$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer File: 0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer (raw, json) Hash identifier: 3hDwqScRhpks7JRoY4sXFE5+k5QsmjZjnnys4efypfk= Subject key identifier: 0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1187AA4970DF5953A947C8FF4EA0737A02BA3C27 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft caRepository: rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 07:43:05 +0000 Certificate not after: Thu 03 Apr 2025 07:48:05 +0000 Subordinate resources: AS: 271592 IP: 190.9.120.0/22 IP: 2804:7df0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 20:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:87:aa:49:70:df:59:53:a9:47:c8:ff:4e:a0:73:7a:02:ba:3c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 07:43:05 2024 GMT Not After : Apr 3 07:48:05 2025 GMT Subject: CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:c9:74:85:ba:a0:bd:c7:f0:e3:db:cb:ca: c4:8e:ed:dc:60:b6:d9:cf:1c:7c:ce:a6:e5:3c:79: ad:9d:cb:36:3b:62:b1:13:5d:1d:cb:e6:e6:51:e4: b1:12:95:55:e5:d6:9a:b2:cd:75:73:cf:c6:07:67: 69:db:a5:f1:be:1d:78:93:30:03:2a:54:7d:ad:47: 68:0b:0d:83:2f:f6:c6:0a:d3:62:d8:e7:2a:f6:02: 0b:30:2e:d1:91:6d:2c:63:52:a8:4b:0a:be:b4:6f: 9d:3b:e2:10:97:5b:a0:ae:9f:32:f9:ad:cf:96:bb: 84:a7:a6:87:2b:18:a5:1b:58:d9:22:47:9c:bf:63: 0d:31:3b:6b:af:e5:fd:f4:c4:dd:f3:c7:f9:68:28: 6c:90:57:e9:bb:52:84:95:ee:aa:a0:84:f2:fa:b3: 0e:37:23:75:39:36:ce:36:40:fa:e4:86:ff:ce:a7: 9f:3d:5a:40:36:f9:3e:2b:b6:7b:8d:ce:fb:8f:26: 5b:8d:e0:e0:96:74:0b:b8:c1:fb:98:d3:8d:c0:aa: e3:d5:61:5a:04:9c:cf:d1:ce:4a:d4:e1:37:e6:d6: 2a:d8:bb:6f:d7:8c:11:f4:53:25:4c:7b:8d:cf:0d: 53:13:5d:d2:0e:53:8d:2f:9c:2d:5b:3c:bb:47:3d: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.9.120.0/22 IPv6: 2804:7df0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271592 Signature Algorithm: sha256WithRSAEncryption a7:d0:a0:0e:a5:14:12:74:3a:61:58:54:5d:4f:f4:2b:f1:30: 3f:7c:8a:f8:32:32:be:87:e6:a5:78:af:9f:57:f4:8f:6e:4b: b9:aa:76:26:7f:9f:7d:40:9e:06:57:6a:de:1c:0e:9b:cd:95: 0c:8c:6c:ea:d5:18:e6:51:bb:cc:fe:c3:c1:9b:a0:81:e4:b8: 2d:c6:4a:14:cf:2c:dd:30:71:78:cf:0b:36:6e:19:92:7b:a8: 28:bf:1c:b3:2e:95:74:6c:21:48:3f:63:be:18:86:7b:65:69: b4:5e:08:6f:ef:8e:fb:f9:4b:d0:80:af:81:d3:2a:2f:18:13: eb:f3:5e:1c:dd:52:88:75:d8:7a:01:01:8b:10:8b:4a:af:b2: b0:8d:2b:3f:43:93:b4:51:5d:f8:63:f9:bc:11:37:d7:ee:7e: 2f:4c:85:d1:39:62:81:6c:33:de:59:58:bb:99:c5:98:bf:e4: 7d:d6:70:72:09:95:42:23:6a:33:7d:20:e4:e7:55:10:cf:26: 52:51:93:04:ac:5a:51:44:f5:72:7b:c1:28:fd:54:b9:e3:f8: 4f:16:bd:0f:4b:cb:f2:88:cb:7f:85:79:3d:dc:e9:e1:65:51: ad:24:66:d5:8c:16:7b:c3:2a:1c:12:c4:b2:a8:36:a3:c8:72: 4e:91:26:a8 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUEYeqSXDfWVOpR8j/TqBzegK6PCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNzQzMDVaFw0yNTA0MDMwNzQ4MDVaMDMxMTAvBgNV BAMTKDBEODdFNDgxRERFMTNDMkIwODI0MUZGMTQxNTg1NUNFQUFBRDVBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEsl0hbqgvcfw49vLysSO7dxg ttnPHHzOpuU8ea2dyzY7YrETXR3L5uZR5LESlVXl1pqyzXVzz8YHZ2nbpfG+HXiT MAMqVH2tR2gLDYMv9sYK02LY5yr2AgswLtGRbSxjUqhLCr60b5074hCXW6CunzL5 rc+Wu4SnpocrGKUbWNkiR5y/Yw0xO2uv5f30xN3zx/loKGyQV+m7UoSV7qqghPL6 sw43I3U5Ns42QPrkhv/Op589WkA2+T4rtnuNzvuPJluN4OCWdAu4wfuY043AquPV YVoEnM/RzkrU4Tfm1irYu2/XjBH0UyVMe43PDVMTXdIOU40vnC1bPLtHPWfHAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQNh+SB3eE8Kwgk H/FBWFXOqq1akDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUhD cUJxVVd5UUhXNUVGa0F3UFBYRGpQVmJDQmNGNm9GUUhTRnJOcG1talQvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUhD cUJxVVd5UUhXNUVGa0F3UFBYRGpQVmJDQmNGNm9GUUhTRnJOcG1talQvMi8wRDg3 RTQ4MURERTEzQzJCMDgyNDFGRjE0MTU4NTVDRUFBQUQ1QTkwLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAK+CXgwDQQCAAIwBwMFACgEffAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCToMA0GCSqGSIb3DQEBCwUAA4IBAQCn0KAOpRQSdDphWFRd T/Qr8TA/fIr4MjK+h+aleK+fV/SPbku5qnYmf599QJ4GV2reHA6bzZUMjGzq1Rjm UbvM/sPBm6CB5LgtxkoUzyzdMHF4zws2bhmSe6govxyzLpV0bCFIP2O+GIZ7ZWm0 Xghv7477+UvQgK+B0yovGBPr814c3VKIddh6AQGLEItKr7KwjSs/Q5O0UV34Y/m8 ETfX7n4vTIXROWKBbDPeWVi7mcWYv+R91nByCZVCI2ozfSDk51UQzyZSUZMErFpR RPVye8Eo/VS54/hPFr0PS8vyiMt/hXk93OnhZVGtJGbVjBZ7wyocEsSyqDajyHJO kSao -----END CERTIFICATE-----Generated at Tue Jun 18 18:36:57 2024 by rpki-client on console-fra.rpki-client.org