$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer File: 04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer (raw, json) Hash identifier: GytZHoqT1O6NQfi8+wN+Eavh8YaQ67XipaY/4/lKLhc= Subject key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 11EBC598CD1675BE7EBD0F21986BFB5C7957BBF2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.mft caRepository: rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 29 Apr 2024 02:32:45 +0000 Certificate not after: Mon 28 Apr 2025 02:37:45 +0000 Subordinate resources: AS: 265943 IP: 131.196.160.0/22 IP: 2804:4030::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:eb:c5:98:cd:16:75:be:7e:bd:0f:21:98:6b:fb:5c:79:57:bb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 29 02:32:45 2024 GMT Not After : Apr 28 02:37:45 2025 GMT Subject: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:7e:46:2c:de:99:b3:2b:a5:30:53:65:6f: 19:38:12:95:ec:5e:cc:46:ea:be:fe:b0:32:71:f6: 44:b1:18:21:04:80:ef:a5:37:8b:a2:4f:68:08:b2: d7:66:dc:6c:34:d0:1c:e2:dc:32:88:1b:c2:73:31: 9c:44:40:43:47:ff:16:f8:eb:fe:61:81:f6:06:0b: 49:f2:1d:51:cf:fb:df:c4:37:e9:6b:4b:5a:5c:bd: 9a:e6:b6:00:e4:84:cd:8e:aa:24:55:f5:0f:cf:de: c1:cd:27:50:d1:a8:e1:14:69:ff:b9:20:e5:f8:e3: 1f:28:a8:ac:d4:e2:a1:dc:de:e2:6b:33:8f:d3:d2: 6a:9e:f9:dd:92:2d:db:05:5a:1a:a4:9e:7c:f4:98: 70:4e:e2:82:45:a8:a6:36:ef:74:4e:ad:39:41:c8: 0e:39:91:c5:ed:ec:58:5c:24:8a:e6:df:ff:af:5b: 74:8b:15:69:4e:ea:4d:26:11:93:1c:7a:63:5d:50: c4:fb:ce:91:e3:80:f3:3c:68:5a:17:5f:0f:fc:04: 61:e4:22:c6:86:2a:ea:fd:7c:e1:ea:35:9a:e8:19: 82:75:7d:39:43:2b:e5:72:83:da:cf:4f:25:73:0a: 53:c4:2f:06:9a:ab:5e:e8:32:fd:ca:fd:1b:d5:bf: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.160.0/22 IPv6: 2804:4030::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265943 Signature Algorithm: sha256WithRSAEncryption d4:48:9d:47:2c:a9:1d:a3:f7:b1:ed:00:20:72:87:3a:41:4e: e9:12:32:22:e5:ee:f3:55:55:5b:bd:ca:b0:c2:e1:a2:3a:33: e2:e5:2f:27:8e:09:0a:35:e2:b6:ee:e7:be:71:e9:07:23:ed: 42:eb:b5:49:16:23:58:7e:46:05:1a:c9:58:e5:f2:09:e0:9f: bc:cb:a1:44:b2:1c:e1:8a:40:47:c1:46:ce:f5:d3:62:c1:78: 24:43:33:7b:62:86:8e:d8:99:2c:70:e3:ce:91:bc:fa:6c:9a: ba:29:6d:6e:d0:1f:e3:e5:9c:d6:ad:bf:2c:72:d4:cb:59:ae: 68:20:05:b9:9e:76:6e:6c:59:8c:66:c2:fd:28:f8:b3:94:5f: 2b:23:09:79:05:cb:db:b4:17:28:8d:3d:bb:3b:d9:9b:4a:b0: d9:df:60:0f:d9:13:b9:e3:37:01:94:c5:4b:39:e1:f0:dd:15: 82:13:f8:32:1f:96:27:3b:61:8e:09:11:df:0d:0e:07:a5:02: d2:aa:42:9c:23:94:66:d8:f4:08:5e:a8:93:f2:1e:d4:3f:bc: 11:08:81:30:2e:f5:42:2f:ab:e4:06:24:47:60:42:b9:56:3a: 89:4d:5c:50:f8:67:fd:84:1e:bb:00:6e:e0:51:3a:e2:e7:be: 27:cc:f8:61 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUEevFmM0Wdb5+vQ8hmGv7XHlXu/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjkwMjMyNDVaFw0yNTA0MjgwMjM3NDVaMDMxMTAvBgNV BAMTKDA0Q0I0MEJDRTUxNjEwNDc4RDdEQkVFMkMyMDhBM0JCRkNBNzE2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfX5GLN6ZsyulMFNlbxk4EpXs XsxG6r7+sDJx9kSxGCEEgO+lN4uiT2gIstdm3Gw00Bzi3DKIG8JzMZxEQENH/xb4 6/5hgfYGC0nyHVHP+9/EN+lrS1pcvZrmtgDkhM2OqiRV9Q/P3sHNJ1DRqOEUaf+5 IOX44x8oqKzU4qHc3uJrM4/T0mqe+d2SLdsFWhqknnz0mHBO4oJFqKY273ROrTlB yA45kcXt7FhcJIrm3/+vW3SLFWlO6k0mEZMcemNdUMT7zpHjgPM8aFoXXw/8BGHk IsaGKur9fOHqNZroGYJ1fTlDK+Vyg9rPTyVzClPELwaaq17oMv3K/RvVv8OjAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEy0C85RYQR419 vuLCCKO7/KcWyzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1Ey dFUzOTZESFFlTGVlYlBZNVM3eFY2eUhZV3BaOFJyYjRHZE54aFZQejQvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1Ey dFUzOTZESFFlTGVlYlBZNVM3eFY2eUhZV3BaOFJyYjRHZE54aFZQejQvMS8wNENC NDBCQ0U1MTYxMDQ3OEQ3REJFRTJDMjA4QTNCQkZDQTcxNkNCLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKDxKAwDQQCAAIwBwMFACgEQDAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBA7XMA0GCSqGSIb3DQEBCwUAA4IBAQDUSJ1HLKkdo/ex7QAg coc6QU7pEjIi5e7zVVVbvcqwwuGiOjPi5S8njgkKNeK27ue+cekHI+1C67VJFiNY fkYFGslY5fIJ4J+8y6FEshzhikBHwUbO9dNiwXgkQzN7YoaO2JkscOPOkbz6bJq6 KW1u0B/j5ZzWrb8sctTLWa5oIAW5nnZubFmMZsL9KPizlF8rIwl5BcvbtBcojT27 O9mbSrDZ32AP2RO54zcBlMVLOeHw3RWCE/gyH5YnO2GOCRHfDQ4HpQLSqkKcI5Rm 2PQIXqiT8h7UP7wRCIEwLvVCL6vkBiRHYEK5VjqJTVxQ+Gf9hB67AG7gUTri574n zPhh -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:05 2024 by rpki-client on console-ams.rpki-client.org