$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer File: 71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.cer (raw, json) Hash identifier: cf8mu6cPnJ4sDlDNlWq4V2ff29OKHrH7R/Qr9h0rV3Q= Subject key identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7C7C011FB2F916C6089EBA7418FAF6F2CF77ED67 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft caRepository: rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Thu 04 Apr 2024 16:58:49 +0000 Certificate not after: Thu 03 Apr 2025 17:03:49 +0000 Subordinate resources: AS: 270340 IP: 190.83.84.0/22 IP: 2804:6a80::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 19 Jun 2024 01:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7c:01:1f:b2:f9:16:c6:08:9e:ba:74:18:fa:f6:f2:cf:77:ed:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Apr 4 16:58:49 2024 GMT Not After : Apr 3 17:03:49 2025 GMT Subject: CN=71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:19:4d:7d:87:a2:c1:6f:f4:6a:05:71:ab: f2:8d:43:6a:f9:f6:e3:db:3b:b3:2b:b9:72:2d:cb: ce:ba:26:19:28:e4:9a:a7:19:ed:c5:26:96:02:66: 63:94:15:b4:2c:77:10:2c:6a:7c:4d:3a:f4:c9:25: 2b:60:f7:77:af:af:9a:95:3a:3b:14:3a:d3:92:6e: 7c:78:35:85:d8:ed:34:b7:51:ca:cd:74:c7:d3:e1: ce:26:31:d6:d2:ca:8b:5d:9b:02:44:bb:41:82:be: af:de:a4:64:a2:ba:8c:f3:01:dc:84:32:0b:cb:29: f0:97:a6:1b:78:19:2c:f1:a9:af:c5:c2:14:cf:0c: bc:11:12:8f:12:4f:fb:95:6b:a1:2b:ec:89:f1:f5: 58:2c:53:fc:68:44:b0:18:b5:d9:01:e2:c1:c5:9c: 46:ed:6e:69:d3:47:7e:60:10:3c:b9:9f:61:1a:8b: f3:1f:38:14:64:e3:6e:cc:37:03:33:7d:a2:e5:3f: 0a:ce:99:44:69:84:76:82:60:25:bb:dd:5b:97:50: a9:61:0e:e3:46:57:94:eb:c3:cb:5f:98:f4:63:f2: 17:bc:39:fd:0a:b8:f1:5a:14:bb:b3:6a:e6:fc:b8: 0d:12:40:6b:dd:8e:71:3e:5e:64:6f:6d:8c:25:d6: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:A3:4E:8D:F0:09:65:CA:21:C1:AA:4E:3C:37:AC:2A:31:19:A8:AF X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3HLCS1E4Px1Gv3PT1pQkr3ruECEQqRPCQ3Zc4gpCobcc/1/71A34E8DF00965CA21C1AA4E3C37AC2A3119A8AF.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.83.84.0/22 IPv6: 2804:6a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270340 Signature Algorithm: sha256WithRSAEncryption d2:cb:ac:88:8e:87:01:2e:01:09:a4:98:5e:b4:be:c8:ac:7a: ba:15:cb:80:44:34:4c:78:6b:c5:e1:b2:f0:09:3a:a1:d3:26: 76:bd:a9:17:b2:e4:5b:c1:1d:ba:59:8d:f7:f1:2e:92:d1:cf: 29:bf:4f:42:ff:ac:b7:e1:c9:69:b4:fb:8e:2c:a8:5c:88:60: b2:e2:0a:aa:68:b3:d2:f6:2b:e3:68:7f:da:ed:30:1f:0a:2d: 35:58:50:19:79:f8:8d:b2:f9:24:3e:0c:59:cf:09:d4:c7:ad: fd:2f:4b:05:84:7c:3e:d1:b5:80:c2:24:3d:24:fb:da:21:9c: 1b:49:da:fe:63:58:c3:ee:66:7d:22:c3:53:7e:49:64:9e:27: 2a:84:a2:58:5e:c4:03:ca:ab:a2:3d:42:42:07:28:89:59:5a: d8:e7:64:74:c8:09:b1:ef:6b:be:78:b3:85:36:94:db:a5:03: 45:2b:f0:90:6a:28:f0:19:4c:61:7b:4d:67:78:f3:b5:dd:30: db:c4:4d:35:e7:4f:5b:17:b6:9f:fd:d5:82:ab:e9:7b:a5:78: 98:cb:73:e1:8c:f1:1c:1a:be:1b:15:a8:d4:59:df:2b:c2:07: d1:bf:3c:45:31:18:72:1e:88:14:54:89:f4:3d:4a:6e:9b:fd: ea:3b:7c:32 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUfHwBH7L5FsYInrp0GPr28s937WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDA0MDQxNjU4NDlaFw0yNTA0MDMxNzAzNDlaMDMxMTAvBgNV BAMTKDcxQTM0RThERjAwOTY1Q0EyMUMxQUE0RTNDMzdBQzJBMzExOUE4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7BlNfYeiwW/0agVxq/KNQ2r5 9uPbO7MruXIty866Jhko5JqnGe3FJpYCZmOUFbQsdxAsanxNOvTJJStg93evr5qV OjsUOtOSbnx4NYXY7TS3UcrNdMfT4c4mMdbSyotdmwJEu0GCvq/epGSiuozzAdyE MgvLKfCXpht4GSzxqa/FwhTPDLwREo8ST/uVa6Er7Inx9VgsU/xoRLAYtdkB4sHF nEbtbmnTR35gEDy5n2Eai/MfOBRk427MNwMzfaLlPwrOmURphHaCYCW73VuXUKlh DuNGV5Trw8tfmPRj8he8Of0KuPFaFLuzaub8uA0SQGvdjnE+XmRvbYwl1n15AgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxo06N8AllyiHB qk48N6wqMRmorzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM0hM Q1MxRTRQeDFHdjNQVDFwUWtyM3J1RUNFUXFSUENRM1pjNGdwQ29iY2MvMS8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNI TENTMUU0UHgxR3YzUFQxcFFrcjNydUVDRVFxUlBDUTNaYzRncENvYmNjLzEvNzFB MzRFOERGMDA5NjVDQTIxQzFBQTRFM0MzN0FDMkEzMTE5QThBRi5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCvlNUMA0EAgACMAcDBQAoBGqAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQgBDANBgkqhkiG9w0BAQsFAAOCAQEA0susiI6HAS4BCaSY XrS+yKx6uhXLgEQ0THhrxeGy8Ak6odMmdr2pF7LkW8EdulmN9/EuktHPKb9PQv+s t+HJabT7jiyoXIhgsuIKqmiz0vYr42h/2u0wHwotNVhQGXn4jbL5JD4MWc8J1Met /S9LBYR8PtG1gMIkPST72iGcG0na/mNYw+5mfSLDU35JZJ4nKoSiWF7EA8qroj1C QgcoiVla2OdkdMgJse9rvnizhTaU26UDRSvwkGoo8BlMYXtNZ3jztd0w28RNNedP Wxe2n/3Vgqvpe6V4mMtz4YzxHBq+GxWo1FnfK8IH0b88RTEYch6IFFSJ9D1Kbpv9 6jt8Mg== -----END CERTIFICATE-----Generated at Tue Jun 18 00:55:02 2024 by rpki-client on console-fra.rpki-client.org