$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer File: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer (raw, json) Hash identifier: KbxAcNt2BlqcblgMJqZn16z486COuH/zI4NztZRH0SA= Subject key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0232258E538060A2857481AD9F4E4F6A23F3EEAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft caRepository: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 19:18:29 +0000 Certificate not after: Wed 02 Apr 2025 19:23:29 +0000 Subordinate resources: AS: 262422 IP: 143.208.204.0/22 IP: 177.39.80.0/21 IP: 2804:43c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:32:25:8e:53:80:60:a2:85:74:81:ad:9f:4e:4f:6a:23:f3:ee:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 19:18:29 2024 GMT Not After : Apr 2 19:23:29 2025 GMT Subject: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:a9:6b:3f:45:63:db:81:e3:ef:bb:8f:ea: a1:bf:2f:79:7b:1d:63:98:dd:9b:13:c5:48:08:0d: 5a:63:ff:21:6d:b4:e6:dc:2c:f2:9a:4a:79:71:89: e3:df:26:75:b3:19:31:b8:85:2c:14:59:c2:2c:65: 4b:d2:02:70:be:c3:0e:1f:d0:6a:de:ca:51:22:f2: 60:de:8e:73:12:2e:70:a0:57:b3:38:78:91:d1:7a: ac:3c:e4:b4:6e:83:58:aa:40:47:08:1e:d3:db:64: 23:21:c5:40:c7:69:cb:5c:7f:2b:ee:31:fd:ab:9a: a2:55:0b:88:bc:9a:99:60:dc:33:da:e0:1c:b6:65: 58:1c:49:af:86:73:7f:fa:e7:95:40:1b:fb:a3:55: 96:30:fa:d4:ec:26:7b:81:1f:dd:7d:72:39:03:a3: ac:26:9a:12:8a:57:0a:79:75:d5:e1:fb:ff:39:e4: 73:8e:3c:0e:22:8c:38:e2:b5:eb:54:ae:29:df:2f: ef:92:d9:b6:df:8e:c4:81:ac:a9:ad:54:fe:f2:e3: ad:59:65:96:89:b7:75:cc:5d:14:0c:8a:71:e6:03: 95:59:ad:42:60:41:74:e5:7b:0f:02:72:7a:89:54: 7a:0e:57:08:d6:64:2e:fe:9f:8e:36:2c:b3:b5:db: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.208.204.0/22 177.39.80.0/21 IPv6: 2804:43c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262422 Signature Algorithm: sha256WithRSAEncryption 4c:c3:d2:a0:6e:f0:b4:f0:92:80:88:5a:87:f7:39:82:fa:2f: 9f:c2:36:f3:9a:db:3e:4c:d7:57:3a:d9:39:28:86:c5:39:5e: 34:9b:2b:67:1d:a3:86:11:59:6f:ac:5a:90:a0:d0:bd:21:18: 80:b6:ec:84:b1:9f:da:6f:8a:4e:c6:39:ae:fb:33:9f:7e:97: 9f:70:eb:3b:a3:de:ce:a1:d3:2b:1f:fd:81:1a:49:1c:dd:00: 69:29:37:76:e6:e2:d5:76:ca:df:14:9b:2b:10:5f:b4:e5:41: a8:12:45:4d:0b:f3:93:02:c8:ae:bb:bd:d1:0a:65:4f:13:3b: dc:e8:a2:59:3b:f2:22:d1:dc:b7:48:34:1e:14:71:db:52:31: d7:09:51:49:16:e8:31:57:b1:20:e7:3d:7c:7c:ab:2e:17:68: 17:ec:23:74:32:25:f4:0b:f0:9f:3f:0b:f1:96:b8:b5:8d:e8: 56:be:da:61:4f:f5:b3:06:34:d1:50:83:47:22:5e:9d:cf:6b: a0:b6:6c:a0:7b:40:cd:55:4c:eb:f5:6e:4a:86:9d:db:c8:7f: ee:69:d0:e8:df:a3:8f:bf:92:89:d9:0e:e8:4b:bb:14:76:6c: 0e:50:f2:b6:c4:f2:9b:9f:ba:57:5d:60:9f:44:2c:48:71:a9: 16:88:b0:af -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUAjIljlOAYKKFdIGtn05PaiPz7q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxOTE4MjlaFw0yNTA0MDIxOTIzMjlaMDMxMTAvBgNV BAMTKDI0NDM4OERERkU5QTk5RDcxQ0VCMjdDREI2Qzc2NjM3RDIyQ0FCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwalrP0Vj24Hj77uP6qG/L3l7 HWOY3ZsTxUgIDVpj/yFttObcLPKaSnlxiePfJnWzGTG4hSwUWcIsZUvSAnC+ww4f 0GreylEi8mDejnMSLnCgV7M4eJHReqw85LRug1iqQEcIHtPbZCMhxUDHactcfyvu Mf2rmqJVC4i8mplg3DPa4By2ZVgcSa+Gc3/655VAG/ujVZYw+tTsJnuBH919cjkD o6wmmhKKVwp5ddXh+/855HOOPA4ijDjitetUrinfL++S2bbfjsSBrKmtVP7y461Z ZZaJt3XMXRQMinHmA5VZrUJgQXTlew8CcnqJVHoOVwjWZC7+n442LLO12/ndAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkQ4jd/pqZ1xzr J822x2Y30iyrjzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2Vr b0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtnbWcvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdl a29BcVFlWHpOS0VBWHFHTWR3cVpmOVRnN05kSlFyYlNhZWh4MWRLZ21nLzEvMjQ0 Mzg4RERGRTlBOTlENzFDRUIyN0NEQjZDNzY2MzdEMjJDQUI4Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCj9DMAwQDsSdQMA0EAgACMAcDBQAoBAQ8MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQBFjANBgkqhkiG9w0BAQsFAAOCAQEATMPSoG7w tPCSgIhah/c5gvovn8I285rbPkzXVzrZOSiGxTleNJsrZx2jhhFZb6xakKDQvSEY gLbshLGf2m+KTsY5rvszn36Xn3DrO6PezqHTKx/9gRpJHN0AaSk3dubi1XbK3xSb KxBftOVBqBJFTQvzkwLIrru90QplTxM73OiiWTvyItHct0g0HhRx21Ix1wlRSRbo MVexIOc9fHyrLhdoF+wjdDIl9Avwnz8L8Za4tY3oVr7aYU/1swY00VCDRyJenc9r oLZsoHtAzVVM6/VuSoad28h/7mnQ6N+jj7+SidkO6Eu7FHZsDlDytsTym5+6V11g n0QsSHGpFoiwrw== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:27 2024 by rpki-client on console-fra.rpki-client.org