$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer File: 21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer (raw, json) Hash identifier: 0tl5NaYXX35IYE/9D9j2Y2vX3WyW2fVgbVX/Qjc8iyA= Subject key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 51CE8F2FF27111D71917BBC29EA858CC59A44A93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft caRepository: rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:40 +0000 Certificate not after: Wed 02 Apr 2025 18:31:40 +0000 Subordinate resources: AS: 262903 IP: 177.23.208.0/21 IP: 177.86.104.0/21 IP: 179.109.56.0/21 IP: 186.251.56.0/22 IP: 2804:1644::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Jul 2024 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ce:8f:2f:f2:71:11:d7:19:17:bb:c2:9e:a8:58:cc:59:a4:4a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:40 2024 GMT Not After : Apr 2 18:31:40 2025 GMT Subject: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:ac:d6:f7:c0:52:36:c2:d3:0a:9d:d7:92: 6e:f5:b4:44:e5:b6:03:08:4f:db:f6:7d:e0:34:a7: b1:f5:59:2c:31:57:6e:cf:ba:4b:43:ec:f1:fb:a6: ae:fc:2c:d1:22:64:8e:4c:a7:90:72:a2:9e:86:5e: ec:61:13:00:0b:92:71:af:51:66:99:f4:07:d7:47: 5b:f5:05:2b:12:19:1f:f0:f8:81:9f:33:96:92:48: 15:f6:0d:0b:78:68:d6:d7:ab:bc:02:ac:32:43:e7: 33:d3:0b:42:1d:ea:fc:c4:de:cd:c3:32:3d:bc:01: 59:cb:23:28:21:6f:2b:14:9f:bb:b3:3c:b9:5a:97: 39:91:1d:9a:3f:93:3b:eb:79:ca:b6:4f:91:4f:7d: b2:40:ca:19:c0:86:c6:4a:eb:9a:78:85:f9:b4:7e: e6:a8:52:0a:50:0d:8b:83:7f:20:ae:fe:63:02:79: c4:84:09:3d:83:94:f4:6a:97:23:71:80:23:26:7b: 03:88:01:99:51:08:b3:49:a8:8c:63:ca:ea:b3:eb: 21:b9:4f:0a:53:a7:04:dc:01:1e:d8:86:08:de:2e: 6d:37:8d:c9:a9:86:43:2c:df:fc:64:b7:29:be:2b: a1:a4:58:97:bd:3d:21:d1:c2:e4:5a:c4:3f:5f:22: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.23.208.0/21 177.86.104.0/21 179.109.56.0/21 186.251.56.0/22 IPv6: 2804:1644::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262903 Signature Algorithm: sha256WithRSAEncryption 19:27:63:2d:35:ad:2f:09:13:da:c6:c2:fe:f0:ea:16:d3:ee: ae:26:d5:45:3d:bd:e9:a0:94:79:64:6f:7a:09:87:3c:1f:ae: 42:63:72:7a:88:f9:49:9b:ad:ab:51:81:0a:85:5e:02:7e:4b: 3e:d1:dd:b0:e6:07:e1:32:e4:9a:cb:84:b5:64:e2:eb:29:fd: 85:86:8a:d2:67:cf:e6:3d:98:5b:a7:6e:69:de:b6:6e:b2:db: df:b4:89:41:c3:9f:3b:e2:34:e3:69:dd:7e:22:13:ca:a2:51: 3f:59:81:9d:8f:15:b8:2a:ad:53:de:2e:a4:67:de:2a:04:a0: 29:3b:e7:34:6a:48:8c:e2:19:a6:e3:48:b9:f4:1e:cc:6e:8c: ce:a2:4d:dc:64:bf:81:c1:53:dd:58:77:30:5f:88:c4:ca:01: dd:bd:65:a2:fe:9d:e6:bc:d4:f0:12:24:f1:cc:e5:43:70:f2: eb:fa:c9:1f:99:c4:a0:8e:84:a0:9e:92:0d:71:56:c2:75:32: 23:c7:24:a3:07:89:7f:65:4c:e5:04:aa:17:76:0e:9d:f2:20: 64:b7:bf:22:3e:31:3b:5b:87:a0:4b:40:96:08:0b:ec:29:46: f3:82:fe:b9:66:ff:02:cc:67:8a:60:a4:b1:ff:2c:15:52:9a: 4f:9f:90:b0 -----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIUUc6PL/JxEdcZF7vCnqhYzFmkSpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2NDBaFw0yNTA0MDIxODMxNDBaMDMxMTAvBgNV BAMTKDIxQjcwREM2RUE0NkFBNEQyRUEyNTY2M0QyN0JDRDBDN0I3QjNENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXcqzW98BSNsLTCp3Xkm71tETl tgMIT9v2feA0p7H1WSwxV27PuktD7PH7pq78LNEiZI5Mp5Byop6GXuxhEwALknGv UWaZ9AfXR1v1BSsSGR/w+IGfM5aSSBX2DQt4aNbXq7wCrDJD5zPTC0Id6vzE3s3D Mj28AVnLIyghbysUn7uzPLlalzmRHZo/kzvrecq2T5FPfbJAyhnAhsZK65p4hfm0 fuaoUgpQDYuDfyCu/mMCecSECT2DlPRqlyNxgCMmewOIAZlRCLNJqIxjyuqz6yG5 TwpTpwTcAR7YhgjeLm03jcmphkMs3/xktym+K6GkWJe9PSHRwuRaxD9fIkKPAgMB AAGjggNLMIIDRzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhtw3G6kaqTS6i VmPSe80Me3s9YzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDlh UHZBSHk5bzlKNUxDb1o0eWlpalA2NU01U0tGRnpmZVR3aHdERE5lNHYvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDlh UHZBSHk5bzlKNUxDb1o0eWlpalA2NU01U0tGRnpmZVR3aHdERE5lNHYvMS8yMUI3 MERDNkVBNDZBQTREMkVBMjU2NjNEMjdCQ0QwQzdCN0IzRDYzLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcB Af8EMTAvMB4EAgABMBgDBAOxF9ADBAOxVmgDBAOzbTgDBAK6+zgwDQQCAAIwBwMF ACgEFkQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBAL3MA0GCSqGSIb3DQEBCwUA A4IBAQAZJ2MtNa0vCRPaxsL+8OoW0+6uJtVFPb3poJR5ZG96CYc8H65CY3J6iPlJ m62rUYEKhV4Cfks+0d2w5gfhMuSay4S1ZOLrKf2FhorSZ8/mPZhbp25p3rZustvf tIlBw5874jTjad1+IhPKolE/WYGdjxW4Kq1T3i6kZ94qBKApO+c0akiM4hmm40i5 9B7MbozOok3cZL+BwVPdWHcwX4jEygHdvWWi/p3mvNTwEiTxzOVDcPLr+skfmcSg joSgnpINcVbCdTIjxySjB4l/ZUzlBKoXdg6d8iBkt78iPjE7W4egS0CWCAvsKUbz gv65Zv8CzGeKYKSx/ywVUppPn5Cw -----END CERTIFICATE-----Generated at Sun Jun 30 18:31:09 2024 by rpki-client on console-fra.rpki-client.org