$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.cer File: 5D4824580436E9E25FD6D099253DCC3B98F6438C.cer (raw, json) Hash identifier: wFwEBxPu3ABV+D49qVz0LGbMVPitZUV00icLkfX6Jn0= Subject key identifier: 5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 70E5249F7D77EED109F7C68EB424263011C0CD57 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft caRepository: rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 02:57:39 +0000 Certificate not after: Thu 03 Apr 2025 03:02:39 +0000 Subordinate resources: AS: 266096 IP: 45.5.104.0/22 IP: 2804:3a90::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e5:24:9f:7d:77:ee:d1:09:f7:c6:8e:b4:24:26:30:11:c0:cd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 02:57:39 2024 GMT Not After : Apr 3 03:02:39 2025 GMT Subject: CN=5D4824580436E9E25FD6D099253DCC3B98F6438C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:02:77:8e:5e:21:bb:c8:3d:97:2b:e2:11:8d: ca:4c:3f:7b:d6:3e:e1:e3:fd:47:34:04:cd:b7:05: 27:39:84:80:6f:63:f1:08:2a:e8:e6:51:7e:58:b5: 67:c1:8b:2a:5d:a7:60:75:b0:04:f6:2b:65:63:cc: df:14:1a:89:27:fc:ee:bc:0a:03:2f:99:c9:07:9d: 06:05:98:00:25:fb:ec:60:8e:d4:6c:44:16:a8:76: 23:61:74:2b:c3:41:5e:24:fb:55:2b:c8:b0:1b:6e: 78:81:85:34:53:1f:78:29:b1:4a:c0:97:7c:c9:05: ed:86:39:7d:44:de:c1:c0:4c:ca:10:e2:86:97:e3: eb:f2:24:da:e4:0c:d7:cd:ee:a8:c9:bc:4c:e4:59: e6:97:d6:b6:19:8d:db:01:4e:ba:ec:a6:78:ee:bf: 15:29:78:b8:82:e9:6a:0e:08:b8:03:8a:90:18:54: 1d:3e:e7:e1:8f:6a:e4:08:dc:bc:22:a8:6e:0e:95: 0e:b4:82:64:20:fb:b2:9b:6c:6a:2d:0f:e5:63:3d: b5:9e:72:a0:c1:f0:7c:7f:78:c9:2b:87:df:89:e0: e6:d2:3b:1d:72:01:c1:c1:78:82:f5:8a:1a:95:44: 4d:d4:bd:4f:bc:03:c2:0a:36:1a:0b:b0:f5:79:fe: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.104.0/22 IPv6: 2804:3a90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266096 Signature Algorithm: sha256WithRSAEncryption 83:0e:bd:b3:da:ad:55:bb:fe:78:9b:ed:ff:e7:fc:8e:10:0e: 51:dc:18:1a:46:da:88:f5:9b:2a:0e:8a:02:8a:c2:91:bf:f9: e0:03:39:9c:2d:e0:5e:29:a6:45:be:d6:87:31:3d:36:07:bf: 0a:b8:fd:ad:a6:e1:14:eb:e3:ba:cb:e5:02:1e:2d:5b:89:22: 22:f7:b9:dc:e8:18:f8:4d:34:e6:14:bf:a2:a0:c6:c9:90:7f: 6b:a2:57:1d:99:b9:4f:b5:33:f7:23:95:85:99:4d:af:69:d2: d0:fe:a9:09:40:f3:30:25:c3:f1:0c:f3:36:f9:c7:19:6f:34: 39:22:c3:c3:ff:53:71:bf:b2:c0:a4:e7:4b:5f:56:b4:c6:3d: 80:d0:f8:4a:66:f8:e8:ec:09:7b:4f:1f:9f:e9:6b:34:48:01: be:fe:e8:46:ae:79:8d:bd:43:5b:6f:8c:46:46:bc:78:0a:cf: bd:42:bb:67:21:a9:76:00:4e:aa:6c:f7:a3:2f:15:ef:63:49: da:a7:d3:f5:d8:09:59:4a:87:c8:de:e4:a5:5a:22:f8:0f:6d: 85:2a:9a:99:7b:6d:e4:e8:f2:5e:95:9e:e0:3c:d1:32:d0:cf: 14:52:aa:79:a7:97:6e:9d:37:11:8f:eb:50:65:bc:5a:fc:2f: 92:74:65:d7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUcOUkn3137tEJ98aOtCQmMBHAzVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMjU3MzlaFw0yNTA0MDMwMzAyMzlaMDMxMTAvBgNV BAMTKDVENDgyNDU4MDQzNkU5RTI1RkQ2RDA5OTI1M0RDQzNCOThGNjQzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwAneOXiG7yD2XK+IRjcpMP3vW PuHj/Uc0BM23BSc5hIBvY/EIKujmUX5YtWfBiypdp2B1sAT2K2VjzN8UGokn/O68 CgMvmckHnQYFmAAl++xgjtRsRBaodiNhdCvDQV4k+1UryLAbbniBhTRTH3gpsUrA l3zJBe2GOX1E3sHATMoQ4oaX4+vyJNrkDNfN7qjJvEzkWeaX1rYZjdsBTrrspnju vxUpeLiC6WoOCLgDipAYVB0+5+GPauQI3LwiqG4OlQ60gmQg+7KbbGotD+VjPbWe cqDB8Hx/eMkrh9+J4ObSOx1yAcHBeIL1ihqVRE3UvU+8A8IKNhoLsPV5/tQLAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRdSCRYBDbp4l/W 0JklPcw7mPZDjDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEx0 R2g3dVpRcHFOZm1Rdlc5QnV6RjJGRFdIcUFrSzQ0UVlFUTVQUEJKcGUvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hM dEdoN3VaUXBxTmZtUXZXOUJ1ekYyRkRXSHFBa0s0NFFZRVE1UFBCSnBlLzEvNUQ0 ODI0NTgwNDM2RTlFMjVGRDZEMDk5MjUzRENDM0I5OEY2NDM4Qy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCLQVoMA0EAgACMAcDBQAoBDqQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQPcDANBgkqhkiG9w0BAQsFAAOCAQEAgw69s9qtVbv+eJvt /+f8jhAOUdwYGkbaiPWbKg6KAorCkb/54AM5nC3gXimmRb7WhzE9Nge/Crj9rabh FOvjusvlAh4tW4kiIve53OgY+E005hS/oqDGyZB/a6JXHZm5T7Uz9yOVhZlNr2nS 0P6pCUDzMCXD8QzzNvnHGW80OSLDw/9Tcb+ywKTnS19WtMY9gND4Smb46OwJe08f n+lrNEgBvv7oRq55jb1DW2+MRka8eArPvUK7ZyGpdgBOqmz3oy8V72NJ2qfT9dgJ WUqHyN7kpVoi+A9thSqamXtt5OjyXpWe4DzRMtDPFFKqeaeXbp03EY/rUGW8Wvwv knRl1w== -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:29 2024 by rpki-client on console-fra.rpki-client.org