$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer File: 701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer (raw, json) Hash identifier: VR8StEpzQksyA+ac+fjDegYbJu16cTdlhB0Pb07dTNU= Subject key identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 454960D7A4659A173F3F675F494F69B1D73E3A34 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft caRepository: rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 03 Apr 2024 18:33:27 +0000 Certificate not after: Wed 02 Apr 2025 18:38:27 +0000 Subordinate resources: AS: 263849 IP: 138.185.200.0/22 IP: 2804:26b0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 28 Nov 2024 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:49:60:d7:a4:65:9a:17:3f:3f:67:5f:49:4f:69:b1:d7:3e:3a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 3 18:33:27 2024 GMT Not After : Apr 2 18:38:27 2025 GMT Subject: CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:ed:47:b8:fb:ff:c4:3f:b7:6b:9a:cd:f0: 73:cb:2a:d4:2a:69:e5:84:f9:50:ee:56:9e:fc:d1: c6:2b:d2:d1:d9:87:1f:20:ae:01:5b:a9:69:7b:73: 3c:0c:df:1a:9f:c6:cd:ba:6f:7c:ed:d4:ef:0d:57: 7d:6d:17:86:43:c0:ff:49:02:d3:5f:be:46:13:6f: 82:44:68:6f:52:f5:7d:55:e0:d6:ad:d5:00:65:d1: e8:49:d1:8e:5b:b8:3d:98:9d:5c:3e:25:47:ba:7b: a9:22:20:cd:88:bf:cb:03:20:00:63:8d:c6:34:a1: 39:d1:6a:d6:14:84:72:69:58:ee:b1:bc:03:6a:b7: a0:f0:2c:71:c4:f9:46:04:20:86:cc:06:ad:8a:5b: ac:1a:81:67:bc:98:96:73:71:0d:32:2e:8c:83:9d: b3:4f:36:b7:f9:b7:37:6c:6f:41:bf:d5:7e:d9:1a: c5:55:5c:47:fe:9e:5f:b7:12:5e:72:c4:fe:fe:67: 40:24:93:d6:d3:0f:9a:bc:8b:95:b8:96:a5:d5:27: f6:ce:33:1d:fd:b9:87:f0:f7:85:66:10:da:4e:cd: f8:55:9c:91:bd:bc:06:8e:55:cc:aa:6b:af:f8:33: 8b:03:05:a5:dd:d2:82:36:2e:44:58:99:33:9d:4a: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.200.0/22 IPv6: 2804:26b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263849 Signature Algorithm: sha256WithRSAEncryption aa:dd:26:3e:9e:2d:fc:7f:8f:7f:d0:4c:8d:76:aa:c7:e4:7d: 71:c4:0e:50:3b:5c:10:75:b4:07:1f:e6:fc:e3:d4:74:eb:b7: b8:48:4b:61:b1:83:38:fd:8e:1c:54:e6:f3:c3:0a:35:db:41: 70:c2:5b:0d:8d:32:70:68:7b:90:42:7a:d5:59:c0:12:de:27: a0:10:34:02:bd:c5:f1:00:40:4b:c3:ee:f0:81:64:8f:20:c0: 53:ed:41:e5:05:92:ad:70:16:2a:c8:b6:e9:59:f8:9d:28:76: dd:fe:c9:12:d6:a8:80:60:82:86:33:17:d9:aa:4c:f5:f2:69: 33:ea:c2:ff:75:7f:41:01:06:b7:eb:7f:03:ba:74:64:9a:21: 2c:bb:e7:f3:d2:1b:82:f6:9a:35:02:a0:6e:04:3d:1a:35:75: 18:3a:b7:b2:af:72:29:d1:14:a1:0c:6e:dc:2e:33:0d:3e:34: 10:66:6f:31:a2:23:8a:2d:99:70:dc:0f:fc:3e:37:d4:3d:02: 03:fc:36:88:d0:25:c7:34:60:91:57:b2:60:79:f8:48:b5:8f: f1:cb:81:8f:ad:69:c6:29:ee:19:a2:1d:1b:42:9b:ce:fa:c6: a9:8e:88:87:39:57:bf:7a:10:f0:55:89:71:50:36:77:c0:2c: 39:08:5e:56 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIURUlg16Rlmhc/P2dfSU9psdc+OjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDMxODMzMjdaFw0yNTA0MDIxODM4MjdaMDMxMTAvBgNV BAMTKDcwMUNBOUREMjRGRTZCQkU5Q0ZGQ0UzRjBBREJDNjY0QTEyMTU3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvO1HuPv/xD+3a5rN8HPLKtQq aeWE+VDuVp780cYr0tHZhx8grgFbqWl7czwM3xqfxs26b3zt1O8NV31tF4ZDwP9J AtNfvkYTb4JEaG9S9X1V4Nat1QBl0ehJ0Y5buD2YnVw+JUe6e6kiIM2Iv8sDIABj jcY0oTnRatYUhHJpWO6xvANqt6DwLHHE+UYEIIbMBq2KW6wagWe8mJZzcQ0yLoyD nbNPNrf5tzdsb0G/1X7ZGsVVXEf+nl+3El5yxP7+Z0Akk9bTD5q8i5W4lqXVJ/bO Mx39uYfw94VmENpOzfhVnJG9vAaOVcyqa6/4M4sDBaXd0oI2LkRYmTOdSuA5AgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRwHKndJP5rvpz/ zj8K28ZkoSFXGjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWY5 VE1yNURVU24yUXNNYmNaWWthOVpQTVc3dEt3MVFMMUxrY0FFd1lYMzgvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWY5 VE1yNURVU24yUXNNYmNaWWthOVpQTVc3dEt3MVFMMUxrY0FFd1lYMzgvMS83MDFD QTlERDI0RkU2QkJFOUNGRkNFM0YwQURCQzY2NEExMjE1NzFBLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKucgwDQQCAAIwBwMFACgEJrAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAapMA0GCSqGSIb3DQEBCwUAA4IBAQCq3SY+ni38f49/0EyN dqrH5H1xxA5QO1wQdbQHH+b849R067e4SEthsYM4/Y4cVObzwwo120FwwlsNjTJw aHuQQnrVWcAS3iegEDQCvcXxAEBLw+7wgWSPIMBT7UHlBZKtcBYqyLbpWfidKHbd /skS1qiAYIKGMxfZqkz18mkz6sL/dX9BAQa3638DunRkmiEsu+fz0huC9po1AqBu BD0aNXUYOreyr3Ip0RShDG7cLjMNPjQQZm8xoiOKLZlw3A/8PjfUPQID/DaI0CXH NGCRV7JgefhItY/xy4GPrWnGKe4Zoh0bQpvO+sapjoiHOVe/ehDwVYlxUDZ3wCw5 CF5W -----END CERTIFICATE-----Generated at Wed Nov 27 02:00:08 2024 by rpki-client on console-ams.rpki-client.org