$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.cer File: 7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.cer (raw, json) Hash identifier: H/tSqhuo4Uxc3K+4EkuAIw0toWw5bRwXiDfjnVov4s0= Subject key identifier: 71:24:EA:9F:A2:0E:DE:3C:28:0A:7A:DD:E8:3C:45:6C:5F:33:0A:1C Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 256DD034DD3AA7AAD8CD8E0C58E61E1B4B4906A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.mft caRepository: rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 08:09:42 +0000 Certificate not after: Thu 03 Apr 2025 08:14:42 +0000 Subordinate resources: AS: 272414 IP: 2804:80d0::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 02:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6d:d0:34:dd:3a:a7:aa:d8:cd:8e:0c:58:e6:1e:1b:4b:49:06:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 08:09:42 2024 GMT Not After : Apr 3 08:14:42 2025 GMT Subject: CN=7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:87:82:90:53:a2:ef:46:52:6f:c2:cb:bc: d8:80:39:83:2a:3e:7c:c2:27:ae:b5:3e:1f:d5:25: 87:7d:7e:7d:f0:9f:7a:e9:2f:2d:19:89:c7:01:ef: 42:65:36:0b:36:54:9b:6d:ff:a7:a6:99:20:fb:71: a7:df:a0:9f:8e:5e:d7:cd:de:3d:e1:fa:ad:8b:d8: 18:f0:9a:4a:a3:06:b8:b7:2b:17:82:9b:a9:9d:49: 3c:1a:30:28:0d:c4:45:5c:50:24:8f:91:43:0d:8b: 88:4f:52:4c:df:0a:bc:da:63:dd:84:9f:e1:7e:40: d1:a8:63:8b:1b:3e:7d:a8:61:84:00:04:38:fe:52: a1:4a:48:52:5f:14:d8:2d:3b:ba:7b:cc:9f:05:8c: 2d:97:91:08:4a:b1:b9:80:40:c0:32:fe:62:b4:9b: 72:1d:49:bc:d3:67:6d:b7:36:4b:07:9f:3f:93:7d: 42:21:90:f4:bd:3d:d7:04:d2:26:6e:12:d7:66:ef: 6e:81:7d:72:0a:9a:0f:cb:f8:65:5d:81:aa:ce:c4: 9a:da:4b:ec:e6:b4:02:73:c6:c9:3f:2e:e5:54:2c: 3e:e9:64:87:bd:c1:eb:df:3b:01:b4:ae:eb:b0:56: 8c:11:e0:8f:25:5d:7b:66:8c:ab:b6:b4:37:bf:53: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:24:EA:9F:A2:0E:DE:3C:28:0A:7A:DD:E8:3C:45:6C:5F:33:0A:1C X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/1/7124EA9FA20EDE3C280A7ADDE83C456C5F330A1C.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:80d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272414 Signature Algorithm: sha256WithRSAEncryption 81:9c:5b:f0:6c:d4:fd:45:bd:45:fb:9a:25:ce:b0:8b:59:07: af:02:c3:56:de:98:32:3c:12:69:a7:44:cf:e3:c5:83:be:85: 4d:2d:b8:4c:ed:47:6c:20:a7:30:b6:8a:3e:72:0f:a8:ce:b4: 3e:81:a1:69:72:06:ba:ef:5c:c9:c9:bf:18:d1:7c:b5:c5:29: 10:5d:cc:21:b8:3e:ee:64:db:92:ca:35:f2:6c:b2:59:2e:be: db:39:7a:ea:ca:ef:cd:93:46:c5:7e:46:3f:2a:d4:df:c9:76: 13:6e:2c:9d:36:79:e0:f9:91:d6:4a:40:9e:ac:a9:6c:65:cd: 57:6c:24:35:d9:f7:e9:a4:cc:86:59:0e:ed:bd:21:f0:c9:e0: f3:28:09:f3:0d:0a:bf:18:c2:73:f1:f7:ed:24:26:4a:be:dd: 75:62:5a:08:c7:c9:56:ce:ae:4f:a9:8d:a6:1c:d3:64:dc:8b: b1:5f:27:7f:13:25:4a:41:00:04:a2:64:55:5a:64:78:f3:4e: cc:44:0a:97:3f:cd:31:96:0b:1d:34:db:bc:5e:88:b8:3c:67: 83:b1:05:22:eb:a9:7d:78:5c:6b:9c:af:89:9d:b1:40:05:84: cc:05:a1:8e:3c:d0:de:f8:3c:04:b8:72:97:76:30:14:5a:6b: 47:e1:8e:9c -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIUJW3QNN06p6rYzY4MWOYeG0tJBqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwODA5NDJaFw0yNTA0MDMwODE0NDJaMDMxMTAvBgNV BAMTKDcxMjRFQTlGQTIwRURFM0MyODBBN0FEREU4M0M0NTZDNUYzMzBBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/YeCkFOi70ZSb8LLvNiAOYMq PnzCJ661Ph/VJYd9fn3wn3rpLy0ZiccB70JlNgs2VJtt/6emmSD7caffoJ+OXtfN 3j3h+q2L2BjwmkqjBri3KxeCm6mdSTwaMCgNxEVcUCSPkUMNi4hPUkzfCrzaY92E n+F+QNGoY4sbPn2oYYQABDj+UqFKSFJfFNgtO7p7zJ8FjC2XkQhKsbmAQMAy/mK0 m3IdSbzTZ223NksHnz+TfUIhkPS9PdcE0iZuEtdm726BfXIKmg/L+GVdgarOxJra S+zmtAJzxsk/LuVULD7pZIe9wevfOwG0ruuwVowR4I8lXXtmjKu2tDe/UyuRAgMB AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxJOqfog7ePCgK et3oPEVsXzMKHDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1ZW aUhhaHByYzRYb2RYdjR6UzZrcWpCVlgxSDZLeEdEZDJBR3hHcW9aWksvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NW VmlIYWhwcmM0WG9kWHY0elM2a3FqQlZYMUg2S3hHRGQyQUd4R3FvWlpLLzEvNzEy NEVBOUZBMjBFREUzQzI4MEE3QURERTgzQzQ1NkM1RjMzMEExQy5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKASA0DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME KB4wDQYJKoZIhvcNAQELBQADggEBAIGcW/Bs1P1FvUX7miXOsItZB68Cw1bemDI8 EmmnRM/jxYO+hU0tuEztR2wgpzC2ij5yD6jOtD6BoWlyBrrvXMnJvxjRfLXFKRBd zCG4Pu5k25LKNfJsslkuvts5eurK782TRsV+Rj8q1N/JdhNuLJ02eeD5kdZKQJ6s qWxlzVdsJDXZ9+mkzIZZDu29IfDJ4PMoCfMNCr8YwnPx9+0kJkq+3XViWgjHyVbO rk+pjaYc02Tci7FfJ38TJUpBAASiZFVaZHjzTsxECpc/zTGWCx0027xeiLg8Z4Ox BSLrqX14XGucr4mdsUAFhMwFoY480N74PAS4cpd2MBRaa0fhjpw= -----END CERTIFICATE-----Generated at Sun Jun 2 02:06:35 2024 by rpki-client on console-fra.rpki-client.org