$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer File: 29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.cer (raw, json) Hash identifier: C3r3QnI9tRhg4OQr2AhI6SNH9zoEw4wRtgnBF7JKfzU= Subject key identifier: 29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 73E854DB76EC3ED96FD814896634A37D5DFD6A91 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.mft caRepository: rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 22:29:30 +0000 Certificate not after: Thu 03 Apr 2025 22:34:30 +0000 Subordinate resources: AS: 61722 IP: 131.72.36.0/22 IP: 2804:1b54::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e8:54:db:76:ec:3e:d9:6f:d8:14:89:66:34:a3:7d:5d:fd:6a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 22:29:30 2024 GMT Not After : Apr 3 22:34:30 2025 GMT Subject: CN=29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:80:e3:b1:1e:2f:29:54:3f:8f:84:2c:08: b7:2b:fa:ed:3c:5b:fa:7c:b2:f8:e6:4f:53:f6:d8: ad:e4:35:29:4e:b9:c2:88:69:0a:f3:a0:d1:48:88: 81:df:f4:b8:3c:fa:ee:4b:d9:25:4c:cd:05:d1:16: ed:d7:8c:6f:08:06:05:13:0c:09:de:a0:87:9d:bc: 2b:66:dc:e0:1b:b3:30:d4:f5:ed:77:12:eb:b7:ee: 39:7f:74:bf:80:73:6f:bd:ae:af:d6:3c:9f:88:6f: 07:f0:53:30:f2:74:1e:e4:b9:34:f0:a0:39:14:e9: 01:35:cb:96:5f:b7:b5:ea:44:54:be:cc:c5:03:51: 67:cc:f8:38:4f:37:2f:aa:7c:89:68:10:7e:4c:f2: 81:b2:bf:ab:1b:ee:97:09:d0:c9:e6:70:c3:75:dc: 88:b7:d8:df:3d:56:b0:70:b1:f0:a6:e9:50:c3:ac: 15:66:16:f9:b6:ff:17:ad:23:14:23:b3:16:ee:d0: cd:ac:b8:b1:27:9c:b4:cc:3c:13:e3:52:78:33:1a: 4e:90:2c:2c:bd:41:49:eb:4b:ee:ac:a3:e7:8c:7d: a4:94:7f:fc:bf:9e:17:e8:48:fa:2c:f8:f3:26:dd: a9:e3:fc:bc:d1:4f:0e:52:41:1d:07:7c:f8:22:e2: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:12:5A:50:D3:9B:1A:BC:3B:AB:97:49:5F:6B:1E:71:5B:8A:CB:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/1/29125A50D39B1ABC3BAB97495F6B1E715B8ACB8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.72.36.0/22 IPv6: 2804:1b54::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61722 Signature Algorithm: sha256WithRSAEncryption 57:ce:98:73:cd:9a:e5:78:77:46:ff:f3:dc:37:ef:05:d9:6a: 78:96:c4:f4:e5:07:f6:11:6d:46:a1:52:98:ab:7d:91:69:65: 8f:97:e5:4d:40:40:f3:5d:c8:b7:fa:0b:cf:e4:e7:07:20:cf: 82:d8:ea:21:f7:ca:47:92:61:bd:40:e6:c8:cb:45:4b:f4:97: 0c:e9:52:03:3a:92:43:31:76:97:55:0b:33:5a:2b:b9:20:a5: 6e:bb:22:ec:d1:ed:43:96:d2:de:35:69:7d:37:27:2b:b8:b6: 7c:1b:ab:97:fa:49:a9:17:76:0d:3b:1b:88:d0:d0:a3:82:1f: 95:cc:9b:f0:24:a3:45:8f:1b:dc:6c:12:32:89:f7:9e:e9:bd: c9:85:cd:f3:35:0f:cd:36:07:3d:cc:c9:cd:7c:34:df:e8:cd: f1:bf:3c:75:e5:74:e3:92:d0:17:f9:28:b7:a5:52:56:ce:e1: b0:a1:0d:01:b3:1e:77:27:8d:b5:15:d7:00:eb:67:1a:93:e4: ea:98:f8:ce:e6:e2:6d:04:4e:b0:78:e1:45:6d:2a:11:e6:3d: 6b:6e:37:16:f8:83:96:71:00:37:96:1f:75:1b:47:2c:af:c2: 7b:f1:01:6c:21:3f:d9:5f:62:21:3e:20:8c:b9:3f:34:df:28: 03:57:70:df -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUc+hU23bsPtlv2BSJZjSjfV39apEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQyMjI5MzBaFw0yNTA0MDMyMjM0MzBaMDMxMTAvBgNV BAMTKDI5MTI1QTUwRDM5QjFBQkMzQkFCOTc0OTVGNkIxRTcxNUI4QUNCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwYDjsR4vKVQ/j4QsCLcr+u08 W/p8svjmT1P22K3kNSlOucKIaQrzoNFIiIHf9Lg8+u5L2SVMzQXRFu3XjG8IBgUT DAneoIedvCtm3OAbszDU9e13Euu37jl/dL+Ac2+9rq/WPJ+IbwfwUzDydB7kuTTw oDkU6QE1y5Zft7XqRFS+zMUDUWfM+DhPNy+qfIloEH5M8oGyv6sb7pcJ0MnmcMN1 3Ii32N89VrBwsfCm6VDDrBVmFvm2/xetIxQjsxbu0M2suLEnnLTMPBPjUngzGk6Q LCy9QUnrS+6so+eMfaSUf/y/nhfoSPos+PMm3anj/LzRTw5SQR0HfPgi4lR5AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQpElpQ05savDur l0lfax5xW4rLjTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3pL TWFGQlB4dTUxdlFGZHFFWEdKclNBMUYydU5VN05uZzF5c0tQa0xIWEQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM3pL TWFGQlB4dTUxdlFGZHFFWEdKclNBMUYydU5VN05uZzF5c0tQa0xIWEQvMS8yOTEy NUE1MEQzOUIxQUJDM0JBQjk3NDk1RjZCMUU3MTVCOEFDQjhELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKDSCQwDQQCAAIwBwMFACgEG1QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAPEaMA0GCSqGSIb3DQEBCwUAA4IBAQBXzphzzZrleHdG//Pc N+8F2Wp4lsT05Qf2EW1GoVKYq32RaWWPl+VNQEDzXci3+gvP5OcHIM+C2Ooh98pH kmG9QObIy0VL9JcM6VIDOpJDMXaXVQszWiu5IKVuuyLs0e1DltLeNWl9NycruLZ8 G6uX+kmpF3YNOxuI0NCjgh+VzJvwJKNFjxvcbBIyifee6b3Jhc3zNQ/NNgc9zMnN fDTf6M3xvzx15XTjktAX+Si3pVJWzuGwoQ0Bsx53J421FdcA62cak+TqmPjO5uJt BE6weOFFbSoR5j1rbjcW+IOWcQA3lh91G0csr8J78QFsIT/ZX2IhPiCMuT803ygD V3Df -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:10 2024 by rpki-client on console-ams.rpki-client.org