$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer File: 76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.cer (raw, json) Hash identifier: p+h9YnHUgr9seJYCIjfiFGDJRdCPEWYUfPhZoNRZojU= Subject key identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 19E9FD327613E688C71222E99A6D0C7EC10B29FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft caRepository: rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 13:00:37 +0000 Certificate not after: Thu 03 Apr 2025 13:05:37 +0000 Subordinate resources: AS: 267177 IP: 45.230.232.0/22 IP: 2804:4950::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e9:fd:32:76:13:e6:88:c7:12:22:e9:9a:6d:0c:7e:c1:0b:29:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:00:37 2024 GMT Not After : Apr 3 13:05:37 2025 GMT Subject: CN=76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:02:79:73:fa:64:55:bf:e1:91:33:d5:51: c7:eb:9b:23:95:e5:14:4b:4a:b7:54:6d:ca:cd:42: 2b:17:81:62:d3:40:77:8f:93:e8:f8:a3:ab:f9:24: 6c:25:d7:19:05:b0:64:d0:bf:c8:c5:e6:d2:bb:c4: 37:ca:19:43:44:0a:dd:60:a5:a7:dc:0f:ba:b7:3d: e7:bf:89:3c:5c:af:ee:1a:80:57:af:a5:44:8a:24: c5:f3:28:84:c0:c5:e9:da:3d:79:47:0d:58:d0:1f: 8b:80:74:14:e2:e4:e2:84:f5:b5:c7:1f:ec:f4:9f: 61:4a:3e:e7:26:1d:d8:60:98:97:2f:93:0c:83:f1: b0:2d:08:7b:6b:e7:75:dd:bb:2b:e2:b2:24:0a:78: a4:50:ac:85:e1:58:f8:0a:90:f7:2e:c6:02:09:1a: e8:be:7b:03:84:57:d6:4a:d2:87:cb:b0:4e:d1:da: af:69:c6:3a:a5:3c:ab:d7:70:1c:4b:35:91:ee:df: ca:92:1c:c7:41:77:ac:f5:98:47:df:4d:2c:c8:d4: b6:d3:fb:fc:1c:4f:64:d0:7b:0f:c3:83:2c:83:96: 16:05:b6:2c:9f:7d:89:f6:6a:3c:36:52:8c:49:a5: 72:84:3f:bc:87:8b:df:d0:d5:ec:89:cc:a6:5a:07: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:EA:61:BB:9D:AF:3F:5B:58:88:6C:C3:E3:F6:A1:7E:BB:DF:E0:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNCRnjMNUS8jfSyFinMZPxvmvcatJZmoCsvcAwfnbe1W/1/76EA61BB9DAF3F5B58886CC3E3F6A17EBBDFE0A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.232.0/22 IPv6: 2804:4950::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267177 Signature Algorithm: sha256WithRSAEncryption 3e:a4:32:6e:43:37:04:e2:bb:e1:ee:78:d5:5f:3f:56:ac:08: 8d:07:e7:17:9d:f3:fb:81:de:17:94:85:6a:33:06:a5:d5:79: 8a:13:54:42:79:80:b2:1f:68:7c:ff:36:b7:25:99:8f:1a:12: 27:1a:ae:8e:24:75:76:fb:03:81:e9:a5:1c:75:bf:b6:3c:a6: 55:39:9b:a5:a4:1d:f2:60:93:17:8b:12:f8:1b:5d:c5:a9:3c: 42:8b:52:cc:9c:3b:71:48:29:b3:5e:35:83:6e:7e:dd:91:15: c2:8a:cd:37:80:8c:16:9d:0f:b4:2d:68:98:90:d3:2b:e7:f1: 88:45:f8:0c:70:1b:07:d0:c2:57:09:9e:4d:2a:f3:8f:39:9c: f2:1e:3f:d4:b6:57:94:7d:61:77:42:80:c5:07:c6:bc:f1:fd: f1:55:e2:a3:10:ad:85:7b:31:af:92:4e:a9:03:ca:0e:99:14: 4d:25:d7:a7:66:30:40:19:f4:ce:9f:67:d8:a8:6b:ae:8f:10: ae:a8:d0:d6:e3:07:df:2a:a5:54:4c:8b:68:2b:bd:c4:1f:c4: 2c:59:ad:a0:b0:03:a4:10:4e:af:7c:88:4b:e8:65:cd:03:b0: 80:58:ed:05:3b:da:ff:61:11:37:1d:a7:4d:9d:41:4a:1a:69: 9e:91:67:6b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUGen9MnYT5ojHEiLpmm0MfsELKf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMzAwMzdaFw0yNTA0MDMxMzA1MzdaMDMxMTAvBgNV BAMTKDc2RUE2MUJCOURBRjNGNUI1ODg4NkNDM0UzRjZBMTdFQkJERkUwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mQJ5c/pkVb/hkTPVUcfrmyOV 5RRLSrdUbcrNQisXgWLTQHePk+j4o6v5JGwl1xkFsGTQv8jF5tK7xDfKGUNECt1g pafcD7q3Pee/iTxcr+4agFevpUSKJMXzKITAxenaPXlHDVjQH4uAdBTi5OKE9bXH H+z0n2FKPucmHdhgmJcvkwyD8bAtCHtr53XduyvisiQKeKRQrIXhWPgKkPcuxgIJ Gui+ewOEV9ZK0ofLsE7R2q9pxjqlPKvXcBxLNZHu38qSHMdBd6z1mEffTSzI1LbT +/wcT2TQew/DgyyDlhYFtiyffYn2ajw2UoxJpXKEP7yHi9/Q1eyJzKZaBwFtAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR26mG7na8/W1iI bMPj9qF+u9/gojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ05D Um5qTU5VUzhqZlN5RmluTVpQeHZtdmNhdEpabW9Dc3ZjQXdmbmJlMVcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ05D Um5qTU5VUzhqZlN5RmluTVpQeHZtdmNhdEpabW9Dc3ZjQXdmbmJlMVcvMS83NkVB NjFCQjlEQUYzRjVCNTg4ODZDQzNFM0Y2QTE3RUJCREZFMEEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAIt5ugwDQQCAAIwBwMFACgESVAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBOpMA0GCSqGSIb3DQEBCwUAA4IBAQA+pDJuQzcE4rvh7njV Xz9WrAiNB+cXnfP7gd4XlIVqMwal1XmKE1RCeYCyH2h8/za3JZmPGhInGq6OJHV2 +wOB6aUcdb+2PKZVOZulpB3yYJMXixL4G13FqTxCi1LMnDtxSCmzXjWDbn7dkRXC is03gIwWnQ+0LWiYkNMr5/GIRfgMcBsH0MJXCZ5NKvOPOZzyHj/UtleUfWF3QoDF B8a88f3xVeKjEK2FezGvkk6pA8oOmRRNJdenZjBAGfTOn2fYqGuujxCuqNDW4wff KqVUTItoK73EH8QsWa2gsAOkEE6vfIhL6GXNA7CAWO0FO9r/YRE3HadNnUFKGmme kWdr -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:19 2024 by rpki-client on console-ams.rpki-client.org