$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E7E4A5849DA4C99F8B5DB2552F847C4152AEDC8.cer File: 4E7E4A5849DA4C99F8B5DB2552F847C4152AEDC8.cer (raw, json) Hash identifier: SMIz4aRKiak62hxWEHEGPN/BkP2+kDbOJOoasvPXlKs= Subject key identifier: 4E:7E:4A:58:49:DA:4C:99:F8:B5:DB:25:52:F8:47:C4:15:2A:ED:C8 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 0F6099668C0B45FE07D5C6990DAB0B80D7A1F226 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/4E7E4A5849DA4C99F8B5DB2552F847C4152AEDC8.mft caRepository: rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Fri 03 May 2024 18:10:56 +0000 Certificate not after: Fri 02 May 2025 18:15:56 +0000 Subordinate resources: AS: 52584 IP: 170.254.252.0/22 IP: 177.86.244.0/22 IP: 2804:d04::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:60:99:66:8c:0b:45:fe:07:d5:c6:99:0d:ab:0b:80:d7:a1:f2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 3 18:10:56 2024 GMT Not After : May 2 18:15:56 2025 GMT Subject: CN=4E7E4A5849DA4C99F8B5DB2552F847C4152AEDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:04:c9:f0:57:df:39:96:82:81:e4:15:3f: 57:10:dd:ff:ea:2d:fc:01:0e:51:93:6d:1f:b6:6b: 20:61:69:de:12:7f:39:f3:d5:e3:13:49:0a:b0:de: 8d:20:a0:e4:53:9f:7d:23:be:3b:97:14:cd:6a:b2: 86:a1:0a:89:24:33:55:43:27:09:fc:6c:11:0e:f9: 8c:23:8a:92:4c:ac:65:a7:f7:d4:25:75:a8:fc:4b: c9:54:d6:c3:f9:2c:ca:81:1b:17:a3:1e:a2:23:8d: da:45:73:45:b3:2d:f3:24:21:ca:31:a4:f0:51:6d: 3b:aa:c2:f7:2b:61:78:18:c5:1f:28:13:26:4f:7b: be:42:0f:ce:e3:a7:5f:a2:12:b6:ec:c5:6e:a8:6e: 8d:ff:f9:cf:35:3a:74:4b:69:23:5a:dd:9b:9a:4e: d6:4d:1a:6f:47:41:b8:5b:a7:3b:a5:38:f5:b2:97: a6:cd:f9:4d:45:5c:ae:9e:b1:f6:90:72:d5:93:84: 3a:6c:2d:ed:39:3e:c4:ba:fc:66:b6:04:43:d1:a1: 83:4d:57:b3:ba:55:1e:bf:a2:cf:2d:9a:62:27:b5: b1:29:29:00:34:83:d3:a4:9b:7d:12:9c:36:59:75: e5:27:ee:00:81:36:0d:d5:86:4e:fb:d0:79:f1:65: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:7E:4A:58:49:DA:4C:99:F8:B5:DB:25:52:F8:47:C4:15:2A:ED:C8 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoGUiRUbHqX6QgNfT6g4CGLa4sYk8HXFuYgqPiJ6bDgf/0/4E7E4A5849DA4C99F8B5DB2552F847C4152AEDC8.