$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer File: 3297FC6045B32620F4B7F6A0AABC041F270B248B.cer (raw, json) Hash identifier: xxbX8XAUs0J3g0pn7Vea7R7HtsE1n4D6gXj/cDc4w4I= Subject key identifier: 32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 229B405C56BEC9901C49BEC4E321470C51650D25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft caRepository: rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 06:27:10 +0000 Certificate not after: Thu 03 Apr 2025 06:32:10 +0000 Subordinate resources: AS: 271068 IP: 179.48.72.0/22 IP: 2804:75c4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 03:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9b:40:5c:56:be:c9:90:1c:49:be:c4:e3:21:47:0c:51:65:0d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 06:27:10 2024 GMT Not After : Apr 3 06:32:10 2025 GMT Subject: CN=3297FC6045B32620F4B7F6A0AABC041F270B248B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:8d:46:fe:8f:9f:55:a4:1f:bd:35:82:f6: c3:db:30:42:2e:ed:6e:11:2d:15:d2:7b:fc:e0:b1: 4e:39:44:2d:6d:ac:5d:1b:0e:b9:bc:c2:dc:57:dd: 32:f1:b9:d1:3c:e5:cb:99:da:f4:ec:1d:33:e6:25: 79:af:93:47:70:05:87:32:6f:c1:06:f7:80:6f:ae: 27:13:2f:d5:48:3c:01:cd:a7:3a:59:7a:6a:0a:da: ad:45:7c:96:ca:59:2b:c2:ec:19:fc:f9:d8:77:63: f6:17:e5:02:d4:20:a5:b4:dd:b0:f6:4e:05:7a:70: 35:e6:1d:63:5d:7e:5f:4a:aa:12:ce:1d:66:72:ca: b6:81:76:7e:ac:2d:bc:4b:25:07:a5:8f:0f:11:5b: 2b:19:7d:ba:75:db:da:29:8c:53:42:b0:db:43:bb: c4:d8:a2:9e:b8:08:af:e8:ab:f8:d3:6d:8f:df:18: ee:09:3e:00:96:3e:a1:db:c5:75:1a:29:fe:9d:20: 9e:c1:14:18:3d:6f:49:ba:f4:09:f5:aa:4f:2e:90: bb:30:e7:36:35:d0:d1:b0:b6:0b:3b:03:7e:c8:45: 3f:c5:aa:ff:ca:07:ba:86:16:6a:5b:f1:0f:0c:b6: a7:0d:41:35:c5:ff:80:6b:fe:c4:4b:84:c8:8c:82: c4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.48.72.0/22 IPv6: 2804:75c4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271068 Signature Algorithm: sha256WithRSAEncryption 38:9e:53:9d:33:86:0b:30:30:ec:91:e7:65:26:99:94:b2:c9: 15:ea:55:a1:d6:b1:83:93:a9:71:2c:90:6c:bf:41:c6:6f:17: b5:bf:a3:d0:58:8e:e1:ae:b4:6e:a9:48:bd:76:be:ee:0e:da: af:c0:ed:b0:08:16:1a:8f:34:8a:b3:eb:0e:27:ac:51:de:02: 22:ed:d7:22:4f:ec:28:76:c9:0d:c9:2e:f2:1b:90:65:ea:75: 27:83:b5:74:5f:76:99:14:69:7e:d4:7c:b7:f5:85:97:36:b5: ad:58:ea:1d:3d:1b:1b:0b:39:d0:fd:92:1d:86:72:3b:69:7c: c6:62:d9:da:4d:aa:d4:d3:46:af:da:41:7a:f4:73:54:82:ec: 8c:06:a7:8d:37:77:a5:cd:92:d0:1e:0f:22:cf:e1:c6:e9:78: 87:88:9c:f9:1b:1b:3e:d4:73:eb:fb:1b:9c:b9:a2:37:a4:92: 49:c2:89:a2:d5:9c:39:c3:36:fa:e8:ff:96:71:00:89:45:b0: d0:29:70:34:5c:9c:64:5d:c1:dd:b1:c0:fe:87:d9:d9:53:a4: e3:60:f7:9c:32:ca:92:f5:f9:98:9c:82:95:dd:1c:38:50:4d: fd:9b:d8:84:d7:7b:e4:b9:de:27:9b:9e:e1:56:2f:9f:04:fb: ce:7c:3c:a9 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUIptAXFa+yZAcSb7E4yFHDFFlDSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNjI3MTBaFw0yNTA0MDMwNjMyMTBaMDMxMTAvBgNV BAMTKDMyOTdGQzYwNDVCMzI2MjBGNEI3RjZBMEFBQkMwNDFGMjcwQjI0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUI1G/o+fVaQfvTWC9sPbMEIu 7W4RLRXSe/zgsU45RC1trF0bDrm8wtxX3TLxudE85cuZ2vTsHTPmJXmvk0dwBYcy b8EG94BvricTL9VIPAHNpzpZemoK2q1FfJbKWSvC7Bn8+dh3Y/YX5QLUIKW03bD2 TgV6cDXmHWNdfl9KqhLOHWZyyraBdn6sLbxLJQeljw8RWysZfbp129opjFNCsNtD u8TYop64CK/oq/jTbY/fGO4JPgCWPqHbxXUaKf6dIJ7BFBg9b0m69An1qk8ukLsw 5zY10NGwtgs7A37IRT/Fqv/KB7qGFmpb8Q8MtqcNQTXF/4Br/sRLhMiMgsSPAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQyl/xgRbMmIPS3 9qCqvAQfJwskizAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSE5W MkpXc1E2RG8xR3RyeGhjcXBvVVp2SnNMeWFDTlRQaUFmakRmVjd3MVovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hO VjJKV3NRNkRvMUd0cnhoY3Fwb1VadkpzTHlhQ05UUGlBZmpEZlY3dzFaLzEvMzI5 N0ZDNjA0NUIzMjYyMEY0QjdGNkEwQUFCQzA0MUYyNzBCMjQ4Qi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCszBIMA0EAgACMAcDBQAoBHXEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQi3DANBgkqhkiG9w0BAQsFAAOCAQEAOJ5TnTOGCzAw7JHn ZSaZlLLJFepVodaxg5OpcSyQbL9Bxm8Xtb+j0FiO4a60bqlIvXa+7g7ar8DtsAgW Go80irPrDiesUd4CIu3XIk/sKHbJDcku8huQZep1J4O1dF92mRRpftR8t/WFlza1 rVjqHT0bGws50P2SHYZyO2l8xmLZ2k2q1NNGr9pBevRzVILsjAanjTd3pc2S0B4P Is/hxul4h4ic+RsbPtRz6/sbnLmiN6SSScKJotWcOcM2+uj/lnEAiUWw0ClwNFyc ZF3B3bHA/ofZ2VOk42D3nDLKkvX5mJyCld0cOFBN/ZvYhNd75LneJ5ue4VYvnwT7 znw8qQ== -----END CERTIFICATE-----Generated at Sun Jun 2 03:35:14 2024 by rpki-client on console-fra.rpki-client.org