$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer (raw, json) Hash identifier: WIjfV1fyEdbraZknO3gStZjz0cCPVse6lRloxYp2Jbo= Subject key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 12144F4B92C6C348450BF0DB311DA0AEA72C900D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft caRepository: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1 Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 00:15:23 +0000 Certificate not after: Thu 03 Apr 2025 00:20:23 +0000 Subordinate resources: AS: 264182 IP: 138.97.104.0/22 IP: 2804:23c8::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Jun 2024 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:14:4f:4b:92:c6:c3:48:45:0b:f0:db:31:1d:a0:ae:a7:2c:90:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 00:15:23 2024 GMT Not After : Apr 3 00:20:23 2025 GMT Subject: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:65:10:2f:da:ce:e5:42:52:b9:41:86:ec: 42:3b:e3:9f:87:52:c9:aa:f3:f9:66:de:8c:30:66: 2f:c5:00:a3:f3:d7:aa:07:8b:b2:cf:05:92:b3:3d: 87:45:50:ff:3c:96:c1:ed:1b:7d:59:8e:3e:03:76: 9d:4a:7a:cd:2e:9d:69:ee:06:1b:b6:3b:aa:7c:8f: 5e:77:f3:f9:b0:1e:56:af:ea:0a:f2:cb:91:ce:ad: 09:e3:68:0f:b4:d7:d6:e7:18:84:22:6f:4d:14:2d: c0:f1:de:61:e7:a3:99:e1:57:7f:98:8f:4e:65:bd: 47:cb:24:94:a3:36:31:3a:a2:75:0c:07:6d:60:cc: 85:a0:6d:66:b4:5d:a2:5b:84:2b:9c:96:70:e8:41: f9:b6:e6:20:57:48:39:0d:ca:98:be:df:37:0e:87: 08:de:81:20:da:bf:32:0b:20:c2:20:6e:1a:b9:b6: 52:96:d2:ef:d8:a0:78:26:74:33:8e:83:ee:3a:0e: 56:1d:4e:40:8b:e4:91:3c:8b:0e:53:01:26:d0:ca: 25:9c:ae:d2:ef:53:52:ff:7d:3f:33:58:0a:ba:9a: 25:f8:55:63:5e:29:ff:85:96:38:6d:80:2a:96:b8: 81:4a:b9:a9:7f:56:c7:93:3b:6e:7b:f1:d4:66:94: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.97.104.0/22 IPv6: 2804:23c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264182 Signature Algorithm: sha256WithRSAEncryption 21:a1:b9:78:a7:98:68:35:fe:94:59:31:dc:56:a3:7e:4d:f2: 2b:6f:1c:98:67:91:07:1b:62:78:52:01:18:51:96:da:5b:0a: da:77:be:39:dd:33:80:1a:4e:81:7a:ef:05:7d:cb:d0:15:8e: dd:53:5f:da:13:58:ed:52:f4:93:88:5f:2c:75:fb:78:e4:5d: 6c:32:62:e8:45:06:49:e8:a4:07:aa:05:c9:35:ba:8c:50:bc: 0f:0c:c2:80:72:be:d4:89:fa:64:70:cd:fd:a4:43:f6:4c:29: e5:a4:5f:1b:c0:0d:3d:21:a1:31:af:aa:01:25:1c:0a:96:ac: 36:af:bd:7c:55:68:d4:a3:84:fc:00:54:01:d2:45:64:ee:4b: 7b:f6:c2:8d:59:94:d1:17:5b:38:4f:93:64:b2:58:75:af:7f: 18:6a:33:ee:54:7a:fd:44:82:1b:db:74:5f:3f:77:e1:34:f7: 70:f6:75:f8:14:cb:cb:77:c4:60:2c:23:85:d0:45:9a:a0:bf: 16:1c:71:a9:da:66:43:82:fc:0d:a3:45:a7:a1:79:d4:45:73: 15:87:47:ae:8e:09:92:8f:b8:48:46:e6:06:50:49:39:92:73: a6:c2:3f:53:40:90:6f:52:87:bb:48:ac:d1:06:ce:a1:6c:59: 06:48:60:08 -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUEhRPS5LGw0hFC/DbMR2grqcskA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQwMDE1MjNaFw0yNTA0MDMwMDIwMjNaMDMxMTAvBgNV BAMTKDcxMjVCRURERkVDMjlDMEE0Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA2UQL9rO5UJSuUGG7EI745+H Usmq8/lm3owwZi/FAKPz16oHi7LPBZKzPYdFUP88lsHtG31Zjj4Ddp1Kes0unWnu Bhu2O6p8j1538/mwHlav6gryy5HOrQnjaA+019bnGIQib00ULcDx3mHno5nhV3+Y j05lvUfLJJSjNjE6onUMB21gzIWgbWa0XaJbhCuclnDoQfm25iBXSDkNypi+3zcO hwjegSDavzILIMIgbhq5tlKW0u/YoHgmdDOOg+46DlYdTkCL5JE8iw5TASbQyiWc rtLvU1L/fT8zWAq6miX4VWNeKf+FljhtgCqWuIFKual/VseTO2578dRmlCVnAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxJb7d/sKcCkz1 keXrQIOL/jx6wTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEhn SnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSEhn SnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83MTI1 QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKKYWgwDQQCAAIwBwMFACgEI8gwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAf2MA0GCSqGSIb3DQEBCwUAA4IBAQAhobl4p5hoNf6UWTHc VqN+TfIrbxyYZ5EHG2J4UgEYUZbaWwrad7453TOAGk6Beu8FfcvQFY7dU1/aE1jt UvSTiF8sdft45F1sMmLoRQZJ6KQHqgXJNbqMULwPDMKAcr7UifpkcM39pEP2TCnl pF8bwA09IaExr6oBJRwKlqw2r718VWjUo4T8AFQB0kVk7kt79sKNWZTRF1s4T5Nk slh1r38YajPuVHr9RIIb23RfP3fhNPdw9nX4FMvLd8RgLCOF0EWaoL8WHHGp2mZD gvwNo0WnoXnURXMVh0eujgmSj7hIRuYGUEk5knOmwj9TQJBvUoe7SKzRBs6hbFkG SGAI -----END CERTIFICATE-----Generated at Sun Jun 2 01:36:36 2024 by rpki-client on console-ams.rpki-client.org