$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer File: 3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.cer (raw, json) Hash identifier: BFoow4VkAQAk3AUy0DD5MQaCz/vBfhIeOS4pf5RsuD8= Subject key identifier: 3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5471630DD5B15105FBCD647B316CB26438CBCBB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.mft caRepository: rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 03:50:50 +0000 Certificate not after: Thu 03 Apr 2025 03:55:50 +0000 Subordinate resources: AS: 273659 IP: 2804:8a48::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:71:63:0d:d5:b1:51:05:fb:cd:64:7b:31:6c:b2:64:38:cb:cb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 03:50:50 2024 GMT Not After : Apr 3 03:55:50 2025 GMT Subject: CN=3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:65:28:6b:dc:44:1b:e2:71:5a:4d:49:cf: 67:72:93:2b:3e:3d:d8:42:cb:0e:d2:5c:9a:37:ff: 26:1b:f9:d8:82:14:ed:df:f4:52:01:6d:5a:fc:fc: 2f:fe:49:ac:75:d7:49:8a:ef:cc:37:8e:f1:c0:47: fd:02:74:a8:d6:6d:75:4c:86:e9:f7:99:a3:b4:82: 79:4a:8d:8d:56:ee:ed:e5:0b:d0:93:52:2b:43:dd: 0a:ce:0f:8d:01:43:44:db:d1:1b:2b:f7:d2:29:06: 98:cd:68:04:4c:5b:4c:39:cc:f5:bb:56:b0:05:b4: bb:43:45:a7:7d:c3:37:69:51:4f:9c:37:9c:c4:97: 81:b3:0a:db:6a:a5:05:23:12:07:ec:a2:b9:cf:8c: 9b:b4:1a:c7:53:b0:19:e4:fa:24:81:b0:e9:a4:f4: 0e:49:c9:ce:96:1e:68:14:52:a7:94:d5:f0:e2:3c: dd:70:de:6b:4c:d8:6b:e4:ff:52:a9:d4:e0:26:de: 0b:82:b8:af:aa:5f:b9:aa:24:89:89:82:b4:b9:30: 6e:15:b1:60:37:2c:03:fa:21:b7:54:51:5f:b3:5d: f5:5c:52:b5:6c:05:bb:8b:20:b1:26:bf:27:e3:6f: 80:1f:c5:4b:02:fc:d7:bf:ca:1e:96:ca:35:f5:96: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:22:EC:79:4C:37:86:DA:E5:FD:E0:9E:C3:7F:1A:CE:71:8B:1A:1D X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Zx3CTL6pDyng2qCWmJf75UmcufthwPEVnQy7pxnAzpn/1/3A22EC794C3786DAE5FDE09EC37F1ACE718B1A1D.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8a48::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273659 Signature Algorithm: sha256WithRSAEncryption 56:f7:a0:f5:5a:d6:0a:81:22:6b:09:d3:f0:0a:00:f3:ec:51: b4:d5:49:25:2e:43:2a:02:5d:41:99:bc:74:36:8d:23:3f:61: f7:42:dd:39:9c:df:55:f8:5f:56:b1:8b:3d:47:d0:e6:4b:19: 9d:17:89:1e:2f:f6:30:ec:2e:5c:d5:9c:9f:41:4f:49:7b:57: 65:3f:a2:e5:d6:a2:8f:d6:f5:f7:54:16:8d:ab:56:73:c8:8e: fb:9b:aa:57:b4:ac:ca:4a:78:6b:63:db:af:b6:08:54:b4:e9: 5d:68:0f:d6:59:a9:38:c6:41:7e:f4:1d:68:9d:97:4e:ba:42: 67:17:91:61:e5:87:c0:a3:2b:43:2b:e1:c8:ae:00:27:50:5f: 96:99:00:46:5b:ad:2a:bc:d6:f4:15:a5:0c:72:26:a2:82:2b: 6b:12:62:68:f4:e9:bf:2b:c7:9e:f7:0f:22:cb:ff:01:ed:80: 61:c3:5c:65:f6:a2:3f:be:f2:76:aa:4c:74:85:41:3b:57:72: 33:8a:fc:32:ed:ae:8a:bd:65:3a:ac:7e:9d:40:11:85:73:6e: fb:df:70:ab:77:84:0f:8f:01:f5:36:6f:5a:19:f0:b7:69:25: 3e:42:d3:f3:06:2f:43:9d:77:c3:78:7b:ab:c6:ce:d6:fe:4a: a6:83:2e:cf -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIUVHFjDdWxUQX7zWR7MWyyZDjLy7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMzUwNTBaFw0yNTA0MDMwMzU1NTBaMDMxMTAvBgNV BAMTKDNBMjJFQzc5NEMzNzg2REFFNUZERTA5RUMzN0YxQUNFNzE4QjFBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5N2Uoa9xEG+JxWk1Jz2dykys+ PdhCyw7SXJo3/yYb+diCFO3f9FIBbVr8/C/+Sax110mK78w3jvHAR/0CdKjWbXVM hun3maO0gnlKjY1W7u3lC9CTUitD3QrOD40BQ0Tb0Rsr99IpBpjNaARMW0w5zPW7 VrAFtLtDRad9wzdpUU+cN5zEl4GzCttqpQUjEgfsornPjJu0GsdTsBnk+iSBsOmk 9A5Jyc6WHmgUUqeU1fDiPN1w3mtM2Gvk/1Kp1OAm3guCuK+qX7mqJImJgrS5MG4V sWA3LAP6IbdUUV+zXfVcUrVsBbuLILEmvyfjb4AfxUsC/Ne/yh6WyjX1lpsLAgMB AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6Iux5TDeG2uX9 4J7DfxrOcYsaHTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlp4 M0NUTDZwRHluZzJxQ1dtSmY3NVVtY3VmdGh3UEVWblF5N3B4bkF6cG4vMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlp4 M0NUTDZwRHluZzJxQ1dtSmY3NVVtY3VmdGh3UEVWblF5N3B4bkF6cG4vMS8zQTIy RUM3OTRDMzc4NkRBRTVGREUwOUVDMzdGMUFDRTcxOEIxQTFELm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBIpIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQs +zANBgkqhkiG9w0BAQsFAAOCAQEAVveg9VrWCoEiawnT8AoA8+xRtNVJJS5DKgJd QZm8dDaNIz9h90LdOZzfVfhfVrGLPUfQ5ksZnReJHi/2MOwuXNWcn0FPSXtXZT+i 5daij9b191QWjatWc8iO+5uqV7Ssykp4a2Pbr7YIVLTpXWgP1lmpOMZBfvQdaJ2X TrpCZxeRYeWHwKMrQyvhyK4AJ1BflpkARlutKrzW9BWlDHImooIraxJiaPTpvyvH nvcPIsv/Ae2AYcNcZfaiP77ydqpMdIVBO1dyM4r8Mu2uir1lOqx+nUARhXNu+99w q3eED48B9TZvWhnwt2klPkLT8wYvQ513w3h7q8bO1v5KpoMuzw== -----END CERTIFICATE-----Generated at Sat Jun 1 22:59:46 2024 by rpki-client on console-fra.rpki-client.org