$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer File: 0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer (raw, json) Hash identifier: VcPNb0+6xPe88qGSzsyZwc3Q/V7woe1b/f6H+YWDd2w= Subject key identifier: 0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 72BC428B81EC74F12E34903180E01F423120DC47 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.mft caRepository: rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:33:39 +0000 Certificate not after: Wed 02 Apr 2025 18:38:39 +0000 Subordinate resources: AS: 263631 IP: 168.205.80.0/22 IP: 179.125.48.0/21 IP: 2804:105c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bc:42:8b:81:ec:74:f1:2e:34:90:31:80:e0:1f:42:31:20:dc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:33:39 2024 GMT Not After : Apr 2 18:38:39 2025 GMT Subject: CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:a0:de:c9:83:e3:4f:da:d7:a1:8f:1d:9c: a7:ff:be:d4:2e:d2:b6:16:ab:cc:b9:02:e5:77:8a: b3:17:56:eb:8f:80:d8:6b:69:10:a8:b0:32:45:60: 18:6a:67:13:e7:e5:d8:f6:20:72:a7:e2:a6:94:61: ec:72:a8:69:d9:bb:54:f5:a8:29:59:5c:68:67:2a: 9c:48:dc:bf:5a:0a:77:5a:12:18:94:d6:01:32:36: d2:6a:6e:6f:0a:e8:17:27:d4:6e:51:91:74:c6:33: 09:12:ac:65:bf:65:65:6e:26:5a:07:41:70:56:6b: 0a:e8:e7:21:cc:55:a1:aa:8d:1d:36:3a:13:ee:54: 8f:3c:df:05:8f:b2:14:15:5d:95:7f:f4:da:6f:98: 6a:1b:37:6e:3e:9a:ac:aa:77:a7:36:2d:73:cb:24: 74:df:96:0f:ae:04:0c:b9:97:c2:e6:99:f2:e3:6b: b7:7d:34:95:80:bd:79:f3:d3:d9:31:6c:5e:68:47: 19:95:ec:36:5c:e2:b3:62:63:f7:ff:12:66:1d:97: f9:d5:7e:f2:dc:d1:d0:d9:cb:46:b6:6b:83:82:e4: 24:99:aa:65:b6:a7:d0:3b:aa:d4:2c:21:3b:28:44: a7:19:4c:ae:c7:98:39:85:03:01:ba:99:2f:9d:b9: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.205.80.0/22 179.125.48.0/21 IPv6: 2804:105c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263631 Signature Algorithm: sha256WithRSAEncryption 1f:90:dd:d6:ad:16:eb:68:9d:7b:10:8d:b1:ee:93:ad:52:64: a1:a8:0e:68:8a:d6:62:97:3f:cf:8b:2e:34:0f:c2:40:64:13: 64:f6:c2:50:e7:17:ee:a4:0a:2f:60:fd:37:3d:34:04:ee:98: 6f:85:83:a8:aa:cd:9b:6f:b3:45:d1:af:47:0d:96:49:0a:a5: fb:66:cc:8a:b2:30:4c:5a:26:5d:b6:c0:55:aa:3e:89:2b:cd: 30:8f:b2:5c:43:3f:e2:f0:12:43:2e:b1:37:0b:01:92:35:b8: 3a:96:2d:4d:99:56:9b:c7:eb:7c:c3:23:c0:2b:8d:a1:3a:e0: ca:ba:c2:bd:aa:84:7c:23:9b:e5:73:27:71:a8:21:ac:33:36: ad:2c:9d:b1:c1:e6:f9:3a:03:5f:d2:dd:cb:4f:75:45:f0:83: 35:5c:36:89:a1:16:77:0e:4f:24:97:28:ec:2c:8f:1c:08:b0: 45:c1:e3:44:76:0c:56:ee:68:7f:fc:53:ac:c2:13:1e:81:b6: 6d:5d:99:e0:f4:d8:30:ae:bd:6a:b3:94:1a:73:f4:25:f2:fa: 40:d1:76:bb:ed:11:1e:b3:c5:aa:ad:41:67:d3:74:04:d2:8a: ab:21:0c:43:2f:d1:f1:52:22:f9:48:31:93:45:2a:86:94:e1: a6:a4:d8:30 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUcrxCi4HsdPEuNJAxgOAfQjEg3EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODMzMzlaFw0yNTA0MDIxODM4MzlaMDMxMTAvBgNV BAMTKDBFODc3QjlGQzNENTc3OTA3OTBCMEQ4NTdBN0EyQTg5MDMxOUIzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4qDeyYPjT9rXoY8dnKf/vtQu 0rYWq8y5AuV3irMXVuuPgNhraRCosDJFYBhqZxPn5dj2IHKn4qaUYexyqGnZu1T1 qClZXGhnKpxI3L9aCndaEhiU1gEyNtJqbm8K6Bcn1G5RkXTGMwkSrGW/ZWVuJloH QXBWawro5yHMVaGqjR02OhPuVI883wWPshQVXZV/9NpvmGobN24+mqyqd6c2LXPL JHTflg+uBAy5l8LmmfLja7d9NJWAvXnz09kxbF5oRxmV7DZc4rNiY/f/EmYdl/nV fvLc0dDZy0a2a4OC5CSZqmW2p9A7qtQsITsoRKcZTK7HmDmFAwG6mS+dub2nAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQOh3ufw9V3kHkL DYV6eiqJAxmz+jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHI4 eXdqS2VnREtMNzNmUVVYNTY5VTExbUo0cEpGRHA1dlh4eWs1dzZlYXcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHI4 eXdqS2VnREtMNzNmUVVYNTY5VTExbUo0cEpGRHA1dlh4eWs1dzZlYXcvMS8wRTg3 N0I5RkMzRDU3NzkwNzkwQjBEODU3QTdBMkE4OTAzMTlCM0ZBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKozVADBAOzfTAwDQQCAAIwBwMFACgEEFwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBAXPMA0GCSqGSIb3DQEBCwUAA4IBAQAfkN3WrRbr aJ17EI2x7pOtUmShqA5oitZilz/Piy40D8JAZBNk9sJQ5xfupAovYP03PTQE7phv hYOoqs2bb7NF0a9HDZZJCqX7ZsyKsjBMWiZdtsBVqj6JK80wj7JcQz/i8BJDLrE3 CwGSNbg6li1NmVabx+t8wyPAK42hOuDKusK9qoR8I5vlcydxqCGsMzatLJ2xweb5 OgNf0t3LT3VF8IM1XDaJoRZ3Dk8klyjsLI8cCLBFweNEdgxW7mh//FOswhMegbZt XZng9Ngwrr1qs5Qac/Ql8vpA0Xa77REes8WqrUFn03QE0oqrIQxDL9HxUiL5SDGT RSqGlOGmpNgw -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:26 2024 by rpki-client on console-fra.rpki-client.org