$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.cer File: 097A379238840A51C27C092F1F3A3CA34B8AD37B.cer (raw, json) Hash identifier: V2u4yz8jGE/7/7TrBOMc6UpeVx/X5udQOeqiL0NhQN0= Subject key identifier: 09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 34ED4824CC078C59D605FEE52FDCB5994A417F74 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.mft caRepository: rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 03 May 2024 18:07:31 +0000 Certificate not after: Fri 02 May 2025 18:12:31 +0000 Subordinate resources: AS: 264299 IP: 138.121.152.0/22 IP: 170.254.20.0/22 IP: 2804:25bc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ed:48:24:cc:07:8c:59:d6:05:fe:e5:2f:dc:b5:99:4a:41:7f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 3 18:07:31 2024 GMT Not After : May 2 18:12:31 2025 GMT Subject: CN=097A379238840A51C27C092F1F3A3CA34B8AD37B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:38:f2:43:cf:df:8b:3e:ca:86:46:96:cc: 39:61:9f:04:b1:0f:a3:e4:be:55:a1:ae:20:31:e3: af:b5:ff:a0:88:57:1b:9e:93:0a:4a:28:d3:12:80: ca:66:6d:0a:32:48:b9:5d:ed:11:b5:a7:48:d6:c9: 83:11:66:ca:4a:7a:1a:93:3c:fb:07:29:54:ec:6a: 84:e4:bd:69:80:14:be:80:77:97:30:25:8c:a1:c2: ce:32:e5:5e:d0:ba:be:0f:8d:29:db:5a:08:c6:46: a8:81:d3:69:02:46:d8:48:db:2b:3e:f4:2a:ee:2f: 8f:58:e8:1b:e0:c5:9d:31:56:ea:77:ad:ac:cc:01: 07:b9:28:59:db:9a:61:8b:8c:d5:64:b1:91:d1:d1: 29:18:2f:61:93:a3:22:1e:bd:66:ef:eb:1d:0f:90: d2:f0:a0:a6:62:76:47:68:60:91:30:da:e3:8d:da: 08:34:ff:7a:41:a6:4a:89:1e:47:e6:d9:82:07:20: a4:e4:0c:b2:84:2f:76:ea:e9:f8:bd:59:60:d2:d0: 33:51:7a:60:3f:e4:74:08:97:3c:1a:c0:10:bd:8b: 9e:c1:ac:fa:b0:d4:de:be:7f:4b:5b:14:60:f8:9a: 32:6e:19:e1:75:95:cf:35:d2:fe:7c:ce:17:94:a8: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:7A:37:92:38:84:0A:51:C2:7C:09:2F:1F:3A:3C:A3:4B:8A:D3:7B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BmWaa7bVsBmNpLeMtCXLvcAuLcZrHvJHNr1TYGfgMsS3/1/097A379238840A51C27C092F1F3A3CA34B8AD37B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.121.152.0/22 170.254.20.0/22 IPv6: 2804:25bc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264299 Signature Algorithm: sha256WithRSAEncryption d0:ef:31:51:25:c6:b1:9e:12:30:35:a5:3f:d9:13:dd:38:65: 10:67:55:5e:d4:7d:b4:28:aa:a9:da:0e:ec:1c:f1:0e:12:21: 75:b2:73:7b:15:af:27:ae:ef:41:64:34:86:ba:36:ff:e1:5a: b2:78:99:6c:3e:49:43:17:5c:47:de:77:7b:a2:e9:20:f0:71: b6:49:60:0b:70:47:dd:9d:1d:ed:6c:6e:93:18:04:69:ad:ed: 66:93:ac:18:b3:d3:64:ac:2b:3f:79:5b:64:15:0f:d7:09:64: 60:8a:45:4b:00:37:ff:e5:77:9b:77:ac:90:84:36:bf:2f:75: 34:95:f8:a6:0f:c9:81:39:15:7b:01:13:94:be:ba:66:dd:b0: 5c:d0:8d:9d:ef:8d:c0:af:14:b9:95:ee:76:8a:4d:e2:bd:58: 52:47:dc:e1:05:09:aa:a8:f3:b7:d2:6f:5b:76:7b:b5:fd:f4: 0d:cb:0f:57:cb:53:43:3d:5a:b8:c6:e6:28:0b:96:ec:05:0f: 65:e6:81:aa:9b:60:c8:74:64:91:4b:65:7c:48:a8:63:9d:92: 98:63:59:c5:4d:9f:35:0e:b8:ab:70:00:2a:41:41:f2:74:69: c5:82:2e:7c:30:33:66:20:fe:0a:77:27:1d:4f:82:09:a6:25: ef:90:5a:61 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUNO1IJMwHjFnWBf7lL9y1mUpBf3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MDMxODA3MzFaFw0yNTA1MDIxODEyMzFaMDMxMTAvBgNV BAMTKDA5N0EzNzkyMzg4NDBBNTFDMjdDMDkyRjFGM0EzQ0EzNEI4QUQzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXjjyQ8/fiz7KhkaWzDlhnwSx D6PkvlWhriAx46+1/6CIVxuekwpKKNMSgMpmbQoySLld7RG1p0jWyYMRZspKehqT PPsHKVTsaoTkvWmAFL6Ad5cwJYyhws4y5V7Qur4PjSnbWgjGRqiB02kCRthI2ys+ 9CruL49Y6BvgxZ0xVup3razMAQe5KFnbmmGLjNVksZHR0SkYL2GToyIevWbv6x0P kNLwoKZidkdoYJEw2uON2gg0/3pBpkqJHkfm2YIHIKTkDLKEL3bq6fi9WWDS0DNR emA/5HQIlzwawBC9i57BrPqw1N6+f0tbFGD4mjJuGeF1lc810v58zheUqHtpAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQJejeSOIQKUcJ8 CS8fOjyjS4rTezAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm1X YWE3YlZzQm1OcExlTXRDWEx2Y0F1TGNackh2SkhOcjFUWUdmZ01zUzMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jt V2FhN2JWc0JtTnBMZU10Q1hMdmNBdUxjWnJIdkpITnIxVFlHZmdNc1MzLzEvMDk3 QTM3OTIzODg0MEE1MUMyN0MwOTJGMUYzQTNDQTM0QjhBRDM3Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCinmYAwQCqv4UMA0EAgACMAcDBQAoBCW8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQIazANBgkqhkiG9w0BAQsFAAOCAQEA0O8xUSXG sZ4SMDWlP9kT3ThlEGdVXtR9tCiqqdoO7BzxDhIhdbJzexWvJ67vQWQ0hro2/+Fa sniZbD5JQxdcR953e6LpIPBxtklgC3BH3Z0d7WxukxgEaa3tZpOsGLPTZKwrP3lb ZBUP1wlkYIpFSwA3/+V3m3eskIQ2vy91NJX4pg/JgTkVewETlL66Zt2wXNCNne+N wK8UuZXudopN4r1YUkfc4QUJqqjzt9JvW3Z7tf30DcsPV8tTQz1auMbmKAuW7AUP ZeaBqptgyHRkkUtlfEioY52SmGNZxU2fNQ64q3AAKkFB8nRpxYIufDAzZiD+Cncn HU+CCaYl75BaYQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:25 2024 by rpki-client on console-fra.rpki-client.org