26:b0:43:3b:60:0e:0b: 7a:1a:cc:92:a2:b7:e6:f0:8a:f4:16:a8:08:af:14: 43:5f:d6:80:c2:c7:35:4b:06:f3:99:23:f5:85:09: 63:d5:1b:7d:76:4a:05:03:c8:24:69:fc:82:73:13: 27:26:df:80:b5:e3:9e:f6:02:b2:37:31:68:c4:8f: f1:2d:6f:50:43:c4:f9:d1:71:d5:15:05:44:7a:53: cc:cb:34:88:e5:6f:76:28:eb:25:54:ef:15:ce:aa: 5b:18:c7:f8:ef:3c:64:39:42:30:94:9f:8f:32:96: ca:7c:f7:6a:e9:7a:40:4c:2f:c2:47:f8:9d:27:f5: 24:ff:14:fd:5e:38:54:c4:32:80:22:54:8a:32:74: b3:67:8e:6a:21:b5:8d:2e:95:3c:3f:8c:11:d1:2a: 84:96:a6:f7:0f:f7:0b:80:99:b7:19:f5:33:64:b5: 15:f4:6d:9b:64:27:b4:94:ec:44:c5:5f:8d:6e:cb: b0:5b:84:ef:2d:33:9a:cd:03:be:34:ff:40:f6:f9: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.86.143.0/24 IPv6: 2801:80:1bf0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52608 Signature Algorithm: sha256WithRSAEncryption 07:56:45:d5:ce:34:d8:c7:41:d5:e0:3d:21:87:73:51:dd:2a: 65:ab:d5:a1:e2:a8:0d:26:7b:19:5f:75:79:13:38:fd:ee:7a: de:9b:1c:a3:0f:ba:e3:2d:b9:fc:73:ab:b2:d5:6a:91:06:f5: 13:ac:ae:4a:e0:4a:fa:39:9e:3b:93:52:7a:e5:ea:0f:da:09: f4:dd:6b:cc:31:a6:fe:84:41:db:39:57:ce:62:a9:ff:db:3d: 55:f8:9b:4c:3d:33:86:3d:45:2d:3f:39:3b:64:15:61:28:5e: f2:ff:37:37:4c:77:2d:79:e0:3f:87:e0:32:27:02:e7:93:24: 90:fe:8c:d9:94:cb:7e:e3:eb:8c:90:03:56:3b:bb:d1:62:aa: e9:f9:e5:2c:27:ac:e9:1c:dd:8b:e6:45:e0:a1:aa:0f:a0:74: bb:1e:f2:46:6e:0c:87:a2:ea:9d:c0:37:df:eb:b9:85:52:a3: 3e:1d:23:b4:33:c6:33:70:e1:41:23:84:ed:a4:3c:dc:94:02: 1e:60:65:16:0e:39:7d:cf:0f:fb:5c:f3:62:6c:73:35:59:2a: 19:a1:81:5b:61:07:a8:f1:f2:2a:9e:6e:01:76:a9:3a:94:fe: 1d:fa:29:d0:f9:a6:f8:ac:f4:33:67:4e:40:82:f3:f5:3e:f5: 4c:85:61:dc -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIURY7gRCrwBrB1x1wxrZvcvq2xumIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxOTI3MzBaFw0yNTA0MDMxOTMyMzBaMDMxMTAvBgNV BAMTKDBDOTA3RTkxMkI1RUYzQjgzQUVBRTg1NDZGN0ExRERCREM1NTUxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGX2VoU2Cu9gHnzWDUK6blSGrx 6x+iEylhxQNFrrqX+57l+WXlMWH9IrziNZIHbcaKsXL8JrBDO2AOC3oazJKit+bw ivQWqAivFENf1oDCxzVLBvOZI/WFCWPVG312SgUDyCRp/IJzEycm34C14572ArI3 MWjEj/Etb1BDxPnRcdUVBUR6U8zLNIjlb3Yo6yVU7xXOqlsYx/jvPGQ5QjCUn48y lsp892rpekBML8JH+J0n9ST/FP1eOFTEMoAiVIoydLNnjmohtY0ulTw/jBHRKoSW pvcP9wuAmbcZ9TNktRX0bZtkJ7SU7ETFX41uy7BbhO8tM5rNA740/0D2+WeDAgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQMkH6RK17zuDrq 6FRveh3b3FVRoDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEtQ VUNveFFneTd4azlQUTU5dnl6eTRlSjV3R1hpYlVlU0VFcmthdXEzWTEvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRL UFVDb3hRZ3k3eGs5UFE1OXZ5enk0ZUo1d0dYaWJVZVNFRXJrYXVxM1kxLzEvMEM5 MDdFOTEyQjVFRjNCODNBRUFFODU0NkY3QTFEREJEQzU1NTFBMC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAsVaPMA8EAgACMAkDBwAoAQCAG/AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAM2AMA0GCSqGSIb3DQEBCwUAA4IBAQAHVkXVzjTYx0HV 4D0hh3NR3Splq9Wh4qgNJnsZX3V5Ezj97nremxyjD7rjLbn8c6uy1WqRBvUTrK5K 4Er6OZ47k1J65eoP2gn03WvMMab+hEHbOVfOYqn/2z1V+JtMPTOGPUUtPzk7ZBVh KF7y/zc3THcteeA/h+AyJwLnkySQ/ozZlMt+4+uMkANWO7vRYqrp+eUsJ6zpHN2L 5kXgoaoPoHS7HvJGbgyHouqdwDff67mFUqM+HSO0M8YzcOFBI4TtpDzclAIeYGUW Djl9zw/7XPNibHM1WSoZoYFbYQeo8fIqnm4Bdqk6lP4d+inQ+ab4rPQzZ05AgvP1 PvVMhWHc -----END CERTIFICATE-----Generated at Sat Jun 29 22:09:22 2024 by rpki-client on console-fra.rpki-client.org