$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.cer File: 61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.cer (raw, json) Hash identifier: 0jP8anLbPZWoNkc4PIM2/d2IR9yOzQNBL3a3sD0tfAg= Subject key identifier: 61:D3:FA:D8:31:4E:F4:2C:B4:E9:E3:1F:8F:D1:2D:9D:6B:66:F7:78 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 1001091C88194E5E9DA6C1FAE80A3BD54943DC83 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.mft caRepository: rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 19:25:09 +0000 Certificate not after: Thu 03 Apr 2025 19:30:09 +0000 Subordinate resources: AS: 53123 IP: 187.111.192.0/20 IP: 2804:6478::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 18 Jun 2024 18:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:01:09:1c:88:19:4e:5e:9d:a6:c1:fa:e8:0a:3b:d5:49:43:dc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 19:25:09 2024 GMT Not After : Apr 3 19:30:09 2025 GMT Subject: CN=61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:06:d3:ca:80:f1:61:86:66:73:bf:c6:83: 54:08:13:cf:00:f9:ce:79:07:ad:26:e9:88:ae:04: 26:4d:1c:52:82:1a:9f:20:88:e8:b9:7d:c1:a3:48: cf:04:18:59:5c:c4:af:0b:31:03:ed:18:62:dc:67: 28:d9:db:6f:ca:34:44:a4:8b:e0:ed:59:4e:d0:81: f0:20:b4:a7:d8:54:88:04:bc:8f:82:63:6a:e8:d5: a5:7d:27:0f:94:06:da:68:05:75:f1:b8:80:8a:d7: 87:2d:d5:e4:d2:a5:31:ec:50:17:c1:e5:4e:68:20: 91:2b:59:6b:2e:38:a4:c4:fd:66:83:86:60:e5:25: 14:9b:c2:1d:b2:37:8a:e6:09:83:22:70:91:28:24: e6:59:e1:28:83:85:c4:ef:33:6b:a3:ec:2d:86:b1: 0e:1c:58:34:49:94:05:ec:4e:6e:64:cf:c9:3c:e0: 75:df:93:6b:4e:dd:9d:23:3e:cc:c8:21:75:84:b4: 77:18:eb:d6:9d:21:c5:37:92:85:81:15:19:32:c0: 67:28:eb:80:41:c3:f3:9e:08:ce:31:31:4f:7e:7e: 9e:f3:4a:b0:96:2f:2f:02:38:41:c7:ac:8b:49:d6: 6f:ee:e1:4a:3a:08:7d:66:0e:ba:04:96:e2:18:e6: 7c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:D3:FA:D8:31:4E:F4:2C:B4:E9:E3:1F:8F:D1:2D:9D:6B:66:F7:78 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.111.192.0/20 IPv6: 2804:6478::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53123 Signature Algorithm: sha256WithRSAEncryption 1a:43:d5:bf:e7:cf:d5:b0:5a:cd:2f:1a:73:8f:ee:6f:9c:e4: 71:ed:91:48:e7:30:ea:fb:99:4d:36:ea:12:13:31:3a:0a:5a: 71:6b:a6:9b:83:1a:7e:4c:85:cd:b9:37:94:76:dd:57:17:a7: d0:e7:ed:89:af:05:bd:1e:ca:ca:81:6f:c8:32:98:36:0c:4a: 4d:16:50:70:b5:9f:93:71:31:e5:f6:c3:11:b6:95:18:91:fc: 49:80:d9:1b:4b:fa:68:1f:8f:4e:2c:d3:2c:a9:f9:ba:d6:5e: 37:a3:75:d5:60:a7:e2:b3:41:af:bf:8d:01:c2:4d:27:7b:f2: 60:3e:7b:1c:f9:e8:bf:2b:f6:c1:61:0a:7d:d3:e5:9f:55:db: 2d:da:c3:6c:d9:9f:0e:a5:4f:d9:4b:20:36:f8:f7:3b:25:78: b9:38:49:3f:a5:a0:51:4a:68:0b:8a:f1:d2:bc:48:3b:51:16: 4c:4c:c7:f6:99:6b:b9:4f:29:c9:47:65:67:41:bd:e4:31:40: 6b:00:62:d3:c5:30:a8:4f:3e:cc:fd:1b:f1:af:6b:e4:d0:29: c7:c2:22:2a:b9:1c:65:cf:9d:5c:53:18:f0:38:1b:a9:3d:54: f2:59:7b:dc:5b:6f:27:ef:d2:7e:50:be:46:be:e2:9f:71:93: a8:e3:3b:6a -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUEAEJHIgZTl6dpsH66Ao71UlD3IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxOTI1MDlaFw0yNTA0MDMxOTMwMDlaMDMxMTAvBgNV BAMTKDYxRDNGQUQ4MzE0RUY0MkNCNEU5RTMxRjhGRDEyRDlENkI2NkY3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvwbTyoDxYYZmc7/Gg1QIE88A +c55B60m6YiuBCZNHFKCGp8giOi5fcGjSM8EGFlcxK8LMQPtGGLcZyjZ22/KNESk i+DtWU7QgfAgtKfYVIgEvI+CY2ro1aV9Jw+UBtpoBXXxuICK14ct1eTSpTHsUBfB 5U5oIJErWWsuOKTE/WaDhmDlJRSbwh2yN4rmCYMicJEoJOZZ4SiDhcTvM2uj7C2G sQ4cWDRJlAXsTm5kz8k84HXfk2tO3Z0jPszIIXWEtHcY69adIcU3koWBFRkywGco 64BBw/OeCM4xMU9+fp7zSrCWLy8COEHHrItJ1m/u4Uo6CH1mDroEluIY5nz3AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRh0/rYMU70LLTp 4x+P0S2da2b3eDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR1Vh QjJYcjduWFBSckhZRUZ1NXd3QlZuWDJ0d0M4a2RYVDg2aHVVZmRVZ3gvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dV YUIyWHI3blhQUnJIWUVGdTV3d0JWblgydHdDOGtkWFQ4Nmh1VWZkVWd4LzEvNjFE M0ZBRDgzMTRFRjQyQ0I0RTlFMzFGOEZEMTJEOUQ2QjY2Rjc3OC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQEu2/AMA0EAgACMAcDBQAoBGR4MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDPgzANBgkqhkiG9w0BAQsFAAOCAQEAGkPVv+fP1bBazS8a c4/ub5zkce2RSOcw6vuZTTbqEhMxOgpacWumm4MafkyFzbk3lHbdVxen0Oftia8F vR7KyoFvyDKYNgxKTRZQcLWfk3Ex5fbDEbaVGJH8SYDZG0v6aB+PTizTLKn5utZe N6N11WCn4rNBr7+NAcJNJ3vyYD57HPnovyv2wWEKfdPln1XbLdrDbNmfDqVP2Usg Nvj3OyV4uThJP6WgUUpoC4rx0rxIO1EWTEzH9plruU8pyUdlZ0G95DFAawBi08Uw qE8+zP0b8a9r5NApx8IiKrkcZc+dXFMY8DgbqT1U8ll73FtvJ+/SflC+Rr7in3GT qOM7ag== -----END CERTIFICATE-----Generated at Mon Jun 17 18:19:15 2024 by rpki-client on console-ams.rpki-client.org