$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer File: 5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.cer (raw, json) Hash identifier: ZlH/SMHTAxabHqLXD37Y67lNPEpXdfspuCIHKRl+rPw= Subject key identifier: 5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 593D0485F1475521C348E8A496FF1F7C5EB1615C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft caRepository: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Mon 08 Apr 2024 20:00:01 +0000 Certificate not after: Mon 07 Apr 2025 20:05:01 +0000 Subordinate resources: AS: 28220 IP: 45.4.64.0/22 IP: 138.0.100.0/22 IP: 168.227.108.0/22 IP: 168.228.68.0/22 IP: 170.82.92.0/22 IP: 177.89.0.0/16 IP: 177.137.192.0/20 IP: 179.96.192.0/21 IP: 179.96.240.0/20 IP: 179.190.128.0/17 IP: 186.192.16.0/20 IP: 186.193.96.0/20 IP: 186.208.208.0/21 IP: 186.235.0.0/20 IP: 186.236.192.0/19 IP: 186.251.112.0/21 IP: 187.49.192.0/20 IP: 187.60.64.0/19 IP: 187.61.128.0/17 IP: 187.86.96.0/20 IP: 187.87.112.0/20 IP: 187.108.64.0/20 IP: 187.109.176.0/20 IP: 187.111.224.0/19 IP: 189.45.16.0/20 IP: 189.124.128.0/17 IP: 191.241.40.0/21 IP: 200.233.80.0/20 IP: 201.148.188.0/22 IP: 2804:54::/32 IP: 2804:2140::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3d:04:85:f1:47:55:21:c3:48:e8:a4:96:ff:1f:7c:5e:b1:61:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 8 20:00:01 2024 GMT Not After : Apr 7 20:05:01 2025 GMT Subject: CN=5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:33:2a:08:81:48:ee:6d:92:d5:62:ce:23: ac:77:8e:03:ed:20:c4:f6:0b:e9:24:e3:f6:82:98: 5e:9f:3f:73:46:da:6b:f2:41:e4:ad:63:3e:69:5e: e4:ef:d6:b6:6b:ee:a8:4f:38:66:28:4c:c7:c5:06: 30:c5:43:30:24:b4:59:ef:c6:eb:8c:51:75:c9:81: bb:8d:f8:63:cc:5b:43:39:93:ea:a4:cc:03:4f:a2: 89:0a:e4:5b:f7:93:36:bb:29:af:fd:3e:b8:f4:05: 71:b2:f2:90:e7:45:4e:72:29:83:38:bd:93:b5:21: 51:70:c1:4b:8d:4d:cc:a2:24:12:93:26:02:41:55: 31:c1:64:00:19:d9:85:21:f0:00:e5:16:59:dc:1e: ca:75:9b:42:b2:fa:7c:79:d6:03:97:4f:d6:f9:6b: bd:03:9a:d2:bf:b7:b8:6b:02:cb:74:14:c6:c3:6f: 9f:3f:6f:95:b6:15:30:d6:c1:82:15:b9:87:f2:43: ec:ce:ba:4a:9e:9d:c8:bd:43:51:12:7e:67:a2:b6: 8b:9d:49:8b:20:70:79:0d:10:ab:80:bf:86:fd:73: 6f:5f:54:6b:13:f6:fd:9d:74:e3:cb:37:08:5b:09: dd:f2:25:6e:9f:dd:46:98:a2:c8:b7:b0:bb:bd:93: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:D0:CA:D6:FE:5D:D0:2B:05:3D:6B:01:DB:D5:3A:59:8B:D3:50:BF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/5DD0CAD6FE5DD02B053D6B01DBD53A598BD350BF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.4.64.0/22 138.0.100.0/22 168.227.108.0/22 168.228.68.0/22 170.82.92.0/22 177.89.0.0/16 177.137.192.0/20 179.96.192.0/21 179.96.240.0/20 179.190.128.0/17 186.192.16.0/20 186.193.96.0/20 186.208.208.0/21 186.235.0.0/20 186.236.192.0/19 186.251.112.0/21 187.49.192.0/20 187.60.64.0/19 187.61.128.0/17 187.86.96.0/20 187.87.112.0/20 187.108.64.0/20 187.109.176.0/20 187.111.224.0/19 189.45.16.0/20 