$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer File: 3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer (raw, json) Hash identifier: oK6CvgBMf5YPiWXNU5ByijILIuqgaH38q4gR7I8xw3s= Subject key identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 55F5135C5707012765438E340B3038FF43E8FF64 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft caRepository: rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:26:38 +0000 Certificate not after: Wed 02 Apr 2025 18:31:38 +0000 Subordinate resources: AS: 263951 IP: 138.255.20.0/22 IP: 2804:2844::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 02 Jul 2024 07:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f5:13:5c:57:07:01:27:65:43:8e:34:0b:30:38:ff:43:e8:ff:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:26:38 2024 GMT Not After : Apr 2 18:31:38 2025 GMT Subject: CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:d1:3a:98:16:80:ff:b1:3a:f1:b0:9f:88: 64:23:59:6f:ec:ad:8b:2f:3b:48:a4:ed:48:96:bd: 08:e2:e2:ea:2a:56:19:fd:2b:bc:82:47:76:fa:42: c8:54:d2:1e:e8:71:58:06:fa:87:7f:d6:25:ad:19: 43:d6:96:16:62:e1:37:e5:fe:bf:fd:6f:26:ba:46: dc:15:8d:90:fd:cb:a8:37:f3:26:48:74:1c:c7:c9: ad:a4:53:d3:79:d7:ca:c8:3c:6a:f6:a9:43:66:9e: 32:42:a1:c9:f9:a1:72:1a:44:63:ae:0b:d8:a6:42: d9:50:75:92:d2:8e:da:31:f4:83:18:e5:69:6f:f1: 10:5c:ab:40:2b:3e:e2:3f:2e:28:64:13:d6:72:35: fd:c7:56:72:6f:b2:4a:fc:f7:2a:fb:8d:ff:11:4d: 2b:9a:90:b0:5f:91:0a:a6:55:17:df:fc:67:ef:47: f7:cb:1f:d5:77:53:46:5d:66:f7:ec:e8:b5:27:40: 0e:c9:14:96:28:08:d6:ae:70:da:78:e2:4d:19:f4: eb:75:cc:ad:bf:45:77:4a:f9:e8:57:96:48:fb:98: b7:73:2f:89:91:08:56:c1:b9:53:6b:10:c3:b0:fd: 7c:e7:51:13:0e:a8:9d:cc:6e:5f:c7:ff:2e:5c:68: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.255.20.0/22 IPv6: 2804:2844::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263951 Signature Algorithm: sha256WithRSAEncryption 94:c8:3c:46:c0:10:18:b2:0b:df:9a:22:df:79:9c:03:8f:73: e2:67:71:1a:95:26:64:68:ab:4a:67:9b:8b:77:02:25:9b:a2: e7:a5:4f:91:db:2a:eb:23:e2:c0:40:c9:65:86:73:4a:8f:42: 30:bd:f5:fe:32:c0:01:1b:d9:71:b9:15:d5:e6:2f:2a:2b:9e: 4b:99:8a:9e:7d:9a:26:cd:1d:66:3f:2a:ae:45:c6:4d:06:9f: d0:93:07:be:3f:c9:2f:f4:95:c9:7e:73:f4:39:ca:1f:5e:3b: 97:c8:48:dd:ad:b3:38:f7:55:51:a6:89:2c:15:b7:f4:54:06: b8:e5:93:21:6b:5d:d1:11:db:c2:3d:bd:c1:47:ad:8d:5c:4d: ef:5e:db:3f:61:39:67:2f:84:d9:8f:af:12:57:20:f8:c3:7f: df:ae:eb:26:e3:44:70:26:e9:d9:0f:40:39:c9:b1:db:6a:29: 3b:88:ad:a8:b8:34:a6:9b:bc:f9:4e:8e:81:bd:09:a1:39:6b: 2b:8a:49:1a:0b:25:39:26:ca:65:a3:93:92:23:62:af:e4:0f: 50:58:af:80:3e:16:fa:04:cf:74:09:22:32:f1:2b:a0:b4:00: cd:24:10:b1:9f:aa:74:97:76:7b:67:f6:ad:b8:c0:5f:10:b9: c5:04:e8:b3 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUVfUTXFcHASdlQ440CzA4/0Po/2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODI2MzhaFw0yNTA0MDIxODMxMzhaMDMxMTAvBgNV BAMTKDNFMEIwNkRBNTJGN0U3REZBOUUyOEUzRTU2NDA4Rjg5NkNDMDdBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARtE6mBaA/7E68bCfiGQjWW/s rYsvO0ik7UiWvQji4uoqVhn9K7yCR3b6QshU0h7ocVgG+od/1iWtGUPWlhZi4Tfl /r/9bya6RtwVjZD9y6g38yZIdBzHya2kU9N518rIPGr2qUNmnjJCocn5oXIaRGOu C9imQtlQdZLSjtox9IMY5Wlv8RBcq0ArPuI/LihkE9ZyNf3HVnJvskr89yr7jf8R TSuakLBfkQqmVRff/GfvR/fLH9V3U0ZdZvfs6LUnQA7JFJYoCNaucNp44k0Z9Ot1 zK2/RXdK+ehXlkj7mLdzL4mRCFbBuVNrEMOw/XznURMOqJ3Mbl/H/y5caP7pAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+CwbaUvfn36ni jj5WQI+JbMB6rTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQlRo eWZWaGQzamVBam5reVE5VUNrRFNtNENFODNOWVJnVEJkZFRQUWhNelMvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JU aHlmVmhkM2plQWpua3lROVVDa0RTbTRDRTgzTllSZ1RCZGRUUFFoTXpTLzEvM0Uw QjA2REE1MkY3RTdERkE5RTI4RTNFNTY0MDhGODk2Q0MwN0FBRC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCiv8UMA0EAgACMAcDBQAoBChEMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQHDzANBgkqhkiG9w0BAQsFAAOCAQEAlMg8RsAQGLIL35oi 33mcA49z4mdxGpUmZGirSmebi3cCJZui56VPkdsq6yPiwEDJZYZzSo9CML31/jLA ARvZcbkV1eYvKiueS5mKnn2aJs0dZj8qrkXGTQaf0JMHvj/JL/SVyX5z9DnKH147 l8hI3a2zOPdVUaaJLBW39FQGuOWTIWtd0RHbwj29wUetjVxN717bP2E5Zy+E2Y+v Elcg+MN/367rJuNEcCbp2Q9AOcmx22opO4itqLg0ppu8+U6Ogb0JoTlrK4pJGgsl OSbKZaOTkiNir+QPUFivgD4W+gTPdAkiMvEroLQAzSQQsZ+qdJd2e2f2rbjAXxC5 xQTosw== -----END CERTIFICATE-----Generated at Mon Jul 1 05:25:06 2024 by rpki-client on console-fra.rpki-client.org