$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer File: 59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.cer (raw, json) Hash identifier: i3oX6x0Gm2NfaIG6+qX7Kgh7VRZTEcQX7rA/h/9Lmsw= Subject key identifier: 59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 38899288E21290B972EFCB2F37427E700B04086A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.mft caRepository: rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:56:13 +0000 Certificate not after: Thu 03 Apr 2025 03:01:13 +0000 Subordinate resources: AS: 266449 IP: 170.82.236.0/22 IP: 2804:3800::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 03:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:89:92:88:e2:12:90:b9:72:ef:cb:2f:37:42:7e:70:0b:04:08:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:56:13 2024 GMT Not After : Apr 3 03:01:13 2025 GMT Subject: CN=59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:58:44:9e:b1:6e:34:50:f0:b6:6d:1a:5b: 91:fe:e9:a2:1d:bb:8b:22:78:de:78:e7:76:9b:0c: 08:a3:d1:cb:48:6e:b7:87:88:12:fb:06:61:5a:9a: 9c:4e:3c:b4:0b:3b:aa:b4:77:18:95:e4:80:be:db: 30:28:2c:9a:57:42:55:db:be:dc:ab:46:5f:84:73: 64:38:02:21:68:9a:53:33:bb:2a:ac:12:c0:20:46: 21:1a:02:26:a3:dd:29:4d:b9:e0:0b:f9:70:29:94: 89:08:f9:7d:f2:cc:44:8b:8c:1b:77:30:b7:31:9e: b8:dc:f7:e2:32:75:78:39:ff:01:c8:b3:d9:97:ce: 4f:fc:1d:89:59:72:f9:18:15:29:b2:62:3c:14:f9: 05:71:2e:e6:bf:ed:ff:1a:58:29:18:f1:29:45:bb: 62:d7:d9:23:34:fd:1a:e4:27:23:5b:a4:2c:d9:ab: a4:50:da:46:8f:6b:c9:be:03:ab:83:a0:17:3f:99: 31:73:d6:47:c1:e0:62:14:d3:c0:39:48:f6:35:85: ba:52:f9:bd:c7:dd:8f:d9:3e:67:81:4d:07:d2:d2: a7:ae:ca:4f:42:d5:9d:36:1e:3d:89:72:c8:f5:d1: b9:36:3b:5f:9b:51:07:58:b9:8e:63:68:0c:99:14: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:E6:C2:2F:5C:C5:DE:B3:95:66:D8:D9:8E:82:E1:19:BF:9C:5A:4A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HroozinayaLBW9qaenDxXn281WjCMFe6ufaqyPepni8a/1/59E6C22F5CC5DEB39566D8D98E82E119BF9C5A4A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.82.236.0/22 IPv6: 2804:3800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266449 Signature Algorithm: sha256WithRSAEncryption 9e:ea:be:14:69:68:cc:61:aa:92:ea:9a:8e:5c:c2:c0:f2:c0: dd:f7:fb:0f:7e:e5:de:37:28:86:49:78:5e:d1:44:cc:21:45: 21:9e:f9:42:da:23:af:15:1f:86:05:43:8c:01:7b:3f:53:a5: bc:54:38:80:3e:d7:3f:d1:80:f1:1e:24:ef:60:a9:6a:78:bc: 26:40:dd:e6:20:2d:f3:26:bc:37:d0:80:a3:de:83:67:34:72: 0c:22:ae:6d:d8:fe:d5:58:a7:08:28:e8:dd:c1:e5:81:a5:bc: e5:52:18:78:67:c5:2e:b3:1b:2d:e0:a0:1a:9f:1b:b8:d7:c4: 28:3b:f8:0b:72:39:cd:63:3d:4c:6d:81:c9:6e:62:f2:c2:31: 87:49:b8:4e:fb:13:09:b8:60:3b:a3:ff:39:f8:f6:da:18:77: 0a:5e:e9:0a:81:69:c2:a8:ea:c6:3c:84:d4:f3:68:48:6c:01: 47:0c:a8:8f:61:9b:b0:91:ce:e1:e6:5a:39:94:2d:2d:ac:c1: 24:a8:d0:51:aa:0e:61:59:cb:ad:ba:0f:40:16:c1:b8:f5:12: 6a:9a:35:ca:80:82:75:3e:89:38:c3:ec:57:51:58:42:ba:b1: 09:61:68:f9:c7:00:1a:0d:32:b5:4c:c2:d4:f6:6d:42:fe:d8: 22:a7:f8:80 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUOImSiOISkLly78svN0J+cAsECGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjU2MTNaFw0yNTA0MDMwMzAxMTNaMDMxMTAvBgNV BAMTKDU5RTZDMjJGNUNDNURFQjM5NTY2RDhEOThFODJFMTE5QkY5QzVBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIVhEnrFuNFDwtm0aW5H+6aId u4sieN5453abDAij0ctIbreHiBL7BmFampxOPLQLO6q0dxiV5IC+2zAoLJpXQlXb vtyrRl+Ec2Q4AiFomlMzuyqsEsAgRiEaAiaj3SlNueAL+XAplIkI+X3yzESLjBt3 MLcxnrjc9+IydXg5/wHIs9mXzk/8HYlZcvkYFSmyYjwU+QVxLua/7f8aWCkY8SlF u2LX2SM0/RrkJyNbpCzZq6RQ2kaPa8m+A6uDoBc/mTFz1kfB4GIU08A5SPY1hbpS +b3H3Y/ZPmeBTQfS0qeuyk9C1Z02Hj2Jcsj10bk2O1+bUQdYuY5jaAyZFLYTAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRZ5sIvXMXes5Vm 2NmOguEZv5xaSjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJv b3ppbmF5YUxCVzlxYWVuRHhYbjI4MVdqQ01GZTZ1ZmFxeVBlcG5pOGEvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHJv b3ppbmF5YUxCVzlxYWVuRHhYbjI4MVdqQ01GZTZ1ZmFxeVBlcG5pOGEvMS81OUU2 QzIyRjVDQzVERUIzOTU2NkQ4RDk4RTgyRTExOUJGOUM1QTRBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKqUuwwDQQCAAIwBwMFACgEOAAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBBDRMA0GCSqGSIb3DQEBCwUAA4IBAQCe6r4UaWjMYaqS6pqO XMLA8sDd9/sPfuXeNyiGSXhe0UTMIUUhnvlC2iOvFR+GBUOMAXs/U6W8VDiAPtc/ 0YDxHiTvYKlqeLwmQN3mIC3zJrw30ICj3oNnNHIMIq5t2P7VWKcIKOjdweWBpbzl Uhh4Z8Uusxst4KAanxu418QoO/gLcjnNYz1MbYHJbmLywjGHSbhO+xMJuGA7o/85 +PbaGHcKXukKgWnCqOrGPITU82hIbAFHDKiPYZuwkc7h5lo5lC0trMEkqNBRqg5h Wcutug9AFsG49RJqmjXKgIJ1Pok4w+xXUVhCurEJYWj5xwAaDTK1TMLU9m1C/tgi p/iA -----END CERTIFICATE-----Generated at Sun Jun 2 03:35:16 2024 by rpki-client on console-fra.rpki-client.org