$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer (raw, json) Hash identifier: 0N1utiJrQHbVr42xMAOcACktSvupixBYALZUq3/Egis= Subject key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6AAE74293C93C7F0BF3A0C603936289BEE0F4B35 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft caRepository: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 18 Apr 2024 17:42:38 +0000 Certificate not after: Thu 17 Apr 2025 17:47:38 +0000 Subordinate resources: AS: 263528 IP: 170.254.4.0/22 IP: 191.253.64.0/22 IP: 2804:1350::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ae:74:29:3c:93:c7:f0:bf:3a:0c:60:39:36:28:9b:ee:0f:4b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 18 17:42:38 2024 GMT Not After : Apr 17 17:47:38 2025 GMT Subject: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fa:6a:9e:c5:be:95:73:70:ad:a4:63:1a:2e: aa:1b:59:55:5c:13:47:b6:5b:90:63:9f:ad:6e:e7: 81:c1:2e:4e:fd:e4:46:8d:df:83:cd:1f:9b:16:40: a3:bf:9b:2b:a2:e5:25:13:a2:64:d6:f0:e7:77:a8: b6:ec:ce:2c:c4:4e:cc:d5:f0:20:e3:39:50:7c:b9: e9:78:76:83:f3:af:d1:25:da:7d:cf:97:34:fc:da: 1a:cf:c7:5e:b3:82:55:8f:37:04:3c:71:f0:b7:04: 36:aa:c3:68:6d:e4:1b:11:35:25:2d:89:50:48:2e: 03:b0:ca:bd:1b:79:a2:fa:41:6a:ef:9b:e1:c0:4c: 40:fd:31:99:e1:cc:61:4d:89:6b:14:e7:e3:68:3a: be:10:7b:c8:ca:c2:fe:ce:28:06:ad:7e:8f:e8:c7: f7:c1:a6:87:3a:a5:4a:3c:f7:c5:8e:4b:71:d6:6f: f9:e5:4f:b7:fb:ac:91:18:02:2d:43:52:48:6c:87: 4c:4a:d0:17:50:64:09:c2:f0:e9:6a:93:e7:70:6b: 03:60:36:4a:f8:1f:9c:bc:d8:63:f9:d0:b3:3c:02: 02:21:08:76:28:bc:b3:b6:29:4e:7d:4f:10:9a:84: 26:24:47:72:0f:10:2f:c4:75:de:72:63:8b:d4:63: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.4.0/22 191.253.64.0/22 IPv6: 2804:1350::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263528 Signature Algorithm: sha256WithRSAEncryption a6:7f:65:90:6c:dc:bc:27:70:61:1d:eb:01:a4:a6:77:d1:19: c8:4a:52:ee:e8:e8:8b:81:25:c7:8a:0c:16:ea:cb:0d:d8:7e: ba:89:73:e2:e2:58:70:95:6b:8f:e9:fe:3f:ef:a4:ac:de:02: 55:c1:49:cd:21:dc:14:94:6c:75:a0:11:a2:b5:eb:f1:a1:6a: 59:d3:2f:c9:29:03:c9:7e:cc:ae:0f:fb:b3:24:7f:26:d8:0c: b4:5c:f6:b7:89:9e:d9:ba:ca:f0:1b:a0:4e:66:a7:eb:1a:14: bf:a4:c5:3f:56:0d:fb:3b:ef:15:93:35:f0:bc:bd:67:b8:4c: 96:bf:23:20:4b:06:12:a6:cd:b9:e3:40:d4:ae:99:3d:32:0b: a2:99:d3:e5:a9:26:39:7e:6d:f7:7c:64:fe:4c:90:47:09:fb: af:55:88:7d:17:96:cc:6b:21:5e:39:a1:c9:ab:56:c7:1e:b0: e4:ab:3f:12:d0:43:03:fd:7d:e5:16:ce:84:4f:64:66:88:f2: 06:81:aa:70:24:13:4d:ae:ed:60:57:39:fb:b4:72:8b:ba:c2: 34:10:4c:9c:a6:9e:07:7a:b3:ba:c1:d8:2f:da:a3:f1:a1:ba: 7a:e4:6d:3c:5d:5f:07:e1:37:f0:8b:93:f4:3b:ab:06:04:b8: 9f:80:87:fc -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUaq50KTyTx/C/OgxgOTYom+4PSzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MTgxNzQyMzhaFw0yNTA0MTcxNzQ3MzhaMDMxMTAvBgNV BAMTKDMzRDk5QjhFQUUxQUI4QkVFNDE5OEI4NzAzMUNGRThGRURCRTc3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq+mqexb6Vc3CtpGMaLqobWVVc E0e2W5Bjn61u54HBLk795EaN34PNH5sWQKO/myui5SUTomTW8Od3qLbszizETszV 8CDjOVB8uel4doPzr9El2n3PlzT82hrPx16zglWPNwQ8cfC3BDaqw2ht5BsRNSUt iVBILgOwyr0beaL6QWrvm+HATED9MZnhzGFNiWsU5+NoOr4Qe8jKwv7OKAatfo/o x/fBpoc6pUo898WOS3HWb/nlT7f7rJEYAi1DUkhsh0xK0BdQZAnC8Olqk+dwawNg Nkr4H5y82GP50LM8AgIhCHYovLO2KU59TxCahCYkR3IPEC/Edd5yY4vUY6ixAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQz2ZuOrhq4vuQZ i4cDHP6P7b53gDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNG1p Wm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRt aVpuUTVHdUZCVmh2b2JCaGNmWTdhUjlHbjEyc2FIc1NqZ1R1UzVieUZ5LzAvMzNE OTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZFREJFNzc4MC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqv4EAwQCv/1AMA0EAgACMAcDBQAoBBNQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQFaDANBgkqhkiG9w0BAQsFAAOCAQEApn9lkGzc vCdwYR3rAaSmd9EZyEpS7ujoi4Elx4oMFurLDdh+uolz4uJYcJVrj+n+P++krN4C VcFJzSHcFJRsdaARorXr8aFqWdMvySkDyX7Mrg/7syR/JtgMtFz2t4me2brK8Bug Tman6xoUv6TFP1YN+zvvFZM18Ly9Z7hMlr8jIEsGEqbNueNA1K6ZPTILopnT5akm OX5t93xk/kyQRwn7r1WIfReWzGshXjmhyatWxx6w5Ks/EtBDA/195RbOhE9kZojy BoGqcCQTTa7tYFc5+7Ryi7rCNBBMnKaeB3qzusHYL9qj8aG6euRtPF1fB+E38IuT 9DurBgS4n4CH/A== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:28 2024 by rpki-client on console-fra.rpki-client.org