$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer File: 21F94622ABB07C40B00A61480B9A8AE148AE33AE.cer (raw, json) Hash identifier: D2Vzu1k2cvpQunEHiHsEXoy0cR7Iu4dpoHh49H4RIiw= Subject key identifier: 21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3B9023AAE1D350CEB569E5BC31C5C90B342E0BEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft caRepository: rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 11:33:47 +0000 Certificate not after: Thu 03 Apr 2025 11:38:47 +0000 Subordinate resources: AS: 270261 IP: 200.110.200.0/22 IP: 2804:694c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:90:23:aa:e1:d3:50:ce:b5:69:e5:bc:31:c5:c9:0b:34:2e:0b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 11:33:47 2024 GMT Not After : Apr 3 11:38:47 2025 GMT Subject: CN=21F94622ABB07C40B00A61480B9A8AE148AE33AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:de:d1:43:52:a6:d8:19:e6:3f:1c:c3:e0: 36:e2:ce:5c:93:f0:62:7a:17:f6:2f:97:bb:4b:02: 11:9a:a1:af:89:da:78:ea:dc:a3:88:eb:c6:60:25: 04:af:ed:e2:5a:46:06:b0:b1:3a:13:fe:4b:cc:8b: d6:c9:7b:1b:bf:64:6e:25:f9:59:8b:c7:0f:9b:81: fb:c8:2d:0b:7c:a5:ed:27:f5:17:80:9b:18:d5:81: ec:26:99:eb:fb:4b:2e:a5:d6:07:62:d3:b6:dd:49: 8d:eb:e8:9d:04:b5:b3:24:03:99:77:e4:03:b2:f8: 97:4d:97:85:3b:67:48:12:20:d7:07:f2:7d:a2:13: 02:aa:c5:b7:69:ef:84:ec:0d:22:70:5c:49:8c:b7: dc:04:57:9f:84:4a:45:e3:e5:1d:ec:02:2e:39:ee: 71:60:8d:ad:88:3f:d1:be:8e:5d:27:81:0e:4a:2b: 03:28:90:d1:fd:46:df:08:64:b2:65:2f:39:11:e5: eb:61:d9:ca:8f:b8:25:f2:df:f6:e9:8d:c9:a7:a5: 4a:3e:7a:26:ff:6c:77:fa:f7:e5:9a:68:af:08:41: 57:33:f9:7d:ce:9d:58:0f:de:46:83:2d:d4:c4:4a: 25:77:a7:4d:40:18:d7:af:55:78:c4:45:82:c2:16: 35:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:F9:46:22:AB:B0:7C:40:B0:0A:61:48:0B:9A:8A:E1:48:AE:33:AE X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cBrkPiEgDz2ebwCR1AmBGN7NzyN7G2v4SgnJbmoU7Pj/0/21F94622ABB07C40B00A61480B9A8AE148AE33AE.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.110.200.0/22 IPv6: 2804:694c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270261 Signature Algorithm: sha256WithRSAEncryption b5:0e:b3:1d:95:80:b5:6b:bb:18:20:0f:dd:f5:b7:a0:ba:9e: c3:fb:db:b2:60:88:04:75:63:24:f7:fe:de:df:8c:d1:71:ec: ee:30:3d:70:da:2a:02:34:73:a0:98:15:1c:13:57:df:33:65: 08:a1:fb:be:ca:3a:76:de:e1:e7:7e:45:7b:41:4c:42:dc:10: 20:0f:c8:26:06:1c:cf:fc:cc:d0:be:69:06:fe:de:98:b3:b5: 2a:f7:1f:5b:59:0a:78:10:76:4f:8e:ce:aa:c8:6c:a0:77:a3: c8:bc:29:0f:88:e1:e8:ae:cf:c2:05:14:26:d3:fa:af:04:63: 00:33:9d:0f:4e:91:26:5e:21:12:9c:6a:b5:1f:7f:8e:d6:8f: 5c:b6:86:4a:2e:f2:6e:9a:a9:d7:94:7e:e1:02:1e:65:b5:f3: d1:f9:e2:0c:10:b9:26:71:ce:21:1b:1b:fb:bc:8c:d5:4f:4c: a6:79:97:3b:94:98:0d:d8:8a:c0:35:d7:23:51:d0:bb:d4:02: 59:d9:57:dc:c4:cf:b7:c2:e3:3f:00:e2:6f:6e:37:d6:94:92: 3f:50:83:e3:b6:51:20:a8:21:94:82:2c:04:91:5f:c0:53:f2: 67:c7:47:a2:38:71:e1:45:bc:35:7e:8a:73:a4:bd:fa:06:20: 0c:7f:8a:a1 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUO5AjquHTUM61aeW8McXJCzQuC+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMTMzNDdaFw0yNTA0MDMxMTM4NDdaMDMxMTAvBgNV BAMTKDIxRjk0NjIyQUJCMDdDNDBCMDBBNjE0ODBCOUE4QUUxNDhBRTMzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6t7RQ1Km2BnmPxzD4DbizlyT 8GJ6F/Yvl7tLAhGaoa+J2njq3KOI68ZgJQSv7eJaRgawsToT/kvMi9bJexu/ZG4l +VmLxw+bgfvILQt8pe0n9ReAmxjVgewmmev7Sy6l1gdi07bdSY3r6J0EtbMkA5l3 5AOy+JdNl4U7Z0gSINcH8n2iEwKqxbdp74TsDSJwXEmMt9wEV5+ESkXj5R3sAi45 7nFgja2IP9G+jl0ngQ5KKwMokNH9Rt8IZLJlLzkR5eth2cqPuCXy3/bpjcmnpUo+ eib/bHf69+WaaK8IQVcz+X3OnVgP3kaDLdTESiV3p01AGNevVXjERYLCFjUvAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQh+UYiq7B8QLAK YUgLmorhSK4zrjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWNC cmtQaUVnRHoyZWJ3Q1IxQW1CR043Tnp5TjdHMnY0U2duSmJtb1U3UGovMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVj QnJrUGlFZ0R6MmVid0NSMUFtQkdON056eU43RzJ2NFNnbkpibW9VN1BqLzAvMjFG OTQ2MjJBQkIwN0M0MEIwMEE2MTQ4MEI5QThBRTE0OEFFMzNBRS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCyG7IMA0EAgACMAcDBQAoBGlMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQftTANBgkqhkiG9w0BAQsFAAOCAQEAtQ6zHZWAtWu7GCAP 3fW3oLqew/vbsmCIBHVjJPf+3t+M0XHs7jA9cNoqAjRzoJgVHBNX3zNlCKH7vso6 dt7h535Fe0FMQtwQIA/IJgYcz/zM0L5pBv7emLO1KvcfW1kKeBB2T47OqshsoHej yLwpD4jh6K7PwgUUJtP6rwRjADOdD06RJl4hEpxqtR9/jtaPXLaGSi7ybpqp15R+ 4QIeZbXz0fniDBC5JnHOIRsb+7yM1U9MpnmXO5SYDdiKwDXXI1HQu9QCWdlX3MTP t8LjPwDib2431pSSP1CD47ZRIKghlIIsBJFfwFPyZ8dHojhx4UW8NX6Kc6S9+gYg DH+KoQ== -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:30 2024 by rpki-client on console-fra.rpki-client.org