$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.cer File: 6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.cer (raw, json) Hash identifier: 1ei63gsnNRWrwKE8vUROnrCUbKL2AtX1Hhth79SY9fU= Subject key identifier: 6E:BC:B1:7E:83:82:70:0D:64:AF:4E:4A:CB:6E:C0:C3:0B:AC:40:27 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 522BCD1E10A4B03F64851F5A16A22D3CB57FCAF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.mft caRepository: rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 16 Apr 2024 19:24:47 +0000 Certificate not after: Tue 15 Apr 2025 19:29:47 +0000 Subordinate resources: AS: 273325 IP: 2804:8cf4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 03:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2b:cd:1e:10:a4:b0:3f:64:85:1f:5a:16:a2:2d:3c:b5:7f:ca:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 16 19:24:47 2024 GMT Not After : Apr 15 19:29:47 2025 GMT Subject: CN=6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:b1:59:9d:97:1a:3d:99:85:b7:b9:02:a5: c0:07:44:a0:db:b9:d8:c0:55:55:5e:4c:d8:4b:07: ab:55:12:e4:53:ce:78:fa:20:ea:2f:2e:12:02:9e: ba:31:c5:77:41:d7:49:4f:b3:5f:04:ec:c0:87:21: 60:68:49:1c:11:fd:49:55:81:1a:8b:52:e9:00:5e: ed:52:7f:b4:9a:c3:67:cd:d2:4f:42:f6:9e:20:bc: fa:e7:cf:e8:14:51:8b:1e:58:c2:05:62:1e:38:9a: 14:2c:fa:47:89:5f:c8:8b:3c:da:9f:71:49:6e:c0: 9c:e9:81:97:38:2c:26:5e:50:a7:19:6e:88:40:f9: 4a:b7:e4:53:5c:18:83:fa:34:18:c4:49:e7:e1:a1: 81:dd:14:e6:2e:28:35:de:4f:a3:35:21:10:81:81: f5:b8:89:e6:fc:79:e3:b9:60:db:f2:9a:78:62:ab: 15:10:e5:40:66:b7:dd:c8:44:52:f2:06:cf:68:59: 8f:6d:4a:84:98:18:f9:d4:2f:40:b9:76:68:0f:b8: d9:4d:ac:5e:2c:f0:80:74:71:fb:d5:4a:ac:6e:fc: 36:57:dc:25:08:19:a2:eb:1b:86:39:40:18:21:5d: f1:0d:d0:8f:23:f7:f5:68:35:e8:c0:0a:b4:24:da: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:BC:B1:7E:83:82:70:0D:64:AF:4E:4A:CB:6E:C0:C3:0B:AC:40:27 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G8c2xLVxTcD1c6R8guTk5pJuhN9yxpi3ugTgbPNCw7Q1/0/6EBCB17E8382700D64AF4E4ACB6EC0C30BAC4027.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8cf4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273325 Signature Algorithm: sha256WithRSAEncryption 8c:bc:1a:36:f8:fa:50:43:9a:6c:19:6e:f7:22:10:49:a7:85: 66:bb:ff:5e:4b:a6:7a:77:d6:75:72:33:db:be:b7:26:d7:e5: 56:b0:79:3c:0f:89:7e:fa:79:83:14:89:47:32:fc:6e:e0:b3: ca:02:ca:a5:bd:30:73:a8:92:58:f4:b8:d5:6a:9b:a0:3f:cd: b9:41:1f:8c:9f:04:b6:4d:18:af:9d:10:a2:45:27:63:0f:34: 80:5b:33:be:98:cc:1f:4a:30:0c:5b:27:94:1e:3f:ba:d0:4a: 49:25:02:3c:2b:9b:33:59:66:dd:ca:42:de:2e:b1:0f:cf:1a: 38:04:04:25:7b:cb:cc:40:0a:5d:7b:29:40:f8:3c:84:48:bf: 34:05:85:cf:3b:38:cc:05:6c:bf:7a:af:0d:39:10:b2:42:01: 68:39:dd:94:30:0d:17:1c:45:10:51:93:05:2a:4b:65:ba:46: 47:86:cb:d7:51:60:72:dd:bc:ee:21:03:8c:be:8b:51:f7:be: a0:4e:c0:7e:ba:9f:d1:4d:7f:11:cd:00:8f:ab:fb:21:64:f8: 01:a2:0e:b4:4d:d6:b7:41:0e:90:ae:6a:bf:16:1d:a1:57:4f: 52:8c:98:ff:16:e4:94:e9:bb:41:9f:86:f7:fc:d8:60:f4:09: a5:8d:68:50 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgIUUivNHhCksD9khR9aFqItPLV/yvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MTYxOTI0NDdaFw0yNTA0MTUxOTI5NDdaMDMxMTAvBgNV BAMTKDZFQkNCMTdFODM4MjcwMEQ2NEFGNEU0QUNCNkVDMEMzMEJBQzQwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/bFZnZcaPZmFt7kCpcAHRKDb udjAVVVeTNhLB6tVEuRTznj6IOovLhICnroxxXdB10lPs18E7MCHIWBoSRwR/UlV gRqLUukAXu1Sf7Saw2fN0k9C9p4gvPrnz+gUUYseWMIFYh44mhQs+keJX8iLPNqf cUluwJzpgZc4LCZeUKcZbohA+Uq35FNcGIP6NBjESefhoYHdFOYuKDXeT6M1IRCB gfW4ieb8eeO5YNvymnhiqxUQ5UBmt93IRFLyBs9oWY9tSoSYGPnUL0C5dmgPuNlN rF4s8IB0cfvVSqxu/DZX3CUIGaLrG4Y5QBghXfEN0I8j9/VoNejACrQk2o4JAgMB AAGjggMrMIIDJzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRuvLF+g4JwDWSv TkrLbsDDC6xAJzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzhj MnhMVnhUY0QxYzZSOGd1VGs1cEp1aE45eXhwaTN1Z1RnYlBOQ3c3UTEvMDCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRzhj MnhMVnhUY0QxYzZSOGd1VGs1cEp1aE45eXhwaTN1Z1RnYlBOQ3c3UTEvMC82RUJD QjE3RTgzODI3MDBENjRBRjRFNEFDQjZFQzBDMzBCQUM0MDI3Lm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAoBIz0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQr rTANBgkqhkiG9w0BAQsFAAOCAQEAjLwaNvj6UEOabBlu9yIQSaeFZrv/XkumenfW dXIz2763JtflVrB5PA+Jfvp5gxSJRzL8buCzygLKpb0wc6iSWPS41WqboD/NuUEf jJ8Etk0Yr50QokUnYw80gFszvpjMH0owDFsnlB4/utBKSSUCPCubM1lm3cpC3i6x D88aOAQEJXvLzEAKXXspQPg8hEi/NAWFzzs4zAVsv3qvDTkQskIBaDndlDANFxxF EFGTBSpLZbpGR4bL11Fgct287iEDjL6LUfe+oE7Afrqf0U1/Ec0Aj6v7IWT4AaIO tE3Wt0EOkK5qvxYdoVdPUoyY/xbklOm7QZ+G9/zYYPQJpY1oUA== -----END CERTIFICATE-----Generated at Sun Jun 2 03:39:00 2024 by rpki-client on console-ams.rpki-client.org