$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer File: E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer (raw, json) Hash identifier: 27yLZKI3CGDb6nQLvJ+i5lKK1+dliWThLKJZgsKwluU= Subject key identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1722208D2A37DA03C3583EC5FB4D2037ABDB5863 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft caRepository: rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 00:24:03 +0000 Certificate not after: Thu 03 Apr 2025 00:29:03 +0000 Subordinate resources: AS: 264025 IP: 143.137.32.0/22 IP: 168.197.56.0/22 IP: 2804:299c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 06:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:22:20:8d:2a:37:da:03:c3:58:3e:c5:fb:4d:20:37:ab:db:58:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 00:24:03 2024 GMT Not After : Apr 3 00:29:03 2025 GMT Subject: CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:da:5b:62:e0:84:af:15:ab:97:ff:2d:c0:af: 83:12:a4:0c:47:35:85:21:bd:aa:bf:82:7e:dd:ec: a2:37:d4:66:f2:a2:30:b2:24:d4:1a:c1:7f:14:93: 45:10:65:b6:97:ad:74:ec:cf:36:11:54:de:72:22: 86:22:da:72:60:1e:98:8f:84:a8:2a:2a:34:45:e0: ea:58:29:59:0b:2f:25:5f:cf:b6:10:ad:85:1d:45: 8e:89:db:08:e6:13:21:79:91:c4:b2:b1:2e:60:ea: 1d:e2:03:15:a4:0c:85:2f:e8:a3:58:b7:16:56:16: 5f:51:1b:41:26:b7:92:ea:4a:a0:fe:e4:82:57:01: dd:48:53:f9:02:10:d8:15:c2:71:81:a8:bc:1c:06: c1:73:a3:f9:da:bc:32:42:49:bd:5c:85:ea:b5:3e: 4c:b8:5e:3a:45:2a:dc:3c:39:e0:e9:57:de:32:f8: 2d:19:8b:73:49:6a:9c:47:d1:07:af:dc:2b:28:d7: d4:0b:15:83:b3:3c:10:4d:67:d8:06:08:ae:98:bd: 39:6c:ba:23:0f:b8:ca:c0:a6:a5:52:32:2b:cc:89: 2d:1a:95:3c:be:39:31:01:19:9b:fb:a1:c4:95:3f: d9:93:50:9f:90:6e:48:96:12:ec:66:87:2a:de:80: 0b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.32.0/22 168.197.56.0/22 IPv6: 2804:299c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264025 Signature Algorithm: sha256WithRSAEncryption ab:95:66:af:6b:3f:2c:13:17:b8:59:a5:95:1f:fb:41:9e:c3: 80:06:aa:3a:45:2a:b8:82:95:16:25:03:0f:00:be:0a:88:45: b9:2e:31:ad:7a:66:dd:fb:a7:1b:9c:5a:05:9a:59:ce:b7:1b: 47:d5:6e:b4:50:cd:a6:c5:16:b8:a5:c8:0f:27:8e:4e:70:87: 03:02:dd:6a:9f:1a:64:5d:47:25:77:32:67:83:0e:0f:68:73: 43:9e:fc:6a:3e:77:4b:3b:8f:e2:c7:6a:45:cd:80:56:e1:dd: b2:73:eb:d1:53:65:00:f8:00:a4:dd:cc:7c:a9:51:5a:00:46: d8:41:0a:d1:ca:a4:77:7b:31:e4:25:48:2c:1d:3e:c9:05:8e: 04:0b:68:2a:ff:09:57:f6:14:0c:d2:18:3b:a4:e5:5c:27:fc: b8:13:f5:d7:1b:84:6e:dc:d9:5e:eb:e4:76:56:b7:47:30:be: 79:cb:ba:84:10:69:72:eb:c7:41:fc:18:02:f1:28:59:93:4e: f1:e0:08:80:7a:cb:75:91:a5:72:d5:c7:d0:5b:41:1e:28:16: 1b:2d:6c:29:68:0e:d4:f5:e6:2e:75:84:c3:b9:ed:42:5e:1d: fd:b3:36:0f:74:aa:49:61:30:9e:b1:dc:f7:62:9c:7c:22:5e: 2c:fa:70:70 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUFyIgjSo32gPDWD7F+00gN6vbWGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMDI0MDNaFw0yNTA0MDMwMDI5MDNaMDMxMTAvBgNV BAMTKEU2M0FEMjY4QzI4RUY4OEFBNUI1NTYzQUUxNjE1MUYxMURFQ0VFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2lti4ISvFauX/y3Ar4MSpAxH NYUhvaq/gn7d7KI31GbyojCyJNQawX8Uk0UQZbaXrXTszzYRVN5yIoYi2nJgHpiP hKgqKjRF4OpYKVkLLyVfz7YQrYUdRY6J2wjmEyF5kcSysS5g6h3iAxWkDIUv6KNY txZWFl9RG0Emt5LqSqD+5IJXAd1IU/kCENgVwnGBqLwcBsFzo/navDJCSb1cheq1 Pky4XjpFKtw8OeDpV94y+C0Zi3NJapxH0Qev3Cso19QLFYOzPBBNZ9gGCK6YvTls uiMPuMrApqVSMivMiS0alTy+OTEBGZv7ocSVP9mTUJ+QbkiWEuxmhyregAvtAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTmOtJowo74iqW1 VjrhYVHxHezujTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGtL bXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdWb3gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhr S21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzEvRTYz QUQyNjhDMjhFRjg4QUE1QjU1NjNBRTE2MTUxRjExREVDRUU4RC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj4kgAwQCqMU4MA0EAgACMAcDBQAoBCmcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQHWTANBgkqhkiG9w0BAQsFAAOCAQEAq5Vmr2s/ LBMXuFmllR/7QZ7DgAaqOkUquIKVFiUDDwC+CohFuS4xrXpm3funG5xaBZpZzrcb R9VutFDNpsUWuKXIDyeOTnCHAwLdap8aZF1HJXcyZ4MOD2hzQ578aj53SzuP4sdq Rc2AVuHdsnPr0VNlAPgApN3MfKlRWgBG2EEK0cqkd3sx5CVILB0+yQWOBAtoKv8J V/YUDNIYO6TlXCf8uBP11xuEbtzZXuvkdla3RzC+ecu6hBBpcuvHQfwYAvEoWZNO 8eAIgHrLdZGlctXH0FtBHigWGy1sKWgO1PXmLnWEw7ntQl4d/bM2D3SqSWEwnrHc 92KcfCJeLPpwcA== -----END CERTIFICATE-----Generated at Mon Jun 3 05:37:32 2024 by rpki-client on console-ams.rpki-client.org