$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer File: 4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer (raw, json) Hash identifier: BJ/h77qaeDYyvdEFA9fRGehT4LTQo1d+rqa9PHLEDGI= Subject key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 21C9E6618F1BC721F2156D18F921FB9A744A1967 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft caRepository: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 00:25:17 +0000 Certificate not after: Thu 03 Apr 2025 00:30:17 +0000 Subordinate resources: AS: 52639 IP: 168.195.112.0/22 IP: 179.96.176.0/21 IP: 2804:d90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 21:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c9:e6:61:8f:1b:c7:21:f2:15:6d:18:f9:21:fb:9a:74:4a:19:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 00:25:17 2024 GMT Not After : Apr 3 00:30:17 2025 GMT Subject: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:3a:13:d2:8c:4d:d3:a6:88:4e:a4:4a:8d: 83:f1:9f:56:3e:60:1d:bd:e8:af:43:99:97:92:a2: 3d:43:65:4b:5e:77:b5:e5:e0:82:da:77:74:eb:69: 15:e8:66:8f:94:07:7b:7f:9e:66:1d:64:37:98:1f: bd:cb:86:9e:86:90:70:e5:7a:4d:df:78:0d:99:d2: bd:80:15:67:c7:42:c9:3e:18:f1:46:da:7d:16:aa: b9:de:d8:f8:7d:27:f4:fb:6b:0f:52:5d:eb:f0:54: b3:12:19:0e:7e:60:49:1c:97:4b:8a:0e:c4:92:73: 75:ce:6e:00:56:64:41:fb:54:23:8b:9f:7e:28:34: 2d:a8:1b:51:08:77:79:5f:fd:e9:91:32:9d:e2:49: ab:98:93:3a:50:3a:b6:a9:8f:53:56:85:f3:c2:ed: 1a:b9:b2:12:7a:48:d3:4f:68:26:f6:4a:d3:6a:39: 68:66:d9:63:90:e1:0e:2b:5e:d1:b3:6b:43:f7:4a: e0:1e:aa:7f:77:41:0e:a1:15:bc:75:43:52:54:4e: e1:88:27:e8:b9:4b:8a:ed:5d:32:4b:b6:5a:24:23: 32:16:f5:ab:63:8b:37:8c:9c:12:f1:55:4e:69:1f: 51:78:ec:f4:d2:29:aa:b3:04:bf:5f:ed:3b:8c:93: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.195.112.0/22 179.96.176.0/21 IPv6: 2804:d90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52639 Signature Algorithm: sha256WithRSAEncryption 3e:d6:bb:41:82:d7:f1:6a:60:35:84:ce:55:0e:93:fd:96:54: 26:15:98:09:2d:c9:77:57:b7:65:28:6f:3f:52:82:74:c7:aa: a1:0d:8a:d0:50:0e:cd:b7:8c:5f:7a:48:7c:9a:c9:b5:4d:90: 1e:28:aa:f4:2f:9f:67:7c:79:d9:fe:dc:52:13:b1:2a:4c:44: 7f:7f:37:ac:7d:88:21:ff:9b:80:0d:c6:de:39:82:6e:b5:f7: 9b:a3:d9:ca:17:41:d2:6e:21:80:88:3c:aa:5d:18:19:83:56: aa:d7:71:de:af:1c:5d:d1:0f:d4:f5:87:07:91:6b:ad:7a:1d: 4e:8b:4c:d8:81:8c:56:f5:65:88:9e:a2:a9:c7:10:94:4b:9a: ee:8a:11:2e:32:dc:ad:c3:21:da:21:42:59:6b:50:41:4d:f3: bb:e0:6e:cc:d5:f0:f8:f3:7c:28:0b:4c:86:ce:2d:c1:2f:eb: 1e:75:94:64:27:a7:d4:83:ad:e2:93:94:2c:de:16:fc:1a:a5: ae:85:2e:50:fd:33:4e:cd:89:60:8d:8e:5a:f8:37:d0:c4:01: 29:6a:47:f7:8a:c5:77:be:25:fc:75:69:44:52:8c:87:40:a2: 45:1a:ed:6b:f7:6f:51:d9:0d:df:b7:e7:e4:0a:fd:0e:94:6d: 6c:07:09:99 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIUIcnmYY8bxyHyFW0Y+SH7mnRKGWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMDI1MTdaFw0yNTA0MDMwMDMwMTdaMDMxMTAvBgNV BAMTKDRDMzMxMDk4Qjg0REM5Mjk2QkJEQUVFOUQyQzA1QkUyQUMzQ0M1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIDoT0oxN06aITqRKjYPxn1Y+ YB296K9DmZeSoj1DZUted7Xl4ILad3TraRXoZo+UB3t/nmYdZDeYH73Lhp6GkHDl ek3feA2Z0r2AFWfHQsk+GPFG2n0Wqrne2Ph9J/T7aw9SXevwVLMSGQ5+YEkcl0uK DsSSc3XObgBWZEH7VCOLn34oNC2oG1EId3lf/emRMp3iSauYkzpQOrapj1NWhfPC 7Rq5shJ6SNNPaCb2StNqOWhm2WOQ4Q4rXtGza0P3SuAeqn93QQ6hFbx1Q1JUTuGI J+i5S4rtXTJLtlokIzIW9atjizeMnBLxVU5pH1F47PTSKaqzBL9f7TuMk/MNAgMB AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRMMxCYuE3JKWu9 runSwFvirDzFojAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMjCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN3JB emlvd2VmTm1GcndiVzUxU3lQS2FEM0gxd05VajFKd1VQd2d1am1hY1UvMi80QzMz MTA5OEI4NERDOTI5NkJCREFFRTlEMkMwNUJFMkFDM0NDNUEyLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB Af8EJTAjMBIEAgABMAwDBAKow3ADBAOzYLAwDQQCAAIwBwMFACgEDZAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAM2fMA0GCSqGSIb3DQEBCwUAA4IBAQA+1rtBgtfx amA1hM5VDpP9llQmFZgJLcl3V7dlKG8/UoJ0x6qhDYrQUA7Nt4xfekh8msm1TZAe KKr0L59nfHnZ/txSE7EqTER/fzesfYgh/5uADcbeOYJutfebo9nKF0HSbiGAiDyq XRgZg1aq13Herxxd0Q/U9YcHkWuteh1Oi0zYgYxW9WWInqKpxxCUS5ruihEuMtyt wyHaIUJZa1BBTfO74G7M1fD483woC0yGzi3BL+sedZRkJ6fUg63ik5Qs3hb8GqWu hS5Q/TNOzYlgjY5a+DfQxAEpakf3isV3viX8dWlEUoyHQKJFGu1r929R2Q3ft+fk Cv0OlG1sBwmZ -----END CERTIFICATE-----Generated at Sun May 19 22:11:17 2024 by rpki-client on console-fra.rpki-client.org