$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer (raw, json) Hash identifier: tBHuLuswFdLm5aKeIRJZnjy8m/6E3FU+xm99CY6zk1Q= Subject key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3C81A45A26F5A797FA566F7F6D7EE8FE855FA40D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft caRepository: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 05:07:29 +0000 Certificate not after: Thu 03 Apr 2025 05:12:29 +0000 Subordinate resources: AS: 53130 IP: 187.120.240.0/20 IP: 191.7.72.0/21 IP: 2804:141c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Jun 2024 18:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:81:a4:5a:26:f5:a7:97:fa:56:6f:7f:6d:7e:e8:fe:85:5f:a4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 05:07:29 2024 GMT Not After : Apr 3 05:12:29 2025 GMT Subject: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:22:75:a3:3c:44:09:84:e5:a7:87:ef:6e:4a: 2c:92:49:0f:05:e9:b2:8e:36:11:6c:59:48:ba:42: 77:68:4b:ab:c4:0f:26:a4:83:01:91:59:e1:89:f7: af:71:34:49:75:4a:46:0d:db:2c:e5:c1:82:6b:78: f6:c2:3d:d2:52:49:17:39:cc:67:53:a5:bd:09:15: e4:51:2a:b7:55:c3:47:d8:74:39:75:61:84:91:26: f7:db:2e:98:08:71:d0:18:91:e0:fa:92:ee:df:1b: 58:7a:a9:b2:db:78:9b:2f:05:1c:9f:f5:76:dd:36: c9:47:84:05:d5:61:11:ef:2e:93:be:74:7c:46:ed: 6e:d1:3a:0b:c1:fc:e0:1d:7b:5b:e0:cf:e5:4e:23: 31:e2:ac:bc:ef:28:86:c2:72:ce:ce:0a:58:34:0e: bf:6f:81:dc:63:2b:91:1e:89:dc:fc:a8:17:5f:50: 3a:11:32:dc:40:6f:f2:d2:52:2e:ec:7d:59:f4:bf: 1c:df:f4:1f:a8:2f:68:e6:dc:22:d4:37:00:1f:df: 5d:1e:da:44:0c:54:bf:ba:0b:a9:be:da:a2:04:5e: 80:b0:2b:62:1f:cc:57:71:1b:10:ca:6e:0d:2a:01: 94:d4:e7:ba:56:87:d4:6a:90:18:12:56:45:d6:3e: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.120.240.0/20 191.7.72.0/21 IPv6: 2804:141c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53130 Signature Algorithm: sha256WithRSAEncryption b1:b1:fe:65:0f:d5:52:69:40:d8:2a:8f:00:b1:8a:e7:db:e6: e6:c5:5c:9b:e1:21:63:6d:7e:b6:08:c0:24:a8:be:59:c1:1c: 82:cb:cb:a0:66:70:6b:ee:06:a4:bd:ea:a5:2d:af:54:0f:7e: e0:78:ce:45:50:12:22:2d:1e:55:90:1c:19:f7:8b:a4:49:90: 14:c3:b6:05:c2:95:d6:f1:c2:5f:ea:7c:2f:ad:65:42:2f:0a: 9c:49:10:24:19:47:e3:4d:1c:bb:4a:55:4d:31:30:93:11:36: a2:2e:35:88:ff:57:5e:77:d0:86:12:e9:ec:95:46:f1:d7:c4: 0a:48:cf:4b:fd:01:28:26:9f:a6:ae:3f:b4:51:fb:f2:83:b6: cd:10:c2:e1:22:4e:d7:51:f0:10:7c:db:7a:8d:fb:94:d3:93: 92:cd:32:ac:d8:4f:c5:e1:83:e1:ce:de:11:9a:55:8a:94:ea: 3e:a9:5b:32:45:0a:6e:e9:3b:35:30:35:d5:03:24:23:6d:14: 08:0c:bb:b5:8b:4f:79:48:4e:a4:93:5a:3a:ef:c8:ec:be:4d: e1:e7:37:df:80:5d:3c:45:7e:ab:11:2e:0a:94:52:e9:99:21: 56:57:de:7f:d7:ad:be:1e:9e:3d:6f:da:8b:25:1d:99:60:fc: ed:f2:ec:7f -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPIGkWib1p5f6Vm9/bX7o/oVfpA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNTA3MjlaFw0yNTA0MDMwNTEyMjlaMDMxMTAvBgNV BAMTKDAyQ0I5OTNFOTU4NUE1M0ZDNkI0MERBNzYyQTczRUIyODIxQkY2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVInWjPEQJhOWnh+9uSiySSQ8F 6bKONhFsWUi6QndoS6vEDyakgwGRWeGJ969xNEl1SkYN2yzlwYJrePbCPdJSSRc5 zGdTpb0JFeRRKrdVw0fYdDl1YYSRJvfbLpgIcdAYkeD6ku7fG1h6qbLbeJsvBRyf 9XbdNslHhAXVYRHvLpO+dHxG7W7ROgvB/OAde1vgz+VOIzHirLzvKIbCcs7OClg0 Dr9vgdxjK5Eeidz8qBdfUDoRMtxAb/LSUi7sfVn0vxzf9B+oL2jm3CLUNwAf310e 2kQMVL+6C6m+2qIEXoCwK2IfzFdxGxDKbg0qAZTU57pWh9RqkBgSVkXWPrQRAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCy5k+lYWlP8a0 Dadipz6yghv27TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRFI4 R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RS OEdRNUJVZEJINGtxYUFDY1pZUWJqblVFUktnUFlDazJOSmk3SjRLTDZaLzEvMDJD Qjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4MjFCRjZFRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQEu3jwAwQDvwdIMA0EAgACMAcDBQAoBBQcMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDPijANBgkqhkiG9w0BAQsFAAOCAQEAsbH+ZQ/V UmlA2CqPALGK59vm5sVcm+EhY21+tgjAJKi+WcEcgsvLoGZwa+4GpL3qpS2vVA9+ 4HjORVASIi0eVZAcGfeLpEmQFMO2BcKV1vHCX+p8L61lQi8KnEkQJBlH400cu0pV TTEwkxE2oi41iP9XXnfQhhLp7JVG8dfECkjPS/0BKCafpq4/tFH78oO2zRDC4SJO 11HwEHzbeo37lNOTks0yrNhPxeGD4c7eEZpVipTqPqlbMkUKbuk7NTA11QMkI20U CAy7tYtPeUhOpJNaOu/I7L5N4ec334BdPEV+qxEuCpRS6ZkhVlfef9etvh6ePW/a iyUdmWD87fLsfw== -----END CERTIFICATE-----Generated at Mon Jun 17 15:56:09 2024 by rpki-client on console-fra.rpki-client.org