$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer File: 3583862D781B71B103E9FA8D726C4D02380ACEE3.cer (raw, json) Hash identifier: V2Bs7K+Po+EdcIY4u7Fw4jIb3Kx+p+SOCgoZND1nby4= Subject key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3AB359DDDD13B57D8D9C027AC41ACBBDF4CB0C1A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft caRepository: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 23:20:46 +0000 Certificate not after: Wed 02 Apr 2025 23:25:46 +0000 Subordinate resources: AS: 273814 IP: 2804:8cac::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b3:59:dd:dd:13:b5:7d:8d:9c:02:7a:c4:1a:cb:bd:f4:cb:0c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 23:20:46 2024 GMT Not After : Apr 2 23:25:46 2025 GMT Subject: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:af:f1:77:57:11:23:37:5d:6d:1f:93:e1: 23:d9:ab:d5:1a:5c:17:1c:08:fc:f9:09:45:3e:42: 2c:9b:a2:43:80:7e:ac:f3:43:75:12:50:52:df:5f: a4:c3:33:f8:ad:47:0b:91:56:99:37:ea:da:6d:c3: 40:76:6f:a8:7b:e2:59:36:ff:66:24:14:90:8d:39: 4f:dd:d5:80:28:e8:a6:40:6c:ea:1e:de:7a:e7:0e: 30:a4:60:fd:d0:69:0f:8b:d0:bf:e9:2f:15:cc:95: b1:89:12:ec:18:b3:45:a1:de:6b:56:fe:f4:a9:ac: fc:95:6a:8e:57:32:2a:87:d1:d8:ec:af:db:f9:5c: 97:3f:d1:c1:88:34:03:99:44:0b:f3:8c:b0:4b:45: a4:38:77:9e:b0:64:cc:3f:47:07:f4:73:ae:6d:21: 39:86:d7:af:56:4c:dd:01:2d:eb:65:4b:a9:3d:ee: 3c:1c:3c:9c:30:b7:6d:68:1c:d5:88:50:01:35:f6: 99:a0:f2:15:53:b7:ed:f9:c4:fb:cb:9b:d6:70:c4: 71:aa:6c:9c:75:04:9f:d9:83:b3:aa:f1:f5:c6:0e: 80:dc:9c:4c:7c:d3:ce:1f:57:71:88:df:83:e4:81: 67:71:10:c5:21:97:09:3e:85:40:9a:b5:c1:2f:54: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8cac::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273814 Signature Algorithm: sha256WithRSAEncryption 8d:02:f0:20:1a:37:7e:3f:f3:8a:12:b5:2a:61:4e:0c:14:ff: 22:5f:e0:e1:8f:0e:2c:76:f8:6f:2a:9e:99:88:25:a9:a6:f4: 3e:4d:f0:d8:e4:d9:90:ed:70:3f:07:f1:e1:b4:54:64:78:ea: 0b:87:c0:08:33:10:41:b9:94:0c:d5:69:9d:32:f1:a6:3b:6b: 95:22:49:5e:ae:bb:33:18:05:54:53:91:c4:9d:13:d3:b5:df: 6a:27:b0:42:53:6b:06:f2:41:9f:b9:37:c9:6d:4f:c0:65:d1: e3:43:ce:21:4f:67:18:92:84:27:d4:96:9a:77:41:e9:f1:3a: 7d:24:48:df:55:2e:60:d7:c0:48:f9:42:4e:c1:92:cc:6e:8a: 24:fa:2c:37:49:d4:58:f6:23:f0:0a:08:b6:4d:06:2e:21:b9: b9:d4:e7:73:32:8f:b5:00:2c:67:ff:5e:49:e5:ee:a3:42:ef: 9b:e9:35:90:cd:51:0d:90:74:40:35:9b:f3:66:0f:ef:96:57: 8c:77:db:61:cb:13:15:48:fb:2d:cb:d4:ae:07:ba:f5:fb:38: c2:dc:5e:29:e9:2b:5d:f6:84:d6:08:e4:37:7a:32:b6:92:fe: ef:fb:cc:5e:27:2f:70:70:5b:36:c4:ec:8e:ba:5a:ab:ff:0c: 13:b0:bf:9e -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUOrNZ3d0TtX2NnAJ6xBrLvfTLDBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMzIwNDZaFw0yNTA0MDIyMzI1NDZaMDMxMTAvBgNV BAMTKDM1ODM4NjJENzgxQjcxQjEwM0U5RkE4RDcyNkM0RDAyMzgwQUNFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg6/xd1cRIzddbR+T4SPZq9Ua XBccCPz5CUU+QiybokOAfqzzQ3USUFLfX6TDM/itRwuRVpk36tptw0B2b6h74lk2 /2YkFJCNOU/d1YAo6KZAbOoe3nrnDjCkYP3QaQ+L0L/pLxXMlbGJEuwYs0Wh3mtW /vSprPyVao5XMiqH0djsr9v5XJc/0cGINAOZRAvzjLBLRaQ4d56wZMw/Rwf0c65t ITmG169WTN0BLetlS6k97jwcPJwwt21oHNWIUAE19pmg8hVTt+35xPvLm9ZwxHGq bJx1BJ/Zg7Oq8fXGDoDcnEx8084fV3GI34PkgWdxEMUhlwk+hUCatcEvVM8PAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ1g4YteBtxsQPp +o1ybE0COArO4zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmhx Nm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQTEsvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zo cTZvWDNieHhrblh0Y2ZCMXJ0WXlUamttazJEdkZvbW9SNUc0ajY2UExLLzEvMzU4 Mzg2MkQ3ODFCNzFCMTAzRTlGQThENzI2QzREMDIzODBBQ0VFMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASMrDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LZYwDQYJKoZIhvcNAQELBQADggEBAI0C8CAaN34/84oStSphTgwU/yJf4OGPDix2 +G8qnpmIJamm9D5N8Njk2ZDtcD8H8eG0VGR46guHwAgzEEG5lAzVaZ0y8aY7a5Ui SV6uuzMYBVRTkcSdE9O132onsEJTawbyQZ+5N8ltT8Bl0eNDziFPZxiShCfUlpp3 QenxOn0kSN9VLmDXwEj5Qk7BksxuiiT6LDdJ1Fj2I/AKCLZNBi4hubnU53Myj7UA LGf/Xknl7qNC75vpNZDNUQ2QdEA1m/NmD++WV4x322HLExVI+y3L1K4HuvX7OMLc XinpK132hNYI5Dd6MraS/u/7zF4nL3BwWzbE7I66Wqv/DBOwv54= -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:28 2024 by rpki-client on console-fra.rpki-client.org