$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer File: 1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.cer (raw, json) Hash identifier: UZ/cNrU42sM6Mi95qM+nT2s6oKPXT+k/v6we9fpv3eo= Subject key identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 22ED40587A3BFF3BB0C8B99FB2A8D36A9AF6CBD8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft caRepository: rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:45:22 +0000 Certificate not after: Thu 03 Apr 2025 02:50:22 +0000 Subordinate resources: AS: 264918 IP: 168.228.208.0/22 IP: 2804:2fe0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 05:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ed:40:58:7a:3b:ff:3b:b0:c8:b9:9f:b2:a8:d3:6a:9a:f6:cb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:45:22 2024 GMT Not After : Apr 3 02:50:22 2025 GMT Subject: CN=1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:f2:d0:68:62:65:a1:81:64:5c:94:05:18: 66:d0:c1:b2:6f:6a:29:20:e5:11:38:4d:51:1a:c6: 0c:6e:d8:48:92:53:cf:45:1e:5f:8c:f8:04:e7:22: 62:e8:c3:9d:78:0a:7b:a3:f6:06:d9:30:b8:58:86: 06:25:4a:a0:c9:0e:89:dc:1e:8c:7f:24:7a:e6:02: cf:80:a2:77:07:ec:e9:83:a6:ad:9c:51:20:1a:9b: ee:a3:e0:53:2d:fa:55:73:c2:ad:10:e7:d2:e5:45: 7e:e1:1b:c0:9e:6f:84:ce:f2:9d:14:ab:d3:39:1a: cf:0d:63:fc:f9:1d:63:5a:7c:05:ef:6d:7d:2d:a3: a1:9f:86:cc:25:51:f0:0d:47:7a:36:2a:41:64:3a: aa:89:28:8c:aa:dc:ad:5f:20:05:1a:99:bb:ba:63: 3f:6b:06:97:0d:b2:94:54:f1:3e:ac:e9:2f:c8:5b: 96:d3:fd:e4:84:c1:1d:32:2d:b2:2b:2b:71:46:33: a9:70:ff:a4:71:f1:bb:7a:2b:8f:3d:9e:95:5a:92: 39:70:99:c8:36:28:be:2c:68:d8:28:4d:21:d3:66: 5d:1c:3d:03:1e:3a:98:cd:45:eb:08:95:9b:19:8e: 48:06:6a:c0:1b:63:63:4f:bf:f1:76:72:ce:13:2c: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:8E:FF:A5:2E:4D:B3:93:A7:7E:CA:17:BC:B4:C8:A5:1C:41:3E:62 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ac1wUWCNqu5pE9Mk5SaYYPDN191jzvpGQ3s792X1MTEV/1/1A8EFFA52E4DB393A77ECA17BCB4C8A51C413E62.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.228.208.0/22 IPv6: 2804:2fe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264918 Signature Algorithm: sha256WithRSAEncryption 65:40:8b:47:57:02:c5:2b:36:f4:12:1d:e9:3b:9b:54:cd:4c: a3:86:be:06:9c:d6:63:03:d6:c2:c3:c4:d1:b2:2c:fb:f2:85: a4:8e:2f:60:e9:f1:f2:2a:34:74:f2:3c:5b:b9:b2:34:70:7f: 9e:90:8e:fa:6d:f5:50:0b:9f:cf:03:24:57:52:0f:8d:69:02: 6a:8d:fa:f7:81:bd:4b:09:0b:15:66:80:f7:1b:a2:c3:56:6a: df:b3:7e:8a:b7:dc:ee:9c:2a:1c:e6:7c:3f:a1:64:77:92:9e: d0:eb:e0:52:81:42:10:7d:9a:39:36:86:37:f3:20:15:32:ef: c5:65:7d:2d:46:2b:93:80:77:3d:2d:fe:48:f5:4f:b2:d0:56: b9:c5:e7:3f:f9:2c:42:66:fa:2b:56:e2:67:c2:3e:28:8f:5a: aa:16:42:77:25:a0:05:1b:7d:3b:d9:1b:f8:a2:8a:9e:52:73: 9e:7a:fc:96:05:1f:01:49:89:80:11:e3:73:4e:5f:2f:51:ed: b3:12:ab:53:36:ea:c2:6e:02:da:f8:42:7e:39:db:b8:a2:e6: 90:9f:65:86:b4:f7:10:00:a7:12:6c:30:5c:be:90:d0:3a:69: 35:32:54:88:f1:db:41:28:d3:d9:3d:9c:b2:e5:28:cc:62:13: fa:2d:14:c4 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUIu1AWHo7/zuwyLmfsqjTapr2y9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjQ1MjJaFw0yNTA0MDMwMjUwMjJaMDMxMTAvBgNV BAMTKDFBOEVGRkE1MkU0REIzOTNBNzdFQ0ExN0JDQjRDOEE1MUM0MTNFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0fLQaGJloYFkXJQFGGbQwbJv aikg5RE4TVEaxgxu2EiSU89FHl+M+ATnImLow514Cnuj9gbZMLhYhgYlSqDJDonc Hox/JHrmAs+AoncH7OmDpq2cUSAam+6j4FMt+lVzwq0Q59LlRX7hG8Ceb4TO8p0U q9M5Gs8NY/z5HWNafAXvbX0to6GfhswlUfANR3o2KkFkOqqJKIyq3K1fIAUambu6 Yz9rBpcNspRU8T6s6S/IW5bT/eSEwR0yLbIrK3FGM6lw/6Rx8bt6K489npVakjlw mcg2KL4saNgoTSHTZl0cPQMeOpjNResIlZsZjkgGasAbY2NPv/F2cs4TLFBrAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQajv+lLk2zk6d+ yhe8tMilHEE+YjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWMx d1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1URVYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWMx d1VXQ05xdTVwRTlNazVTYVlZUEROMTkxanp2cEdRM3M3OTJYMU1URVYvMS8xQThF RkZBNTJFNERCMzkzQTc3RUNBMTdCQ0I0QzhBNTFDNDEzRTYyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKo5NAwDQQCAAIwBwMFACgEL+AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBArWMA0GCSqGSIb3DQEBCwUAA4IBAQBlQItHVwLFKzb0Eh3p O5tUzUyjhr4GnNZjA9bCw8TRsiz78oWkji9g6fHyKjR08jxbubI0cH+ekI76bfVQ C5/PAyRXUg+NaQJqjfr3gb1LCQsVZoD3G6LDVmrfs36Kt9zunCoc5nw/oWR3kp7Q 6+BSgUIQfZo5NoY38yAVMu/FZX0tRiuTgHc9Lf5I9U+y0Fa5xec/+SxCZvorVuJn wj4oj1qqFkJ3JaAFG3072Rv4ooqeUnOeevyWBR8BSYmAEeNzTl8vUe2zEqtTNurC bgLa+EJ+Odu4ouaQn2WGtPcQAKcSbDBcvpDQOmk1MlSI8dtBKNPZPZyy5SjMYhP6 LRTE -----END CERTIFICATE-----Generated at Tue Jun 18 06:20:05 2024 by rpki-client on console-fra.rpki-client.org