$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer File: ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer (raw, json) Hash identifier: zY9nNxeTcHD9xKrW9E0N/CVGfOGjO1KRDmcuQ0qvnU8= Subject key identifier: AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7B85F348666287E440306267DC1FE0297CA93795 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft caRepository: rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:27:56 +0000 Certificate not after: Wed 02 Apr 2025 18:32:56 +0000 Subordinate resources: AS: 263902 IP: 138.204.52.0/22 IP: 2804:2774::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:85:f3:48:66:62:87:e4:40:30:62:67:dc:1f:e0:29:7c:a9:37:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:27:56 2024 GMT Not After : Apr 2 18:32:56 2025 GMT Subject: CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:e6:ff:97:9e:22:31:ca:5c:98:73:9c:69: 35:dc:79:c3:d5:e2:fc:d0:a5:10:fe:e1:75:1a:c4: 64:a2:6f:fa:1a:87:7e:fb:d9:dc:ae:f1:04:b6:7f: f6:13:3d:b3:d7:96:b6:89:dd:be:8f:53:03:3e:ff: b8:67:11:d6:5d:c0:32:9c:7c:57:5d:38:38:23:bf: 38:a3:d9:f5:6b:61:63:bd:3a:72:ca:e9:cf:64:4e: e3:d2:e0:f7:76:02:8d:94:57:54:7a:82:c7:a3:b1: 54:4d:91:e5:27:a6:64:56:dc:b6:b4:0b:1a:e2:6d: fb:ec:c0:95:bb:09:46:6e:a7:0f:45:46:cb:30:e6: 19:20:70:a9:d9:6c:d7:6f:2e:76:ad:92:d6:4b:d1: 92:cd:8f:05:8c:c8:08:33:ee:ff:44:ed:4c:bb:5d: 09:69:33:a0:f7:20:d0:90:47:e1:3a:40:6b:ce:6c: 93:9a:f3:ab:7f:74:7a:8b:11:b7:b7:04:ab:c9:96: 38:f6:41:7d:df:07:ee:03:4f:77:c8:f3:a9:c2:d3: 71:d0:94:f9:33:57:1d:05:68:41:2f:82:bb:a2:a4: 24:c9:48:bd:33:49:f5:6b:b4:1c:3b:87:77:1d:8e: f3:cd:83:f1:1b:52:ba:7d:5c:81:a7:26:50:6f:e6: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.52.0/22 IPv6: 2804:2774::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263902 Signature Algorithm: sha256WithRSAEncryption bc:6d:59:b5:cc:f3:f9:61:d7:6d:9f:d0:53:87:ca:20:7d:11: 48:04:3b:f6:b1:24:f8:65:d2:50:1b:7e:71:a7:7d:e4:bf:08: b4:18:bb:bd:1b:0a:87:12:36:42:ab:ce:2d:59:95:a5:a1:f4: cc:42:5a:30:b6:18:cd:7c:ad:81:d5:ca:c3:45:ac:cb:2a:b1: 5a:cc:ea:e5:d8:fb:1b:3a:27:85:4d:03:69:4c:1b:81:4d:10: 18:7f:33:d6:6f:1e:d1:32:e8:0f:ef:9d:d3:89:9e:01:17:9d: 5b:61:6c:9b:b5:71:0c:e8:10:e8:35:8b:67:23:ba:d9:d6:36: a3:0d:9d:da:3a:48:86:81:c6:81:7b:eb:5a:09:a0:3b:72:17: 83:d4:83:01:89:36:db:8b:a9:68:e8:1e:aa:a3:57:07:ae:12: 79:52:7e:97:6f:07:a6:95:7d:63:0b:12:f8:55:4d:34:1d:be: f9:af:e1:2c:15:88:80:0e:2a:f3:60:91:03:19:87:f5:40:e5: 6e:cc:c6:6d:9a:3f:b9:ab:0a:d8:c0:51:06:6c:c0:5e:e3:90: f3:0c:34:f9:65:0a:b7:35:ca:78:e0:22:8f:4d:c1:cf:9a:67: cc:f2:56:bc:bf:50:8f:89:bc:da:8d:91:b3:60:72:1c:d6:87: 77:e4:3b:fc -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUe4XzSGZih+RAMGJn3B/gKXypN5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI3NTZaFw0yNTA0MDIxODMyNTZaMDMxMTAvBgNV BAMTKEFDRjlBRTBEMTcwRDQ0NkZENUE1QTM3N0EwRUNBQkFFQjdGNjI3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6sub/l54iMcpcmHOcaTXcecPV 4vzQpRD+4XUaxGSib/oah3772dyu8QS2f/YTPbPXlraJ3b6PUwM+/7hnEdZdwDKc fFddODgjvzij2fVrYWO9OnLK6c9kTuPS4Pd2Ao2UV1R6gsejsVRNkeUnpmRW3La0 CxribfvswJW7CUZupw9FRssw5hkgcKnZbNdvLnatktZL0ZLNjwWMyAgz7v9E7Uy7 XQlpM6D3INCQR+E6QGvObJOa86t/dHqLEbe3BKvJljj2QX3fB+4DT3fI86nC03HQ lPkzVx0FaEEvgruipCTJSL0zSfVrtBw7h3cdjvPNg/EbUrp9XIGnJlBv5hGfAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSs+a4NFw1Eb9Wl o3eg7Kuut/YnojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3dn VjV1c3N5QUNUbXJORVp0YXQyV1llWUNGOXBwc2hiRk1mMXF4SmRoZXEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3dn VjV1c3N5QUNUbXJORVp0YXQyV1llWUNGOXBwc2hiRk1mMXF4SmRoZXEvMS9BQ0Y5 QUUwRDE3MEQ0NDZGRDVBNUEzNzdBMEVDQUJBRUI3RjYyN0EyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKzDQwDQQCAAIwBwMFACgEJ3QwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAbeMA0GCSqGSIb3DQEBCwUAA4IBAQC8bVm1zPP5Yddtn9BT h8ogfRFIBDv2sST4ZdJQG35xp33kvwi0GLu9GwqHEjZCq84tWZWlofTMQlowthjN fK2B1crDRazLKrFazOrl2PsbOieFTQNpTBuBTRAYfzPWbx7RMugP753TiZ4BF51b YWybtXEM6BDoNYtnI7rZ1jajDZ3aOkiGgcaBe+taCaA7cheD1IMBiTbbi6lo6B6q o1cHrhJ5Un6XbwemlX1jCxL4VU00Hb75r+EsFYiADirzYJEDGYf1QOVuzMZtmj+5 qwrYwFEGbMBe45DzDDT5ZQq3Ncp44CKPTcHPmmfM8la8v1CPibzajZGzYHIc1od3 5Dv8 -----END CERTIFICATE-----Generated at Mon Jun 3 04:18:07 2024 by rpki-client on console-fra.rpki-client.org