189.124.128.0/17 191.241.40.0/21 200.233.80.0/20 201.148.188.0/22 IPv6: 2804:54::/32 2804:2140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28220 Signature Algorithm: sha256WithRSAEncryption 74:f2:0f:87:a7:16:bf:96:08:52:18:22:3e:ba:9a:6f:02:fd: af:c3:04:ec:66:0a:cb:5f:19:c6:c4:11:13:f1:9a:7a:a2:8f: 21:e1:6d:02:8f:b4:11:8f:06:19:e8:ac:ef:fd:b9:c5:a1:c9: 00:a0:11:b7:f2:b3:0e:a4:38:b3:5a:49:f4:f3:ff:96:15:84: 6c:18:7a:dc:3f:33:e4:5e:0b:86:ff:82:c8:96:eb:9a:11:8b: 7b:e0:29:50:5c:35:94:84:9b:70:77:c6:c9:97:ed:9a:bc:40: 63:cd:9e:12:29:ff:e4:cf:d9:5b:0f:88:2a:a8:6e:5f:66:71: 36:61:60:3b:63:d4:99:59:1f:7b:50:96:7b:04:5d:5a:49:a3: 6d:03:ab:2b:8c:b7:82:3b:fd:cd:26:39:58:d8:a9:0a:32:d6: 05:5f:8b:ff:7c:69:4c:17:35:7e:3b:df:55:22:a6:bc:23:3c: 84:7c:9f:c6:3d:04:b4:89:0a:0c:11:83:44:7d:c2:c5:18:a2: f2:f1:5b:1a:3e:5e:09:67:3b:35:fc:47:a7:e8:4f:55:fc:0f: 95:92:37:1c:ed:48:11:86:0c:dd:ea:ca:1d:0f:b7:a5:38:86: 93:98:b5:4e:77:3c:e9:26:f9:66:18:02:37:7e:95:f5:fd:ed: a3:ee:65:08 -----BEGIN CERTIFICATE----- MIIG4jCCBcqgAwIBAgIUWT0EhfFHVSHDSOiklv8ffF6xYVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDgyMDAwMDFaFw0yNTA0MDcyMDA1MDFaMDMxMTAvBgNV BAMTKDVERDBDQUQ2RkU1REQwMkIwNTNENkIwMURCRDUzQTU5OEJEMzUwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyTMqCIFI7m2S1WLOI6x3jgPt IMT2C+kk4/aCmF6fP3NG2mvyQeStYz5pXuTv1rZr7qhPOGYoTMfFBjDFQzAktFnv xuuMUXXJgbuN+GPMW0M5k+qkzANPookK5Fv3kza7Ka/9Prj0BXGy8pDnRU5yKYM4 vZO1IVFwwUuNTcyiJBKTJgJBVTHBZAAZ2YUh8ADlFlncHsp1m0Ky+nx51gOXT9b5 a70DmtK/t7hrAst0FMbDb58/b5W2FTDWwYIVuYfyQ+zOukqenci9Q1ESfmeitoud SYsgcHkNEKuAv4b9c29fVGsT9v2ddOPLNwhbCd3yJW6f3UaYosi3sLu9k26PAgMB AAGjggPsMIID6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRd0MrW/l3QKwU9 awHb1TpZi9NQvzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmRH QVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhFZUIvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJk R0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAvNURE MENBRDZGRTVERDAyQjA1M0Q2QjAxREJENTNBNTk4QkQzNTBCRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHgBggrBgEFBQcB BwEB/wSB0DCBzTCBtAQCAAEwga0DBAItBEADBAKKAGQDBAKo42wDBAKo5EQDBAKq UlwDAwCxWQMEBLGJwAMEA7NgwAMEBLNg8AMEB7O+gAMEBLrAEAMEBLrBYAMEA7rQ 0AMEBLrrAAMEBbrswAMEA7r7cAMEBLsxwAMEBbs8QAMEB7s9gAMEBLtWYAMEBLtX cAMEBLtsQAMEBLttsAMEBbtv4AMEBL0tEAMEB718gAMEA7/xKAMEBMjpUAMEAsmU vDAUBAIAAjAOAwUAKAQAVAMFACgEIUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC bjwwDQYJKoZIhvcNAQELBQADggEBAHTyD4enFr+WCFIYIj66mm8C/a/DBOxmCstf GcbEERPxmnqijyHhbQKPtBGPBhnorO/9ucWhyQCgEbfysw6kOLNaSfTz/5YVhGwY etw/M+ReC4b/gsiW65oRi3vgKVBcNZSEm3B3xsmX7Zq8QGPNnhIp/+TP2VsPiCqo bl9mcTZhYDtj1JlZH3tQlnsEXVpJo20DqyuMt4I7/c0mOVjYqQoy1gVfi/98aUwX NX4731UiprwjPIR8n8Y9BLSJCgwRg0R9wsUYovLxWxo+XglnOzX8R6foT1X8D5WS NxztSBGGDN3qyh0Pt6U4hpOYtU53POkm+WYYAjd+lfX97aPuZQg= -----END CERTIFICATE-----Generated at Sat Jun 29 03:28:57 2024 by rpki-client on console-ams.rpki-client.org