$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer File: A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.cer (raw, json) Hash identifier: 25UIrPPuRDFj4rIXLQUA2k0dOnJgcscPVHyW3JB2ZhY= Subject key identifier: A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 33B0B2E320271AEDE4D9AC654FEB28F4C694C44A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft caRepository: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 08:06:59 +0000 Certificate not after: Thu 03 Apr 2025 08:11:59 +0000 Subordinate resources: AS: 268084 IP: 45.168.244.0/22 IP: 2804:57c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b0:b2:e3:20:27:1a:ed:e4:d9:ac:65:4f:eb:28:f4:c6:94:c4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 08:06:59 2024 GMT Not After : Apr 3 08:11:59 2025 GMT Subject: CN=A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:f6:78:73:dc:2f:b8:d5:16:d6:5f:cb:9f: 05:f3:82:f9:ba:6c:1a:65:79:62:91:79:a4:25:5a: 7f:5c:30:c4:1c:b5:db:5a:20:f8:94:8d:40:1c:dd: 5a:9c:c2:ba:f7:46:d0:1e:e0:13:54:47:e2:c6:5b: ea:6a:9e:c4:18:3b:1b:98:0e:9b:75:41:f8:bf:2e: 12:01:b8:45:41:16:4f:69:2f:30:88:c6:bf:6a:a4: d6:bc:1c:d1:6d:8c:8f:cd:91:f1:c7:3e:cc:00:0c: e8:cd:ee:f6:b2:df:8f:b2:3d:2c:dd:6e:a2:8f:e5: 52:a7:a5:55:07:ed:ca:46:1e:5d:d6:4c:af:01:aa: 58:47:05:00:56:bd:86:f3:ff:d4:4b:ba:47:7f:50: 45:d8:fd:82:fb:28:2d:18:fe:7d:51:ca:29:25:60: 7f:d3:a0:e3:e3:bd:70:88:6b:98:51:65:89:af:c2: 2c:37:dc:42:94:35:ae:db:63:35:11:38:bb:d9:d9: d8:5b:a7:11:87:84:4f:28:95:79:14:b9:c7:01:2c: fe:4d:10:3e:af:e4:b5:19:44:07:ba:96:01:8c:98: 2e:34:ee:4f:73:8e:86:14:78:9d:09:55:e9:18:80: 1d:d7:5c:7d:88:95:e2:fd:ac:9c:87:7d:c7:99:6b: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:25:E3:4C:BB:9E:F2:E8:9F:FA:32:29:9D:80:F0:A2:1A:0D:DC:9F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/1/A125E34CBB9EF2E89FFA32299D80F0A21A0DDC9F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.244.0/22 IPv6: 2804:57c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268084 Signature Algorithm: sha256WithRSAEncryption 55:ea:5e:5c:ea:c1:37:b5:e8:12:dc:e2:cb:62:ed:68:e7:06: b2:a5:df:40:6c:5d:06:bf:ee:5e:f6:d6:46:07:00:9f:04:23: 12:69:e9:d7:4b:5a:fd:4c:14:f8:a6:7a:75:e1:be:87:9f:75: a6:1c:b1:00:96:42:63:aa:ec:e9:dc:02:41:82:3a:f9:ac:f1: d5:96:de:89:df:91:6b:90:6e:b8:e4:f1:f1:11:90:6e:9b:5e: ad:9a:d2:c6:98:50:eb:05:e2:03:a9:f6:61:ca:02:65:a8:74: 4f:ea:36:a3:08:fd:d8:02:23:aa:57:a4:cc:57:07:6e:b4:84: 51:6c:ac:82:78:6d:12:d7:dc:a5:1a:d9:89:d5:cb:eb:6e:29: 3b:44:7f:fb:ca:ed:99:26:2c:5f:c6:3e:72:35:96:08:29:06: 10:6a:da:02:86:1e:e3:6f:87:be:45:71:2e:4c:ef:bb:2d:69: 4e:86:4f:f1:95:5e:2f:c6:6b:89:7e:13:41:97:bd:a6:54:e1: 13:ae:d0:30:65:9a:c5:a3:ff:9d:9c:fc:33:52:9b:1f:3f:05: e5:f8:66:89:df:b6:86:c8:04:dd:8d:45:75:6e:cc:22:29:c3: 1d:7c:d6:78:9e:fb:d8:24:e1:b6:ea:6d:a8:76:92:4a:0d:e9: dc:91:e5:1f -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUM7Cy4yAnGu3k2axlT+so9MaUxEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwODA2NTlaFw0yNTA0MDMwODExNTlaMDMxMTAvBgNV BAMTKEExMjVFMzRDQkI5RUYyRTg5RkZBMzIyOTlEODBGMEEyMUEwRERDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDfZ4c9wvuNUW1l/LnwXzgvm6 bBpleWKReaQlWn9cMMQctdtaIPiUjUAc3Vqcwrr3RtAe4BNUR+LGW+pqnsQYOxuY Dpt1Qfi/LhIBuEVBFk9pLzCIxr9qpNa8HNFtjI/NkfHHPswADOjN7vay34+yPSzd bqKP5VKnpVUH7cpGHl3WTK8BqlhHBQBWvYbz/9RLukd/UEXY/YL7KC0Y/n1Ryikl YH/ToOPjvXCIa5hRZYmvwiw33EKUNa7bYzUROLvZ2dhbpxGHhE8olXkUuccBLP5N ED6v5LUZRAe6lgGMmC407k9zjoYUeJ0JVekYgB3XXH2IleL9rJyHfceZa43fAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBShJeNMu57y6J/6 MimdgPCiGg3cnzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzV3 WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0c1 d1htVGJqR1hkQ3NqUGc1OGV6YUNpN1pOV2dOWjk3aWc4OUh6REVwZlRWLzEvQTEy NUUzNENCQjlFRjJFODlGRkEzMjI5OUQ4MEYwQTIxQTBEREM5Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLaj0MA0EAgACMAcDBQAoBFfAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQXNDANBgkqhkiG9w0BAQsFAAOCAQEAVepeXOrBN7XoEtzi y2LtaOcGsqXfQGxdBr/uXvbWRgcAnwQjEmnp10ta/UwU+KZ6deG+h591phyxAJZC Y6rs6dwCQYI6+azx1Zbeid+Ra5BuuOTx8RGQbpterZrSxphQ6wXiA6n2YcoCZah0 T+o2owj92AIjqlekzFcHbrSEUWysgnhtEtfcpRrZidXL624pO0R/+8rtmSYsX8Y+ cjWWCCkGEGraAoYe42+HvkVxLkzvuy1pToZP8ZVeL8ZriX4TQZe9plThE67QMGWa xaP/nZz8M1KbHz8F5fhmid+2hsgE3Y1FdW7MIinDHXzWeJ772CThtuptqHaSSg3p 3JHlHw== -----END CERTIFICATE-----Generated at Mon Jun 3 04:18:07 2024 by rpki-client on console-fra.rpki-client.org