$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06AC3B8E5987EBD0336504C7814437A1D3A600B5.cer File: 06AC3B8E5987EBD0336504C7814437A1D3A600B5.cer (raw, json) Hash identifier: 93eQJrwfA59x1BL+V07eCc5X2sqH5Cp8014syQHnVNc= Subject key identifier: 06:AC:3B:8E:59:87:EB:D0:33:65:04:C7:81:44:37:A1:D3:A6:00:B5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 414BEC7D19C4843CF6DF918D54F35BD8B3A12412 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/06AC3B8E5987EBD0336504C7814437A1D3A600B5.mft caRepository: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:25:44 +0000 Certificate not after: Wed 02 Apr 2025 18:30:44 +0000 Subordinate resources: AS: 272182 IP: 2804:8330::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4b:ec:7d:19:c4:84:3c:f6:df:91:8d:54:f3:5b:d8:b3:a1:24:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:25:44 2024 GMT Not After : Apr 2 18:30:44 2025 GMT Subject: CN=06AC3B8E5987EBD0336504C7814437A1D3A600B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:13:ef:40:4a:ce:a6:d5:ad:a2:6e:20:5e:d9: 57:3f:2c:c6:36:00:57:24:7f:5b:f8:80:f4:33:ee: 16:42:42:8f:6b:8f:94:3b:e5:12:8c:f1:2d:10:5f: f7:b9:f9:99:1c:5d:68:dd:00:80:fb:41:81:16:3b: 6d:6d:53:76:ee:e2:28:e5:d1:fd:cd:9b:d4:61:eb: 55:a2:69:80:8b:e1:d2:91:6b:5a:37:e3:da:bb:cc: b2:02:8d:5f:86:24:32:70:f7:76:77:0e:81:64:ba: 66:83:3e:fd:e8:cf:ac:da:a9:c8:b7:4d:2a:da:fb: f3:45:dd:c7:f8:08:83:d1:e9:f5:4d:f6:9e:76:ea: 00:f1:92:7c:28:b3:62:c2:1a:11:46:35:81:7c:b5: aa:78:f8:6e:b5:f3:94:02:b0:91:3b:29:11:39:61: 5d:7e:d9:e7:9b:5d:de:d0:6c:90:ea:80:e4:c5:73: 1e:a7:51:b6:4c:3e:b6:6d:00:fe:ee:a2:4d:20:ba: 23:5a:f5:56:7d:19:71:b0:6f:a6:77:b1:45:be:b4: e7:1a:48:86:50:97:36:a6:9a:86:e0:3e:e3:5e:0d: 9e:d7:4a:68:75:46:a7:79:48:fe:04:63:5f:57:8a: 76:7f:5c:f2:f6:19:c0:97:bc:82:22:61:6a:10:f1: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:AC:3B:8E:59:87:EB:D0:33:65:04:C7:81:44:37:A1:D3:A6:00:B5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/1/06AC3B8E5987EBD0336504C7814437A1D3A600B5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8330::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272182 Signature Algorithm: sha256WithRSAEncryption b5:62:2e:f5:a0:65:ff:79:be:80:05:fc:d1:35:77:34:7c:05: 1a:ce:0f:97:74:1f:12:10:97:14:ee:0e:06:67:c1:89:e3:71: fc:b6:52:cf:24:14:41:bc:89:88:af:7f:0c:cc:1b:1a:94:23: d4:0c:22:6c:ce:95:36:05:3b:a2:65:4e:5d:d8:bb:6d:4a:2e: bd:24:59:29:eb:e0:cd:ce:ff:73:1f:c6:4d:d1:ce:88:8d:e5: 66:1a:6a:f5:1a:6c:88:23:a0:fe:7d:49:da:f8:fa:97:cf:6a: 78:e0:91:51:97:00:53:d1:97:47:2c:f8:67:3a:4b:9a:7e:5f: b8:e5:2b:2f:95:37:76:64:6b:c0:0a:e8:5d:7f:c5:f2:aa:f8: 86:64:da:c6:8b:34:eb:2e:5f:5d:a1:1c:fd:3e:21:91:3a:d3: 52:c1:36:b1:af:8e:4e:8b:6c:eb:39:dc:59:3e:1a:fe:53:6a: 2b:7b:64:74:df:bc:58:1c:08:09:2e:ba:45:03:7a:c5:6c:35: 34:0f:03:f6:8b:59:9f:34:92:7f:ce:5c:66:33:aa:ab:86:4e: 44:7b:25:a2:44:8e:3d:9c:98:1d:b6:e6:20:f8:46:33:42:ba: 69:fe:31:63:7e:89:7e:7a:37:38:e2:d8:49:c4:7b:80:cd:df: 31:16:f1:1a -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUQUvsfRnEhDz235GNVPNb2LOhJBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI1NDRaFw0yNTA0MDIxODMwNDRaMDMxMTAvBgNV BAMTKDA2QUMzQjhFNTk4N0VCRDAzMzY1MDRDNzgxNDQzN0ExRDNBNjAwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/E+9ASs6m1a2ibiBe2Vc/LMY2 AFckf1v4gPQz7hZCQo9rj5Q75RKM8S0QX/e5+ZkcXWjdAID7QYEWO21tU3bu4ijl 0f3Nm9Rh61WiaYCL4dKRa1o349q7zLICjV+GJDJw93Z3DoFkumaDPv3oz6zaqci3 TSra+/NF3cf4CIPR6fVN9p526gDxknwos2LCGhFGNYF8tap4+G6185QCsJE7KRE5 YV1+2eebXd7QbJDqgOTFcx6nUbZMPrZtAP7uok0guiNa9VZ9GXGwb6Z3sUW+tOca SIZQlzammobgPuNeDZ7XSmh1Rqd5SP4EY19XinZ/XPL2GcCXvIIiYWoQ8UtpAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQGrDuOWYfr0DNl BMeBRDeh06YAtTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFR6 ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tGUGcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhU emRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzEvMDZB QzNCOEU1OTg3RUJEMDMzNjUwNEM3ODE0NDM3QTFEM0E2MDBCNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASDMDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME JzYwDQYJKoZIhvcNAQELBQADggEBALViLvWgZf95voAF/NE1dzR8BRrOD5d0HxIQ lxTuDgZnwYnjcfy2Us8kFEG8iYivfwzMGxqUI9QMImzOlTYFO6JlTl3Yu21KLr0k WSnr4M3O/3Mfxk3RzoiN5WYaavUabIgjoP59Sdr4+pfPanjgkVGXAFPRl0cs+Gc6 S5p+X7jlKy+VN3Zka8AK6F1/xfKq+IZk2saLNOsuX12hHP0+IZE601LBNrGvjk6L bOs53Fk+Gv5Tait7ZHTfvFgcCAkuukUDesVsNTQPA/aLWZ80kn/OXGYzqquGTkR7 JaJEjj2cmB225iD4RjNCumn+MWN+iX56Nzji2EnEe4DN3zEW8Ro= -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:27 2024 by rpki-client on console-ams.rpki-client.org