$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer File: 3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.cer (raw, json) Hash identifier: zaoY7+LK+nj7miOejGVdDHY0/h1Ff7VsUE76j0OI3Kk= Subject key identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 07583F34AA116E7FD6B0673C4ECBDCD5D470FE33 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft caRepository: rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:31:32 +0000 Certificate not after: Thu 03 Apr 2025 02:36:32 +0000 Subordinate resources: AS: 267145 IP: 45.230.28.0/22 IP: 2804:48cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 12:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:58:3f:34:aa:11:6e:7f:d6:b0:67:3c:4e:cb:dc:d5:d4:70:fe:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:31:32 2024 GMT Not After : Apr 3 02:36:32 2025 GMT Subject: CN=3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:07:02:09:3e:d7:71:a2:03:66:87:6f:d6:ab: 54:96:e6:64:5d:82:ec:e6:1a:9d:21:9e:2e:a0:9d: 6c:68:13:05:c1:b3:70:80:a9:99:6b:54:34:8e:7b: ab:77:93:6a:a7:2a:54:4a:45:f1:7e:c6:28:1c:ab: f8:76:25:7f:fd:20:06:cb:40:7c:0d:43:44:0e:71: d2:ee:94:46:bd:9c:d2:82:63:16:84:96:88:78:35: af:77:ef:35:e5:5e:df:10:ec:ff:a4:23:8b:43:5d: 14:68:f1:e5:d9:0c:47:1c:9f:43:a6:62:b6:73:e9: 86:26:f0:4c:99:d6:b1:31:57:c8:59:ae:b7:0e:d5: a6:a3:46:0f:c4:f3:e7:be:56:f5:ea:13:2e:9b:2c: f8:19:b1:2c:9e:d4:c1:df:95:b6:b5:3b:b0:29:0a: 12:69:66:17:60:a6:3f:58:aa:e9:1a:22:46:42:08: fa:37:15:f2:8c:34:3b:d0:7e:dd:67:b9:ab:bb:ff: 5d:1a:4a:b9:67:dc:b6:5a:69:6e:ff:1d:bc:00:86: a2:da:b0:a8:d5:30:ce:df:88:98:c1:74:78:ce:ee: 44:cd:96:42:94:65:f6:30:25:2f:54:da:b0:a3:91: c0:3a:76:1f:8e:fa:cc:8a:ab:bb:ea:2b:f9:4c:01: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:5A:1B:2B:6D:E4:87:DB:B9:5C:EE:51:47:5E:26:56:F1:E9:BF:85 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/1/3D5A1B2B6DE487DBB95CEE51475E2656F1E9BF85.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.28.0/22 IPv6: 2804:48cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267145 Signature Algorithm: sha256WithRSAEncryption 47:76:b7:25:0c:2a:28:e0:ef:6b:db:03:d0:89:d2:27:5b:cf: 44:75:86:08:b1:33:c2:23:59:06:66:a6:33:fc:ef:c4:e2:76: 7c:53:84:51:d7:0c:15:71:e8:39:3b:3a:23:7f:22:7e:f3:1b: 32:68:86:6b:84:5f:7c:c4:2d:56:6b:44:01:52:bd:f9:87:96: c1:63:33:d3:87:69:7c:dc:f8:ea:56:11:ad:b1:c1:3f:43:9a: c8:3d:c3:0b:bf:bf:b6:37:23:92:ba:42:cf:e4:7b:88:39:6b: 4c:30:e9:23:0d:80:2f:d4:7d:10:b5:9c:f8:df:38:14:25:f3: 9f:71:16:df:cb:08:6e:86:17:e9:e9:65:22:32:4a:20:4c:fc: 50:5c:0d:09:39:c3:01:60:3e:5e:44:c8:0e:6e:16:30:76:16: dc:cf:e7:fb:b0:b2:a7:78:96:14:53:68:5d:41:ff:70:d0:e2: 1d:81:cf:28:aa:52:82:3e:89:46:a6:ee:38:d3:69:4b:30:6c: 2c:34:d7:d1:b9:ab:78:b4:6d:5b:35:c0:e6:29:0e:a4:22:b1: 5a:49:33:e0:9c:e5:de:c2:b5:c1:e5:27:2c:5b:f0:ce:c3:76: 50:a9:00:26:f0:97:37:03:9b:f9:79:f8:59:81:89:d0:ac:7a: 10:7c:44:44 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUB1g/NKoRbn/WsGc8Tsvc1dRw/jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjMxMzJaFw0yNTA0MDMwMjM2MzJaMDMxMTAvBgNV BAMTKDNENUExQjJCNkRFNDg3REJCOTVDRUU1MTQ3NUUyNjU2RjFFOUJGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBwIJPtdxogNmh2/Wq1SW5mRd guzmGp0hni6gnWxoEwXBs3CAqZlrVDSOe6t3k2qnKlRKRfF+xigcq/h2JX/9IAbL QHwNQ0QOcdLulEa9nNKCYxaEloh4Na937zXlXt8Q7P+kI4tDXRRo8eXZDEccn0Om YrZz6YYm8EyZ1rExV8hZrrcO1aajRg/E8+e+VvXqEy6bLPgZsSye1MHflba1O7Ap ChJpZhdgpj9YqukaIkZCCPo3FfKMNDvQft1nuau7/10aSrln3LZaaW7/HbwAhqLa sKjVMM7fiJjBdHjO7kTNlkKUZfYwJS9U2rCjkcA6dh+O+syKq7vqK/lMAaTNAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ9WhsrbeSH27lc 7lFHXiZW8em/hTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vREpp NUQzRk1iVzFrTldDdE5NZXBiMmkxRm9acEhQSm50ZkJvTUtzTk5qY0ovMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RK aTVEM0ZNYlcxa05XQ3ROTWVwYjJpMUZvWnBIUEpudGZCb01Lc05OamNKLzEvM0Q1 QTFCMkI2REU0ODdEQkI5NUNFRTUxNDc1RTI2NTZGMUU5QkY4NS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLeYcMA0EAgACMAcDBQAoBEjMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQTiTANBgkqhkiG9w0BAQsFAAOCAQEAR3a3JQwqKODva9sD 0InSJ1vPRHWGCLEzwiNZBmamM/zvxOJ2fFOEUdcMFXHoOTs6I38ifvMbMmiGa4Rf fMQtVmtEAVK9+YeWwWMz04dpfNz46lYRrbHBP0OayD3DC7+/tjcjkrpCz+R7iDlr TDDpIw2AL9R9ELWc+N84FCXzn3EW38sIboYX6ellIjJKIEz8UFwNCTnDAWA+XkTI Dm4WMHYW3M/n+7Cyp3iWFFNoXUH/cNDiHYHPKKpSgj6JRqbuONNpSzBsLDTX0bmr eLRtWzXA5ikOpCKxWkkz4Jzl3sK1weUnLFvwzsN2UKkAJvCXNwOb+Xn4WYGJ0Kx6 EHxERA== -----END CERTIFICATE-----Generated at Tue Jun 18 13:55:28 2024 by rpki-client on console-fra.rpki-client.org