$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer File: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer (raw, json) Hash identifier: 2C5a7hyy4ghYOUwQln3QKHcxu7uWKh7cdS2tctUAiFM= Subject key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3F184A7A0727F17E407216D0562038D3F4428922 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft caRepository: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 19:37:06 +0000 Certificate not after: Thu 03 Apr 2025 19:42:06 +0000 Subordinate resources: AS: 273457 IP: 2804:8ef0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 01:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:18:4a:7a:07:27:f1:7e:40:72:16:d0:56:20:38:d3:f4:42:89:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 19:37:06 2024 GMT Not After : Apr 3 19:42:06 2025 GMT Subject: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:5a:17:ff:27:1d:99:70:df:de:c2:8f:f1:28: c9:70:67:7d:a5:82:ba:c5:9e:79:e7:e1:72:83:ee: d9:b8:96:5d:8d:18:0c:8e:09:fa:46:57:af:5e:9b: 36:94:c3:b0:26:1e:77:26:6b:b1:de:ab:63:11:20: b9:f2:91:ea:42:b0:6d:55:bc:e3:a0:86:c5:e7:64: 39:28:95:d4:c1:52:dd:eb:ad:2f:04:d7:b7:51:d7: 86:20:79:49:32:0f:e4:d8:c9:2f:56:ca:0e:4c:96: 5a:c7:8c:1b:71:05:68:a0:31:4c:e5:da:77:7d:e8: 19:74:95:a0:60:77:e1:43:b0:eb:66:5b:28:ad:ab: 5b:ac:81:e8:fc:0b:51:2b:c1:8c:fa:bb:88:51:e4: 54:3b:1d:73:64:1f:60:37:2c:16:f4:06:a5:3c:c3: ba:96:34:b4:b9:04:dd:2e:61:7a:9a:e0:89:da:1e: d2:c8:25:81:85:cd:b3:cd:3d:e7:44:06:dc:de:91: 43:06:9a:cd:de:dc:4e:19:7a:2a:0e:ea:63:34:7b: 6d:07:d6:21:cb:c7:8a:bd:76:02:36:91:99:ea:c7: 17:9b:64:70:ed:9f:75:76:58:e2:8e:73:37:f8:c6: de:59:fd:68:90:a2:bd:d5:c5:ea:26:5c:a8:40:ba: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8ef0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273457 Signature Algorithm: sha256WithRSAEncryption 2b:3f:11:cc:6c:b7:91:56:63:d6:b1:61:9f:0b:e1:41:7e:b2: 7a:4c:9c:55:ee:68:23:9f:c0:57:80:d2:7d:c0:94:bb:0d:73: 3d:d6:e2:ac:a2:1b:aa:38:72:d8:36:b5:81:39:18:f4:d2:7e: 11:ac:39:3d:49:70:1f:10:ba:87:75:45:14:de:4c:8f:88:8b: 13:42:2b:34:99:0d:e4:cb:b8:4d:43:82:90:4d:a5:4f:18:95: 3a:45:9f:95:a1:7a:b9:40:79:b6:9f:56:91:90:a4:64:fd:df: 26:b8:d3:37:db:88:81:16:9d:36:7f:a9:97:a4:ed:dc:33:39: 38:ae:56:44:65:d9:29:d9:e9:6f:e1:25:85:d9:91:2a:24:4c: f9:e6:3f:57:3c:9e:98:b8:9d:61:19:de:fd:41:b8:c1:d5:c4: 27:82:74:ca:cb:fb:d3:17:95:dc:32:e9:5c:49:77:4e:bc:ed: b3:01:91:83:dc:b2:22:d8:56:2f:84:8f:e8:df:10:69:20:bb: 43:b9:3c:75:10:f3:2c:86:3f:ef:36:07:89:de:91:dc:07:d3: cf:42:2b:f8:10:9a:29:89:f1:cf:43:52:4e:36:69:52:d8:fc: 5d:2e:1b:3e:c2:c9:02:04:bd:1c:e5:47:aa:36:7c:5b:d0:c7: bc:85:34:2c -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUPxhKegcn8X5AchbQViA40/RCiSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxOTM3MDZaFw0yNTA0MDMxOTQyMDZaMDMxMTAvBgNV BAMTKDQwNkIwMEQ1QjY2MEY2RUVDNUM4NDE0RkEwRjBCN0ZGM0VDNTc2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Whf/Jx2ZcN/ewo/xKMlwZ32l grrFnnnn4XKD7tm4ll2NGAyOCfpGV69emzaUw7AmHncma7Heq2MRILnykepCsG1V vOOghsXnZDkoldTBUt3rrS8E17dR14YgeUkyD+TYyS9Wyg5MllrHjBtxBWigMUzl 2nd96Bl0laBgd+FDsOtmWyitq1usgej8C1ErwYz6u4hR5FQ7HXNkH2A3LBb0BqU8 w7qWNLS5BN0uYXqa4InaHtLIJYGFzbPNPedEBtzekUMGms3e3E4ZeioO6mM0e20H 1iHLx4q9dgI2kZnqxxebZHDtn3V2WOKOczf4xt5Z/WiQor3VxeomXKhAuuDDAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRAawDVtmD27sXI QU+g8Lf/PsV2ozAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNWRQ ZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUyVW0vMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVk UGZ1UkVQVEJ0dE1xUW9wVHl0cG5pS2hFM0xIZEZzemF2RFpNQmM1MlVtLzEvNDA2 QjAwRDVCNjYwRjZFRUM1Qzg0MTRGQTBGMEI3RkYzRUM1NzZBMy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASO8DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME LDEwDQYJKoZIhvcNAQELBQADggEBACs/Ecxst5FWY9axYZ8L4UF+snpMnFXuaCOf wFeA0n3AlLsNcz3W4qyiG6o4ctg2tYE5GPTSfhGsOT1JcB8Quod1RRTeTI+IixNC KzSZDeTLuE1DgpBNpU8YlTpFn5WherlAebafVpGQpGT93ya40zfbiIEWnTZ/qZek 7dwzOTiuVkRl2SnZ6W/hJYXZkSokTPnmP1c8npi4nWEZ3v1BuMHVxCeCdMrL+9MX ldwy6VxJd0687bMBkYPcsiLYVi+Ej+jfEGkgu0O5PHUQ8yyGP+82B4nekdwH089C K/gQmimJ8c9DUk42aVLY/F0uGz7CyQIEvRzlR6o2fFvQx7yFNCw= -----END CERTIFICATE-----Generated at Sat Jun 1 23:00:59 2024 by rpki-client on console-ams.rpki-client.org