$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer File: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer (raw, json) Hash identifier: b+j9USgpCUrZTlz4BRtAoJ/PmWvrbvRcgHdKnbWzs8o= Subject key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 58D6E6E7335B834F06F9F45177C91FB2AA51F4E4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft caRepository: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Apr 2024 12:29:02 +0000 Certificate not after: Thu 17 Apr 2025 12:34:02 +0000 Subordinate resources: AS: 264971 IP: 200.219.149.0/24 IP: 2801:80:1920::/48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d6:e6:e7:33:5b:83:4f:06:f9:f4:51:77:c9:1f:b2:aa:51:f4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 18 12:29:02 2024 GMT Not After : Apr 17 12:34:02 2025 GMT Subject: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:c7:48:11:8f:cf:fd:06:32:c5:8f:eb:7b: 10:11:7b:00:ee:43:6a:fc:7b:b5:dc:f2:a5:4a:88: dc:64:18:67:11:c6:4f:31:d3:76:0c:93:7c:3c:6a: ed:1e:0e:7d:7f:7f:7a:50:a8:02:28:79:cc:12:d6: 93:d4:30:e0:7b:aa:55:a5:e9:f9:f3:47:7c:f0:e9: 3e:7b:d2:fb:91:02:a6:c3:ac:7c:e8:af:60:fc:d3: 54:78:09:65:f5:63:8d:65:0b:ce:bc:da:65:8f:78: 02:0c:f0:46:b5:da:cf:c6:cd:1d:b7:7a:78:30:1b: b1:c4:27:d7:2b:3f:c0:f6:17:65:8d:f1:f4:8f:35: 07:c8:b4:f6:df:82:67:2e:10:49:2f:16:e1:2e:16: 7c:ce:7d:ac:c8:9e:44:d1:f2:77:82:c6:e4:d5:70: 98:d0:23:71:84:2b:09:6e:6c:fd:a5:54:ec:5d:e0: 51:28:1b:34:58:8a:8b:cb:0e:89:19:69:a3:f7:5d: e7:f5:16:27:c8:e5:e3:82:d3:53:11:5a:5a:5a:46: 6d:16:b2:a7:a9:05:2c:67:a8:78:f4:5a:1c:0b:dc: 82:8f:6c:4c:7e:b0:c8:98:39:51:35:18:96:02:32: 63:4e:10:8d:af:64:88:55:bd:84:4b:f5:cf:4f:e4: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.219.149.0/24 IPv6: 2801:80:1920::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264971 Signature Algorithm: sha256WithRSAEncryption 29:cd:bf:73:d8:a3:e6:7b:f7:99:7e:99:53:6d:cb:98:f2:5f: f7:d4:f3:8f:15:a3:fe:b9:45:46:3c:2b:d0:9b:36:35:f7:fb: ad:d2:94:2b:e8:30:07:77:c9:7b:9a:00:08:45:e0:c7:e5:19: 9f:9c:47:80:2e:af:c1:43:3f:53:19:d1:c4:7d:c4:33:7d:c2: b1:4e:a6:4b:50:e5:13:33:c3:c0:8e:d0:bc:1c:56:99:1c:d8: fc:c0:f1:8d:88:cd:e5:30:85:26:c3:91:b8:82:99:9f:67:39: df:7c:9b:e5:3d:5f:aa:c7:b2:c3:97:52:9b:ab:79:20:fc:69: 8a:26:bf:bf:21:ea:d8:bc:53:44:64:c6:38:6f:f7:af:cd:6b: fe:f8:ed:0c:b6:a8:42:d1:04:9d:4e:f2:d2:37:b1:9b:f3:1c: 70:d1:ec:8b:96:1c:73:dd:7f:44:76:3a:1b:e5:bd:11:e0:7b: 35:df:70:74:8a:68:8d:1d:60:00:3c:7b:96:77:ad:c8:72:c8: 76:ae:a5:25:ab:3a:97:8f:cf:ac:91:9f:ab:6d:68:86:8c:c5: 26:2f:c2:46:11:db:58:24:44:a9:9a:04:22:65:b9:b9:8d:89: b8:fd:21:00:85:2d:64:bf:7e:82:fb:33:5a:ce:6b:6e:1c:fd: ff:51:ca:40 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIUWNbm5zNbg08G+fRRd8kfsqpR9OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MTgxMjI5MDJaFw0yNTA0MTcxMjM0MDJaMDMxMTAvBgNV BAMTKDFGRDUzQkVDOTc2NkMwQjRGODExNTUxRTczODVDRTJFNEQ0MEZFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLq8dIEY/P/QYyxY/rexARewDu Q2r8e7Xc8qVKiNxkGGcRxk8x03YMk3w8au0eDn1/f3pQqAIoecwS1pPUMOB7qlWl 6fnzR3zw6T570vuRAqbDrHzor2D801R4CWX1Y41lC8682mWPeAIM8Ea12s/GzR23 engwG7HEJ9crP8D2F2WN8fSPNQfItPbfgmcuEEkvFuEuFnzOfazInkTR8neCxuTV cJjQI3GEKwlubP2lVOxd4FEoGzRYiovLDokZaaP3Xef1FifI5eOC01MRWlpaRm0W sqepBSxnqHj0WhwL3IKPbEx+sMiYOVE1GJYCMmNOEI2vZIhVvYRL9c9P5LA1AgMB AAGjggM8MIIDODAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQf1Tvsl2bAtPgR VR5zhc4uTUD+kjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGFp QmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhh aUJhTFBjUGpyejlOSFZobUV0eVVhOE1tem5GNDFXRlJ4ZFd1NFNZTVlDLzAvMUZE NTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0RDQwRkU5Mi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAyNuVMA8EAgACMAkDBwAoAQCAGSAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBAsLMA0GCSqGSIb3DQEBCwUAA4IBAQApzb9z2KPme/eZ fplTbcuY8l/31POPFaP+uUVGPCvQmzY19/ut0pQr6DAHd8l7mgAIReDH5RmfnEeA Lq/BQz9TGdHEfcQzfcKxTqZLUOUTM8PAjtC8HFaZHNj8wPGNiM3lMIUmw5G4gpmf ZznffJvlPV+qx7LDl1Kbq3kg/GmKJr+/IerYvFNEZMY4b/evzWv++O0MtqhC0QSd TvLSN7Gb8xxw0eyLlhxz3X9Edjob5b0R4Hs133B0imiNHWAAPHuWd63Icsh2rqUl qzqXj8+skZ+rbWiGjMUmL8JGEdtYJESpmgQiZbm5jYm4/SEAhS1kv36C+zNazmtu HP3/UcpA -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:55 2024 by rpki-client on console-ams.rpki-client.org