$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer File: 5E82705FF857324984E1087AAFCCE6BD46657C71.cer (raw, json) Hash identifier: hohoNxFjGbyon2/nfL2+fKKyELjoXcrCk4gtNRD/dDw= Subject key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 31986063DBF3B0380ED4AA9E381E0144FC1B31F4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft caRepository: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 24 Apr 2024 19:02:36 +0000 Certificate not after: Wed 23 Apr 2025 19:07:36 +0000 Subordinate resources: AS: 263450 IP: 168.232.156.0/22 IP: 177.91.232.0/22 IP: 2804:1200::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 02 Jun 2024 23:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:98:60:63:db:f3:b0:38:0e:d4:aa:9e:38:1e:01:44:fc:1b:31:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 24 19:02:36 2024 GMT Not After : Apr 23 19:07:36 2025 GMT Subject: CN=5E82705FF857324984E1087AAFCCE6BD46657C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:ef:a7:ff:ff:e2:e4:f4:1f:8a:e0:40:ca: dc:74:28:0b:27:4d:08:36:32:b6:50:5f:ae:a7:85: 9e:85:12:a3:cd:71:21:9e:e4:7a:31:dc:7d:b1:09: ba:30:50:b9:26:87:ec:99:d2:e8:1a:f1:e7:09:76: 68:22:74:b8:d8:40:96:f9:05:d8:67:77:21:89:78: 31:a1:59:98:69:b6:6f:ff:39:85:57:09:e9:95:55: 7a:3f:b9:ac:22:e9:a5:78:c9:be:d4:28:0a:d8:bb: 19:94:fe:41:1e:f9:a3:ad:43:e4:5d:04:e5:4b:e2: 9d:ae:7a:be:62:04:6a:9f:d0:2a:76:a8:85:d4:af: 27:ea:ea:24:1f:97:49:0f:60:43:45:7f:28:b1:7e: 16:ea:7f:ec:80:c4:84:f9:a4:f6:e5:8a:11:58:f0: 23:48:f9:bf:fd:50:d2:28:20:c8:a5:0f:c5:8a:e1: 8c:32:ff:72:8a:8b:7a:27:35:e2:6f:48:ae:ae:84: 04:4d:b5:fe:2a:d2:3b:f2:e9:33:ee:49:34:70:3e: 4c:a0:78:d1:5b:b8:1f:fa:2a:75:4d:3c:d5:73:50: 6a:ac:0a:8a:0f:76:6e:fa:95:53:bc:84:f1:4e:67: a9:e0:77:9c:61:f2:ad:74:cd:5c:d7:b3:ee:92:2c: 9c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.232.156.0/22 177.91.232.0/22 IPv6: 2804:1200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263450 Signature Algorithm: sha256WithRSAEncryption 9e:b5:cd:73:98:78:d5:5a:ac:fe:37:86:df:d9:33:da:49:3d: 64:bd:80:d8:67:32:72:f1:49:22:0f:4f:a7:ed:d8:96:96:ce: f2:2d:ff:77:b5:8c:a7:5f:7b:f4:32:59:e4:40:60:2c:de:cf: a8:37:37:0f:4e:71:b4:4b:31:4a:94:3d:22:3a:53:8c:31:9a: 49:be:cc:76:2c:79:2f:b0:92:06:c1:8d:9d:c7:1d:c0:f7:b0: e9:5d:0a:e6:63:15:d9:e0:39:7f:d8:06:05:39:a3:88:5a:56: 05:9d:cf:d7:22:be:2f:0f:1e:3a:56:6e:a0:b9:a8:80:69:a1: 9e:17:ef:26:bb:ae:96:43:99:7a:c4:7b:90:ff:04:1f:29:30: a4:74:b3:bb:55:64:1b:8b:1d:24:73:12:09:62:d8:32:0f:29: 4d:d8:1b:da:de:13:9a:ae:c8:56:0d:6d:36:ef:fe:99:f6:d4: 86:d3:75:5b:ce:5c:70:69:a2:e3:82:90:91:36:be:c1:fb:1a: 0c:3b:13:0f:99:a4:84:c5:bf:7d:09:eb:51:ff:dc:1c:d3:17: 64:48:39:32:31:d9:63:eb:34:28:04:ae:29:f1:36:de:b8:98: f7:e7:0f:b1:42:d0:92:37:1c:94:af:cd:93:2a:22:32:0c:b6: 80:f8:be:bb -----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgIUMZhgY9vzsDgO1KqeOB4BRPwbMfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MjQxOTAyMzZaFw0yNTA0MjMxOTA3MzZaMDMxMTAvBgNV BAMTKDVFODI3MDVGRjg1NzMyNDk4NEUxMDg3QUFGQ0NFNkJENDY2NTdDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iO+n///i5PQfiuBAytx0KAsn TQg2MrZQX66nhZ6FEqPNcSGe5Hox3H2xCbowULkmh+yZ0uga8ecJdmgidLjYQJb5 BdhndyGJeDGhWZhptm//OYVXCemVVXo/uawi6aV4yb7UKArYuxmU/kEe+aOtQ+Rd BOVL4p2uer5iBGqf0Cp2qIXUryfq6iQfl0kPYENFfyixfhbqf+yAxIT5pPblihFY 8CNI+b/9UNIoIMilD8WK4Ywy/3KKi3onNeJvSK6uhARNtf4q0jvy6TPuSTRwPkyg eNFbuB/6KnVNPNVzUGqsCooPdm76lVO8hPFOZ6ngd5xh8q10zVzXs+6SLJy1AgMB AAGjggM+MIIDOjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRegnBf+FcySYTh CHqvzOa9RmV8cTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWlJp OUo3Y0pNVUJtc3lCc2FCTGFSdFJSU2dGUFpRNGZEd2trR2VreHFVQy8wLzCBiQYI KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vWlJp OUo3Y0pNVUJtc3lCc2FCTGFSdFJSU2dGUFpRNGZEd2trR2VreHFVQy8wLzVFODI3 MDVGRjg1NzMyNDk4NEUxMDg3QUFGQ0NFNkJENDY2NTdDNzEubWZ0MD8GCCsGAQUF BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB /wQlMCMwEgQCAAEwDAMEAqjonAMEArFb6DANBAIAAjAHAwUAKAQSADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMEBRowDQYJKoZIhvcNAQELBQADggEBAJ61zXOYeNVa rP43ht/ZM9pJPWS9gNhnMnLxSSIPT6ft2JaWzvIt/3e1jKdfe/QyWeRAYCzez6g3 Nw9OcbRLMUqUPSI6U4wxmkm+zHYseS+wkgbBjZ3HHcD3sOldCuZjFdngOX/YBgU5 o4haVgWdz9civi8PHjpWbqC5qIBpoZ4X7ya7rpZDmXrEe5D/BB8pMKR0s7tVZBuL HSRzEgli2DIPKU3YG9reE5quyFYNbTbv/pn21IbTdVvOXHBpouOCkJE2vsH7Ggw7 Ew+ZpITFv30J61H/3BzTF2RIOTIx2WPrNCgErinxNt64mPfnD7FC0JI3HJSvzZMq IjIMtoD4vrs= -----END CERTIFICATE-----Generated at Sat Jun 1 23:43:29 2024 by rpki-client on console-fra.rpki-client.org