$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.cer File: 3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.cer (raw, json) Hash identifier: N1+LKVYgs8MC7cNmI06zTVuYD4PE5ViUPztVaVpmOlo= Subject key identifier: 3D:DB:32:FD:8D:43:D6:6A:02:BF:AD:FC:FB:7E:1A:9F:F3:91:26:DC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 43CED76769511EC5AE6990B5486FA6465BC9DF12 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.mft caRepository: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 11:26:59 +0000 Certificate not after: Thu 03 Apr 2025 11:31:59 +0000 Subordinate resources: AS: 268973 IP: 45.176.252.0/22 IP: 2804:5d74::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 00:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ce:d7:67:69:51:1e:c5:ae:69:90:b5:48:6f:a6:46:5b:c9:df:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 11:26:59 2024 GMT Not After : Apr 3 11:31:59 2025 GMT Subject: CN=3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:44:36:5e:dd:68:a1:6a:11:5e:8b:86:27: be:36:0a:23:e4:74:79:3e:16:ae:04:00:9f:26:ca: 7e:97:51:3d:b6:04:21:37:df:d1:7e:ad:0d:f9:5b: ef:1e:b6:6b:f9:37:b4:f6:fa:a8:43:ec:d5:a3:83: ef:85:28:6b:97:7f:e0:b6:25:1d:02:e2:42:f6:32: c1:1f:7f:42:1a:1f:a2:d3:e7:f4:a0:77:b7:0a:59: e5:18:d7:6f:91:e2:c4:67:1a:b7:38:65:f8:40:15: 39:41:3d:43:88:da:e7:01:06:ed:3e:93:ef:a4:0a: 9a:9e:f4:10:04:1a:6f:8d:59:fa:59:6b:e6:c5:b3: 77:fc:c1:62:84:bc:99:75:ba:c0:7e:cb:c6:e6:99: 99:3c:a3:7c:d3:a4:f0:48:95:33:ec:21:ca:b0:c2: 13:fe:ae:3e:6f:b9:d4:bc:4a:b9:5e:df:bd:f4:28: 9e:91:e3:ae:9f:b5:5a:aa:1b:eb:66:3d:7c:3c:cc: b0:c7:15:a1:68:b6:7f:cf:e7:76:e2:a3:a3:dc:d0: 9c:40:cb:dd:2d:9f:ca:21:4b:8d:e2:a5:d9:be:11: 87:5f:ba:6f:e0:24:f0:e1:5e:c8:71:2c:12:1b:f9: e1:02:cd:07:98:45:a4:99:f7:52:ae:16:33:3d:0c: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:DB:32:FD:8D:43:D6:6A:02:BF:AD:FC:FB:7E:1A:9F:F3:91:26:DC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/1/3DDB32FD8D43D66A02BFADFCFB7E1A9FF39126DC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.252.0/22 IPv6: 2804:5d74::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 268973 Signature Algorithm: sha256WithRSAEncryption 29:19:e8:1d:0f:29:74:c1:e7:d5:ea:9c:e3:72:34:7b:4f:f1: 4a:88:ba:c2:28:65:55:c2:82:5e:c5:66:f2:37:7c:20:c5:a6: 51:9e:89:fc:f7:3f:71:5f:5f:0f:db:0f:90:7d:35:67:f6:47: c2:d6:b7:e1:20:fd:62:89:7d:b4:33:76:da:61:89:18:d6:90: 8c:74:bf:88:6f:95:26:e4:5c:20:47:35:31:e9:08:b5:44:e6: b8:65:45:bf:84:71:91:f2:06:a8:aa:94:ef:a3:72:a3:87:b7: ef:1c:64:ff:00:46:cf:8c:83:f2:15:ba:ac:65:c7:4b:bd:49: 53:80:07:34:63:3c:3c:cf:c3:05:07:aa:40:09:57:44:3c:6c: b5:56:28:30:1c:b9:81:6f:18:fd:22:69:ba:16:58:60:ec:56: 10:35:d4:84:64:9d:5e:8d:a3:bf:89:cf:aa:be:70:c6:5f:e0: da:eb:e9:27:63:d7:2b:26:3e:3f:39:08:b5:0b:66:3c:7b:6a: 99:d6:18:cd:8b:dc:ad:6c:46:9b:c3:8a:cf:97:88:d7:fc:5d: ed:c0:a3:b6:02:61:6c:99:e7:a4:3a:fb:6a:7a:d5:78:79:ad: b1:3a:2b:4b:8d:5c:9d:53:fc:f2:cc:78:e6:90:06:db:e4:11: 86:03:5b:85 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUQ87XZ2lRHsWuaZC1SG+mRlvJ3xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMTI2NTlaFw0yNTA0MDMxMTMxNTlaMDMxMTAvBgNV BAMTKDNEREIzMkZEOEQ0M0Q2NkEwMkJGQURGQ0ZCN0UxQTlGRjM5MTI2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgO0Q2Xt1ooWoRXouGJ742CiPk dHk+Fq4EAJ8myn6XUT22BCE339F+rQ35W+8etmv5N7T2+qhD7NWjg++FKGuXf+C2 JR0C4kL2MsEff0IaH6LT5/Sgd7cKWeUY12+R4sRnGrc4ZfhAFTlBPUOI2ucBBu0+ k++kCpqe9BAEGm+NWfpZa+bFs3f8wWKEvJl1usB+y8bmmZk8o3zTpPBIlTPsIcqw whP+rj5vudS8Srle3730KJ6R466ftVqqG+tmPXw8zLDHFaFotn/P53bio6Pc0JxA y90tn8ohS43ipdm+EYdfum/gJPDhXshxLBIb+eECzQeYRaSZ91KuFjM9DGAtAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ92zL9jUPWagK/ rfz7fhqf85Em3DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkFZ UzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkFZ UzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMS8zRERC MzJGRDhENDNENjZBMDJCRkFERkNGQjdFMUE5RkYzOTEyNkRDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAItsPwwDQQCAAIwBwMFACgEXXQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBqtMA0GCSqGSIb3DQEBCwUAA4IBAQApGegdDyl0wefV6pzj cjR7T/FKiLrCKGVVwoJexWbyN3wgxaZRnon89z9xX18P2w+QfTVn9kfC1rfhIP1i iX20M3baYYkY1pCMdL+Ib5Um5FwgRzUx6Qi1ROa4ZUW/hHGR8gaoqpTvo3Kjh7fv HGT/AEbPjIPyFbqsZcdLvUlTgAc0Yzw8z8MFB6pACVdEPGy1VigwHLmBbxj9Imm6 Flhg7FYQNdSEZJ1ejaO/ic+qvnDGX+Da6+knY9crJj4/OQi1C2Y8e2qZ1hjNi9yt bEabw4rPl4jX/F3twKO2AmFsmeekOvtqetV4ea2xOitLjVydU/zyzHjmkAbb5BGG A1uF -----END CERTIFICATE-----Generated at Mon Jun 17 22:40:37 2024 by rpki-client on console-fra.rpki-client.org