$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer File: 0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer (raw, json) Hash identifier: jnwz83qzpvTlaCT3KXFnF3p/tBnO4DpP3/QteXZcgzI= Subject key identifier: 0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 719612B83867F7B68475F1EC1C1D24B8598BF568 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.mft caRepository: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 12 Apr 2024 13:21:47 +0000 Certificate not after: Fri 11 Apr 2025 13:26:47 +0000 Subordinate resources: AS: 263080 IP: 187.33.48.0/21 IP: 189.201.208.0/20 IP: 2804:964::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:96:12:b8:38:67:f7:b6:84:75:f1:ec:1c:1d:24:b8:59:8b:f5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 12 13:21:47 2024 GMT Not After : Apr 11 13:26:47 2025 GMT Subject: CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:cc:3e:c5:93:10:d3:4a:c1:98:a1:ac:0b: ed:ef:d2:5f:62:2d:b6:a6:80:3e:9f:11:3d:dc:0b: a8:39:3c:f4:2c:5b:77:42:3d:78:9d:3c:e0:18:77: 04:0f:3e:90:22:73:57:a8:58:bc:38:ea:b4:e1:19: 97:de:6e:c0:21:49:63:e6:1f:a6:bf:c5:fc:28:ec: 23:ef:1f:59:d2:55:f3:f1:40:03:2a:20:4a:1a:6d: c0:5b:92:6e:91:79:f3:55:5d:ce:40:9a:4d:7d:36: 19:d1:a7:4a:7f:c6:07:70:da:85:55:a7:b5:a2:c6: c3:55:65:d4:7e:4a:a5:20:de:2a:27:e3:28:38:65: 64:12:83:0d:85:7a:d6:93:44:b1:87:34:58:b8:b0: 51:56:12:18:14:72:ff:15:f3:e8:f0:e9:63:3e:b0: 45:77:b5:28:39:ac:ec:d6:a4:8f:a2:ac:2e:38:9d: ac:c3:3f:90:28:cb:e2:df:e4:52:5a:24:bb:a9:98: 8f:c0:47:c0:eb:bd:bd:f7:e8:e0:4e:df:ab:6b:72: 4f:f0:8f:46:5a:86:59:f4:95:a9:2d:47:cd:60:b7: 58:92:72:72:da:0b:19:f3:08:e4:b9:1e:9b:c5:b9: 69:2c:81:a3:f9:cd:4a:28:26:0b:23:dd:47:87:a9: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.33.48.0/21 189.201.208.0/20 IPv6: 2804:964::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263080 Signature Algorithm: sha256WithRSAEncryption 4f:bb:79:4e:8a:50:b6:f3:0c:4a:ef:99:a9:3e:1c:cc:39:2e: 97:04:c0:14:51:41:b8:8b:56:31:12:c1:3f:53:09:aa:84:36: dc:ee:03:b9:3a:86:bc:95:54:31:3c:06:e9:87:c4:96:52:f3: e1:93:b1:1f:77:74:33:16:3c:96:48:2b:70:76:bf:e7:eb:41: de:5b:e5:b2:56:13:94:1a:56:38:58:77:c6:72:d4:c1:25:5e: 7e:dc:67:78:8f:5d:78:b0:ad:35:ab:09:5f:64:56:85:49:cd: cd:b7:f9:9c:85:0f:ee:ff:e8:e3:5c:e7:24:a2:ba:77:ca:d9: 7c:32:07:c3:b9:fb:4b:ce:1a:c2:9d:d4:5a:4f:e6:ac:14:83: e6:b5:4d:2c:e0:59:4c:06:01:72:fc:23:89:b5:5f:23:25:47: f4:c3:0d:4a:74:e9:f8:e5:b1:3a:24:5d:6b:50:b4:b7:f3:9b: 7f:c5:27:d9:f5:14:5f:a7:9c:d6:38:b9:ba:2f:b1:42:06:5a: 9e:f9:38:89:8a:bc:78:b3:66:14:0e:a3:c6:a2:eb:c7:da:20: 6c:5a:f1:88:a8:a1:f5:6b:e4:68:dc:4d:e7:d7:19:94:28:04: 1e:43:34:8f:12:5c:32:32:8e:ba:0c:0d:0e:9c:dc:d9:92:0f: a6:86:45:65 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUcZYSuDhn97aEdfHsHB0kuFmL9WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MTIxMzIxNDdaFw0yNTA0MTExMzI2NDdaMDMxMTAvBgNV BAMTKDBBMzY1M0E2NjU1NEZBQ0VGQTIzMDJGNUE5RTU5NUZDRTZFNjk3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPMw+xZMQ00rBmKGsC+3v0l9i LbamgD6fET3cC6g5PPQsW3dCPXidPOAYdwQPPpAic1eoWLw46rThGZfebsAhSWPm H6a/xfwo7CPvH1nSVfPxQAMqIEoabcBbkm6RefNVXc5Amk19NhnRp0p/xgdw2oVV p7WixsNVZdR+SqUg3ion4yg4ZWQSgw2FetaTRLGHNFi4sFFWEhgUcv8V8+jw6WM+ sEV3tSg5rOzWpI+irC44nazDP5Aoy+Lf5FJaJLupmI/AR8Drvb336OBO36trck/w j0Zahln0laktR81gt1iScnLaCxnzCOS5HpvFuWksgaP5zUooJgsj3UeHqSxdAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQKNlOmZVT6zvoj AvWp5ZX85uaX7TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMkFC N1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJRVFIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJB QjdZM1RnU0JORDFZZk1HQ0phTG1HNVJkdzZ1ekVod21vQmtOS3ZyUVRSLzAvMEEz NjUzQTY2NTU0RkFDRUZBMjMwMkY1QTlFNTk1RkNFNkU2OTdFRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDuyEwAwQEvcnQMA0EAgACMAcDBQAoBAlkMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQDqDANBgkqhkiG9w0BAQsFAAOCAQEAT7t5TopQ tvMMSu+ZqT4czDkulwTAFFFBuItWMRLBP1MJqoQ23O4DuTqGvJVUMTwG6YfEllLz 4ZOxH3d0MxY8lkgrcHa/5+tB3lvlslYTlBpWOFh3xnLUwSVeftxneI9deLCtNasJ X2RWhUnNzbf5nIUP7v/o41znJKK6d8rZfDIHw7n7S84awp3UWk/mrBSD5rVNLOBZ TAYBcvwjibVfIyVH9MMNSnTp+OWxOiRda1C0t/Obf8Un2fUUX6ec1ji5ui+xQgZa nvk4iYq8eLNmFA6jxqLrx9ogbFrxiKih9WvkaNxN59cZlCgEHkM0jxJcMjKOugwN Dpzc2ZIPpoZFZQ== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:29 2024 by rpki-client on console-fra.rpki-client.org