$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03F423B5AD115B97222F90816CAADB8F732401CD.cer File: 03F423B5AD115B97222F90816CAADB8F732401CD.cer (raw, json) Hash identifier: DO5icbrg93DsaJvUDq1s0+lgO481DwDZvAFDy+a2bSw= Subject key identifier: 03:F4:23:B5:AD:11:5B:97:22:2F:90:81:6C:AA:DB:8F:73:24:01:CD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1BEBEE8C2A6CF81EAAA9A74D7167197ED548F306 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/03F423B5AD115B97222F90816CAADB8F732401CD.mft caRepository: rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 15 Apr 2024 17:26:37 +0000 Certificate not after: Mon 14 Apr 2025 17:31:37 +0000 Subordinate resources: AS: 263913 IP: 138.204.240.0/22 IP: 170.231.216.0/22 IP: 2804:279c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:eb:ee:8c:2a:6c:f8:1e:aa:a9:a7:4d:71:67:19:7e:d5:48:f3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 15 17:26:37 2024 GMT Not After : Apr 14 17:31:37 2025 GMT Subject: CN=03F423B5AD115B97222F90816CAADB8F732401CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:63:40:fa:0d:17:31:f3:5d:9b:bf:59:da: b5:93:9f:88:f3:00:bd:64:48:5a:27:07:20:fa:4a: a1:e8:26:94:e2:a8:8d:63:cf:ec:68:bf:d3:6f:fd: b2:ce:64:7e:f9:94:61:bc:7b:97:8c:46:59:bf:37: 27:47:74:d3:01:44:a7:19:73:c7:a6:a1:21:d7:2a: 53:85:0a:82:fd:8c:55:50:33:9c:70:f1:88:69:a2: de:45:80:54:62:b2:8a:20:b1:ac:38:98:b3:23:d7: 94:eb:89:47:b9:65:d0:bd:57:a7:61:32:97:25:dd: fa:3e:d1:c9:49:51:69:67:df:0d:e0:7e:b1:57:df: b1:e9:66:be:13:91:df:1f:e1:e3:48:3d:6c:9b:19: 62:d0:bc:b8:34:94:1a:da:1d:4d:2f:af:af:2b:60: a5:81:e9:6c:56:60:af:62:4c:45:a0:8a:fe:d8:39: 8a:bf:f5:d1:a0:53:33:52:0e:68:dd:b5:a5:54:4c: 23:53:1f:f1:19:d6:b8:2b:e0:3c:e6:53:5e:7c:33: 91:38:30:35:44:ed:90:26:96:86:a9:10:18:37:29: 03:a1:21:04:0a:ac:f0:32:bc:cf:72:dc:25:42:ec: 43:4e:6e:f1:cf:45:fb:20:38:da:ec:21:c7:c1:1a: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:F4:23:B5:AD:11:5B:97:22:2F:90:81:6C:AA:DB:8F:73:24:01:CD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/03F423B5AD115B97222F90816CAADB8F732401CD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.204.240.0/22 170.231.216.0/22 IPv6: 2804:279c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263913 Signature Algorithm: sha256WithRSAEncryption c2:e8:5b:ba:a4:74:87:ed:ad:ae:05:9b:66:f7:d6:15:ce:45: ce:cd:f4:60:76:d1:10:cb:88:c9:55:9d:7a:8c:e6:2c:d0:60: 81:82:f7:14:a4:49:ff:4e:9c:87:2e:bb:ba:74:7b:70:51:89: ec:dc:e3:9b:9c:c9:a5:93:8f:97:20:a6:41:ca:49:75:1a:5c: 20:7f:29:c8:d5:7f:0e:b6:b6:08:d5:36:db:fc:75:f2:7f:77: c7:ec:12:82:46:fa:23:03:ba:f1:8d:e8:8d:db:08:72:18:3d: b1:9e:40:16:3c:ba:73:00:76:c0:57:c4:ac:f1:76:b6:ad:7d: df:90:2c:50:5a:e1:c3:fd:4f:54:99:70:67:df:a2:04:62:9e: d9:70:0d:01:4c:9b:ba:03:09:35:9b:aa:c1:86:b0:f7:f1:a8: 20:36:42:d7:dc:1c:b3:91:ac:1f:72:8c:d9:aa:c8:a5:29:29: ff:72:d0:e1:1b:6e:d3:1e:c0:98:f3:a2:46:11:86:4b:9e:07: 3c:50:ef:9c:c6:bc:32:b2:05:ef:59:5e:60:e2:5b:89:35:32: f9:0c:60:fc:d7:1d:c4:5f:c9:ee:56:92:67:87:26:a2:28:49: 1e:52:3d:d2:8f:17:74:15:ba:45:a3:e2:4d:f7:5b:10:de:53: 9f:b6:ac:c4 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUG+vujCps+B6qqadNcWcZftVI8wYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MTUxNzI2MzdaFw0yNTA0MTQxNzMxMzdaMDMxMTAvBgNV BAMTKDAzRjQyM0I1QUQxMTVCOTcyMjJGOTA4MTZDQUFEQjhGNzMyNDAxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10GNA+g0XMfNdm79Z2rWTn4jz AL1kSFonByD6SqHoJpTiqI1jz+xov9Nv/bLOZH75lGG8e5eMRlm/NydHdNMBRKcZ c8emoSHXKlOFCoL9jFVQM5xw8Yhpot5FgFRisoogsaw4mLMj15TriUe5ZdC9V6dh Mpcl3fo+0clJUWln3w3gfrFX37HpZr4Tkd8f4eNIPWybGWLQvLg0lBraHU0vr68r YKWB6WxWYK9iTEWgiv7YOYq/9dGgUzNSDmjdtaVUTCNTH/EZ1rgr4DzmU158M5E4 MDVE7ZAmloapEBg3KQOhIQQKrPAyvM9y3CVC7ENObvHPRfsgONrsIcfBGrG5AgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQD9CO1rRFblyIv kIFsqtuPcyQBzTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1dU OWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3aFcvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NX VDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAvMDNG NDIzQjVBRDExNUI5NzIyMkY5MDgxNkNBQURCOEY3MzI0MDFDRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCiszwAwQCqufYMA0EAgACMAcDBQAoBCecMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQG6TANBgkqhkiG9w0BAQsFAAOCAQEAwuhbuqR0 h+2trgWbZvfWFc5Fzs30YHbREMuIyVWdeozmLNBggYL3FKRJ/06chy67unR7cFGJ 7Nzjm5zJpZOPlyCmQcpJdRpcIH8pyNV/Dra2CNU22/x18n93x+wSgkb6IwO68Y3o jdsIchg9sZ5AFjy6cwB2wFfErPF2tq1935AsUFrhw/1PVJlwZ9+iBGKe2XANAUyb ugMJNZuqwYaw9/GoIDZC19wcs5GsH3KM2arIpSkp/3LQ4Rtu0x7AmPOiRhGGS54H PFDvnMa8MrIF71leYOJbiTUy+Qxg/NcdxF/J7laSZ4cmoihJHlI90o8XdBW6RaPi TfdbEN5Tn7asxA== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:25 2024 by rpki-client on console-fra.rpki-client.org