$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer File: 3F318214B1BD2E89818793B6E4B9967278CA87A1.cer (raw, json) Hash identifier: opKpTA37xF/yW2akejkX7YIL65ONz5Me7fV34ZurLhs= Subject key identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 49C777E322E99F0EE6DD2CA74A0E7A9FFEACC107 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.mft caRepository: rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Jul 2024 13:13:28 +0000 Certificate not after: Thu 03 Jul 2025 13:18:28 +0000 Subordinate resources: AS: 265285 IP: 168.90.148.0/22 IP: 2804:2d78::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Sep 2024 23:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c7:77:e3:22:e9:9f:0e:e6:dd:2c:a7:4a:0e:7a:9f:fe:ac:c1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Jul 4 13:13:28 2024 GMT Not After : Jul 3 13:18:28 2025 GMT Subject: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ac:38:4c:a6:03:54:be:cb:d3:8a:45:94:76: a9:0e:08:37:9f:d5:71:cb:de:bc:b0:29:33:4f:d7: 3c:6d:85:21:4c:ce:e6:dd:4e:bf:7f:78:21:6d:16: d0:d5:d2:22:ea:9a:d9:01:d2:0d:56:03:20:86:10: 3f:b0:5e:bc:8b:32:0b:3f:64:7a:b9:70:2e:0b:e9: 86:c6:10:90:9c:f7:c4:20:33:ab:20:05:f7:e0:9e: 7f:1b:7c:26:e4:a6:b7:eb:d0:8a:12:74:99:47:04: 61:b8:03:9a:c8:6a:15:a7:77:20:fe:54:d8:38:87: f6:dc:99:5f:fd:6b:16:8e:aa:3d:5c:de:a1:98:e9: 56:c0:b3:ce:45:e2:3d:a6:80:3e:bd:5a:0d:0a:69: 45:89:15:6e:a4:85:8e:32:cc:32:c3:f4:c6:0a:f8: a2:c2:8a:72:47:88:03:c0:b7:c5:b8:d2:d9:3e:e9: 56:89:f9:a7:ad:34:b2:d5:f8:eb:8a:d9:67:e3:20: 02:eb:83:73:7d:a0:29:a1:ca:0e:19:b0:42:c7:4e: 34:63:14:d3:00:16:13:1c:17:5c:6b:1e:7e:b7:82: b0:99:e8:cb:9a:83:9e:18:28:e7:88:96:53:4c:ff: 27:08:d1:06:ce:8a:94:c5:f8:7e:5f:80:94:c8:3a: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.90.148.0/22 IPv6: 2804:2d78::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265285 Signature Algorithm: sha256WithRSAEncryption 73:ed:14:e5:1e:2d:56:bf:c3:d4:22:bd:09:11:4c:a9:97:3c: 34:ac:e8:2b:6b:38:94:6b:d0:4b:7a:4e:b8:c4:d8:c9:69:80: f6:5c:45:41:cd:42:47:80:d6:19:33:6b:9a:fe:88:0e:c5:9b: c9:b4:02:85:e4:1e:a7:60:fc:a4:92:3b:8a:f0:7f:d3:33:cf: be:52:3d:3e:a5:d0:93:cc:d6:0b:4c:bc:75:2a:d6:55:20:a1: 27:49:9b:67:76:8f:36:ab:86:52:d9:1d:7e:2f:3e:45:e6:b5: 07:d6:6a:43:7a:98:b9:10:66:31:8c:c7:44:df:06:2b:5e:e4: 65:bf:b7:b1:8e:bb:d1:6b:ad:b1:7a:fb:53:b0:88:fd:91:49: 7e:16:99:f0:8b:2f:00:16:05:6e:47:af:1d:da:32:f6:66:e5: fb:f9:5b:1e:79:fb:d9:7b:53:5e:47:9b:bf:07:92:45:39:12: af:f8:66:26:d3:4f:20:97:4d:9c:8b:1a:68:0a:4a:f4:a9:a3: c9:6a:8b:cc:fa:9f:54:84:7a:36:27:87:b2:2c:e2:78:12:f9: 50:ce:81:84:0b:f1:43:1f:7a:d4:cc:3f:dd:15:7b:8b:f4:56: 3a:a2:5a:6a:05:af:be:0d:f7:7c:f6:48:be:c4:f1:0c:e5:88: b5:a4:18:fe -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUScd34yLpnw7m3SynSg56n/6swQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA3MDQxMzEzMjhaFw0yNTA3MDMxMzE4MjhaMDMxMTAvBgNV BAMTKDNGMzE4MjE0QjFCRDJFODk4MTg3OTNCNkU0Qjk5NjcyNzhDQTg3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrDhMpgNUvsvTikWUdqkOCDef 1XHL3rywKTNP1zxthSFMzubdTr9/eCFtFtDV0iLqmtkB0g1WAyCGED+wXryLMgs/ ZHq5cC4L6YbGEJCc98QgM6sgBffgnn8bfCbkprfr0IoSdJlHBGG4A5rIahWndyD+ VNg4h/bcmV/9axaOqj1c3qGY6VbAs85F4j2mgD69Wg0KaUWJFW6khY4yzDLD9MYK +KLCinJHiAPAt8W40tk+6VaJ+aetNLLV+OuK2WfjIALrg3N9oCmhyg4ZsELHTjRj FNMAFhMcF1xrHn63grCZ6Muag54YKOeIllNM/ycI0QbOipTF+H5fgJTIOl1pAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ/MYIUsb0uiYGH k7bkuZZyeMqHoTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHRa NXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRNSzUvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzh0 WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAvM0Yz MTgyMTRCMUJEMkU4OTgxODc5M0I2RTRCOTk2NzI3OENBODdBMS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqFqUMA0EAgACMAcDBQAoBC14MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQMRTANBgkqhkiG9w0BAQsFAAOCAQEAc+0U5R4tVr/D1CK9 CRFMqZc8NKzoK2s4lGvQS3pOuMTYyWmA9lxFQc1CR4DWGTNrmv6IDsWbybQCheQe p2D8pJI7ivB/0zPPvlI9PqXQk8zWC0y8dSrWVSChJ0mbZ3aPNquGUtkdfi8+Rea1 B9ZqQ3qYuRBmMYzHRN8GK17kZb+3sY670WutsXr7U7CI/ZFJfhaZ8IsvABYFbkev Hdoy9mbl+/lbHnn72XtTXkebvweSRTkSr/hmJtNPIJdNnIsaaApK9KmjyWqLzPqf VIR6NieHsizieBL5UM6BhAvxQx961Mw/3RV7i/RWOqJaagWvvg33fPZIvsTxDOWI taQY/g== -----END CERTIFICATE-----Generated at Sat Sep 28 23:30:07 2024 by rpki-client on console-ams.rpki-client.org