$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer File: 2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer (raw, json) Hash identifier: 7nyOVa2GASqzUF83mWOGTHD8+HRCctLsVSA22qOSQ+w= Subject key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0E7CD7C35C869DCA7ADFBB3F7E81B74F5E71AA1F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.mft caRepository: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 21:50:21 +0000 Certificate not after: Wed 02 Apr 2025 21:55:21 +0000 Subordinate resources: AS: 52772 IP: 177.39.156.0/22 IP: 2804:259c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7c:d7:c3:5c:86:9d:ca:7a:df:bb:3f:7e:81:b7:4f:5e:71:aa:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 21:50:21 2024 GMT Not After : Apr 2 21:55:21 2025 GMT Subject: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:06:2f:f2:c9:d0:04:09:0b:db:3e:80:fe: ea:fd:17:d6:d9:1a:e0:6e:79:69:4f:fc:d8:47:62: a3:ee:0a:a5:e2:cb:a3:4f:73:3b:12:63:37:9c:e6: 8d:88:2c:de:05:96:9d:36:8e:48:ec:ff:12:f6:39: a4:82:0f:14:09:cb:7a:6d:9f:ba:2b:4f:81:95:72: 10:e1:eb:70:12:7a:fa:03:fc:12:c3:be:e6:43:d6: 34:e6:ad:e3:8b:04:48:ae:7e:12:bf:37:dd:57:b7: e1:8e:ab:ff:e6:25:d0:b3:b3:2e:18:68:84:1f:3b: 62:7e:f9:bb:66:ff:51:2e:a0:bb:ec:5b:3e:f5:2e: 70:e5:d7:03:25:dd:cf:08:a1:c9:03:05:57:24:ac: 95:1e:db:5f:1e:a5:11:07:ef:97:70:06:7d:74:4b: 70:4c:ee:be:c0:a2:cc:3d:59:00:25:ac:7c:b2:e8: ee:cf:74:10:7b:cb:d5:55:cf:7a:2c:bc:50:5c:21: 89:56:58:9c:e1:d7:12:53:29:e9:5d:45:8f:0d:c5: b4:29:61:9b:10:6c:bd:a7:68:7b:bf:f2:9a:08:d0: ac:24:1c:f2:2b:e6:77:73:d6:f5:73:20:88:da:6b: b6:3d:e3:5b:07:88:12:df:81:8c:9c:9b:f4:dd:ee: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.39.156.0/22 IPv6: 2804:259c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52772 Signature Algorithm: sha256WithRSAEncryption d3:d9:f0:78:cb:ed:1f:f8:9d:91:27:0f:29:77:51:cb:37:74: c2:33:eb:8d:07:8d:f2:99:4f:d4:6e:ed:c9:6a:b9:4d:f7:9b: f9:62:da:59:c3:f5:8d:05:99:3d:7f:46:16:0d:02:11:a4:87: cd:7f:83:19:b2:42:fb:21:4e:db:23:75:9a:6a:9f:92:d3:53: 97:40:69:8d:b4:3c:f5:ab:34:00:40:25:73:62:7c:fa:08:e5: ab:f5:3c:ea:c7:4d:52:69:4f:39:b0:e4:09:82:74:a2:42:58: 54:de:26:44:95:ea:c5:c6:cc:a4:d1:7a:12:64:a7:99:ed:44: c5:a9:eb:9b:7e:f2:f2:71:51:4a:20:0a:4f:eb:96:f9:67:21: 0c:32:c0:60:4a:87:65:ce:b9:78:3b:f3:6a:62:a7:b9:13:4c: 4a:03:10:3a:59:3a:38:75:54:ee:7a:e5:6a:56:ec:e6:73:2a: cc:95:88:93:7f:3d:a4:2e:32:d0:38:5b:30:14:38:1c:7e:aa: a9:db:69:9d:c2:2e:4d:a7:5b:b1:78:6a:4a:ea:ff:ae:0c:12: 60:79:b8:bd:28:6c:24:07:2a:94:25:3b:e9:54:08:f2:32:0e: 8d:01:88:73:de:6d:8f:a1:35:e1:6c:14:b2:ad:d7:44:da:04: 98:23:6f:cd -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUDnzXw1yGncp637s/foG3T15xqh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMTUwMjFaFw0yNTA0MDIyMTU1MjFaMDMxMTAvBgNV BAMTKDJCMEUzN0NFNUYyMUVFOEFENUYyODZBODJBNUJGOUU0NUIzMEJFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQQYv8snQBAkL2z6A/ur9F9bZ GuBueWlP/NhHYqPuCqXiy6NPczsSYzec5o2ILN4Flp02jkjs/xL2OaSCDxQJy3pt n7orT4GVchDh63ASevoD/BLDvuZD1jTmreOLBEiufhK/N91Xt+GOq//mJdCzsy4Y aIQfO2J++btm/1EuoLvsWz71LnDl1wMl3c8IockDBVckrJUe218epREH75dwBn10 S3BM7r7Aosw9WQAlrHyy6O7PdBB7y9VVz3osvFBcIYlWWJzh1xJTKeldRY8NxbQp YZsQbL2naHu/8poI0KwkHPIr5ndz1vVzIIjaa7Y941sHiBLfgYycm/Td7mbTAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQrDjfOXyHuitXy hqgqW/nkWzC+DzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDN4 NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4VGYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qz eDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzEvMkIw RTM3Q0U1RjIxRUU4QUQ1RjI4NkE4MkE1QkY5RTQ1QjMwQkUwRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsSecMA0EAgACMAcDBQAoBCWcMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDOJDANBgkqhkiG9w0BAQsFAAOCAQEA09nweMvtH/idkScP KXdRyzd0wjPrjQeN8plP1G7tyWq5Tfeb+WLaWcP1jQWZPX9GFg0CEaSHzX+DGbJC +yFO2yN1mmqfktNTl0BpjbQ89as0AEAlc2J8+gjlq/U86sdNUmlPObDkCYJ0okJY VN4mRJXqxcbMpNF6EmSnme1Exanrm37y8nFRSiAKT+uW+WchDDLAYEqHZc65eDvz amKnuRNMSgMQOlk6OHVU7nrlalbs5nMqzJWIk389pC4y0DhbMBQ4HH6qqdtpncIu TadbsXhqSur/rgwSYHm4vShsJAcqlCU76VQI8jIOjQGIc95tj6E14WwUsq3XRNoE mCNvzQ== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:30 2024 by rpki-client on console-ams.rpki-client.org