$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer File: 2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer (raw, json) Hash identifier: czFxPOLh96Njbh6D6U4UE8fHk8xWOZU5Y/iwM10CCoY= Subject key identifier: 2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3D967F5C9BAF43BEEF05F6595F3CC45815B00F32 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft caRepository: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 07 May 2024 17:12:20 +0000 Certificate not after: Tue 06 May 2025 17:17:20 +0000 Subordinate resources: AS: 262585 IP: 201.55.160.0/20 IP: 2804:8f70::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:96:7f:5c:9b:af:43:be:ef:05:f6:59:5f:3c:c4:58:15:b0:0f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 7 17:12:20 2024 GMT Not After : May 6 17:17:20 2025 GMT Subject: CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:38:a0:7d:dc:9c:00:70:84:90:d1:3a:f5: 83:72:2c:af:e3:5c:a9:f0:ec:63:da:b4:89:e5:c9: 2f:01:7f:03:99:d8:5f:5c:c2:db:0e:67:13:f5:08: ba:92:62:45:14:48:c6:5e:69:d1:4e:9e:3d:3f:be: bd:7e:0e:a0:9e:75:e9:3f:39:e6:d9:d5:4b:a6:8f: 9b:43:a0:e6:34:bc:c0:63:ae:07:7a:0c:12:18:4c: 77:0b:eb:b2:e8:32:53:58:9e:9b:4e:ea:37:a4:80: ed:f6:48:c2:95:f0:0a:36:10:16:de:50:9c:f7:3d: c5:e7:22:3f:4e:f3:22:c1:62:da:6f:cc:18:6a:d1: 0a:4e:22:09:36:60:db:1d:78:29:0a:fc:8d:29:f2: a8:15:b9:2e:69:ea:00:db:5f:b9:08:55:99:b6:1a: 1a:65:7a:40:1b:e6:b3:30:21:57:66:40:1e:2e:88: ef:7f:8f:f5:43:39:19:24:12:a8:ee:c2:78:82:13: 87:79:5d:4d:9c:25:b7:25:56:3d:5a:40:56:90:3f: 65:06:3e:b9:5a:51:21:f4:c4:ba:e2:ea:0e:da:50: 74:bd:43:88:a7:16:2c:88:38:12:0d:53:09:87:b5: f3:10:60:7c:b3:7b:d7:ec:35:c5:8e:9d:85:b7:65: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 201.55.160.0/20 IPv6: 2804:8f70::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262585 Signature Algorithm: sha256WithRSAEncryption 7b:39:0c:90:4c:68:ba:d7:b2:e4:5a:c9:f9:77:a4:d2:5b:ac: 29:d7:b4:c0:a0:fe:6d:64:e7:6d:27:f3:0c:14:50:e3:06:4f: 1d:34:45:01:4c:42:25:c7:85:d8:0a:99:d9:bb:ab:f9:91:89: 15:a9:e3:15:ab:cd:f9:2b:f0:a7:ca:14:1b:85:7f:99:9a:8e: b3:8b:1f:6d:b2:70:05:85:8d:33:b9:7e:fc:09:93:24:00:c2: 3c:e9:cd:b6:76:7a:60:b7:77:1b:56:28:b6:df:63:0e:eb:ba: 86:b3:f3:d5:d8:be:c1:44:8f:fb:1c:72:53:05:b3:06:9f:fd: 7a:1d:93:8a:b3:ea:bf:e8:8b:11:cb:3d:d5:6b:2e:98:ae:4f: 85:e8:d8:e1:3f:07:90:4b:2d:c7:d1:34:03:a3:70:54:a4:09: f4:69:c4:2f:6c:2f:44:d4:58:e6:44:bf:3d:92:be:56:6b:cd: c6:0c:0b:db:86:45:26:5a:46:70:58:8f:26:6b:e7:32:f0:e9: 64:c3:ce:26:da:90:0c:9f:a3:29:5f:60:d1:6c:f5:6f:e7:17: 45:25:01:aa:98:a5:37:23:29:ef:f4:67:4f:c9:95:2c:d8:72: 8f:85:85:06:22:bf:63:69:9d:d6:04:f5:36:00:ea:79:76:d2: b9:d1:6b:97 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUPZZ/XJuvQ77vBfZZXzzEWBWwDzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MDcxNzEyMjBaFw0yNTA1MDYxNzE3MjBaMDMxMTAvBgNV BAMTKDJBMzcxQ0Y4Qzg2Nzk5RTE1NDUwNEI2QzAyMzg5MERBRDNDQUYxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejTigfdycAHCEkNE69YNyLK/j XKnw7GPatInlyS8BfwOZ2F9cwtsOZxP1CLqSYkUUSMZeadFOnj0/vr1+DqCedek/ OebZ1Uumj5tDoOY0vMBjrgd6DBIYTHcL67LoMlNYnptO6jekgO32SMKV8Ao2EBbe UJz3PcXnIj9O8yLBYtpvzBhq0QpOIgk2YNsdeCkK/I0p8qgVuS5p6gDbX7kIVZm2 GhplekAb5rMwIVdmQB4uiO9/j/VDORkkEqjuwniCE4d5XU2cJbclVj1aQFaQP2UG PrlaUSH0xLri6g7aUHS9Q4inFiyIOBINUwmHtfMQYHyze9fsNcWOnYW3ZU0lAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqNxz4yGeZ4VRQ S2wCOJDa08rxuzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR21u UmM2Q1BwSkxDeEdORGUxeEFybmVIelpvRDJYMlA4NE1HVHZwRWtaZnQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dt blJjNkNQcEpMQ3hHTkRlMXhBcm5lSHpab0QyWDJQODRNR1R2cEVrWmZ0LzAvMkEz NzFDRjhDODY3OTlFMTU0NTA0QjZDMDIzODkwREFEM0NBRjFCQi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEyTegMA0EAgACMAcDBQAoBI9wMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQBuTANBgkqhkiG9w0BAQsFAAOCAQEAezkMkExoutey5FrJ +Xek0lusKde0wKD+bWTnbSfzDBRQ4wZPHTRFAUxCJceF2AqZ2bur+ZGJFanjFavN +Svwp8oUG4V/mZqOs4sfbbJwBYWNM7l+/AmTJADCPOnNtnZ6YLd3G1Yott9jDuu6 hrPz1di+wUSP+xxyUwWzBp/9eh2TirPqv+iLEcs91WsumK5PhejY4T8HkEstx9E0 A6NwVKQJ9GnEL2wvRNRY5kS/PZK+VmvNxgwL24ZFJlpGcFiPJmvnMvDpZMPOJtqQ DJ+jKV9g0Wz1b+cXRSUBqpilNyMp7/RnT8mVLNhyj4WFBiK/Y2md1gT1NgDqeXbS udFrlw== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:27 2024 by rpki-client on console-fra.rpki-client.org