$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer File: A1E6749C09E9E32D11C15678D45C1B936D525291.cer (raw, json) Hash identifier: RUa+NcTMwCw/Epc3FEigDmAuWYMrqdFek1+BXgNCoQw= Subject key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1DEBD1CEFB96A9785C1ED6B093F3F2BC500562C8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft caRepository: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 02 May 2024 19:03:58 +0000 Certificate not after: Thu 01 May 2025 19:08:58 +0000 Subordinate resources: AS: 263250 IP: 45.180.252.0/22 IP: 177.234.160.0/19 IP: 2804:17c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:eb:d1:ce:fb:96:a9:78:5c:1e:d6:b0:93:f3:f2:bc:50:05:62:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 2 19:03:58 2024 GMT Not After : May 1 19:08:58 2025 GMT Subject: CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:80:79:3b:7b:4e:e8:c9:65:8c:a2:99:af: 45:47:38:18:11:83:61:15:ab:98:5e:38:0b:ee:0e: 9a:18:ee:89:e6:36:a1:7c:13:91:15:f5:a3:be:f2: 17:8a:66:3e:8a:6f:c0:20:14:3f:ae:d2:bc:d3:92: 72:1a:23:07:70:dc:d1:02:87:d5:9e:20:f6:29:3a: 4e:e0:99:16:24:1b:cc:d1:ed:cc:db:c1:e7:c4:2a: a3:5f:1c:5a:a9:69:a5:da:78:ba:a8:5f:4e:87:9b: bc:f9:eb:40:12:fb:b7:40:e6:9f:f7:78:0c:da:6a: 6b:07:cd:ea:5b:55:c4:ea:e0:8b:28:2a:07:7a:10: 28:78:6b:26:3d:cf:7e:d1:b0:88:90:79:ad:81:bc: 2a:e6:0d:41:ec:a9:ad:2b:e5:8b:1d:a0:dd:db:f0: 4e:95:e2:85:d1:b4:ac:37:c4:2f:6c:02:82:96:05: 83:43:9f:ba:ca:53:eb:1e:2c:06:bb:d9:d0:89:d4: ef:ff:c9:5d:04:55:35:b6:7b:5f:93:6a:00:77:1b: bf:b0:18:89:23:d3:c8:10:b8:91:fe:d2:a3:20:24: 4a:36:46:4f:40:ca:76:85:e0:a1:64:92:70:0e:35: 87:b1:4b:09:30:ac:99:1c:8a:a1:b9:cd:39:1b:52: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.180.252.0/22 177.234.160.0/19 IPv6: 2804:17c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263250 Signature Algorithm: sha256WithRSAEncryption ae:50:27:f4:72:5f:a0:6b:25:04:7d:ab:cf:c5:44:31:17:ec: f6:9f:3f:e9:89:eb:8f:88:7f:78:23:7b:aa:5c:08:95:34:da: 72:1e:e5:ca:91:fa:69:44:5b:25:63:e2:b3:d2:33:36:99:42: d2:a7:23:21:5b:ec:99:b8:cc:02:6a:dc:f8:09:60:0c:ac:23: be:00:50:25:9b:e3:1d:1a:95:00:fc:9e:cd:0c:4e:9d:9d:76: 5b:68:2d:1b:13:1c:d2:a8:24:73:6d:be:95:8d:a3:d3:f3:73: 86:23:08:76:84:b6:96:de:2d:12:ee:11:d7:58:85:81:f7:aa: 17:55:cd:27:a8:a1:07:8a:73:3d:49:ec:3e:81:cc:05:52:35: d7:4d:c5:79:bf:8f:92:a1:74:cc:b5:68:b9:51:ab:ea:b1:70: 7e:b0:5b:8b:07:31:ea:b4:da:fb:ad:37:99:69:86:46:b8:97: a3:ba:f1:20:90:4d:9e:a5:59:73:ea:8c:36:8c:8c:61:c0:1b: 33:78:d6:e9:18:8c:2c:de:a0:41:e5:a3:1b:a8:a0:60:3f:4b: 2c:3d:32:12:12:77:e4:0b:e0:4e:15:eb:7b:13:d3:56:4b:74: cd:19:86:55:dc:0b:c6:cc:c9:7b:d9:87:67:a1:71:2c:e2:67: 18:d4:59:c8 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUHevRzvuWqXhcHtawk/PyvFAFYsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MDIxOTAzNThaFw0yNTA1MDExOTA4NThaMDMxMTAvBgNV BAMTKEExRTY3NDlDMDlFOUUzMkQxMUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fYB5O3tO6MlljKKZr0VHOBgR g2EVq5heOAvuDpoY7onmNqF8E5EV9aO+8heKZj6Kb8AgFD+u0rzTknIaIwdw3NEC h9WeIPYpOk7gmRYkG8zR7czbwefEKqNfHFqpaaXaeLqoX06Hm7z560AS+7dA5p/3 eAzaamsHzepbVcTq4IsoKgd6ECh4ayY9z37RsIiQea2BvCrmDUHsqa0r5YsdoN3b 8E6V4oXRtKw3xC9sAoKWBYNDn7rKU+seLAa72dCJ1O//yV0EVTW2e1+TagB3G7+w GIkj08gQuJH+0qMgJEo2Rk9AynaF4KFkknAONYexSwkwrJkciqG5zTkbUjGZAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh5nScCenjLRHB VnjUXBuTbVJSkTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFlk MmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RZ ZDJpSjluVTJ0aFNWUW9ncENaNmZKYWRhZ0RqRzlBY3M5WXRXOGNOQVBYLzAvQTFF Njc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2RDUyNTI5MS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLbT8AwQFseqgMA0EAgACMAcDBQAoBBfEMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQEUjANBgkqhkiG9w0BAQsFAAOCAQEArlAn9HJf oGslBH2rz8VEMRfs9p8/6Ynrj4h/eCN7qlwIlTTach7lypH6aURbJWPis9IzNplC 0qcjIVvsmbjMAmrc+AlgDKwjvgBQJZvjHRqVAPyezQxOnZ12W2gtGxMc0qgkc22+ lY2j0/NzhiMIdoS2lt4tEu4R11iFgfeqF1XNJ6ihB4pzPUnsPoHMBVI1103Feb+P kqF0zLVouVGr6rFwfrBbiwcx6rTa+603mWmGRriXo7rxIJBNnqVZc+qMNoyMYcAb M3jW6RiMLN6gQeWjG6igYD9LLD0yEhJ35AvgThXrexPTVkt0zRmGVdwLxszJe9mH Z6FxLOJnGNRZyA== -----END CERTIFICATE-----Generated at Mon Jun 3 04:18:07 2024 by rpki-client on console-fra.rpki-client.org