$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer File: 3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.cer (raw, json) Hash identifier: xn6tcwy/qPDLXb4AN0KxZFnHZfM7jsfjQEhREO+/yPM= Subject key identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 6DF75E4EA89A11B257CE4FEB4D6F977B8632D80C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft caRepository: rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 13:09:44 +0000 Certificate not after: Thu 03 Apr 2025 13:14:44 +0000 Subordinate resources: AS: 266502 IP: 170.244.172.0/22 IP: 2804:38cc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 01:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f7:5e:4e:a8:9a:11:b2:57:ce:4f:eb:4d:6f:97:7b:86:32:d8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 13:09:44 2024 GMT Not After : Apr 3 13:14:44 2025 GMT Subject: CN=3E4CE3FC0F15111E817F6CE526256AA7C3BF828A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:5f:f0:79:94:6b:a8:4d:27:04:8b:df:a4: a4:3b:ee:57:30:06:e1:0b:16:bf:bf:06:ea:ad:c1: 5d:71:2c:32:4a:22:78:9d:51:4c:5f:38:88:cd:6d: b6:79:07:cb:70:be:b9:4c:39:cd:95:06:7c:ec:03: ae:ab:5a:7d:ef:08:6a:31:36:89:13:ed:1a:01:09: da:22:0d:0e:ef:4d:61:00:01:45:9e:fc:c3:2b:19: e6:eb:05:14:34:dd:2e:1f:58:ae:b6:80:7a:5b:24: d8:18:97:b1:4c:ce:e4:e3:10:f0:c4:6e:af:9c:4a: 21:23:9c:c4:e4:46:6a:35:69:f6:83:3f:09:bc:0f: 9e:9a:c2:42:93:c1:4f:3f:82:f2:d8:f3:84:22:2d: 71:4f:49:52:3c:f0:7f:a7:8d:00:c1:53:bb:fe:fa: 8c:0f:15:32:c9:8d:cd:88:99:67:50:00:6f:b8:9c: b4:a5:ea:37:40:b2:65:1b:f5:a7:d2:bc:16:f1:dc: 57:07:36:e9:21:49:97:9b:9c:e0:a2:bb:3d:5a:c9: 05:c4:70:a2:90:1f:6f:9e:3f:6a:50:d0:7a:d6:0b: 2f:54:38:90:39:17:bd:b8:df:16:2a:ae:24:b2:99: b0:ec:1c:bf:c3:4a:74:bf:8e:d3:99:0d:20:59:db: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:4C:E3:FC:0F:15:11:1E:81:7F:6C:E5:26:25:6A:A7:C3:BF:82:8A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XWqNZzDYp1ANe3kAefHZd5GXJ8BV9rNcCQM14szXRoP/1/3E4CE3FC0F15111E817F6CE526256AA7C3BF828A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.244.172.0/22 IPv6: 2804:38cc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266502 Signature Algorithm: sha256WithRSAEncryption 05:cd:70:90:9f:0f:61:58:fe:93:5a:7e:7c:0a:12:56:20:14: e2:b6:b3:99:23:03:cc:5f:60:fd:2f:12:5a:01:b7:8f:d0:c3: 13:e1:83:1b:19:38:ea:b4:f9:e9:62:2f:fe:e5:31:b4:70:41: c0:9b:00:be:04:42:ca:d2:2a:29:d8:f8:75:bc:9e:ba:4f:39: df:5d:7d:47:d3:22:44:f9:31:85:43:35:12:46:97:d0:00:6b: 56:e7:5a:fa:c9:2c:09:67:80:9c:97:a8:97:69:a7:6f:40:dc: 44:ed:0e:c3:fc:41:63:bf:cd:e8:df:69:88:09:e7:24:70:a8: 34:de:56:f0:b8:9f:cd:96:2d:0b:43:ec:39:eb:dd:38:15:20: fc:63:40:6d:1d:01:b9:b4:7d:3a:75:c0:8a:30:b0:88:6b:d9: 61:0e:87:96:10:ae:6d:93:10:a9:0f:42:e4:12:ea:15:ec:bd: a2:85:bc:ef:24:ed:2c:2d:ef:ba:c0:f1:68:15:a4:bd:60:8e: 85:ac:e2:6c:93:93:97:92:4a:23:32:90:d3:a1:33:fc:86:c5: 8c:d0:cc:ec:6f:04:fb:58:4b:2a:91:c3:2c:46:b1:9e:65:06: a9:2d:f7:b5:3c:bb:76:34:f1:24:6c:05:49:4c:b2:2e:d4:c3: 02:7b:93:66 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUbfdeTqiaEbJXzk/rTW+Xe4Yy2AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxMzA5NDRaFw0yNTA0MDMxMzE0NDRaMDMxMTAvBgNV BAMTKDNFNENFM0ZDMEYxNTExMUU4MTdGNkNFNTI2MjU2QUE3QzNCRjgyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lV/weZRrqE0nBIvfpKQ77lcw BuELFr+/BuqtwV1xLDJKInidUUxfOIjNbbZ5B8twvrlMOc2VBnzsA66rWn3vCGox NokT7RoBCdoiDQ7vTWEAAUWe/MMrGebrBRQ03S4fWK62gHpbJNgYl7FMzuTjEPDE bq+cSiEjnMTkRmo1afaDPwm8D56awkKTwU8/gvLY84QiLXFPSVI88H+njQDBU7v+ +owPFTLJjc2ImWdQAG+4nLSl6jdAsmUb9afSvBbx3FcHNukhSZebnOCiuz1ayQXE cKKQH2+eP2pQ0HrWCy9UOJA5F7243xYqriSymbDsHL/DSnS/jtOZDSBZ2wGBAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ+TOP8DxURHoF/ bOUmJWqnw7+CijAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVhX cU5aekRZcDFBTmUza0FlZkhaZDVHWEo4QlY5ck5jQ1FNMTRzelhSb1AvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVY V3FOWnpEWXAxQU5lM2tBZWZIWmQ1R1hKOEJWOXJOY0NRTTE0c3pYUm9QLzEvM0U0 Q0UzRkMwRjE1MTExRTgxN0Y2Q0U1MjYyNTZBQTdDM0JGODI4QS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqvSsMA0EAgACMAcDBQAoBDjMMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQRBjANBgkqhkiG9w0BAQsFAAOCAQEABc1wkJ8PYVj+k1p+ fAoSViAU4razmSMDzF9g/S8SWgG3j9DDE+GDGxk46rT56WIv/uUxtHBBwJsAvgRC ytIqKdj4dbyeuk853119R9MiRPkxhUM1EkaX0ABrVuda+sksCWeAnJeol2mnb0Dc RO0Ow/xBY7/N6N9piAnnJHCoNN5W8LifzZYtC0PsOevdOBUg/GNAbR0BubR9OnXA ijCwiGvZYQ6HlhCubZMQqQ9C5BLqFey9ooW87yTtLC3vusDxaBWkvWCOhazibJOT l5JKIzKQ06Ez/IbFjNDM7G8E+1hLKpHDLEaxnmUGqS33tTy7djTxJGwFSUyyLtTD AnuTZg== -----END CERTIFICATE-----Generated at Tue Jun 18 00:26:52 2024 by rpki-client on console-ams.rpki-client.org