$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer File: 12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer (raw, json) Hash identifier: MN55OFybzQ1PzZs10OAe1XYLWV/CVgNYTAiHUfTXKSU= Subject key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 38BD945B8E16EFC5CC9E6F08ACF8FE209E4463B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft caRepository: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 20 May 2024 12:56:47 +0000 Certificate not after: Mon 19 May 2025 13:01:47 +0000 Subordinate resources: AS: 262378 IP: 170.79.192.0/22 IP: 177.131.16.0/20 IP: 2804:2d80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bd:94:5b:8e:16:ef:c5:cc:9e:6f:08:ac:f8:fe:20:9e:44:63:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 20 12:56:47 2024 GMT Not After : May 19 13:01:47 2025 GMT Subject: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:02:dc:be:a7:89:95:d0:31:9e:cc:a8:7e: dc:91:df:e2:67:ff:10:ad:ca:42:c9:f7:f5:28:90: 61:56:70:39:25:a4:57:ff:c0:7a:bb:3f:42:2d:2f: b8:97:13:b2:7d:d7:51:16:20:84:58:10:64:b5:ff: 34:62:7e:b0:1b:01:26:42:03:6c:2e:88:21:f8:4d: c7:37:fd:00:6a:3b:53:d0:82:4c:aa:93:c6:37:d8: 23:0e:a2:6b:e5:34:2c:c3:9f:a2:aa:6c:33:c9:73: f4:7d:5d:33:c4:7a:e9:4b:ff:d6:c5:18:ac:e6:57: cc:de:46:04:0c:44:66:a3:12:c2:c6:6e:ad:28:a5: db:3e:e7:af:c2:57:77:3b:1e:fa:26:73:e2:9d:a8: 56:9a:8e:00:e7:c9:9c:d2:a2:2f:bd:8d:c4:90:ed: 26:59:63:fd:76:71:5f:ff:b8:c9:89:fc:70:5f:c1: 48:f3:7a:01:17:e7:22:6f:b1:50:26:53:f2:e4:19: 0f:6b:c6:2e:1f:2d:8b:95:4c:cf:af:c3:24:26:b0: 9f:cd:9f:5d:51:28:bb:71:23:12:20:98:e8:59:07: ea:18:da:e7:1c:86:78:a8:82:eb:ec:9d:05:42:77: 5c:84:31:b6:57:26:f7:c8:b4:1f:43:11:f9:f1:57: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.79.192.0/22 177.131.16.0/20 IPv6: 2804:2d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262378 Signature Algorithm: sha256WithRSAEncryption 2c:15:53:fc:fa:cb:64:ce:04:69:39:fb:40:58:52:6d:38:33: 58:28:71:36:3b:47:fd:e4:3b:96:d3:7d:fe:86:5f:76:f0:6c: c5:b9:64:24:c8:65:59:22:80:64:35:7b:3f:b4:f8:c0:a1:8b: 06:a7:ae:b0:6a:e5:23:d0:6b:de:20:19:7e:c4:3c:4e:79:dc: a6:d2:07:79:d1:21:3d:b2:cc:f5:41:d3:41:66:91:b7:7f:f4: d4:2a:fa:89:23:fc:07:45:86:4d:2c:a8:69:00:84:8d:d9:3f: 41:b2:19:74:37:5d:7e:49:57:92:9b:db:f5:f5:79:b5:cb:19: 8e:d1:86:14:6d:5b:f7:6e:f8:fc:7f:f2:8a:8a:35:c5:b5:2d: 2e:ca:b5:a7:74:c7:7b:30:72:8e:18:61:61:b1:ce:7e:d5:06: 5b:e9:ac:ae:fb:27:42:e4:45:00:38:5e:e2:29:14:ed:16:d7: 9f:25:5a:91:d0:e7:4f:81:ce:39:e2:13:cb:22:5d:55:01:2f: 4d:0f:1c:49:a5:bc:cd:ea:aa:49:67:65:b1:97:1a:1b:da:0d: b8:d5:36:98:e7:d2:7b:af:17:a9:32:98:dd:b8:43:32:ef:e8: be:d3:eb:67:90:3e:c9:30:d8:03:c2:1f:45:fb:5f:29:80:3e: 85:8e:36:c2 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUOL2UW44W78XMnm8IrPj+IJ5EY7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MjAxMjU2NDdaFw0yNTA1MTkxMzAxNDdaMDMxMTAvBgNV BAMTKDEyQzNGRUI5REVDNjE3NkVFNTk1MkY4NUNBRjdBNDRCM0Y2M0YzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSwLcvqeJldAxnsyoftyR3+Jn /xCtykLJ9/UokGFWcDklpFf/wHq7P0ItL7iXE7J911EWIIRYEGS1/zRifrAbASZC A2wuiCH4Tcc3/QBqO1PQgkyqk8Y32CMOomvlNCzDn6KqbDPJc/R9XTPEeulL/9bF GKzmV8zeRgQMRGajEsLGbq0opds+56/CV3c7Hvomc+KdqFaajgDnyZzSoi+9jcSQ 7SZZY/12cV//uMmJ/HBfwUjzegEX5yJvsVAmU/LkGQ9rxi4fLYuVTM+vwyQmsJ/N n11RKLtxIxIgmOhZB+oY2ucchnioguvsnQVCd1yEMbZXJvfItB9DEfnxV0VlAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQSw/653sYXbuWV L4XK96RLP2PzyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRWlR dW5wZHcxRERVUTVIVkpWTGJHRm54dXNaOFRoSmFGU0d2UDZzcDJKOTkvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vp UXVucGR3MUREVVE1SFZKVkxiR0ZueHVzWjhUaEphRlNHdlA2c3AySjk5LzEvMTJD M0ZFQjlERUM2MTc2RUU1OTUyRjg1Q0FGN0E0NEIzRjYzRjNDQS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqk/AAwQEsYMQMA0EAgACMAcDBQAoBC2AMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQA6jANBgkqhkiG9w0BAQsFAAOCAQEALBVT/PrL ZM4EaTn7QFhSbTgzWChxNjtH/eQ7ltN9/oZfdvBsxblkJMhlWSKAZDV7P7T4wKGL BqeusGrlI9Br3iAZfsQ8TnncptIHedEhPbLM9UHTQWaRt3/01Cr6iSP8B0WGTSyo aQCEjdk/QbIZdDddfklXkpvb9fV5tcsZjtGGFG1b9274/H/yioo1xbUtLsq1p3TH ezByjhhhYbHOftUGW+msrvsnQuRFADhe4ikU7RbXnyVakdDnT4HOOeITyyJdVQEv TQ8cSaW8zeqqSWdlsZcaG9oNuNU2mOfSe68XqTKY3bhDMu/ovtPrZ5A+yTDYA8If RftfKYA+hY42wg== -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:54 2024 by rpki-client on console-ams.rpki-client.org