$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer File: 52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer (raw, json) Hash identifier: 7XNc4hLRZQe1fQUALYopje8Ki3jT2UUtAgB2szSLFmQ= Subject key identifier: 52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 5109FE7BD5474D941CC8D37BCEAE360385E5539A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.mft caRepository: rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 17:41:25 +0000 Certificate not after: Thu 03 Apr 2025 17:46:25 +0000 Subordinate resources: AS: 266375 IP: 170.80.52.0/22 IP: 2804:36d4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:09:fe:7b:d5:47:4d:94:1c:c8:d3:7b:ce:ae:36:03:85:e5:53:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 17:41:25 2024 GMT Not After : Apr 3 17:46:25 2025 GMT Subject: CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:8b:5f:a5:0d:21:63:41:33:0e:18:23:8f: 51:36:92:f2:38:51:85:44:77:41:93:2f:4f:b1:5d: 15:9a:ed:95:a7:74:f1:69:58:55:4c:1c:78:c4:35: 15:52:fa:8b:bf:80:dc:f9:ea:39:df:a6:3c:e9:91: 55:b6:8e:03:2d:a2:64:26:65:70:21:0a:5d:a2:30: 5a:29:ca:87:ff:5a:47:88:20:1a:26:50:d2:1d:ee: 51:dc:3b:6f:57:ea:06:8b:6c:49:1b:12:4f:b0:76: a0:0c:78:e9:e6:4b:09:50:11:0c:25:e2:13:7a:3e: 2c:f6:64:6e:da:11:dd:04:64:f3:a0:6a:61:34:54: bd:02:46:00:b5:44:1d:6b:6f:5c:28:4f:83:d8:ad: 81:0b:38:04:07:bd:bf:47:86:eb:1b:90:9f:f8:63: 02:84:24:90:25:25:22:26:3d:1a:eb:f5:33:c4:d6: 3c:ce:39:f9:c9:1b:30:e4:c0:e8:79:58:a4:72:f8: 30:95:2e:42:2d:dc:98:3a:50:94:45:f9:9b:d7:b0: 43:9a:e4:d8:33:47:4b:d7:d1:73:22:29:c8:29:c2: 72:a3:9f:d5:44:48:8a:e1:77:eb:72:ef:73:57:ec: a3:65:da:c2:5c:1d:12:88:be:35:2a:9e:75:e8:e5: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.80.52.0/22 IPv6: 2804:36d4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266375 Signature Algorithm: sha256WithRSAEncryption d8:c9:d8:97:75:fb:ef:fa:77:40:13:65:3b:2a:db:95:d7:01: df:12:2b:ab:bf:79:4c:c6:6e:ed:72:40:17:7b:e2:21:c2:5f: 6c:db:3d:d8:af:5b:82:1d:4e:37:32:9f:df:ed:33:3b:5f:26: 23:50:82:32:98:06:20:8b:72:78:2e:07:a0:d4:93:ca:fc:44: f9:9f:68:10:8f:3f:d7:c9:a9:cf:74:2c:d0:22:a8:ce:1e:e2: 38:64:25:de:55:71:e7:a0:48:e8:5a:56:0b:76:8f:bb:5b:ba: 2c:fa:0b:7b:50:b9:15:e7:04:85:80:02:88:cf:d9:e5:35:1b: 4e:58:84:c0:e4:85:56:65:10:3b:99:cf:ac:45:bc:a2:1a:44: 1e:9f:2b:d3:d1:a4:65:c8:11:6e:f1:18:33:a3:c5:34:ee:86: eb:1e:b0:0d:ce:91:fa:32:db:e2:bb:ab:89:3a:c6:3b:14:17: 7e:0e:61:54:8f:a4:f8:49:51:99:61:da:3e:fa:d2:bf:63:50: 72:63:f3:f4:96:e4:41:c4:ad:2c:41:50:79:5e:18:c4:83:d8: 29:ba:ac:4e:94:a7:23:1c:c8:b7:2f:4b:0e:13:a1:fb:43:d5: 45:33:3b:9d:dc:3b:0a:05:8f:32:34:e2:8a:0e:61:1b:b4:59: 67:b5:6f:23 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUUQn+e9VHTZQcyNN7zq42A4XlU5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNzQxMjVaFw0yNTA0MDMxNzQ2MjVaMDMxMTAvBgNV BAMTKDUyREMxRDBENERBMjcwNjQ2QTVDQzBCRTU2NEREM0UyRUQ2OTZFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiD4tfpQ0hY0EzDhgjj1E2kvI4 UYVEd0GTL0+xXRWa7ZWndPFpWFVMHHjENRVS+ou/gNz56jnfpjzpkVW2jgMtomQm ZXAhCl2iMFopyof/WkeIIBomUNId7lHcO29X6gaLbEkbEk+wdqAMeOnmSwlQEQwl 4hN6Piz2ZG7aEd0EZPOgamE0VL0CRgC1RB1rb1woT4PYrYELOAQHvb9HhusbkJ/4 YwKEJJAlJSImPRrr9TPE1jzOOfnJGzDkwOh5WKRy+DCVLkIt3Jg6UJRF+ZvXsEOa 5NgzR0vX0XMiKcgpwnKjn9VESIrhd+ty73NX7KNl2sJcHRKIvjUqnnXo5QPtAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRS3B0NTaJwZGpc wL5WTdPi7WlufzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjU4 Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lLdjhXanluNjhGNzYvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y1 OFZvcjJlU1ExZjE4WUdhcWhpbU5kanlZb0huUUt5S3Y4V2p5bjY4Rjc2LzEvNTJE QzFEMEQ0REEyNzA2NDZBNUNDMEJFNTY0REQzRTJFRDY5NkU3Ri5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCqlA0MA0EAgACMAcDBQAoBDbUMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQQhzANBgkqhkiG9w0BAQsFAAOCAQEA2MnYl3X77/p3QBNl OyrbldcB3xIrq795TMZu7XJAF3viIcJfbNs92K9bgh1ONzKf3+0zO18mI1CCMpgG IItyeC4HoNSTyvxE+Z9oEI8/18mpz3Qs0CKozh7iOGQl3lVx56BI6FpWC3aPu1u6 LPoLe1C5FecEhYACiM/Z5TUbTliEwOSFVmUQO5nPrEW8ohpEHp8r09GkZcgRbvEY M6PFNO6G6x6wDc6R+jLb4ruriTrGOxQXfg5hVI+k+ElRmWHaPvrSv2NQcmPz9Jbk QcStLEFQeV4YxIPYKbqsTpSnIxzIty9LDhOh+0PVRTM7ndw7CgWPMjTiig5hG7RZ Z7VvIw== -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:34 2024 by rpki-client on console-ams.rpki-client.org