$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer File: 4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.cer (raw, json) Hash identifier: 2dUZ9swkjLMkOXVzWl97pSqG8s55pB19r5VZVL2zNkQ= Subject key identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 19D0F5A527B59B36BE25C3C220248090FC7E0F90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft caRepository: rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:27:18 +0000 Certificate not after: Wed 02 Apr 2025 18:32:18 +0000 Subordinate resources: AS: 270820 IP: 186.194.168.0/22 IP: 2804:71ec::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d0:f5:a5:27:b5:9b:36:be:25:c3:c2:20:24:80:90:fc:7e:0f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:27:18 2024 GMT Not After : Apr 2 18:32:18 2025 GMT Subject: CN=4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:c0:0a:fb:fe:a8:78:60:c0:8f:ca:25:a0: de:90:3d:08:25:8b:e7:18:65:9a:47:53:cf:20:64: 95:07:ac:d8:92:ca:e2:4c:2f:f5:36:e4:45:85:1c: c0:25:f1:e5:a8:6f:9b:33:07:64:e1:c5:61:7a:15: 96:6d:8f:57:06:2c:22:06:22:c4:bd:a1:07:73:80: 8b:9b:c0:1f:63:b9:db:39:39:12:7b:b8:06:12:78: 05:e4:72:1f:0c:06:3c:e3:eb:84:c7:62:8b:14:4e: f4:14:31:dc:a1:eb:4b:89:fd:c3:6f:46:3d:8e:be: 62:35:9e:f7:0c:27:4e:b6:44:bc:fd:54:1a:be:84: 63:c9:d8:21:73:b7:87:ce:a6:83:42:dd:e9:57:9b: 4a:8d:91:be:17:99:07:e1:02:7d:3f:dc:09:b3:27: f0:1a:08:7d:67:85:d4:69:f7:1b:1a:ba:44:1f:20: 64:32:8b:40:bf:db:35:bf:d7:9c:e7:09:92:a3:50: 7f:7d:d6:83:c5:d1:a1:5e:61:c9:f7:1f:23:76:44: ff:01:be:18:53:6d:91:f5:f7:ed:8b:9c:01:ef:4a: 60:35:70:bf:cd:6a:c1:1b:f9:ba:53:e4:15:c1:76: 4d:b8:c9:79:f5:48:bb:f4:1d:e6:d2:27:6e:83:e6: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:13:F2:BD:E0:8D:3C:28:B7:34:73:1A:6E:80:F7:AB:4C:D6:6E:4D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bgy9up9frmvAXvzFhUewjB2ZzhQy2u5YNbEyoRVqyzWw/1/4413F2BDE08D3C28B734731A6E80F7AB4CD66E4D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 186.194.168.0/22 IPv6: 2804:71ec::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270820 Signature Algorithm: sha256WithRSAEncryption 2a:58:65:f0:43:43:d3:7c:d2:d3:d2:da:91:02:0b:8c:f0:65: b8:2d:4a:79:5b:3a:39:07:5a:5d:6a:1d:41:d1:b8:76:40:ff: 07:45:da:dc:b4:7b:58:b0:f6:2d:54:6e:90:a1:90:ea:0f:68: e8:a1:d0:f8:9a:d5:7a:50:bb:b3:fa:4d:4c:7d:b6:8a:26:8d: 93:4b:56:a6:2b:8b:61:15:b4:48:83:f4:c3:9e:b2:88:49:10: 36:68:4e:4d:c1:ea:f3:55:40:23:16:19:74:37:02:86:43:e3: e7:9f:1a:52:85:06:95:34:4e:59:0e:50:8b:6a:04:9e:5a:e2: e2:18:0e:c6:55:87:58:b1:5a:ec:7f:7f:f4:a7:8d:a3:78:8a: 86:0b:19:5c:85:06:bf:62:1f:08:20:91:d6:1f:6a:bb:4f:16: 51:61:b5:8b:e8:00:59:db:31:d7:ed:fe:ba:3b:65:32:db:97: 6f:79:d3:6f:75:86:9f:fa:43:9d:3f:30:f8:4f:79:a9:e4:9c: e7:a7:16:72:ce:7d:74:7b:2e:bd:eb:55:ea:23:af:b5:08:70: 59:91:87:bb:31:1f:5e:9a:c0:5a:f1:0f:e6:8b:5a:5c:4f:18: c6:2c:38:b9:b4:e5:e7:34:e8:c0:b8:04:64:bb:41:9d:5c:d3: 9e:ac:be:2d -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUGdD1pSe1mza+JcPCICSAkPx+D5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI3MThaFw0yNTA0MDIxODMyMThaMDMxMTAvBgNV BAMTKDQ0MTNGMkJERTA4RDNDMjhCNzM0NzMxQTZFODBGN0FCNENENjZFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+cAK+/6oeGDAj8oloN6QPQgl i+cYZZpHU88gZJUHrNiSyuJML/U25EWFHMAl8eWob5szB2ThxWF6FZZtj1cGLCIG IsS9oQdzgIubwB9juds5ORJ7uAYSeAXkch8MBjzj64THYosUTvQUMdyh60uJ/cNv Rj2OvmI1nvcMJ062RLz9VBq+hGPJ2CFzt4fOpoNC3elXm0qNkb4XmQfhAn0/3Amz J/AaCH1nhdRp9xsaukQfIGQyi0C/2zW/15znCZKjUH991oPF0aFeYcn3HyN2RP8B vhhTbZH19+2LnAHvSmA1cL/NasEb+bpT5BXBdk24yXn1SLv0HebSJ26D5kLPAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBREE/K94I08KLc0 cxpugPerTNZuTTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 OXVwOWZybXZBWHZ6RmhVZXdqQjJaemhReTJ1NVlOYkV5b1JWcXl6V3cvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQmd5 OXVwOWZybXZBWHZ6RmhVZXdqQjJaemhReTJ1NVlOYkV5b1JWcXl6V3cvMS80NDEz RjJCREUwOEQzQzI4QjczNDczMUE2RTgwRjdBQjRDRDY2RTRELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK6wqgwDQQCAAIwBwMFACgEcewwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCHkMA0GCSqGSIb3DQEBCwUAA4IBAQAqWGXwQ0PTfNLT0tqR AguM8GW4LUp5Wzo5B1pdah1B0bh2QP8HRdrctHtYsPYtVG6QoZDqD2joodD4mtV6 ULuz+k1MfbaKJo2TS1amK4thFbRIg/TDnrKISRA2aE5NwerzVUAjFhl0NwKGQ+Pn nxpShQaVNE5ZDlCLagSeWuLiGA7GVYdYsVrsf3/0p42jeIqGCxlchQa/Yh8IIJHW H2q7TxZRYbWL6ABZ2zHX7f66O2Uy25dvedNvdYaf+kOdPzD4T3mp5JznpxZyzn10 ey6961XqI6+1CHBZkYe7MR9emsBa8Q/mi1pcTxjGLDi5tOXnNOjAuARku0GdXNOe rL4t -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:13 2024 by rpki-client on console-ams.rpki-client.org