$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer File: C21506A6156B7F8310321D898139CEE0A28D6935.cer (raw, json) Hash identifier: /ouwqK4X/CEar7grP3uAdYfL2LYbNCsWsuvh6HoM9po= Subject key identifier: C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 2625E3FCB7383F344BA8ADF6B20BC6F82D7DD3E5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/C21506A6156B7F8310321D898139CEE0A28D6935.mft caRepository: rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:17:41 +0000 Certificate not after: Thu 03 Apr 2025 07:22:41 +0000 Subordinate resources: AS: 53195 IP: 187.121.144.0/21 IP: 201.87.240.0/20 IP: 2804:3a8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:25:e3:fc:b7:38:3f:34:4b:a8:ad:f6:b2:0b:c6:f8:2d:7d:d3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:17:41 2024 GMT Not After : Apr 3 07:22:41 2025 GMT Subject: CN=C21506A6156B7F8310321D898139CEE0A28D6935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:63:09:aa:fa:e7:10:86:b0:81:fb:7d:cd: 0f:01:c0:7f:15:1e:b4:4c:2c:96:1d:62:de:77:43: 6b:ca:53:da:16:73:e1:7f:28:91:f5:7a:a2:e7:5f: 94:17:de:45:ed:ad:5d:ac:cd:69:d3:1e:55:a6:3d: 6b:8a:4e:a1:ff:76:a3:53:80:a9:4d:93:f3:43:53: 58:83:49:19:13:f1:9b:16:39:3c:ec:8d:97:6d:ed: 53:90:bc:91:ae:a1:8a:08:82:0b:01:8e:fb:24:24: 8a:ec:af:0f:b8:90:56:4b:f1:a7:b5:55:e2:ff:d2: 9b:3a:f6:a3:c4:9b:4c:29:64:a3:7e:aa:00:cb:7a: 91:04:6e:81:72:fa:d0:6e:f9:c2:96:46:17:23:40: c2:6d:77:a7:8e:91:16:c1:a6:36:d7:53:ff:47:6a: 79:3e:52:b4:f3:55:20:28:bb:56:28:17:59:65:85: 95:f8:9d:4d:8e:d1:88:1e:01:d2:d0:74:c4:08:b3: a4:95:d5:26:a7:ee:7a:ed:87:71:fd:09:26:42:18: 05:52:2d:e5:17:d6:7a:a6:57:00:11:e5:ae:b1:db: 4a:ce:03:4a:86:1d:65:4b:d3:91:16:01:09:99:db: af:9a:61:dc:b7:f9:91:99:ef:12:55:cd:1c:3c:c1: ef:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/C21506A6156B7F8310321D898139CEE0A28D6935.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.121.144.0/21 201.87.240.0/20 IPv6: 2804:3a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53195 Signature Algorithm: sha256WithRSAEncryption 75:2d:4d:0e:e3:c3:88:34:58:10:f2:d2:81:64:20:f3:4c:b5: c3:9a:bf:f7:69:df:0c:b8:d5:38:6d:24:28:f0:37:bd:36:b0: 03:9b:f6:90:74:c3:49:5f:5c:f5:25:a0:c4:08:82:d3:40:ef: 5b:ee:d3:b1:73:dd:d4:f6:22:1e:e9:90:36:c0:f6:21:1f:43: 23:cb:7d:14:3e:18:f8:f0:f7:be:98:0e:e7:ce:8f:3b:5c:54: 4d:f7:7a:13:66:f1:d6:0f:47:1a:35:98:32:1f:8d:1e:0e:8a: d2:25:08:f0:3f:7c:46:15:19:95:a2:69:cb:85:ea:db:9a:f3: ca:df:23:18:58:09:3b:08:b8:6a:e5:ab:94:9f:6d:1d:42:0a: c8:c7:47:28:86:e5:a5:0f:22:eb:c4:84:8d:e9:37:a8:2f:3b: 02:b5:77:fd:a7:45:ad:7c:38:f7:cc:88:d6:18:4c:3e:83:c3: 7c:d2:0b:44:76:cc:9a:b7:79:67:b5:06:04:5c:79:4e:73:a2: 23:57:08:43:8e:07:0e:82:8d:c7:90:08:e0:3f:7c:52:61:d3: 5d:4a:81:ba:02:90:32:17:94:35:4f:64:85:15:6e:8d:6a:56: 0c:9d:49:61:c3:48:db:e8:30:37:49:f4:a7:f7:41:78:05:f7: 24:a5:7a:28 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJiXj/Lc4PzRLqK32sgvG+C190+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzE3NDFaFw0yNTA0MDMwNzIyNDFaMDMxMTAvBgNV BAMTKEMyMTUwNkE2MTU2QjdGODMxMDMyMUQ4OTgxMzlDRUUwQTI4RDY5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5WMJqvrnEIawgft9zQ8BwH8V HrRMLJYdYt53Q2vKU9oWc+F/KJH1eqLnX5QX3kXtrV2szWnTHlWmPWuKTqH/dqNT gKlNk/NDU1iDSRkT8ZsWOTzsjZdt7VOQvJGuoYoIggsBjvskJIrsrw+4kFZL8ae1 VeL/0ps69qPEm0wpZKN+qgDLepEEboFy+tBu+cKWRhcjQMJtd6eOkRbBpjbXU/9H ank+UrTzVSAou1YoF1llhZX4nU2O0YgeAdLQdMQIs6SV1San7nrth3H9CSZCGAVS LeUX1nqmVwAR5a6x20rOA0qGHWVL05EWAQmZ26+aYdy3+ZGZ7xJVzRw8we/vAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTCFQamFWt/gxAy HYmBOc7goo1pNTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSE1M YkV4a21zclFUaTNHV3BaVTVnOXBob2dwYkdiNmhKbVg3WlYyVzJNU0ovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hN TGJFeGttc3JRVGkzR1dwWlU1ZzlwaG9ncGJHYjZoSm1YN1pWMlcyTVNKLzEvQzIx NTA2QTYxNTZCN0Y4MzEwMzIxRDg5ODEzOUNFRTBBMjhENjkzNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDu3mQAwQEyVfwMA0EAgACMAcDBQAoBAOoMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPyzANBgkqhkiG9w0BAQsFAAOCAQEAdS1NDuPD iDRYEPLSgWQg80y1w5q/92nfDLjVOG0kKPA3vTawA5v2kHTDSV9c9SWgxAiC00Dv W+7TsXPd1PYiHumQNsD2IR9DI8t9FD4Y+PD3vpgO586PO1xUTfd6E2bx1g9HGjWY Mh+NHg6K0iUI8D98RhUZlaJpy4Xq25rzyt8jGFgJOwi4auWrlJ9tHUIKyMdHKIbl pQ8i68SEjek3qC87ArV3/adFrXw498yI1hhMPoPDfNILRHbMmrd5Z7UGBFx5TnOi I1cIQ44HDoKNx5AI4D98UmHTXUqBugKQMheUNU9khRVujWpWDJ1JYcNI2+gwN0n0 p/dBeAX3JKV6KA== -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:26 2024 by rpki-client on console-ams.rpki-client.org