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.254.252.0/22 177.86.244.0/22 IPv6: 2804:d04::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52584 Signature Algorithm: sha256WithRSAEncryption bf:ca:fd:14:5d:50:6d:c5:27:95:4e:aa:a0:a1:6c:aa:8f:99: 4b:19:9e:cb:d1:20:5a:93:e8:1c:e4:18:bb:0d:05:8b:47:1d: 12:2d:95:87:87:e5:1e:b5:e0:db:21:aa:02:fe:37:8e:63:67: 3c:2f:fc:5f:e5:98:30:f8:f5:b9:61:d8:0d:38:f1:46:33:c5: 5a:66:d5:5c:9b:f0:44:cc:7a:26:b2:5a:bd:21:c6:2a:e8:9b: 57:cc:08:ee:ae:ce:fc:99:95:90:da:72:a4:88:f4:ba:0c:16: 17:09:b2:83:11:95:df:a2:a7:c4:c0:ca:14:ad:8d:51:f0:74: 75:35:3f:af:3f:75:1c:ed:6a:69:c2:3f:93:53:93:ab:33:77: 1b:ce:0a:f1:a6:f4:0c:8b:c0:fe:62:5d:88:7f:1a:a0:15:34: 51:14:04:6a:ef:16:10:0f:07:f0:00:cf:43:c3:f4:1c:1b:91: 5c:34:c2:ba:53:30:00:80:96:ee:c6:44:58:1d:6a:e0:55:2a: 22:e8:a5:1a:1f:98:b0:0f:3c:69:eb:83:a0:95:97:48:ba:78: 3e:88:f2:5a:56:7f:ca:31:d4:df:42:17:9f:2f:25:4a:63:ff: b5:5a:82:cb:6e:c8:2d:aa:a6:1f:aa:39:49:8d:e7:8b:31:e8: 2f:fc:34:e3 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUD2CZZowLRf4H1caZDasLgNeh8iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA1MDMxODEwNTZaFw0yNTA1MDIxODE1NTZaMDMxMTAvBgNV BAMTKDRFN0U0QTU4NDlEQTRDOTlGOEI1REIyNTUyRjg0N0M0MTUyQUVEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfgTJ8FffOZaCgeQVP1cQ3f/q LfwBDlGTbR+2ayBhad4Sfznz1eMTSQqw3o0goORTn30jvjuXFM1qsoahCokkM1VD Jwn8bBEO+YwjipJMrGWn99Qldaj8S8lU1sP5LMqBGxejHqIjjdpFc0WzLfMkIcox pPBRbTuqwvcrYXgYxR8oEyZPe75CD87jp1+iErbsxW6obo3/+c81OnRLaSNa3Zua TtZNGm9HQbhbpzulOPWyl6bN+U1FXK6esfaQctWThDpsLe05PsS6/Ga2BEPRoYNN V7O6VR6/os8tmmIntbEpKQA0g9Okm30SnDZZdeUn7gCBNg3Vhk770HnxZfrFAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROfkpYSdpMmfi1 2yVS+EfEFSrtyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG9H VWlSVWJIcVg2UWdOZlQ2ZzRDR0xhNHNZazhIWEZ1WWdxUGlKNmJEZ2YvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hv R1VpUlViSHFYNlFnTmZUNmc0Q0dMYTRzWWs4SFhGdVlncVBpSjZiRGdmLzAvNEU3 RTRBNTg0OURBNEM5OUY4QjVEQjI1NTJGODQ3QzQxNTJBRURDOC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCqv78AwQCsVb0MA0EAgACMAcDBQAoBA0EMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDNaDANBgkqhkiG9w0BAQsFAAOCAQEAv8r9FF1Q bcUnlU6qoKFsqo+ZSxmey9EgWpPoHOQYuw0Fi0cdEi2Vh4flHrXg2yGqAv43jmNn PC/8X+WYMPj1uWHYDTjxRjPFWmbVXJvwRMx6JrJavSHGKuibV8wI7q7O/JmVkNpy pIj0ugwWFwmygxGV36KnxMDKFK2NUfB0dTU/rz91HO1qacI/k1OTqzN3G84K8ab0 DIvA/mJdiH8aoBU0URQEau8WEA8H8ADPQ8P0HBuRXDTCulMwAICW7sZEWB1q4FUq IuilGh+YsA88aeuDoJWXSLp4PojyWlZ/yjHU30IXny8lSmP/tVqCy27ILaqmH6o5 SY3nizHoL/w04w== -----END CERTIFICATE-----Generated at Sun Jun 2 00:29:11 2024 by rpki-client on console-ams.rpki-client.org