$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.cer File: 3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.cer (raw, json) Hash identifier: iriV7yPHwzE/kDSGaxwGr0zDDObLrZkD87yKQT7GamM= Subject key identifier: 3A:81:CD:2D:56:EA:80:8D:67:DD:15:6F:E3:D9:3A:5D:88:6A:DD:F2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 76A5B700860FEF74677DA816AFECD4109D7D1F6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.mft caRepository: rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 22:00:37 +0000 Certificate not after: Wed 02 Apr 2025 22:05:37 +0000 Subordinate resources: AS: 269648 IP: 45.189.0.0/22 IP: 2804:67c0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a5:b7:00:86:0f:ef:74:67:7d:a8:16:af:ec:d4:10:9d:7d:1f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 22:00:37 2024 GMT Not After : Apr 2 22:05:37 2025 GMT Subject: CN=3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:61:fd:05:c9:eb:be:31:8e:24:ab:69:6a: 8d:c4:64:16:0d:f0:76:d2:eb:1e:7d:11:81:3d:49: da:45:02:06:fc:85:e4:88:02:0b:00:2c:e7:e6:a1: d0:2c:29:cb:7a:ef:e6:fb:b6:f7:44:00:15:b9:c5: db:a3:c5:e9:f9:cd:b5:25:a8:bd:d3:ea:7e:c4:6d: e9:e1:47:27:76:ad:7e:73:e7:4a:97:12:cd:85:29: b9:85:86:a5:66:01:26:2c:1f:d2:57:ce:bb:cb:4f: d8:57:22:8d:2a:e2:9a:0d:3a:07:2a:cc:65:4b:0e: ae:5a:8b:6e:cb:b4:60:67:92:dd:15:7e:db:03:e4: a3:cc:02:83:32:41:9a:43:11:2b:8a:be:fc:da:7e: c3:09:49:cf:41:79:e1:87:cb:86:98:91:23:22:cb: ad:fd:c1:ff:83:af:d4:b3:e1:d6:d0:ee:70:c5:8b: 71:51:fa:fd:d3:af:3e:1d:6f:95:8e:b1:44:de:f3: 61:55:16:fc:53:c2:3a:fb:cc:1a:8c:d3:5e:27:fd: 74:e6:94:32:35:46:fc:23:85:de:b5:4e:ba:1c:03: 15:52:14:00:a2:d9:ce:36:cc:45:6a:43:ac:f8:f8: 01:aa:bf:fe:15:ca:6b:95:2e:4c:b4:ed:c1:ba:8f: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:81:CD:2D:56:EA:80:8D:67:DD:15:6F:E3:D9:3A:5D:88:6A:DD:F2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/1/3A81CD2D56EA808D67DD156FE3D93A5D886ADDF2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.0.0/22 IPv6: 2804:67c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269648 Signature Algorithm: sha256WithRSAEncryption b2:ee:62:73:0d:1b:09:a0:c3:fd:25:59:a1:48:07:6d:5a:ba: d5:5c:cd:e2:71:4e:a7:70:8f:c3:4a:e6:fa:7b:92:1f:46:37: d1:59:23:04:f5:6f:d5:c1:9c:79:51:5a:1b:b9:87:d6:fd:16: 96:7a:21:9a:71:51:9b:57:8e:dd:01:0a:13:c1:b5:bd:ea:09: b4:cd:69:f8:aa:a7:b8:fd:fa:a6:e4:ff:89:7a:7c:40:a7:a0: de:fd:1c:3b:2a:a7:52:f0:78:e8:20:b7:d2:bc:98:f3:4c:12: 3a:56:63:e9:c1:4c:2e:ff:95:4c:21:03:2f:39:f0:0b:9e:98: 21:73:6d:9c:dd:ae:1c:8d:c9:6d:05:46:b0:7a:7d:e3:d3:14: 31:03:97:20:38:70:d5:4c:e7:85:e5:34:29:60:7a:b1:44:0d: 11:54:f6:9e:02:23:1a:41:1f:10:49:a2:7e:8e:aa:12:49:aa: 21:cf:91:6e:2f:39:cf:b2:aa:59:af:23:dd:34:26:02:7e:74: 74:80:f0:b5:91:04:8c:3f:7a:a4:2a:cc:be:fd:50:4f:a7:67: 1e:3d:21:49:38:78:76:62:0b:0f:42:38:c5:68:4e:8d:96:0d: 17:98:35:55:0d:04:95:70:f6:dd:3a:1d:b0:fd:dd:71:4c:5d: a4:af:47:7b -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUdqW3AIYP73RnfagWr+zUEJ19H2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMyMjAwMzdaFw0yNTA0MDIyMjA1MzdaMDMxMTAvBgNV BAMTKDNBODFDRDJENTZFQTgwOEQ2N0REMTU2RkUzRDkzQTVEODg2QURERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxlWH9BcnrvjGOJKtpao3EZBYN 8HbS6x59EYE9SdpFAgb8heSIAgsALOfmodAsKct67+b7tvdEABW5xdujxen5zbUl qL3T6n7EbenhRyd2rX5z50qXEs2FKbmFhqVmASYsH9JXzrvLT9hXIo0q4poNOgcq zGVLDq5ai27LtGBnkt0VftsD5KPMAoMyQZpDESuKvvzafsMJSc9BeeGHy4aYkSMi y639wf+Dr9Sz4dbQ7nDFi3FR+v3Trz4db5WOsUTe82FVFvxTwjr7zBqM014n/XTm lDI1Rvwjhd61TrocAxVSFACi2c42zEVqQ6z4+AGqv/4VymuVLky07cG6jz2hAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6gc0tVuqAjWfd FW/j2TpdiGrd8jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR05u NWI3V1lZQm1Kd1lhMnBEbU5iQXhxR2hzWjVoQjRaU1d0MjVkbzIzRGcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR05u NWI3V1lZQm1Kd1lhMnBEbU5iQXhxR2hzWjVoQjRaU1d0MjVkbzIzRGcvMS8zQTgx Q0QyRDU2RUE4MDhENjdERDE1NkZFM0Q5M0E1RDg4NkFEREYyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItvQAwDQQCAAIwBwMFACgEZ8AwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBB1QMA0GCSqGSIb3DQEBCwUAA4IBAQCy7mJzDRsJoMP9JVmh SAdtWrrVXM3icU6ncI/DSub6e5IfRjfRWSME9W/VwZx5UVobuYfW/RaWeiGacVGb V47dAQoTwbW96gm0zWn4qqe4/fqm5P+JenxAp6De/Rw7KqdS8HjoILfSvJjzTBI6 VmPpwUwu/5VMIQMvOfALnpghc22c3a4cjcltBUawen3j0xQxA5cgOHDVTOeF5TQp YHqxRA0RVPaeAiMaQR8QSaJ+jqoSSaohz5FuLznPsqpZryPdNCYCfnR0gPC1kQSM P3qkKsy+/VBPp2cePSFJOHh2YgsPQjjFaE6Nlg0XmDVVDQSVcPbdOh2w/d1xTF2k r0d7 -----END CERTIFICATE-----Generated at Sat Jun 29 03:15:12 2024 by rpki-client on console-fra.rpki-client.org