$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer File: 51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer (raw, json) Hash identifier: x0hYDC9L2bgJu1PLXN65+D0FhcjJdVf8dkGqMEu6JdA= Subject key identifier: 51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 4A6950695C155F204DF2C2193B1C525D77E17D64 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.mft caRepository: rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 05:32:01 +0000 Certificate not after: Thu 03 Apr 2025 05:37:01 +0000 Subordinate resources: AS: 270450 IP: 200.50.212.0/22 IP: 2804:6c2c::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 00:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:69:50:69:5c:15:5f:20:4d:f2:c2:19:3b:1c:52:5d:77:e1:7d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 05:32:01 2024 GMT Not After : Apr 3 05:37:01 2025 GMT Subject: CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:15:0a:9d:51:70:28:f4:20:51:36:6b:cb: d5:56:4b:70:2f:9d:d8:8c:1f:4d:9c:19:81:a0:75: ae:a5:1f:f1:68:2c:3d:14:bd:f9:b8:ae:70:a1:43: 84:7f:55:6c:4e:20:e6:b0:08:88:46:84:c2:d1:1a: 12:c1:4f:59:26:59:66:02:ec:f3:91:27:92:f8:ff: 78:cb:61:fd:f8:f5:f4:b4:70:fe:c8:c0:20:4f:11: be:1e:25:fb:57:50:7b:28:c1:3b:f4:dd:64:fd:37: 60:fc:b7:b1:97:43:b8:8a:c4:e9:f5:b8:52:13:47: c2:44:d2:9a:28:70:85:b0:d0:d7:b5:90:3e:0d:f2: d7:72:a8:5d:2f:69:76:7f:4c:37:f7:85:05:6f:3f: 48:42:56:04:09:6e:c1:d0:40:b9:cb:3e:73:45:2b: 07:ae:ce:12:f8:94:e2:c1:97:ba:3b:55:fd:7d:ef: cc:e3:f9:cf:ab:ff:e5:9c:de:5e:64:a6:bd:10:22: dc:f5:92:5d:06:d4:36:7e:24:9b:40:a1:a5:d5:93: c4:34:61:5f:1f:06:93:6f:64:75:7e:2b:66:40:ec: 30:d3:8f:b8:cb:55:e2:5b:3e:3e:f7:01:61:68:4e: 40:3f:7c:74:81:46:b1:29:7b:cc:6b:39:9a:1c:42: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.50.212.0/22 IPv6: 2804:6c2c::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270450 Signature Algorithm: sha256WithRSAEncryption b1:ad:37:91:21:8e:bc:da:d2:c4:f6:19:22:5d:5d:fd:1a:b8: b0:9a:09:7a:09:49:1b:c0:9b:f8:04:60:2b:ec:1b:fa:53:e9: 66:17:52:c8:83:e0:52:58:e7:4b:0f:02:b9:00:c5:7a:d1:1b: 64:e7:ab:fa:95:b4:0a:87:f0:aa:28:8b:02:15:ae:a9:4e:0e: 0c:e7:4b:e7:45:a8:3a:c0:16:bb:d1:68:ec:60:d9:e0:8e:18: 4d:58:5d:d5:32:65:de:4c:de:93:dc:c7:09:cd:4d:65:0b:cc: 5f:07:b2:ef:62:c8:cb:e6:a2:26:e7:5b:d0:be:c8:ad:cb:ef: d6:ae:fe:fe:88:53:b9:bd:b2:ce:4e:65:80:ad:a1:05:bb:6d: 45:3f:1d:7c:b1:3f:f0:a2:b7:36:a5:39:c8:c5:bb:f2:49:c7: ed:df:9a:50:d8:05:89:37:36:8c:df:b6:c5:83:49:16:a5:c4: 26:bc:f1:69:f7:d2:94:f4:4c:77:69:f1:39:b1:7c:9f:7a:82: 0d:08:e0:4a:d6:a2:58:9a:c5:90:c1:99:9b:e5:7b:02:32:ed: fc:1f:6a:8d:98:4c:7b:1a:ba:f4:aa:9e:3b:2d:ed:71:44:60: fa:4f:dc:a2:db:22:0e:7e:e9:4a:ea:97:6b:78:20:62:aa:70: 0d:ec:c3:92 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUSmlQaVwVXyBN8sIZOxxSXXfhfWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwNTMyMDFaFw0yNTA0MDMwNTM3MDFaMDMxMTAvBgNV BAMTKDUxOTU3RjMzOEQwREYxQzQ5QTBGQUI3QkUwODZENEYyRjZGMDFEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZRUKnVFwKPQgUTZry9VWS3Av ndiMH02cGYGgda6lH/FoLD0Uvfm4rnChQ4R/VWxOIOawCIhGhMLRGhLBT1kmWWYC 7PORJ5L4/3jLYf349fS0cP7IwCBPEb4eJftXUHsowTv03WT9N2D8t7GXQ7iKxOn1 uFITR8JE0poocIWw0Ne1kD4N8tdyqF0vaXZ/TDf3hQVvP0hCVgQJbsHQQLnLPnNF KweuzhL4lOLBl7o7Vf1978zj+c+r/+Wc3l5kpr0QItz1kl0G1DZ+JJtAoaXVk8Q0 YV8fBpNvZHV+K2ZA7DDTj7jLVeJbPj73AWFoTkA/fHSBRrEpe8xrOZocQr0bAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRRlX8zjQ3xxJoP q3vghtTy9vAdrzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0dS YlBRUkVzN3hHTkc2VzJHY2h4WjZDcFdEUTM3YmplbkVTcnVDUUtjRDkvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0dS YlBRUkVzN3hHTkc2VzJHY2h4WjZDcFdEUTM3YmplbkVTcnVDUUtjRDkvMS81MTk1 N0YzMzhEMERGMUM0OUEwRkFCN0JFMDg2RDRGMkY2RjAxREFGLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBALIMtQwDQQCAAIwBwMFACgEbCwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBCByMA0GCSqGSIb3DQEBCwUAA4IBAQCxrTeRIY682tLE9hki XV39Griwmgl6CUkbwJv4BGAr7Bv6U+lmF1LIg+BSWOdLDwK5AMV60Rtk56v6lbQK h/CqKIsCFa6pTg4M50vnRag6wBa70WjsYNngjhhNWF3VMmXeTN6T3McJzU1lC8xf B7LvYsjL5qIm51vQvsity+/Wrv7+iFO5vbLOTmWAraEFu21FPx18sT/worc2pTnI xbvyScft35pQ2AWJNzaM37bFg0kWpcQmvPFp99KU9Ex3afE5sXyfeoINCOBK1qJY msWQwZmb5XsCMu38H2qNmEx7Grr0qp47Le1xRGD6T9yi2yIOfulK6pdreCBiqnAN 7MOS -----END CERTIFICATE-----Generated at Sat Nov 23 00:06:06 2024 by rpki-client on console-ams.rpki-client.org