$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BC1D0631EF41F733F5331C74060B0BEC82595D6.cer File: 3BC1D0631EF41F733F5331C74060B0BEC82595D6.cer (raw, json) Hash identifier: B/IE7ctxP/ujsBaX4tzonl9tUXjsxjRTZPkDX0PitO8= Subject key identifier: 3B:C1:D0:63:1E:F4:1F:73:3F:53:31:C7:40:60:B0:BE:C8:25:95:D6 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 24B53E2A88D549FFB06D39EA8D003EA4F925DCB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3BC1D0631EF41F733F5331C74060B0BEC82595D6.mft caRepository: rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 15:47:29 +0000 Certificate not after: Thu 03 Apr 2025 15:52:29 +0000 Subordinate resources: AS: 266160 IP: 177.85.80.0/21 IP: 192.140.12.0/22 IP: 2804:3b9c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b5:3e:2a:88:d5:49:ff:b0:6d:39:ea:8d:00:3e:a4:f9:25:dc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 15:47:29 2024 GMT Not After : Apr 3 15:52:29 2025 GMT Subject: CN=3BC1D0631EF41F733F5331C74060B0BEC82595D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:ef:fd:23:77:ea:ba:8c:3e:b1:9e:7f:5b: 53:51:cf:f4:00:15:6c:3b:13:67:4f:66:32:19:13: 87:61:0d:c7:65:0e:84:db:14:58:5a:af:85:ba:31: 77:68:58:13:c1:3c:d0:46:7d:e0:43:6f:fb:51:25: 67:1e:54:ce:3e:c8:b4:aa:14:ce:00:24:3e:f5:55: 56:f7:b6:7d:07:83:2a:e1:ff:ee:75:3f:94:2e:ee: c2:5e:08:30:7f:78:7e:2f:21:de:50:4a:ce:54:69: 26:09:ad:90:44:18:9f:61:25:b9:67:aa:ac:b7:b7: cf:e3:ec:91:01:25:4d:5f:df:e8:d5:a0:e7:58:e0: 6e:6e:a2:39:e2:90:5b:f5:20:2d:77:88:68:d4:0b: 33:ce:14:ee:89:6b:89:ce:8b:c0:6d:14:57:d5:70: 3c:89:9a:d9:14:14:29:d6:d8:21:9b:bc:8f:8c:ca: 2a:cc:5c:37:6b:09:96:8e:6b:fb:ad:7b:ab:be:f1: 30:27:cd:44:44:fd:14:88:60:8f:6a:f8:ae:40:fb: 11:96:24:3b:61:72:9a:6c:5a:76:f3:5f:ab:74:33: f8:cd:08:41:bc:9c:86:b2:cd:df:ef:2f:bb:05:bf: ca:73:24:49:b9:83:94:c3:38:7e:37:4c:bc:7f:b6: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:C1:D0:63:1E:F4:1F:73:3F:53:31:C7:40:60:B0:BE:C8:25:95:D6 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/2/3BC1D0631EF41F733F5331C74060B0BEC82595D6.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.85.80.0/21 192.140.12.0/22 IPv6: 2804:3b9c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266160 Signature Algorithm: sha256WithRSAEncryption c8:d2:a6:0d:de:f0:e0:eb:40:22:bc:e3:9c:30:17:2a:e4:ef: 26:59:26:b6:92:47:52:1b:30:bd:04:eb:9f:5c:b0:2e:1d:5e: dd:8f:05:c0:0b:70:b5:79:ef:41:fc:1c:cb:36:4b:71:1e:20: 96:86:d4:ce:9f:5e:0e:08:a4:17:6d:a7:61:7f:1f:cb:86:e7: ed:fe:5f:cf:12:63:5f:05:e7:ae:75:70:9a:95:6d:96:01:ee: c9:7c:c5:0b:be:68:76:60:aa:55:fb:f7:40:02:e0:83:87:3c: 72:f7:b9:49:35:25:9a:f6:73:a0:9a:10:c2:f9:57:d6:cf:52: b2:16:53:5c:80:24:79:3b:da:b9:f6:b1:28:3b:ee:6c:75:92: 74:ba:b8:d7:57:cb:c0:56:25:c3:b3:ec:64:c4:97:e4:cb:06: ae:aa:21:f6:43:40:88:67:47:36:9b:0c:f1:e5:04:98:b4:54: 7c:64:09:3e:5e:76:4a:99:c5:37:c3:68:73:76:87:b6:27:3e: 50:f2:5b:ec:bc:9f:b5:37:30:d9:68:4c:41:33:52:65:71:42: ab:ed:06:e0:52:4b:8e:0b:34:db:cf:15:b0:ec:40:e3:64:4d: 3d:25:0f:db:a1:04:8d:75:af:f7:29:92:69:16:8c:31:a2:6c: 22:26:9d:4d -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUJLU+KojVSf+wbTnqjQA+pPkl3LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNTQ3MjlaFw0yNTA0MDMxNTUyMjlaMDMxMTAvBgNV BAMTKDNCQzFEMDYzMUVGNDFGNzMzRjUzMzFDNzQwNjBCMEJFQzgyNTk1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+u/9I3fquow+sZ5/W1NRz/QA FWw7E2dPZjIZE4dhDcdlDoTbFFhar4W6MXdoWBPBPNBGfeBDb/tRJWceVM4+yLSq FM4AJD71VVb3tn0Hgyrh/+51P5Qu7sJeCDB/eH4vId5QSs5UaSYJrZBEGJ9hJbln qqy3t8/j7JEBJU1f3+jVoOdY4G5uojnikFv1IC13iGjUCzPOFO6Ja4nOi8BtFFfV cDyJmtkUFCnW2CGbvI+MyirMXDdrCZaOa/ute6u+8TAnzURE/RSIYI9q+K5A+xGW JDthcppsWnbzX6t0M/jNCEG8nIayzd/vL7sFv8pzJEm5g5TDOH43TLx/tvGXAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ7wdBjHvQfcz9T McdAYLC+yCWV1jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2dl YjhlUnN5NHQ3d1ZnNW9hSHpkcjNteVdGaVZjV1ZLWkNSM1JlVTE4RXQvMi8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdn ZWI4ZVJzeTR0N3dWZzVvYUh6ZHIzbXlXRmlWY1dWS1pDUjNSZVUxOEV0LzIvM0JD MUQwNjMxRUY0MUY3MzNGNTMzMUM3NDA2MEIwQkVDODI1OTVENi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQDsVVQAwQCwIwMMA0EAgACMAcDBQAoBDucMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQPsDANBgkqhkiG9w0BAQsFAAOCAQEAyNKmDd7w 4OtAIrzjnDAXKuTvJlkmtpJHUhswvQTrn1ywLh1e3Y8FwAtwtXnvQfwcyzZLcR4g lobUzp9eDgikF22nYX8fy4bn7f5fzxJjXwXnrnVwmpVtlgHuyXzFC75odmCqVfv3 QALgg4c8cve5STUlmvZzoJoQwvlX1s9SshZTXIAkeTvaufaxKDvubHWSdLq411fL wFYlw7PsZMSX5MsGrqoh9kNAiGdHNpsM8eUEmLRUfGQJPl52SpnFN8Noc3aHtic+ UPJb7LyftTcw2WhMQTNSZXFCq+0G4FJLjgs0288VsOxA42RNPSUP26EEjXWv9ymS aRaMMaJsIiadTQ== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:28 2024 by rpki-client on console-fra.rpki-client.org