$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer File: 0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer (raw, json) Hash identifier: mxkuFWXmDk7vhr9L5G9nvFEMNc7QtO3l74bRM2DHtN4= Subject key identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 451E38D08CAA42FE4D3CF932BEEEF4261D80705F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft caRepository: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 16 May 2024 14:08:00 +0000 Certificate not after: Thu 15 May 2025 14:13:00 +0000 Subordinate resources: AS: 268815 IP: 45.173.152.0/22 IP: 2804:5b0c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 27 Jun 2024 03:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1e:38:d0:8c:aa:42:fe:4d:3c:f9:32:be:ee:f4:26:1d:80:70:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 16 14:08:00 2024 GMT Not After : May 15 14:13:00 2025 GMT Subject: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e4:31:aa:f4:4f:f4:2b:7c:d2:4f:fd:46:c7: 32:46:64:d7:8f:29:78:53:d4:b6:4b:cc:5e:ce:12: f3:88:ca:12:7f:be:56:d5:9a:d4:97:68:f3:f3:ee: 09:06:0a:ce:ef:4e:f8:be:9c:83:a7:a5:b5:c8:15: 22:dc:0d:06:fd:f4:2c:9b:d3:50:ef:8b:7c:31:dc: e7:74:4d:1c:d9:9c:5a:f8:4a:63:b7:2a:cb:64:4f: ce:f9:22:4c:ae:fb:10:6e:b9:61:4f:7f:8d:9e:db: b1:35:65:3d:80:14:23:22:55:5e:92:4d:84:2c:29: 74:c2:f4:58:ec:b6:f8:17:aa:35:30:32:9e:b3:a9: 97:dd:4f:a8:67:ef:4c:bb:55:f6:80:d5:4b:94:a0: 81:dd:a8:53:52:3c:ca:29:63:5c:6d:d2:d8:5f:17: cc:f9:bb:22:58:d2:6f:88:41:fd:49:5d:c4:41:b5: a8:86:7b:41:de:c9:d2:25:41:80:27:54:c6:27:bb: d7:85:f1:23:4c:40:03:c2:2c:ab:ff:eb:a0:f3:a5: d4:5a:60:49:66:eb:3d:39:b3:23:76:64:d0:88:09: f0:d8:ef:16:8f:53:cd:08:6b:81:85:cc:c6:ea:77: 35:0f:3d:a1:10:5d:63:44:1b:2f:5b:c8:ce:e9:53: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.152.0/22 IPv6: 2804:5b0c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268815 Signature Algorithm: sha256WithRSAEncryption 4c:09:e6:41:84:3d:80:c6:eb:2f:1e:ca:8d:be:d6:2d:a2:cf: c8:5e:94:5f:a9:ae:af:fe:05:67:ca:1b:23:d2:7b:d6:64:c6: 87:f2:59:6c:cc:e9:df:3a:34:9a:6e:93:8a:c0:ae:21:0b:ea: 0f:2c:a7:d1:cd:47:a9:58:14:fe:c4:81:d0:78:9c:8e:2d:8b: 7c:1c:a4:5d:d4:67:46:55:7d:e1:9b:db:86:a7:b2:85:c4:98: 6f:44:c0:ff:b1:c3:18:b2:c4:34:d8:20:a8:ee:17:05:17:31: 17:72:e2:c0:f7:75:09:bf:d9:65:21:98:fb:84:c5:22:91:99: 0e:19:a5:69:15:b0:49:37:6f:7b:d6:2f:c8:b8:11:78:70:0a: ab:68:03:c1:e9:ac:24:19:34:32:fd:1b:c8:dd:1b:63:50:2c: 67:17:6c:f0:2a:45:d8:f3:63:c3:29:ad:4d:c3:e1:c8:90:7e: 23:db:a5:28:40:d4:d4:7c:3b:59:92:2c:b3:eb:b0:2c:55:28: e8:a6:48:59:b1:7c:33:ff:64:5e:31:71:2e:10:df:cd:14:8d: 30:53:13:ff:e8:50:aa:dd:32:76:7c:e9:a9:7c:bf:86:64:ff: cb:bc:f2:e8:01:3e:64:fa:64:af:91:6b:c9:26:95:67:2e:19: ae:7f:62:65 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIURR440IyqQv5NPPkyvu70Jh2AcF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MTYxNDA4MDBaFw0yNTA1MTUxNDEzMDBaMDMxMTAvBgNV BAMTKDBFN0UxRTM4QUQ0RjAzRTlBRUMyQjA0QkRERkZFRDdBQjVBQ0I4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5DGq9E/0K3zST/1GxzJGZNeP KXhT1LZLzF7OEvOIyhJ/vlbVmtSXaPPz7gkGCs7vTvi+nIOnpbXIFSLcDQb99Cyb 01Dvi3wx3Od0TRzZnFr4SmO3KstkT875Ikyu+xBuuWFPf42e27E1ZT2AFCMiVV6S TYQsKXTC9FjstvgXqjUwMp6zqZfdT6hn70y7VfaA1UuUoIHdqFNSPMopY1xt0thf F8z5uyJY0m+IQf1JXcRBtaiGe0HeydIlQYAnVMYnu9eF8SNMQAPCLKv/66DzpdRa YElm6z05syN2ZNCICfDY7xaPU80Ia4GFzMbqdzUPPaEQXWNEGy9byM7pU3ERAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOfh44rU8D6a7C sEvd/+16tay4MTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQTVH dTRvZEJOYm9YcmdoM1daUktLUm9XdnRXTHZCQ0tiRGszWWpQRjRzUnIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E1 R3U0b2RCTmJvWHJnaDNXWlJLS1JvV3Z0V0x2QkNLYkRrM1lqUEY0c1JyLzAvMEU3 RTFFMzhBRDRGMDNFOUFFQzJCMDRCRERGRkVEN0FCNUFDQjgzMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLa2YMA0EAgACMAcDBQAoBFsMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQaDzANBgkqhkiG9w0BAQsFAAOCAQEATAnmQYQ9gMbrLx7K jb7WLaLPyF6UX6mur/4FZ8obI9J71mTGh/JZbMzp3zo0mm6TisCuIQvqDyyn0c1H qVgU/sSB0Hicji2LfBykXdRnRlV94ZvbhqeyhcSYb0TA/7HDGLLENNggqO4XBRcx F3LiwPd1Cb/ZZSGY+4TFIpGZDhmlaRWwSTdve9YvyLgReHAKq2gDwemsJBk0Mv0b yN0bY1AsZxds8CpF2PNjwymtTcPhyJB+I9ulKEDU1Hw7WZIss+uwLFUo6KZIWbF8 M/9kXjFxLhDfzRSNMFMT/+hQqt0ydnzpqXy/hmT/y7zy6AE+ZPpkr5FrySaVZy4Z rn9iZQ== -----END CERTIFICATE-----Generated at Wed Jun 26 02:08:38 2024 by rpki-client on console-ams.rpki-client.org